Edit tour

Linux Analysis Report
na.elf

Overview

General Information

Sample name:	na.elf
Analysis ID:	1543685
MD5:	79c9d5be5fdd2fef4bff20019f5b0879
SHA1:	89f16034883bbb609451742ca16fe56a8f2d5b0a
SHA256:	3c8bc1279a29c4626a20b63b6fc048026e350ad317f468bf079f02cd97a45cbd
Tags:	elfuser-abuse_ch
Infos:

Detection

Gafgyt, Mirai

Score:	100
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Gafgyt

Yara detected Mirai

Contains symbols with names commonly found in malware

Opens /proc/net/* files useful for finding connected devices and routers

Detected TCP or UDP traffic on non-standard ports

Sample contains strings that are user agent strings indicative of HTTP manipulation

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1543685
Start date and time:	2024-10-28 09:13:11 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 6s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	na.elf
Detection:	MAL
Classification:	mal100.spre.troj.linELF@0/1@2/0

Warnings

VT rate limit hit for: na.elf

Runtime Messages

Command:	/tmp/na.elf
PID:	5542
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:

Process Tree

system is lnxubuntu20

na.elf (PID: 5542, Parent: 5461, MD5: ae65271c943d3451b7f026d1fadccea6) Arguments: /tmp/na.elf

na.elf New Fork (PID: 5544, Parent: 5542)

na.elf New Fork (PID: 5546, Parent: 5544)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
na.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
na.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
na.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xf3d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf3e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf3f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf40c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf420:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf434:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf448:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf45c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf470:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf484:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf498:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf4ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf4c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf4d4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf4e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf4fc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf510:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf524:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf538:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf54c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf560:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F

Memory Dumps

Source	Rule	Description	Author	Strings
5544.1.00007f7644001000.00007f7644013000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5544.1.00007f7644001000.00007f7644013000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xf3d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf3e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf3f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf40c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf420:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf434:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf448:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf45c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf470:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf484:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf498:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf4ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf4c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf4d4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf4e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf4fc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf510:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf524:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf538:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf54c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf560:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5542.1.00007f7644001000.00007f7644013000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5542.1.00007f7644001000.00007f7644013000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xf3d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf3e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf3f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf40c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf420:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf434:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf448:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf45c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf470:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf484:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf498:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf4ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf4c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf4d4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf4e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf4fc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf510:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf524:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf538:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf54c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf560:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: na.elf PID: 5542	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: na.elf PID: 5542	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xe4f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xe50c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xe520:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xe534:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xe548:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xe55c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xe570:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xe584:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xe598:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xe5ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xe5c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xe5d4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xe5e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xe5fc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xe610:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xe624:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xe638:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xe64c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xe660:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xe674:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xe688:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: na.elf PID: 5544	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: na.elf PID: 5544	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x59ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x59c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x59d4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x59e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x59fc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5a10:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5a24:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5a38:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5a4c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5a60:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5a74:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5a88:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5a9c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5ab0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5ac4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5ad8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5aec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5b00:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5b14:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5b28:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5b3c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Click to see the 3 entries

Suricata Signatures

ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-28T09:14:01.083791+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38686	93.123.85.205	7777	TCP
2024-10-28T09:14:02.321199+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38688	93.123.85.205	7777	TCP
2024-10-28T09:14:03.467823+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38690	93.123.85.205	7777	TCP
2024-10-28T09:14:04.637071+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38692	93.123.85.205	7777	TCP
2024-10-28T09:14:05.831578+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38694	93.123.85.205	7777	TCP
2024-10-28T09:14:06.972278+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38696	93.123.85.205	7777	TCP
2024-10-28T09:14:08.221875+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38698	93.123.85.205	7777	TCP
2024-10-28T09:14:09.338706+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38700	93.123.85.205	7777	TCP
2024-10-28T09:14:10.620550+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38702	93.123.85.205	7777	TCP
2024-10-28T09:14:11.821521+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38704	93.123.85.205	7777	TCP
2024-10-28T09:14:12.966730+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38706	93.123.85.205	7777	TCP
2024-10-28T09:14:14.215902+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38708	93.123.85.205	7777	TCP
2024-10-28T09:14:15.549182+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38710	93.123.85.205	7777	TCP
2024-10-28T09:14:16.723557+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38712	93.123.85.205	7777	TCP
2024-10-28T09:14:17.818686+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38714	93.123.85.205	7777	TCP
2024-10-28T09:14:18.949251+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38716	93.123.85.205	7777	TCP
2024-10-28T09:14:20.157501+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38718	93.123.85.205	7777	TCP
2024-10-28T09:14:21.323104+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38720	93.123.85.205	7777	TCP
2024-10-28T09:14:22.459096+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38722	93.123.85.205	7777	TCP
2024-10-28T09:14:23.667199+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38724	93.123.85.205	7777	TCP
2024-10-28T09:14:24.862837+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38726	93.123.85.205	7777	TCP
2024-10-28T09:14:26.248044+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38728	93.123.85.205	7777	TCP
2024-10-28T09:14:27.365394+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38730	93.123.85.205	7777	TCP
2024-10-28T09:14:28.452911+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38732	93.123.85.205	7777	TCP
2024-10-28T09:14:29.645106+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38734	93.123.85.205	7777	TCP
2024-10-28T09:14:30.856829+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38736	93.123.85.205	7777	TCP
2024-10-28T09:14:32.034704+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38738	93.123.85.205	7777	TCP
2024-10-28T09:14:33.224113+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38740	93.123.85.205	7777	TCP
2024-10-28T09:14:34.371823+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38742	93.123.85.205	7777	TCP
2024-10-28T09:14:35.544434+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38744	93.123.85.205	7777	TCP
2024-10-28T09:14:36.733685+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38746	93.123.85.205	7777	TCP
2024-10-28T09:14:37.950787+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38748	93.123.85.205	7777	TCP
2024-10-28T09:14:39.136223+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38750	93.123.85.205	7777	TCP
2024-10-28T09:14:40.356354+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38752	93.123.85.205	7777	TCP
2024-10-28T09:14:41.528724+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38754	93.123.85.205	7777	TCP
2024-10-28T09:14:42.661287+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38756	93.123.85.205	7777	TCP
2024-10-28T09:14:43.835947+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38758	93.123.85.205	7777	TCP
2024-10-28T09:14:45.514362+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38760	93.123.85.205	7777	TCP
2024-10-28T09:14:46.632139+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38762	93.123.85.205	7777	TCP
2024-10-28T09:14:47.755561+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38764	93.123.85.205	7777	TCP
2024-10-28T09:14:49.024633+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38766	93.123.85.205	7777	TCP
2024-10-28T09:14:50.229027+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38768	93.123.85.205	7777	TCP
2024-10-28T09:14:51.364003+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38770	93.123.85.205	7777	TCP
2024-10-28T09:14:52.526896+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38772	93.123.85.205	7777	TCP
2024-10-28T09:14:53.765635+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38774	93.123.85.205	7777	TCP
2024-10-28T09:14:54.947958+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38776	93.123.85.205	7777	TCP
2024-10-28T09:14:56.143187+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38778	93.123.85.205	7777	TCP
2024-10-28T09:14:57.331679+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38780	93.123.85.205	7777	TCP
2024-10-28T09:14:58.462246+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38782	93.123.85.205	7777	TCP
2024-10-28T09:14:59.550733+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38784	93.123.85.205	7777	TCP
2024-10-28T09:15:00.661708+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38786	93.123.85.205	7777	TCP
2024-10-28T09:15:01.873202+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38788	93.123.85.205	7777	TCP
2024-10-28T09:15:03.094557+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38790	93.123.85.205	7777	TCP
2024-10-28T09:15:04.649316+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38792	93.123.85.205	7777	TCP
2024-10-28T09:15:05.760768+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38794	93.123.85.205	7777	TCP
2024-10-28T09:15:07.035063+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38796	93.123.85.205	7777	TCP
2024-10-28T09:15:08.285580+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38798	93.123.85.205	7777	TCP
2024-10-28T09:15:09.445716+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38800	93.123.85.205	7777	TCP
2024-10-28T09:15:10.633032+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38802	93.123.85.205	7777	TCP
2024-10-28T09:15:11.764041+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38804	93.123.85.205	7777	TCP
2024-10-28T09:15:12.924404+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38806	93.123.85.205	7777	TCP
2024-10-28T09:15:14.161244+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38808	93.123.85.205	7777	TCP
2024-10-28T09:15:15.420741+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38810	93.123.85.205	7777	TCP
2024-10-28T09:15:16.673908+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38812	93.123.85.205	7777	TCP
2024-10-28T09:15:17.864859+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38814	93.123.85.205	7777	TCP
2024-10-28T09:15:19.026587+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38816	93.123.85.205	7777	TCP
2024-10-28T09:15:20.247428+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38818	93.123.85.205	7777	TCP
2024-10-28T09:15:21.526016+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38820	93.123.85.205	7777	TCP
2024-10-28T09:15:22.661061+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38822	93.123.85.205	7777	TCP
2024-10-28T09:15:25.945514+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38824	93.123.85.205	7777	TCP
2024-10-28T09:15:27.122628+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38826	93.123.85.205	7777	TCP
2024-10-28T09:15:28.327349+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38828	93.123.85.205	7777	TCP
2024-10-28T09:15:29.523672+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38830	93.123.85.205	7777	TCP
2024-10-28T09:15:30.720062+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38832	93.123.85.205	7777	TCP
2024-10-28T09:15:31.758551+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38834	93.123.85.205	7777	TCP
2024-10-28T09:15:32.969637+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38836	93.123.85.205	7777	TCP
2024-10-28T09:15:34.156188+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38838	93.123.85.205	7777	TCP
2024-10-28T09:15:35.260085+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38840	93.123.85.205	7777	TCP
2024-10-28T09:15:36.431229+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38842	93.123.85.205	7777	TCP
2024-10-28T09:15:37.626001+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38844	93.123.85.205	7777	TCP
2024-10-28T09:15:38.769364+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38846	93.123.85.205	7777	TCP
2024-10-28T09:15:40.066463+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38848	93.123.85.205	7777	TCP
2024-10-28T09:15:41.319799+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38850	93.123.85.205	7777	TCP
2024-10-28T09:15:42.428050+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38852	93.123.85.205	7777	TCP
2024-10-28T09:15:43.666479+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38854	93.123.85.205	7777	TCP
2024-10-28T09:15:44.940824+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38856	93.123.85.205	7777	TCP
2024-10-28T09:15:46.401425+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38858	93.123.85.205	7777	TCP
2024-10-28T09:15:47.629408+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38860	93.123.85.205	7777	TCP
2024-10-28T09:15:48.835161+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38862	93.123.85.205	7777	TCP
2024-10-28T09:15:50.020258+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38864	93.123.85.205	7777	TCP
2024-10-28T09:15:51.234602+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38866	93.123.85.205	7777	TCP
2024-10-28T09:15:52.443096+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38868	93.123.85.205	7777	TCP
2024-10-28T09:15:53.630073+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38870	93.123.85.205	7777	TCP
2024-10-28T09:15:54.754670+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38872	93.123.85.205	7777	TCP
2024-10-28T09:15:56.031249+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38874	93.123.85.205	7777	TCP
2024-10-28T09:15:57.225734+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38876	93.123.85.205	7777	TCP
2024-10-28T09:15:58.356447+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38878	93.123.85.205	7777	TCP
2024-10-28T09:15:59.525860+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38880	93.123.85.205	7777	TCP
2024-10-28T09:16:00.729351+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38882	93.123.85.205	7777	TCP
2024-10-28T09:16:01.926721+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38884	93.123.85.205	7777	TCP
2024-10-28T09:16:03.041869+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38886	93.123.85.205	7777	TCP
2024-10-28T09:16:04.242890+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38888	93.123.85.205	7777	TCP
2024-10-28T09:16:05.459089+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38890	93.123.85.205	7777	TCP
2024-10-28T09:16:06.721825+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38892	93.123.85.205	7777	TCP
2024-10-28T09:16:07.858309+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38894	93.123.85.205	7777	TCP
2024-10-28T09:16:09.053586+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38896	93.123.85.205	7777	TCP
2024-10-28T09:16:10.165953+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38898	93.123.85.205	7777	TCP
2024-10-28T09:16:11.530763+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38900	93.123.85.205	7777	TCP
2024-10-28T09:16:12.728087+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38902	93.123.85.205	7777	TCP
2024-10-28T09:16:13.834271+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38904	93.123.85.205	7777	TCP
2024-10-28T09:16:14.964234+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38906	93.123.85.205	7777	TCP
2024-10-28T09:16:16.236897+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38908	93.123.85.205	7777	TCP
2024-10-28T09:16:17.368375+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38910	93.123.85.205	7777	TCP
2024-10-28T09:16:18.614037+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38912	93.123.85.205	7777	TCP
2024-10-28T09:16:19.757843+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38914	93.123.85.205	7777	TCP
2024-10-28T09:16:20.973529+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38916	93.123.85.205	7777	TCP
2024-10-28T09:16:22.222766+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38918	93.123.85.205	7777	TCP
2024-10-28T09:16:23.382095+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38920	93.123.85.205	7777	TCP
2024-10-28T09:16:24.621305+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38922	93.123.85.205	7777	TCP
2024-10-28T09:16:25.767274+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38924	93.123.85.205	7777	TCP
2024-10-28T09:16:27.046411+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38926	93.123.85.205	7777	TCP
2024-10-28T09:16:28.161717+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38928	93.123.85.205	7777	TCP
2024-10-28T09:16:29.335292+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38930	93.123.85.205	7777	TCP
2024-10-28T09:16:30.534514+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38932	93.123.85.205	7777	TCP
2024-10-28T09:16:31.765877+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38934	93.123.85.205	7777	TCP
2024-10-28T09:16:32.924100+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38936	93.123.85.205	7777	TCP
2024-10-28T09:16:34.051167+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38938	93.123.85.205	7777	TCP
2024-10-28T09:16:35.165161+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38940	93.123.85.205	7777	TCP
2024-10-28T09:16:36.320426+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38942	93.123.85.205	7777	TCP
2024-10-28T09:16:37.448894+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38944	93.123.85.205	7777	TCP
2024-10-28T09:16:38.619429+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38946	93.123.85.205	7777	TCP
2024-10-28T09:16:39.733447+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38948	93.123.85.205	7777	TCP
2024-10-28T09:16:40.946179+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38950	93.123.85.205	7777	TCP
2024-10-28T09:16:42.166613+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38952	93.123.85.205	7777	TCP
2024-10-28T09:16:43.273059+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38954	93.123.85.205	7777	TCP
2024-10-28T09:16:44.466146+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38956	93.123.85.205	7777	TCP
2024-10-28T09:16:45.574346+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38958	93.123.85.205	7777	TCP
2024-10-28T09:16:46.725286+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38960	93.123.85.205	7777	TCP
2024-10-28T09:16:47.925468+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38962	93.123.85.205	7777	TCP
2024-10-28T09:16:49.064044+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38964	93.123.85.205	7777	TCP
2024-10-28T09:16:50.223328+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38966	93.123.85.205	7777	TCP
2024-10-28T09:16:51.435286+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38968	93.123.85.205	7777	TCP
2024-10-28T09:16:52.913076+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38970	93.123.85.205	7777	TCP
2024-10-28T09:16:54.053931+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38972	93.123.85.205	7777	TCP
2024-10-28T09:16:55.222975+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38974	93.123.85.205	7777	TCP
2024-10-28T09:16:56.439743+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38976	93.123.85.205	7777	TCP
2024-10-28T09:16:57.547209+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38978	93.123.85.205	7777	TCP
2024-10-28T09:16:58.724378+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38980	93.123.85.205	7777	TCP
2024-10-28T09:16:59.754736+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38982	93.123.85.205	7777	TCP
2024-10-28T09:17:01.030884+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38984	93.123.85.205	7777	TCP
2024-10-28T09:17:02.541620+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38986	93.123.85.205	7777	TCP
2024-10-28T09:17:03.668941+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38988	93.123.85.205	7777	TCP
2024-10-28T09:17:04.926634+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38990	93.123.85.205	7777	TCP
2024-10-28T09:17:06.050987+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38992	93.123.85.205	7777	TCP
2024-10-28T09:17:07.219783+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38994	93.123.85.205	7777	TCP
2024-10-28T09:17:08.433812+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38996	93.123.85.205	7777	TCP
2024-10-28T09:17:10.471306+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38998	93.123.85.205	7777	TCP
2024-10-28T09:17:11.665510+0100	2846526	1	A Network Trojan was detected	192.168.2.15	39000	93.123.85.205	7777	TCP
2024-10-28T09:17:12.772020+0100	2846526	1	A Network Trojan was detected	192.168.2.15	39002	93.123.85.205	7777	TCP
2024-10-28T09:17:13.971744+0100	2846526	1	A Network Trojan was detected	192.168.2.15	39004	93.123.85.205	7777	TCP
2024-10-28T09:17:15.223746+0100	2846526	1	A Network Trojan was detected	192.168.2.15	39006	93.123.85.205	7777	TCP
2024-10-28T09:17:16.427188+0100	2846526	1	A Network Trojan was detected	192.168.2.15	39008	93.123.85.205	7777	TCP
2024-10-28T09:17:17.622622+0100	2846526	1	A Network Trojan was detected	192.168.2.15	39010	93.123.85.205	7777	TCP
2024-10-28T09:17:18.823373+0100	2846526	1	A Network Trojan was detected	192.168.2.15	39012	93.123.85.205	7777	TCP
2024-10-28T09:17:19.913873+0100	2846526	1	A Network Trojan was detected	192.168.2.15	39014	93.123.85.205	7777	TCP
2024-10-28T09:17:21.021522+0100	2846526	1	A Network Trojan was detected	192.168.2.15	39016	93.123.85.205	7777	TCP
2024-10-28T09:17:22.174296+0100	2846526	1	A Network Trojan was detected	192.168.2.15	39018	93.123.85.205	7777	TCP
2024-10-28T09:17:23.919347+0100	2846526	1	A Network Trojan was detected	192.168.2.15	39020	93.123.85.205	7777	TCP
2024-10-28T09:17:25.122174+0100	2846526	1	A Network Trojan was detected	192.168.2.15	39022	93.123.85.205	7777	TCP
2024-10-28T09:17:26.328044+0100	2846526	1	A Network Trojan was detected	192.168.2.15	39024	93.123.85.205	7777	TCP
2024-10-28T09:17:27.424415+0100	2846526	1	A Network Trojan was detected	192.168.2.15	39026	93.123.85.205	7777	TCP
2024-10-28T09:17:28.532340+0100	2846526	1	A Network Trojan was detected	192.168.2.15	39028	93.123.85.205	7777	TCP
2024-10-28T09:17:29.729016+0100	2846526	1	A Network Trojan was detected	192.168.2.15	39030	93.123.85.205	7777	TCP
2024-10-28T09:17:30.867233+0100	2846526	1	A Network Trojan was detected	192.168.2.15	39032	93.123.85.205	7777	TCP
2024-10-28T09:17:31.970852+0100	2846526	1	A Network Trojan was detected	192.168.2.15	39034	93.123.85.205	7777	TCP
2024-10-28T09:17:33.366113+0100	2846526	1	A Network Trojan was detected	192.168.2.15	39036	93.123.85.205	7777	TCP
2024-10-28T09:17:34.646970+0100	2846526	1	A Network Trojan was detected	192.168.2.15	39038	93.123.85.205	7777	TCP
2024-10-28T09:17:35.819209+0100	2846526	1	A Network Trojan was detected	192.168.2.15	39040	93.123.85.205	7777	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: na.elf

Avira: detected

Found malware configuration

Source: na.elf

Malware Configuration Extractor: Gafgyt {"C2 url": "93.123.85.205:7777"}

Multi AV Scanner detection for submitted file

Source: na.elf

ReversingLabs: Detection: 63%

Spreading

Opens /proc/net/* files useful for finding connected devices and routers

Source: /tmp/na.elf (PID: 5542)

Opens: /proc/net/route

Jump to behavior

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38688 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38694 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38700 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38690 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38698 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38702 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38708 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38692 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38696 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38704 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38706 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38686 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38712 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38714 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38710 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38718 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38716 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38720 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38724 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38730 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38722 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38728 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38726 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38732 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38734 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38736 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38738 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38742 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38740 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38744 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38746 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38748 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38750 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38756 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38754 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38766 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38762 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38760 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38764 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38774 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38758 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38752 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38770 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38778 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38790 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38788 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38800 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38768 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38782 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38798 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38772 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38794 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38792 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38796 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38786 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38802 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38776 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38784 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38810 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38812 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38820 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38814 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38804 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38818 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38824 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38822 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38836 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38816 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38806 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38840 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38844 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38830 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38858 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38842 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38828 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38780 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38838 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38826 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38852 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38832 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38850 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38856 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38860 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38868 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38862 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38864 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38866 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38848 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38854 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38834 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38846 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38874 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38872 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38880 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38878 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38888 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38890 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38882 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38876 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38808 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38904 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38892 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38870 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38886 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38914 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38906 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38896 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38908 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38900 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38898 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38924 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38884 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38916 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38934 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38936 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38920 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38932 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38902 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38942 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38910 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38940 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38918 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38938 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38894 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38928 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38930 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38922 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38912 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38926 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38946 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38944 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38948 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38952 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38956 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38950 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38960 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38968 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38966 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38958 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38964 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38954 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38974 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38970 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38976 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38962 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38980 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38978 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38992 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38982 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38990 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38988 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38986 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38994 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38996 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38972 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38984 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:39002 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:39010 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38998 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:39006 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:39012 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:39008 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:39004 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:39016 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:39018 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:39014 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:39020 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:39024 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:39030 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:39026 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:39028 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:39022 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:39032 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:39034 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:39036 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:39038 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:39040 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:39000 -> 93.123.85.205:7777

Source: global traffic

TCP traffic: 192.168.2.15:38686 -> 93.123.85.205:7777

Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205

Source: global traffic

DNS traffic detected: DNS query: daisy.ubuntu.com

System Summary

Malicious sample detected (through community Yara rule)

Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5544.1.00007f7644001000.00007f7644013000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5542.1.00007f7644001000.00007f7644013000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: na.elf PID: 5542, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: na.elf PID: 5544, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown

Contains symbols with names commonly found in malware

Source: ELF static info symbol of initial sample

Name: vseattack

Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5544.1.00007f7644001000.00007f7644013000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5542.1.00007f7644001000.00007f7644013000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: na.elf PID: 5542, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: na.elf PID: 5544, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16

Source: classification engine

Classification label: mal100.spre.troj.linELF@0/1@2/0

Source: na.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/powerpc/brk.S
Source: na.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/powerpc/crt1.S
Source: na.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/powerpc/crti.S
Source: na.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/powerpc/crtn.S

Source: /tmp/na.elf (PID: 5542)

Queries kernel information via 'uname':

Jump to behavior

Source: na.elf, 5542.1.00007ffdd1224000.00007ffdd1245000.rw-.sdmp	Binary or memory string: kU/tmp/qemu-open.SqQQIe\
Source: na.elf, 5542.1.0000556bd75c0000.0000556bd7670000.rw-.sdmp, na.elf, 5544.1.0000556bd75c0000.0000556bd7670000.rw-.sdmp	Binary or memory string: !/etc/qemu-binfmt/ppc11!hotpluggableq
Source: na.elf, 5542.1.0000556bd75c0000.0000556bd7670000.rw-.sdmp, na.elf, 5544.1.0000556bd75c0000.0000556bd7670000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/ppc
Source: na.elf, 5542.1.00007ffdd1224000.00007ffdd1245000.rw-.sdmp, na.elf, 5544.1.00007ffdd1224000.00007ffdd1245000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-ppc
Source: na.elf, 5542.1.00007ffdd1224000.00007ffdd1245000.rw-.sdmp	Binary or memory string: /tmp/qemu-open.SqQQIe
Source: na.elf, 5542.1.00007ffdd1224000.00007ffdd1245000.rw-.sdmp, na.elf, 5544.1.00007ffdd1224000.00007ffdd1245000.rw-.sdmp	Binary or memory string: Mx86_64/usr/bin/qemu-ppc/tmp/na.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/na.elf

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match

File source: na.elf, type: SAMPLE

Yara detected Mirai

Source: Yara match	File source: na.elf, type: SAMPLE
Source: Yara match	File source: 5544.1.00007f7644001000.00007f7644013000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5542.1.00007f7644001000.00007f7644013000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: na.elf PID: 5542, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: na.elf PID: 5544, type: MEMORYSTR

Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36

Remote Access Functionality

Yara detected Gafgyt

Source: Yara match

File source: na.elf, type: SAMPLE

Yara detected Mirai

Source: Yara match	File source: na.elf, type: SAMPLE
Source: Yara match	File source: 5544.1.00007f7644001000.00007f7644013000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5542.1.00007f7644001000.00007f7644013000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: na.elf PID: 5542, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: na.elf PID: 5544, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Data Obfuscation	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	1 Remote System Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Application Layer Protocol	Traffic Duplication	Data Destruction

Malware Configuration

Threatname: Gafgyt

{"C2 url": "93.123.85.205:7777"}

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
na.elf	63%	ReversingLabs	Linux.Exploit.Mirai
na.elf	100%	Avira	EXP/ELF.Mirai.Z.A

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
daisy.ubuntu.com	162.213.35.25	true	false		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
93.123.85.205:7777	true		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
93.123.85.205	unknown	Bulgaria		43561	NET1-ASBG	true

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
93.123.85.205	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse
93.123.85.205	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
daisy.ubuntu.com	la.bot.sparc.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	la.bot.powerpc.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	la.bot.arm5.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	la.bot.m68k.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.24
	la.bot.m68k.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	la.bot.arm5.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	la.bot.arm7.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	nklarm6.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	nabarm6.elf	Get hash	malicious	Unknown	Browse	162.213.35.24

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
NET1-ASBG	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse	93.123.85.205
	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse	93.123.85.205
	la.bot.sparc.elf	Get hash	malicious	Unknown	Browse	93.123.30.220
	nabmips.elf	Get hash	malicious	Unknown	Browse	91.92.16.121
	Statement Of Account.exe	Get hash	malicious	Lokibot	Browse	94.156.177.220
	Purchase order.xls	Get hash	malicious	Lokibot	Browse	94.156.177.220
	Payment Advice.xls	Get hash	malicious	Lokibot	Browse	94.156.177.220
	dw7h7aQwVZ.exe	Get hash	malicious	Lokibot	Browse	94.156.177.220
	1729844285df3beefdd998d9488ed81285c601b4206d2d286448af87fbe46e5e262d812b0f698.dat-decoded.exe	Get hash	malicious	Lokibot	Browse	94.156.177.220
	SecuriteInfo.com.W97M.DownLoader.6515.29545.30613.xlsx	Get hash	malicious	Lokibot	Browse	94.156.177.220

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

/tmp/qemu-open.SqQQIe (deleted)

Download File

Process:	/tmp/na.elf
File Type:	ASCII text
Category:	dropped
Size (bytes):	230
Entropy (8bit):	3.709552666863289
Encrypted:	false
SSDEEP:	6:iekrEcvwAsE5KlwSd4pzKaV6Lpms/a/1VCxGF:ur+m5MwSdIKaV6L1adVRF
MD5:	2E667F43AE18CD1FE3C108641708A82C
SHA1:	12B90DE2DA0FBCFE66F3D6130905E56C8D6A68D3
SHA-256:	6F721492E7A337C5B498A8F55F5EB7AC745AFF716D0B5B08EFF2C1B6B250F983
SHA-512:	D2A0EE2509154EC1098994F38BE172F98F4150399C534A04D5C675D7C05630802225019F19344CC9070C576BC465A4FEB382AC7712DE6BF25E9244B54A9DB830
Malicious:	false
Reputation:	high, very likely benign file
Preview:	Iface.Destination.Gateway .Flags.RefCnt.Use.Metric.Mask..MTU.Window.IRTT .ens160.00000000.c0a80201.0003.0.0.0.00000000.0.0.0.ens160.c0a80200.00000000.0001.0.0.0.ffffff00.0.0.0.

Static File Info

General

File type:	ELF 32-bit MSB executable, PowerPC or cisco 4500, version 1 (SYSV), statically linked, not stripped
Entropy (8bit):	6.093089274151598
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	na.elf
File size:	93'907 bytes
MD5:	79c9d5be5fdd2fef4bff20019f5b0879
SHA1:	89f16034883bbb609451742ca16fe56a8f2d5b0a
SHA256:	3c8bc1279a29c4626a20b63b6fc048026e350ad317f468bf079f02cd97a45cbd
SHA512:	150c0cc0f5f4b1346869c5c2bcccfada3b19f10e550c95e4e007c7abc2b5ed67f6bcd780aa5b6fa21a5a33f5cb125d597ab2cddbcc3cfc226b99ca7354f95ac4
SSDEEP:	1536:QQK1n7bzX9jajzvxRq57wBRcGCMCZDxeBk+8ul4umXxVqDrstKfz9e:Q97vk51RcG7A0l4umXxVqDrIKfz9e
TLSH:	37933A47B71C0B53C59B5AF12DAB3BF08B69B9E113D76185A10AEFD00372EB12412FA5
File Content Preview:	.ELF...........................4.."P.....4. ...(.......................\|...\|...............\|...\|...\|......g.........dt.Q.............................!..\|......$H...H......$8!. \|...N.. .!..\|.......?.............../...@..\?........+../...A..$8...})......N..

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, big endian
Version:	1 (current)
Machine:	PowerPC
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x100001f0
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	74320
Section Header Size:	40
Number of Section Headers:	17
Header String Table Index:	14

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x10000094	0x94	0x24	0x0	0x6	AX	0	0	4
.text	PROGBITS	0x100000b8	0xb8	0xebe0	0x0	0x6	AX	0	0	4
.fini	PROGBITS	0x1000ec98	0xec98	0x20	0x0	0x6	AX	0	0	4
.rodata	PROGBITS	0x1000ecb8	0xecb8	0x26c0	0x0	0x2	A	0	0	8
.eh_frame	PROGBITS	0x10011378	0x11378	0x4	0x0	0x2	A	0	0	4
.ctors	PROGBITS	0x1002137c	0x1137c	0x8	0x0	0x3	WA	0	0	4
.dtors	PROGBITS	0x10021384	0x11384	0x8	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x1002138c	0x1138c	0x4	0x0	0x3	WA	0	0	4
.data	PROGBITS	0x10021390	0x11390	0x358	0x0	0x3	WA	0	0	8
.sdata	PROGBITS	0x100216e8	0x116e8	0x44	0x0	0x3	WA	0	0	4
.sbss	NOBITS	0x10021730	0x1172c	0x6c	0x0	0x3	WA	0	0	8
.bss	NOBITS	0x1002179c	0x1172c	0x62f0	0x0	0x3	WA	0	0	4
.comment	PROGBITS	0x0	0x1172c	0xab0	0x0	0x0		0	0	1
.shstrtab	STRTAB	0x0	0x121dc	0x73	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x124f8	0x2a00	0x10	0x0		16	249	4
.strtab	STRTAB	0x0	0x14ef8	0x1fdb	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x10000000	0x10000000	0x1137c	0x1137c	6.1400	0x5	R E	0x10000	.init .text .fini .rodata .eh_frame
LOAD	0x1137c	0x1002137c	0x1002137c	0x3b0	0x6710	2.8667	0x6	RW	0x10000	.ctors .dtors .jcr .data .sdata .sbss .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x10000094	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x100000b8	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x1000ec98	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x1000ecb8	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x10011378	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x1002137c	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x10021384	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x1002138c	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x10021390	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x100216e8	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x10021730	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x1002179c	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	14
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	15
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	16
C.110.5211	.symtab	0x1000f16c	8	OBJECT	<unknown>	DEFAULT	4
C.147.5527	.symtab	0x1000fae8	24	OBJECT	<unknown>	DEFAULT	4
Q	.symtab	0x100217b8	16384	OBJECT	<unknown>	DEFAULT	12
Sakura_Bot.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
SendSTD	.symtab	0x10003570	336	FUNC	<unknown>	DEFAULT	2
SendSTDHEX	.symtab	0x10002b5c	360	FUNC	<unknown>	DEFAULT	2
SendSTD_HEX	.symtab	0x1000381c	392	FUNC	<unknown>	DEFAULT	2
SendUDP	.symtab	0x100020fc	1124	FUNC	<unknown>	DEFAULT	2
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_SDA_BASE_	.symtab	0x100296e8	0	NOTYPE	<unknown>	DEFAULT	10
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__CTOR_END__	.symtab	0x10021380	0	OBJECT	<unknown>	DEFAULT	6
__CTOR_LIST__	.symtab	0x1002137c	0	OBJECT	<unknown>	DEFAULT	6
__C_ctype_b	.symtab	0x100216f0	4	OBJECT	<unknown>	DEFAULT	10
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x1000fcec	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_tolower	.symtab	0x10021724	4	OBJECT	<unknown>	DEFAULT	10
__C_ctype_tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_tolower_data	.symtab	0x100103d6	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_toupper	.symtab	0x100216f8	4	OBJECT	<unknown>	DEFAULT	10
__C_ctype_toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_toupper_data	.symtab	0x1000ffec	768	OBJECT	<unknown>	DEFAULT	4
__DTOR_END__	.symtab	0x10021388	0	OBJECT	<unknown>	DEFAULT	7
__DTOR_LIST__	.symtab	0x10021384	0	OBJECT	<unknown>	DEFAULT	7
__EH_FRAME_BEGIN__	.symtab	0x10011378	0	OBJECT	<unknown>	DEFAULT	5
__FRAME_END__	.symtab	0x10011378	0	OBJECT	<unknown>	DEFAULT	5
__GI___C_ctype_b	.symtab	0x100216f0	4	OBJECT	<unknown>	HIDDEN	10
__GI___C_ctype_b_data	.symtab	0x1000fcec	768	OBJECT	<unknown>	HIDDEN	4
__GI___C_ctype_tolower	.symtab	0x10021724	4	OBJECT	<unknown>	HIDDEN	10
__GI___C_ctype_tolower_data	.symtab	0x100103d6	768	OBJECT	<unknown>	HIDDEN	4
__GI___C_ctype_toupper	.symtab	0x100216f8	4	OBJECT	<unknown>	HIDDEN	10
__GI___C_ctype_toupper_data	.symtab	0x1000ffec	768	OBJECT	<unknown>	HIDDEN	4
__GI___ctype_b	.symtab	0x100216f4	4	OBJECT	<unknown>	HIDDEN	10
__GI___ctype_tolower	.symtab	0x10021728	4	OBJECT	<unknown>	HIDDEN	10
__GI___ctype_toupper	.symtab	0x100216fc	4	OBJECT	<unknown>	HIDDEN	10
__GI___errno_location	.symtab	0x1000732c	12	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked	.symtab	0x1000d3e4	312	FUNC	<unknown>	HIDDEN	2
__GI___glibc_strerror_r	.symtab	0x1000d720	48	FUNC	<unknown>	HIDDEN	2
__GI___h_errno_location	.symtab	0x10009554	12	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl	.symtab	0x10006e28	132	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl64	.symtab	0x10006eac	100	FUNC	<unknown>	HIDDEN	2
__GI___libc_open	.symtab	0x100070fc	120	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini	.symtab	0x10008e88	148	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init	.symtab	0x10008f88	128	FUNC	<unknown>	HIDDEN	2
__GI___xpg_strerror_r	.symtab	0x1000d750	268	FUNC	<unknown>	HIDDEN	2
__GI__exit	.symtab	0x10006f10	60	FUNC	<unknown>	HIDDEN	2
__GI_abort	.symtab	0x1000a4b0	336	FUNC	<unknown>	HIDDEN	2
__GI_atoi	.symtab	0x10008a1c	12	FUNC	<unknown>	HIDDEN	2
__GI_atol	.symtab	0x10008a1c	12	FUNC	<unknown>	HIDDEN	2
__GI_brk	.symtab	0x1000a61c	52	FUNC	<unknown>	HIDDEN	2
__GI_chdir	.symtab	0x10006f94	72	FUNC	<unknown>	HIDDEN	2
__GI_close	.symtab	0x10006fdc	72	FUNC	<unknown>	HIDDEN	2
__GI_connect	.symtab	0x10007d5c	52	FUNC	<unknown>	HIDDEN	2
__GI_errno	.symtab	0x10021770	4	OBJECT	<unknown>	HIDDEN	11
__GI_exit	.symtab	0x10008be4	132	FUNC	<unknown>	HIDDEN	2
__GI_fclose	.symtab	0x1000a6e0	332	FUNC	<unknown>	HIDDEN	2
__GI_fcntl	.symtab	0x10006e28	132	FUNC	<unknown>	HIDDEN	2
__GI_fcntl64	.symtab	0x10006eac	100	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked	.symtab	0x1000ae3c	432	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked	.symtab	0x1000d3e4	312	FUNC	<unknown>	HIDDEN	2
__GI_fgets	.symtab	0x1000ac88	148	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked	.symtab	0x1000afec	196	FUNC	<unknown>	HIDDEN	2
__GI_fopen	.symtab	0x1000a82c	12	FUNC	<unknown>	HIDDEN	2
__GI_fork	.symtab	0x10007024	72	FUNC	<unknown>	HIDDEN	2
__GI_fputs_unlocked	.symtab	0x1000d51c	92	FUNC	<unknown>	HIDDEN	2
__GI_fseek	.symtab	0x1000e92c	16	FUNC	<unknown>	HIDDEN	2
__GI_fseeko64	.symtab	0x1000e93c	284	FUNC	<unknown>	HIDDEN	2
__GI_fwrite_unlocked	.symtab	0x1000d578	184	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked	.symtab	0x1000d3e4	312	FUNC	<unknown>	HIDDEN	2
__GI_getegid	.symtab	0x100092bc	72	FUNC	<unknown>	HIDDEN	2
__GI_geteuid	.symtab	0x10009304	72	FUNC	<unknown>	HIDDEN	2
__GI_getgid	.symtab	0x1000934c	72	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname	.symtab	0x100079c4	84	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname_r	.symtab	0x10007a18	836	FUNC	<unknown>	HIDDEN	2
__GI_getpid	.symtab	0x1000706c	72	FUNC	<unknown>	HIDDEN	2
__GI_getsockname	.symtab	0x10007d90	52	FUNC	<unknown>	HIDDEN	2
__GI_getuid	.symtab	0x10009394	72	FUNC	<unknown>	HIDDEN	2
__GI_h_errno	.symtab	0x10021774	4	OBJECT	<unknown>	HIDDEN	11
__GI_inet_addr	.symtab	0x10007990	52	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton	.symtab	0x10009964	192	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa	.symtab	0x1000795c	52	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa_r	.symtab	0x100078e0	124	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntop	.symtab	0x1000b74c	676	FUNC	<unknown>	HIDDEN	2
__GI_inet_pton	.symtab	0x1000b3e0	524	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r	.symtab	0x10008934	232	FUNC	<unknown>	HIDDEN	2
__GI_ioctl	.symtab	0x10006d40	232	FUNC	<unknown>	HIDDEN	2
__GI_isatty	.symtab	0x1000b2d4	44	FUNC	<unknown>	HIDDEN	2
__GI_kill	.symtab	0x100070b4	72	FUNC	<unknown>	HIDDEN	2
__GI_lseek64	.symtab	0x1000ebac	128	FUNC	<unknown>	HIDDEN	2
__GI_memchr	.symtab	0x1000e730	264	FUNC	<unknown>	HIDDEN	2
__GI_memcpy	.symtab	0x10009658	156	FUNC	<unknown>	HIDDEN	2
__GI_memmove	.symtab	0x100096f4	164	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy	.symtab	0x10009798	52	FUNC	<unknown>	HIDDEN	2
__GI_memrchr	.symtab	0x1000e838	244	FUNC	<unknown>	HIDDEN	2
__GI_memset	.symtab	0x10007338	144	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep	.symtab	0x100093dc	72	FUNC	<unknown>	HIDDEN	2
__GI_open	.symtab	0x100070fc	120	FUNC	<unknown>	HIDDEN	2
__GI_poll	.symtab	0x1000a698	72	FUNC	<unknown>	HIDDEN	2
__GI_raise	.symtab	0x1000c0d8	48	FUNC	<unknown>	HIDDEN	2
__GI_random	.symtab	0x100084e8	108	FUNC	<unknown>	HIDDEN	2
__GI_random_r	.symtab	0x100087c0	144	FUNC	<unknown>	HIDDEN	2
__GI_rawmemchr	.symtab	0x1000b0b0	184	FUNC	<unknown>	HIDDEN	2
__GI_read	.symtab	0x10007184	72	FUNC	<unknown>	HIDDEN	2
__GI_recv	.symtab	0x10007e00	56	FUNC	<unknown>	HIDDEN	2
__GI_sbrk	.symtab	0x10009424	112	FUNC	<unknown>	HIDDEN	2
__GI_select	.symtab	0x100071cc	72	FUNC	<unknown>	HIDDEN	2
__GI_send	.symtab	0x10007e38	56	FUNC	<unknown>	HIDDEN	2
__GI_sendto	.symtab	0x10007e70	64	FUNC	<unknown>	HIDDEN	2
__GI_setsid	.symtab	0x10007214	72	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt	.symtab	0x10007eb0	60	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r	.symtab	0x100086cc	244	FUNC	<unknown>	HIDDEN	2
__GI_sigaction	.symtab	0x1000a3ec	196	FUNC	<unknown>	HIDDEN	2
__GI_signal	.symtab	0x10007f20	224	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask	.symtab	0x10009494	120	FUNC	<unknown>	HIDDEN	2
__GI_sleep	.symtab	0x10008c68	468	FUNC	<unknown>	HIDDEN	2
__GI_socket	.symtab	0x10007eec	52	FUNC	<unknown>	HIDDEN	2
__GI_sprintf	.symtab	0x1000c15c	140	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r	.symtab	0x10008850	228	FUNC	<unknown>	HIDDEN	2
__GI_strcasecmp	.symtab	0x1000d85c	80	FUNC	<unknown>	HIDDEN	2
__GI_strchr	.symtab	0x100073c8	256	FUNC	<unknown>	HIDDEN	2
__GI_strcmp	.symtab	0x100074c8	52	FUNC	<unknown>	HIDDEN	2
__GI_strcoll	.symtab	0x100074c8	52	FUNC	<unknown>	HIDDEN	2
__GI_strcpy	.symtab	0x100074fc	32	FUNC	<unknown>	HIDDEN	2
__GI_strdup	.symtab	0x1000b284	80	FUNC	<unknown>	HIDDEN	2
__GI_strlen	.symtab	0x1000751c	164	FUNC	<unknown>	HIDDEN	2
__GI_strncat	.symtab	0x1000b168	208	FUNC	<unknown>	HIDDEN	2
__GI_strncpy	.symtab	0x100097cc	188	FUNC	<unknown>	HIDDEN	2
__GI_strnlen	.symtab	0x1000d630	240	FUNC	<unknown>	HIDDEN	2
__GI_strpbrk	.symtab	0x10009928	60	FUNC	<unknown>	HIDDEN	2
__GI_strspn	.symtab	0x1000b238	76	FUNC	<unknown>	HIDDEN	2
__GI_strstr	.symtab	0x100075c0	244	FUNC	<unknown>	HIDDEN	2
__GI_strtok	.symtab	0x100076c4	12	FUNC	<unknown>	HIDDEN	2
__GI_strtok_r	.symtab	0x10009888	160	FUNC	<unknown>	HIDDEN	2
__GI_strtol	.symtab	0x10008a28	8	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr	.symtab	0x100076d0	156	FUNC	<unknown>	HIDDEN	2
__GI_tcsetattr	.symtab	0x1000776c	356	FUNC	<unknown>	HIDDEN	2
__GI_time	.symtab	0x1000725c	72	FUNC	<unknown>	HIDDEN	2
__GI_tolower	.symtab	0x1000c13c	32	FUNC	<unknown>	HIDDEN	2
__GI_toupper	.symtab	0x1000730c	32	FUNC	<unknown>	HIDDEN	2
__GI_vsnprintf	.symtab	0x1000c1e8	204	FUNC	<unknown>	HIDDEN	2
__GI_wait4	.symtab	0x1000950c	72	FUNC	<unknown>	HIDDEN	2
__GI_waitpid	.symtab	0x100072a4	8	FUNC	<unknown>	HIDDEN	2
__GI_wcrtomb	.symtab	0x1000dab4	92	FUNC	<unknown>	HIDDEN	2
__GI_wcsnrtombs	.symtab	0x1000db20	204	FUNC	<unknown>	HIDDEN	2
__GI_wcsrtombs	.symtab	0x1000db10	16	FUNC	<unknown>	HIDDEN	2
__GI_write	.symtab	0x100072ac	72	FUNC	<unknown>	HIDDEN	2
__JCR_END__	.symtab	0x1002138c	0	OBJECT	<unknown>	DEFAULT	8
__JCR_LIST__	.symtab	0x1002138c	0	OBJECT	<unknown>	DEFAULT	8
__app_fini	.symtab	0x10021764	4	OBJECT	<unknown>	HIDDEN	11
__atexit_lock	.symtab	0x1002157c	24	OBJECT	<unknown>	DEFAULT	9
__bsd_signal	.symtab	0x10007f20	224	FUNC	<unknown>	HIDDEN	2
__bss_start	.symtab	0x1002172c	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x10008f28	96	FUNC	<unknown>	DEFAULT	2
__ctype_b	.symtab	0x100216f4	4	OBJECT	<unknown>	DEFAULT	10
__ctype_tolower	.symtab	0x10021728	4	OBJECT	<unknown>	DEFAULT	10
__ctype_toupper	.symtab	0x100216fc	4	OBJECT	<unknown>	DEFAULT	10
__curbrk	.symtab	0x10021790	4	OBJECT	<unknown>	DEFAULT	11
__data_start	.symtab	0x10021398	0	NOTYPE	<unknown>	DEFAULT	9
__decode_answer	.symtab	0x1000bc48	272	FUNC	<unknown>	HIDDEN	2
__decode_dotted	.symtab	0x1000d978	244	FUNC	<unknown>	HIDDEN	2
__decode_header	.symtab	0x1000badc	196	FUNC	<unknown>	HIDDEN	2
__deregister_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__dns_lookup	.symtab	0x10009a24	1692	FUNC	<unknown>	HIDDEN	2
__do_global_ctors_aux	.symtab	0x1000ec2c	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux	.symtab	0x100000b8	0	FUNC	<unknown>	DEFAULT	2
__dso_handle	.symtab	0x10021390	0	OBJECT	<unknown>	HIDDEN	9
__encode_dotted	.symtab	0x1000d8ac	204	FUNC	<unknown>	HIDDEN	2
__encode_header	.symtab	0x1000b9f0	236	FUNC	<unknown>	HIDDEN	2
__encode_question	.symtab	0x1000bba0	124	FUNC	<unknown>	HIDDEN	2
__environ	.symtab	0x1002175c	4	OBJECT	<unknown>	DEFAULT	11
__errno_location	.symtab	0x1000732c	12	FUNC	<unknown>	DEFAULT	2
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x10021754	4	OBJECT	<unknown>	HIDDEN	11
__fgetc_unlocked	.symtab	0x1000d3e4	312	FUNC	<unknown>	DEFAULT	2
__fini_array_end	.symtab	0x1002137c	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__fini_array_start	.symtab	0x1002137c	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__get_hosts_byname_r	.symtab	0x1000a394	88	FUNC	<unknown>	HIDDEN	2
__glibc_strerror_r	.symtab	0x1000d720	48	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__h_errno_location	.symtab	0x10009554	12	FUNC	<unknown>	DEFAULT	2
__h_errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__heap_alloc	.symtab	0x100082d0	160	FUNC	<unknown>	DEFAULT	2
__heap_free	.symtab	0x100083b8	300	FUNC	<unknown>	DEFAULT	2
__heap_link_free_area	.symtab	0x10008370	44	FUNC	<unknown>	DEFAULT	2
__heap_link_free_area_after	.symtab	0x1000839c	28	FUNC	<unknown>	DEFAULT	2
__init_array_end	.symtab	0x1002137c	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__init_array_start	.symtab	0x1002137c	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__length_dotted	.symtab	0x1000da6c	72	FUNC	<unknown>	HIDDEN	2
__length_question	.symtab	0x1000bc1c	44	FUNC	<unknown>	HIDDEN	2
__libc_close	.symtab	0x10006fdc	72	FUNC	<unknown>	DEFAULT	2
__libc_connect	.symtab	0x10007d5c	52	FUNC	<unknown>	DEFAULT	2
__libc_creat	.symtab	0x10007174	16	FUNC	<unknown>	DEFAULT	2
__libc_fcntl	.symtab	0x10006e28	132	FUNC	<unknown>	DEFAULT	2
__libc_fcntl64	.symtab	0x10006eac	100	FUNC	<unknown>	DEFAULT	2
__libc_fork	.symtab	0x10007024	72	FUNC	<unknown>	DEFAULT	2
__libc_getpid	.symtab	0x1000706c	72	FUNC	<unknown>	DEFAULT	2
__libc_lseek64	.symtab	0x1000ebac	128	FUNC	<unknown>	DEFAULT	2
__libc_nanosleep	.symtab	0x100093dc	72	FUNC	<unknown>	DEFAULT	2
__libc_open	.symtab	0x100070fc	120	FUNC	<unknown>	DEFAULT	2
__libc_poll	.symtab	0x1000a698	72	FUNC	<unknown>	DEFAULT	2
__libc_read	.symtab	0x10007184	72	FUNC	<unknown>	DEFAULT	2
__libc_recv	.symtab	0x10007e00	56	FUNC	<unknown>	DEFAULT	2
__libc_select	.symtab	0x100071cc	72	FUNC	<unknown>	DEFAULT	2
__libc_send	.symtab	0x10007e38	56	FUNC	<unknown>	DEFAULT	2
__libc_sendto	.symtab	0x10007e70	64	FUNC	<unknown>	DEFAULT	2
__libc_sigaction	.symtab	0x1000a3ec	196	FUNC	<unknown>	DEFAULT	2
__libc_stack_end	.symtab	0x10021758	4	OBJECT	<unknown>	DEFAULT	11
__libc_waitpid	.symtab	0x100072a4	8	FUNC	<unknown>	DEFAULT	2
__libc_write	.symtab	0x100072ac	72	FUNC	<unknown>	DEFAULT	2
__malloc_heap	.symtab	0x10021700	4	OBJECT	<unknown>	DEFAULT	10
__malloc_heap_lock	.symtab	0x100259a8	24	OBJECT	<unknown>	DEFAULT	12
__malloc_sbrk_lock	.symtab	0x10027a58	24	OBJECT	<unknown>	DEFAULT	12
__nameserver	.symtab	0x10027a80	12	OBJECT	<unknown>	HIDDEN	12
__nameservers	.symtab	0x1002177c	4	OBJECT	<unknown>	HIDDEN	11
__open_etc_hosts	.symtab	0x1000bd58	100	FUNC	<unknown>	HIDDEN	2
__open_nameservers	.symtab	0x1000a0c0	724	FUNC	<unknown>	HIDDEN	2
__pagesize	.symtab	0x10021760	4	OBJECT	<unknown>	DEFAULT	11
__preinit_array_end	.symtab	0x1002137c	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__preinit_array_start	.symtab	0x1002137c	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__pthread_initialize_minimal	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__pthread_mutex_init	.symtab	0x10008f1c	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock	.symtab	0x10008f1c	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock	.symtab	0x10008f1c	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock	.symtab	0x10008f1c	8	FUNC	<unknown>	DEFAULT	2
__pthread_return_0	.symtab	0x10008f1c	8	FUNC	<unknown>	DEFAULT	2
__pthread_return_void	.symtab	0x10008f24	4	FUNC	<unknown>	DEFAULT	2
__raise	.symtab	0x1000c0d8	48	FUNC	<unknown>	HIDDEN	2
__read_etc_hosts_r	.symtab	0x1000bdbc	796	FUNC	<unknown>	HIDDEN	2
__register_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__resolv_lock	.symtab	0x10021598	24	OBJECT	<unknown>	DEFAULT	9
__rtld_fini	.symtab	0x10021768	4	OBJECT	<unknown>	HIDDEN	11
__searchdomain	.symtab	0x10027a70	16	OBJECT	<unknown>	HIDDEN	12
__searchdomains	.symtab	0x10021780	4	OBJECT	<unknown>	HIDDEN	11
__sigaddset	.symtab	0x10008028	40	FUNC	<unknown>	DEFAULT	2
__sigdelset	.symtab	0x10008050	40	FUNC	<unknown>	DEFAULT	2
__sigismember	.symtab	0x10008000	40	FUNC	<unknown>	DEFAULT	2
__socketcall	.symtab	0x10009274	72	FUNC	<unknown>	HIDDEN	2
__socketcall.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__stdin	.symtab	0x10021714	4	OBJECT	<unknown>	DEFAULT	10
__stdio_READ	.symtab	0x1000dbec	116	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE	.symtab	0x1000c2b4	224	FUNC	<unknown>	HIDDEN	2
__stdio_adjust_position	.symtab	0x1000ea58	252	FUNC	<unknown>	HIDDEN	2
__stdio_fwrite	.symtab	0x1000dc60	364	FUNC	<unknown>	HIDDEN	2
__stdio_init_mutex	.symtab	0x1000ab68	16	FUNC	<unknown>	HIDDEN	2
__stdio_mutex_initializer.3862	.symtab	0x10010374	24	OBJECT	<unknown>	DEFAULT	4
__stdio_rfill	.symtab	0x1000ddcc	72	FUNC	<unknown>	HIDDEN	2
__stdio_seek	.symtab	0x1000eb54	88	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o	.symtab	0x1000de14	164	FUNC	<unknown>	HIDDEN	2
__stdio_trans2w_o	.symtab	0x1000deb8	248	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit	.symtab	0x1000ac38	80	FUNC	<unknown>	HIDDEN	2
__stdout	.symtab	0x10021718	4	OBJECT	<unknown>	DEFAULT	10
__syscall_error	.symtab	0x1000c108	52	FUNC	<unknown>	HIDDEN	2
__syscall_error.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fcntl64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_rt_sigaction	.symtab	0x1000a650	72	FUNC	<unknown>	HIDDEN	2
__syscall_rt_sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uClibc_fini	.symtab	0x10008e88	148	FUNC	<unknown>	DEFAULT	2
__uClibc_init	.symtab	0x10008f88	128	FUNC	<unknown>	DEFAULT	2
__uClibc_main	.symtab	0x10009008	620	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x10021704	4	OBJECT	<unknown>	HIDDEN	10
__xpg_strerror_r	.symtab	0x1000d750	268	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_adjust_pos.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_charpad	.symtab	0x1000c394	96	FUNC	<unknown>	DEFAULT	2
_cs_funcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_dl_aux_init	.symtab	0x1000a600	28	FUNC	<unknown>	DEFAULT	2
_dl_phdr	.symtab	0x10021788	4	OBJECT	<unknown>	DEFAULT	11
_dl_phnum	.symtab	0x1002178c	4	OBJECT	<unknown>	DEFAULT	11
_edata	.symtab	0x1002172c	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x10027a8c	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_errno	.symtab	0x10021770	4	OBJECT	<unknown>	DEFAULT	11
_exit	.symtab	0x10006f10	60	FUNC	<unknown>	DEFAULT	2
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fini	.symtab	0x1000ec98	16	FUNC	<unknown>	DEFAULT	3
_fixed_buffers	.symtab	0x100259d8	8192	OBJECT	<unknown>	DEFAULT	12
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow	.symtab	0x1000c3f4	160	FUNC	<unknown>	DEFAULT	2
_fpmaxtostr	.symtab	0x1000e06c	1732	FUNC	<unknown>	HIDDEN	2
_fpmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_h_errno	.symtab	0x10021774	4	OBJECT	<unknown>	DEFAULT	11
_init	.symtab	0x10000094	16	FUNC	<unknown>	DEFAULT	1
_load_inttype	.symtab	0x1000dfb0	128	FUNC	<unknown>	HIDDEN	2
_load_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_init	.symtab	0x1000cb04	188	FUNC	<unknown>	HIDDEN	2
_ppfs_init.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec	.symtab	0x1000cecc	1304	FUNC	<unknown>	HIDDEN	2
_ppfs_parsespec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs	.symtab	0x1000cbc0	92	FUNC	<unknown>	HIDDEN	2
_ppfs_prepargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs	.symtab	0x1000cc1c	624	FUNC	<unknown>	HIDDEN	2
_ppfs_setargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size	.symtab	0x1000ce8c	64	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_pop_restore	.symtab	0x10008f24	4	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_push_defer	.symtab	0x10008f24	4	FUNC	<unknown>	DEFAULT	2
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_sigintr	.symtab	0x100279d8	128	OBJECT	<unknown>	HIDDEN	12
_start	.symtab	0x100001f0	72	FUNC	<unknown>	DEFAULT	2
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x1000a838	700	FUNC	<unknown>	HIDDEN	2
_stdio_init	.symtab	0x1000aaf4	116	FUNC	<unknown>	HIDDEN	2
_stdio_openlist	.symtab	0x1002171c	4	OBJECT	<unknown>	DEFAULT	10
_stdio_openlist_add_lock	.symtab	0x100215c8	24	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_dec_use	.symtab	0x1000ad1c	288	FUNC	<unknown>	DEFAULT	2
_stdio_openlist_del_count	.symtab	0x10021798	4	OBJECT	<unknown>	DEFAULT	11
_stdio_openlist_del_lock	.symtab	0x100215e0	24	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_use_count	.symtab	0x10021794	4	OBJECT	<unknown>	DEFAULT	11
_stdio_streams	.symtab	0x100215f8	240	OBJECT	<unknown>	DEFAULT	9
_stdio_term	.symtab	0x1000ab78	192	FUNC	<unknown>	HIDDEN	2
_stdio_user_locking	.symtab	0x10021720	4	OBJECT	<unknown>	DEFAULT	10
_stdlib_strto_l	.symtab	0x10008a30	436	FUNC	<unknown>	HIDDEN	2
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_store_inttype	.symtab	0x1000e030	60	FUNC	<unknown>	HIDDEN	2
_store_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_string_syserrmsgs	.symtab	0x10010790	2906	OBJECT	<unknown>	HIDDEN	4
_string_syserrmsgs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr	.symtab	0x10009560	248	FUNC	<unknown>	HIDDEN	2
_uintmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal	.symtab	0x1000c494	1648	FUNC	<unknown>	HIDDEN	2
_vfprintf_internal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0x1000a4b0	336	FUNC	<unknown>	DEFAULT	2
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
access	.symtab	0x10006f4c	72	FUNC	<unknown>	DEFAULT	2
access.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
astd	.symtab	0x100049d0	356	FUNC	<unknown>	DEFAULT	2
atcp	.symtab	0x100043d4	1532	FUNC	<unknown>	DEFAULT	2
atoi	.symtab	0x10008a1c	12	FUNC	<unknown>	DEFAULT	2
atol	.symtab	0x10008a1c	12	FUNC	<unknown>	DEFAULT	2
atol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
audp	.symtab	0x10003e34	1440	FUNC	<unknown>	DEFAULT	2
bcopy	.symtab	0x100076b4	16	FUNC	<unknown>	DEFAULT	2
bcopy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
been_there_done_that	.symtab	0x10021784	4	OBJECT	<unknown>	DEFAULT	11
been_there_done_that.2829	.symtab	0x1002176c	4	OBJECT	<unknown>	DEFAULT	11
brk	.symtab	0x1000a61c	52	FUNC	<unknown>	DEFAULT	2
bsd_signal	.symtab	0x10007f20	224	FUNC	<unknown>	DEFAULT	2
buf.2641	.symtab	0x100257b8	16	OBJECT	<unknown>	DEFAULT	12
buf.4865	.symtab	0x100257c8	460	OBJECT	<unknown>	DEFAULT	12
c	.symtab	0x100213b8	4	OBJECT	<unknown>	DEFAULT	9
call___do_global_ctors_aux	.symtab	0x1000ec7c	0	FUNC	<unknown>	DEFAULT	2
call___do_global_dtors_aux	.symtab	0x1000014c	0	FUNC	<unknown>	DEFAULT	2
call_frame_dummy	.symtab	0x100001d4	0	FUNC	<unknown>	DEFAULT	2
chdir	.symtab	0x10006f94	72	FUNC	<unknown>	DEFAULT	2
chdir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0x10006fdc	72	FUNC	<unknown>	DEFAULT	2
close.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
commServer	.symtab	0x100216e8	4	OBJECT	<unknown>	DEFAULT	10
completed.3069	.symtab	0x1002179c	1	OBJECT	<unknown>	DEFAULT	12
connect	.symtab	0x10007d5c	52	FUNC	<unknown>	DEFAULT	2
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
connectTimeout	.symtab	0x10001968	656	FUNC	<unknown>	DEFAULT	2
creat	.symtab	0x10007174	16	FUNC	<unknown>	DEFAULT	2
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
csum	.symtab	0x10001dc0	320	FUNC	<unknown>	DEFAULT	2
currentServer	.symtab	0x100216ec	4	OBJECT	<unknown>	DEFAULT	10
data_start	.symtab	0x10021398	0	NOTYPE	<unknown>	DEFAULT	9
decodea.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dnslookup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
environ	.symtab	0x1002175c	4	OBJECT	<unknown>	DEFAULT	11
errno	.symtab	0x10021770	4	OBJECT	<unknown>	DEFAULT	11
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exit	.symtab	0x10008be4	132	FUNC	<unknown>	DEFAULT	2
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exp10_table	.symtab	0x10011330	72	OBJECT	<unknown>	DEFAULT	4
fclose	.symtab	0x1000a6e0	332	FUNC	<unknown>	DEFAULT	2
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0x10006e28	132	FUNC	<unknown>	DEFAULT	2
fcntl64	.symtab	0x10006eac	100	FUNC	<unknown>	DEFAULT	2
fdgets	.symtab	0x100004e8	232	FUNC	<unknown>	DEFAULT	2
fflush_unlocked	.symtab	0x1000ae3c	432	FUNC	<unknown>	DEFAULT	2
fflush_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked	.symtab	0x1000d3e4	312	FUNC	<unknown>	DEFAULT	2
fgetc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets	.symtab	0x1000ac88	148	FUNC	<unknown>	DEFAULT	2
fgets.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked	.symtab	0x1000afec	196	FUNC	<unknown>	DEFAULT	2
fgets_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fmt	.symtab	0x10011318	20	OBJECT	<unknown>	DEFAULT	4
fopen	.symtab	0x1000a82c	12	FUNC	<unknown>	DEFAULT	2
fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork	.symtab	0x10007024	72	FUNC	<unknown>	DEFAULT	2
fork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fputs_unlocked	.symtab	0x1000d51c	92	FUNC	<unknown>	DEFAULT	2
fputs_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
frame_dummy	.symtab	0x10000168	0	FUNC	<unknown>	DEFAULT	2
free	.symtab	0x100081d0	256	FUNC	<unknown>	DEFAULT	2
free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseek	.symtab	0x1000e92c	16	FUNC	<unknown>	DEFAULT	2
fseeko	.symtab	0x1000e92c	16	FUNC	<unknown>	DEFAULT	2
fseeko.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseeko64	.symtab	0x1000e93c	284	FUNC	<unknown>	DEFAULT	2
fseeko64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ftcp	.symtab	0x10002560	1532	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked	.symtab	0x1000d578	184	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getArch	.symtab	0x10004b34	40	FUNC	<unknown>	DEFAULT	2
getHost	.symtab	0x10001538	124	FUNC	<unknown>	DEFAULT	2
getOurIP	.symtab	0x100005d0	664	FUNC	<unknown>	DEFAULT	2
getPortz	.symtab	0x10004b5c	256	FUNC	<unknown>	DEFAULT	2
getRandomIP	.symtab	0x10000478	112	FUNC	<unknown>	DEFAULT	2
get_hosts_byname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getc_unlocked	.symtab	0x1000d3e4	312	FUNC	<unknown>	DEFAULT	2
getegid	.symtab	0x100092bc	72	FUNC	<unknown>	DEFAULT	2
getegid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid	.symtab	0x10009304	72	FUNC	<unknown>	DEFAULT	2
geteuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid	.symtab	0x1000934c	72	FUNC	<unknown>	DEFAULT	2
getgid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname	.symtab	0x100079c4	84	FUNC	<unknown>	DEFAULT	2
gethostbyname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname_r	.symtab	0x10007a18	836	FUNC	<unknown>	DEFAULT	2
gethostbyname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid	.symtab	0x1000706c	72	FUNC	<unknown>	DEFAULT	2
getpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockname	.symtab	0x10007d90	52	FUNC	<unknown>	DEFAULT	2
getsockname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt	.symtab	0x10007dc4	60	FUNC	<unknown>	DEFAULT	2
getsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid	.symtab	0x10009394	72	FUNC	<unknown>	DEFAULT	2
getuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gotIP	.symtab	0x10021734	4	OBJECT	<unknown>	DEFAULT	11
h.4864	.symtab	0x10025994	20	OBJECT	<unknown>	DEFAULT	12
h_errno	.symtab	0x10021774	4	OBJECT	<unknown>	DEFAULT	11
heap_alloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
heap_free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
htonl	.symtab	0x100078d8	4	FUNC	<unknown>	DEFAULT	2
htons	.symtab	0x100078dc	4	FUNC	<unknown>	DEFAULT	2
i.4229	.symtab	0x100213bc	4	OBJECT	<unknown>	DEFAULT	9
index	.symtab	0x100073c8	256	FUNC	<unknown>	DEFAULT	2
inet_addr	.symtab	0x10007990	52	FUNC	<unknown>	DEFAULT	2
inet_aton	.symtab	0x10009964	192	FUNC	<unknown>	DEFAULT	2
inet_aton.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa	.symtab	0x1000795c	52	FUNC	<unknown>	DEFAULT	2
inet_ntoa.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa_r	.symtab	0x100078e0	124	FUNC	<unknown>	DEFAULT	2
inet_ntop	.symtab	0x1000b74c	676	FUNC	<unknown>	DEFAULT	2
inet_ntop4	.symtab	0x1000b5ec	352	FUNC	<unknown>	DEFAULT	2
inet_pton	.symtab	0x1000b3e0	524	FUNC	<unknown>	DEFAULT	2
inet_pton4	.symtab	0x1000b300	224	FUNC	<unknown>	DEFAULT	2
initConnection	.symtab	0x1000639c	416	FUNC	<unknown>	DEFAULT	2
init_rand	.symtab	0x10000238	232	FUNC	<unknown>	DEFAULT	2
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initial_fa	.symtab	0x100213c0	264	OBJECT	<unknown>	DEFAULT	9
initstate	.symtab	0x100085d8	136	FUNC	<unknown>	DEFAULT	2
initstate_r	.symtab	0x10008934	232	FUNC	<unknown>	DEFAULT	2
ioctl	.symtab	0x10006d40	232	FUNC	<unknown>	DEFAULT	2
ioctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isatty	.symtab	0x1000b2d4	44	FUNC	<unknown>	DEFAULT	2
isatty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isspace	.symtab	0x100072f4	24	FUNC	<unknown>	DEFAULT	2
isspace.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill	.symtab	0x100070b4	72	FUNC	<unknown>	DEFAULT	2
kill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lengthd.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lengthq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/powerpc/brk.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/powerpc/crt1.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/powerpc/crti.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/powerpc/crtn.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
listFork	.symtab	0x10001bf8	456	FUNC	<unknown>	DEFAULT	2
llseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lseek64	.symtab	0x1000ebac	128	FUNC	<unknown>	DEFAULT	2
macAddress	.symtab	0x10021740	6	OBJECT	<unknown>	DEFAULT	11
main	.symtab	0x1000653c	2052	FUNC	<unknown>	DEFAULT	2
mainCommSock	.symtab	0x10021730	4	OBJECT	<unknown>	DEFAULT	11
makeIPPacket	.symtab	0x10002010	236	FUNC	<unknown>	DEFAULT	2
makeRandomStr	.symtab	0x100015b4	188	FUNC	<unknown>	DEFAULT	2
makevsepacket	.symtab	0x10002e0c	264	FUNC	<unknown>	DEFAULT	2
malloc	.symtab	0x10008078	344	FUNC	<unknown>	DEFAULT	2
malloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memchr	.symtab	0x1000e730	264	FUNC	<unknown>	DEFAULT	2
memchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memcpy	.symtab	0x10009658	156	FUNC	<unknown>	DEFAULT	2
memcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memmove	.symtab	0x100096f4	164	FUNC	<unknown>	DEFAULT	2
memmove.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mempcpy	.symtab	0x10009798	52	FUNC	<unknown>	DEFAULT	2
mempcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memrchr	.symtab	0x1000e838	244	FUNC	<unknown>	DEFAULT	2
memrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset	.symtab	0x10007338	144	FUNC	<unknown>	DEFAULT	2
memset.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mylock	.symtab	0x100214c8	24	OBJECT	<unknown>	DEFAULT	9
mylock	.symtab	0x100259c0	24	OBJECT	<unknown>	DEFAULT	12
mylock	.symtab	0x100215b0	24	OBJECT	<unknown>	DEFAULT	9
nanosleep	.symtab	0x100093dc	72	FUNC	<unknown>	DEFAULT	2
nanosleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
next_start.1106	.symtab	0x10021750	4	OBJECT	<unknown>	DEFAULT	11
ntohl	.symtab	0x100078d0	4	FUNC	<unknown>	DEFAULT	2
ntohl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ntohs	.symtab	0x100078d4	4	FUNC	<unknown>	DEFAULT	2
ntop.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
numpids	.symtab	0x10021738	8	OBJECT	<unknown>	DEFAULT	11
object.3150	.symtab	0x100217a0	24	OBJECT	<unknown>	DEFAULT	12
open	.symtab	0x100070fc	120	FUNC	<unknown>	DEFAULT	2
open.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
opennameservers.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ourIP	.symtab	0x10021748	4	OBJECT	<unknown>	DEFAULT	11
p.3067	.symtab	0x10021394	0	OBJECT	<unknown>	DEFAULT	9
pids	.symtab	0x1002174c	4	OBJECT	<unknown>	DEFAULT	11
poll	.symtab	0x1000a698	72	FUNC	<unknown>	DEFAULT	2
poll.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prefix.4074	.symtab	0x100106e8	12	OBJECT	<unknown>	DEFAULT	4
print	.symtab	0x10000de8	1564	FUNC	<unknown>	DEFAULT	2
printchar	.symtab	0x100009c4	128	FUNC	<unknown>	DEFAULT	2
printi	.symtab	0x10000be8	512	FUNC	<unknown>	DEFAULT	2
prints	.symtab	0x10000a44	420	FUNC	<unknown>	DEFAULT	2
processCmd	.symtab	0x10004c5c	5952	FUNC	<unknown>	DEFAULT	2
qual_chars.4079	.symtab	0x100106fc	20	OBJECT	<unknown>	DEFAULT	4
raise	.symtab	0x1000c0d8	48	FUNC	<unknown>	DEFAULT	2
raise.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand	.symtab	0x100084e4	4	FUNC	<unknown>	DEFAULT	2
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand_cmwc	.symtab	0x10000320	344	FUNC	<unknown>	DEFAULT	2
random	.symtab	0x100084e8	108	FUNC	<unknown>	DEFAULT	2
random.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
random_poly_info	.symtab	0x100102ec	40	OBJECT	<unknown>	DEFAULT	4
random_r	.symtab	0x100087c0	144	FUNC	<unknown>	DEFAULT	2
random_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
randtbl	.symtab	0x100214fc	128	OBJECT	<unknown>	DEFAULT	9
rawmemchr	.symtab	0x1000b0b0	184	FUNC	<unknown>	DEFAULT	2
rawmemchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read	.symtab	0x10007184	72	FUNC	<unknown>	DEFAULT	2
read.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read_etc_hosts_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recv	.symtab	0x10007e00	56	FUNC	<unknown>	DEFAULT	2
recv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recvLine	.symtab	0x10001670	760	FUNC	<unknown>	DEFAULT	2
rtcp	.symtab	0x100039a4	1168	FUNC	<unknown>	DEFAULT	2
sbrk	.symtab	0x10009424	112	FUNC	<unknown>	DEFAULT	2
sbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
select	.symtab	0x100071cc	72	FUNC	<unknown>	DEFAULT	2
select.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
send	.symtab	0x10007e38	56	FUNC	<unknown>	DEFAULT	2
send.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sendto	.symtab	0x10007e70	64	FUNC	<unknown>	DEFAULT	2
sendto.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsid	.symtab	0x10007214	72	FUNC	<unknown>	DEFAULT	2
setsid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsockopt	.symtab	0x10007eb0	60	FUNC	<unknown>	DEFAULT	2
setsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setstate	.symtab	0x10008554	132	FUNC	<unknown>	DEFAULT	2
setstate_r	.symtab	0x100086cc	244	FUNC	<unknown>	DEFAULT	2
sigaction	.symtab	0x1000a3ec	196	FUNC	<unknown>	DEFAULT	2
sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
signal	.symtab	0x10007f20	224	FUNC	<unknown>	DEFAULT	2
signal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigprocmask	.symtab	0x10009494	120	FUNC	<unknown>	DEFAULT	2
sigprocmask.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigsetops.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sleep	.symtab	0x10008c68	468	FUNC	<unknown>	DEFAULT	2
sleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket	.symtab	0x10007eec	52	FUNC	<unknown>	DEFAULT	2
socket.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket_connect	.symtab	0x10002cc4	328	FUNC	<unknown>	DEFAULT	2
sockprintf	.symtab	0x10001404	308	FUNC	<unknown>	DEFAULT	2
spec_and_mask.4078	.symtab	0x10010710	16	OBJECT	<unknown>	DEFAULT	4
spec_base.4073	.symtab	0x100106f4	7	OBJECT	<unknown>	DEFAULT	4
spec_chars.4075	.symtab	0x1001073c	21	OBJECT	<unknown>	DEFAULT	4
spec_flags.4074	.symtab	0x10010754	8	OBJECT	<unknown>	DEFAULT	4
spec_or_mask.4077	.symtab	0x10010720	16	OBJECT	<unknown>	DEFAULT	4
spec_ranges.4076	.symtab	0x10010730	9	OBJECT	<unknown>	DEFAULT	4
sprintf	.symtab	0x1000c15c	140	FUNC	<unknown>	DEFAULT	2
sprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
srand	.symtab	0x10008660	108	FUNC	<unknown>	DEFAULT	2
srandom	.symtab	0x10008660	108	FUNC	<unknown>	DEFAULT	2
srandom_r	.symtab	0x10008850	228	FUNC	<unknown>	DEFAULT	2
static_id	.symtab	0x10021594	2	OBJECT	<unknown>	DEFAULT	9
static_ns	.symtab	0x10021778	4	OBJECT	<unknown>	DEFAULT	11
stderr	.symtab	0x10021710	4	OBJECT	<unknown>	DEFAULT	10
stdhexflood	.symtab	0x100036c0	348	FUNC	<unknown>	DEFAULT	2
stdin	.symtab	0x10021708	4	OBJECT	<unknown>	DEFAULT	10
stdout	.symtab	0x1002170c	4	OBJECT	<unknown>	DEFAULT	10
strcasecmp	.symtab	0x1000d85c	80	FUNC	<unknown>	DEFAULT	2
strcasecmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchr	.symtab	0x100073c8	256	FUNC	<unknown>	DEFAULT	2
strchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcmp	.symtab	0x100074c8	52	FUNC	<unknown>	DEFAULT	2
strcmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcoll	.symtab	0x100074c8	52	FUNC	<unknown>	DEFAULT	2
strcpy	.symtab	0x100074fc	32	FUNC	<unknown>	DEFAULT	2
strcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strdup	.symtab	0x1000b284	80	FUNC	<unknown>	DEFAULT	2
strdup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strerror_r	.symtab	0x1000d750	268	FUNC	<unknown>	DEFAULT	2
strlen	.symtab	0x1000751c	164	FUNC	<unknown>	DEFAULT	2
strlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strncat	.symtab	0x1000b168	208	FUNC	<unknown>	DEFAULT	2
strncat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strncpy	.symtab	0x100097cc	188	FUNC	<unknown>	DEFAULT	2
strncpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strnlen	.symtab	0x1000d630	240	FUNC	<unknown>	DEFAULT	2
strnlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strpbrk	.symtab	0x10009928	60	FUNC	<unknown>	DEFAULT	2
strpbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strspn	.symtab	0x1000b238	76	FUNC	<unknown>	DEFAULT	2
strspn.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strstr	.symtab	0x100075c0	244	FUNC	<unknown>	DEFAULT	2
strstr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok	.symtab	0x100076c4	12	FUNC	<unknown>	DEFAULT	2
strtok.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok_r	.symtab	0x10009888	160	FUNC	<unknown>	DEFAULT	2
strtok_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtol	.symtab	0x10008a28	8	FUNC	<unknown>	DEFAULT	2
strtol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcgetattr	.symtab	0x100076d0	156	FUNC	<unknown>	DEFAULT	2
tcgetattr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcpcsum	.symtab	0x10001f00	272	FUNC	<unknown>	DEFAULT	2
tcsetattr	.symtab	0x1000776c	356	FUNC	<unknown>	DEFAULT	2
tcsetattr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
time	.symtab	0x1000725c	72	FUNC	<unknown>	DEFAULT	2
time.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tolower	.symtab	0x1000c13c	32	FUNC	<unknown>	DEFAULT	2
tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
toupper	.symtab	0x1000730c	32	FUNC	<unknown>	DEFAULT	2
toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
trim	.symtab	0x10000868	348	FUNC	<unknown>	DEFAULT	2
type_codes	.symtab	0x1001075c	24	OBJECT	<unknown>	DEFAULT	4
type_sizes	.symtab	0x10010774	12	OBJECT	<unknown>	DEFAULT	4
unknown.1128	.symtab	0x10010780	14	OBJECT	<unknown>	DEFAULT	4
unsafe_state	.symtab	0x100214e0	28	OBJECT	<unknown>	DEFAULT	9
useragents	.symtab	0x1002139c	28	OBJECT	<unknown>	DEFAULT	9
usleep	.symtab	0x10008e3c	76	FUNC	<unknown>	DEFAULT	2
usleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
vseattack	.symtab	0x10002f14	1628	FUNC	<unknown>	DEFAULT	2
vsnprintf	.symtab	0x1000c1e8	204	FUNC	<unknown>	DEFAULT	2
vsnprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wait4	.symtab	0x1000950c	72	FUNC	<unknown>	DEFAULT	2
wait4.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
waitpid	.symtab	0x100072a4	8	FUNC	<unknown>	DEFAULT	2
waitpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcrtomb	.symtab	0x1000dab4	92	FUNC	<unknown>	DEFAULT	2
wcrtomb.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsnrtombs	.symtab	0x1000db20	204	FUNC	<unknown>	DEFAULT	2
wcsnrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsrtombs	.symtab	0x1000db10	16	FUNC	<unknown>	DEFAULT	2
wcsrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
write	.symtab	0x100072ac	72	FUNC	<unknown>	DEFAULT	2
write.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
xdigits.3080	.symtab	0x100103a0	17	OBJECT	<unknown>	DEFAULT	4

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-28T09:14:01.083791+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38686	93.123.85.205	7777	TCP
2024-10-28T09:14:02.321199+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38688	93.123.85.205	7777	TCP
2024-10-28T09:14:03.467823+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38690	93.123.85.205	7777	TCP
2024-10-28T09:14:04.637071+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38692	93.123.85.205	7777	TCP
2024-10-28T09:14:05.831578+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38694	93.123.85.205	7777	TCP
2024-10-28T09:14:06.972278+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38696	93.123.85.205	7777	TCP
2024-10-28T09:14:08.221875+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38698	93.123.85.205	7777	TCP
2024-10-28T09:14:09.338706+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38700	93.123.85.205	7777	TCP
2024-10-28T09:14:10.620550+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38702	93.123.85.205	7777	TCP
2024-10-28T09:14:11.821521+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38704	93.123.85.205	7777	TCP
2024-10-28T09:14:12.966730+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38706	93.123.85.205	7777	TCP
2024-10-28T09:14:14.215902+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38708	93.123.85.205	7777	TCP
2024-10-28T09:14:15.549182+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38710	93.123.85.205	7777	TCP
2024-10-28T09:14:16.723557+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38712	93.123.85.205	7777	TCP
2024-10-28T09:14:17.818686+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38714	93.123.85.205	7777	TCP
2024-10-28T09:14:18.949251+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38716	93.123.85.205	7777	TCP
2024-10-28T09:14:20.157501+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38718	93.123.85.205	7777	TCP
2024-10-28T09:14:21.323104+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38720	93.123.85.205	7777	TCP
2024-10-28T09:14:22.459096+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38722	93.123.85.205	7777	TCP
2024-10-28T09:14:23.667199+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38724	93.123.85.205	7777	TCP
2024-10-28T09:14:24.862837+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38726	93.123.85.205	7777	TCP
2024-10-28T09:14:26.248044+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38728	93.123.85.205	7777	TCP
2024-10-28T09:14:27.365394+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38730	93.123.85.205	7777	TCP
2024-10-28T09:14:28.452911+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38732	93.123.85.205	7777	TCP
2024-10-28T09:14:29.645106+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38734	93.123.85.205	7777	TCP
2024-10-28T09:14:30.856829+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38736	93.123.85.205	7777	TCP
2024-10-28T09:14:32.034704+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38738	93.123.85.205	7777	TCP
2024-10-28T09:14:33.224113+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38740	93.123.85.205	7777	TCP
2024-10-28T09:14:34.371823+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38742	93.123.85.205	7777	TCP
2024-10-28T09:14:35.544434+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38744	93.123.85.205	7777	TCP
2024-10-28T09:14:36.733685+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38746	93.123.85.205	7777	TCP
2024-10-28T09:14:37.950787+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38748	93.123.85.205	7777	TCP
2024-10-28T09:14:39.136223+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38750	93.123.85.205	7777	TCP
2024-10-28T09:14:40.356354+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38752	93.123.85.205	7777	TCP
2024-10-28T09:14:41.528724+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38754	93.123.85.205	7777	TCP
2024-10-28T09:14:42.661287+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38756	93.123.85.205	7777	TCP
2024-10-28T09:14:43.835947+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38758	93.123.85.205	7777	TCP
2024-10-28T09:14:45.514362+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38760	93.123.85.205	7777	TCP
2024-10-28T09:14:46.632139+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38762	93.123.85.205	7777	TCP
2024-10-28T09:14:47.755561+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38764	93.123.85.205	7777	TCP
2024-10-28T09:14:49.024633+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38766	93.123.85.205	7777	TCP
2024-10-28T09:14:50.229027+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38768	93.123.85.205	7777	TCP
2024-10-28T09:14:51.364003+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38770	93.123.85.205	7777	TCP
2024-10-28T09:14:52.526896+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38772	93.123.85.205	7777	TCP
2024-10-28T09:14:53.765635+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38774	93.123.85.205	7777	TCP
2024-10-28T09:14:54.947958+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38776	93.123.85.205	7777	TCP
2024-10-28T09:14:56.143187+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38778	93.123.85.205	7777	TCP
2024-10-28T09:14:57.331679+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38780	93.123.85.205	7777	TCP
2024-10-28T09:14:58.462246+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38782	93.123.85.205	7777	TCP
2024-10-28T09:14:59.550733+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38784	93.123.85.205	7777	TCP
2024-10-28T09:15:00.661708+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38786	93.123.85.205	7777	TCP
2024-10-28T09:15:01.873202+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38788	93.123.85.205	7777	TCP
2024-10-28T09:15:03.094557+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38790	93.123.85.205	7777	TCP
2024-10-28T09:15:04.649316+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38792	93.123.85.205	7777	TCP
2024-10-28T09:15:05.760768+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38794	93.123.85.205	7777	TCP
2024-10-28T09:15:07.035063+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38796	93.123.85.205	7777	TCP
2024-10-28T09:15:08.285580+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38798	93.123.85.205	7777	TCP
2024-10-28T09:15:09.445716+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38800	93.123.85.205	7777	TCP
2024-10-28T09:15:10.633032+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38802	93.123.85.205	7777	TCP
2024-10-28T09:15:11.764041+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38804	93.123.85.205	7777	TCP
2024-10-28T09:15:12.924404+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38806	93.123.85.205	7777	TCP
2024-10-28T09:15:14.161244+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38808	93.123.85.205	7777	TCP
2024-10-28T09:15:15.420741+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38810	93.123.85.205	7777	TCP
2024-10-28T09:15:16.673908+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38812	93.123.85.205	7777	TCP
2024-10-28T09:15:17.864859+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38814	93.123.85.205	7777	TCP
2024-10-28T09:15:19.026587+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38816	93.123.85.205	7777	TCP
2024-10-28T09:15:20.247428+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38818	93.123.85.205	7777	TCP
2024-10-28T09:15:21.526016+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38820	93.123.85.205	7777	TCP
2024-10-28T09:15:22.661061+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38822	93.123.85.205	7777	TCP
2024-10-28T09:15:25.945514+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38824	93.123.85.205	7777	TCP
2024-10-28T09:15:27.122628+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38826	93.123.85.205	7777	TCP
2024-10-28T09:15:28.327349+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38828	93.123.85.205	7777	TCP
2024-10-28T09:15:29.523672+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38830	93.123.85.205	7777	TCP
2024-10-28T09:15:30.720062+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38832	93.123.85.205	7777	TCP
2024-10-28T09:15:31.758551+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38834	93.123.85.205	7777	TCP
2024-10-28T09:15:32.969637+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38836	93.123.85.205	7777	TCP
2024-10-28T09:15:34.156188+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38838	93.123.85.205	7777	TCP
2024-10-28T09:15:35.260085+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38840	93.123.85.205	7777	TCP
2024-10-28T09:15:36.431229+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38842	93.123.85.205	7777	TCP
2024-10-28T09:15:37.626001+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38844	93.123.85.205	7777	TCP
2024-10-28T09:15:38.769364+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38846	93.123.85.205	7777	TCP
2024-10-28T09:15:40.066463+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38848	93.123.85.205	7777	TCP
2024-10-28T09:15:41.319799+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38850	93.123.85.205	7777	TCP
2024-10-28T09:15:42.428050+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38852	93.123.85.205	7777	TCP
2024-10-28T09:15:43.666479+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38854	93.123.85.205	7777	TCP
2024-10-28T09:15:44.940824+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38856	93.123.85.205	7777	TCP
2024-10-28T09:15:46.401425+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38858	93.123.85.205	7777	TCP
2024-10-28T09:15:47.629408+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38860	93.123.85.205	7777	TCP
2024-10-28T09:15:48.835161+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38862	93.123.85.205	7777	TCP
2024-10-28T09:15:50.020258+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38864	93.123.85.205	7777	TCP
2024-10-28T09:15:51.234602+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38866	93.123.85.205	7777	TCP
2024-10-28T09:15:52.443096+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38868	93.123.85.205	7777	TCP
2024-10-28T09:15:53.630073+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38870	93.123.85.205	7777	TCP
2024-10-28T09:15:54.754670+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38872	93.123.85.205	7777	TCP
2024-10-28T09:15:56.031249+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38874	93.123.85.205	7777	TCP
2024-10-28T09:15:57.225734+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38876	93.123.85.205	7777	TCP
2024-10-28T09:15:58.356447+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38878	93.123.85.205	7777	TCP
2024-10-28T09:15:59.525860+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38880	93.123.85.205	7777	TCP
2024-10-28T09:16:00.729351+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38882	93.123.85.205	7777	TCP
2024-10-28T09:16:01.926721+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38884	93.123.85.205	7777	TCP
2024-10-28T09:16:03.041869+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38886	93.123.85.205	7777	TCP
2024-10-28T09:16:04.242890+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38888	93.123.85.205	7777	TCP
2024-10-28T09:16:05.459089+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38890	93.123.85.205	7777	TCP
2024-10-28T09:16:06.721825+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38892	93.123.85.205	7777	TCP
2024-10-28T09:16:07.858309+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38894	93.123.85.205	7777	TCP
2024-10-28T09:16:09.053586+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38896	93.123.85.205	7777	TCP
2024-10-28T09:16:10.165953+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38898	93.123.85.205	7777	TCP
2024-10-28T09:16:11.530763+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38900	93.123.85.205	7777	TCP
2024-10-28T09:16:12.728087+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38902	93.123.85.205	7777	TCP
2024-10-28T09:16:13.834271+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38904	93.123.85.205	7777	TCP
2024-10-28T09:16:14.964234+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38906	93.123.85.205	7777	TCP
2024-10-28T09:16:16.236897+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38908	93.123.85.205	7777	TCP
2024-10-28T09:16:17.368375+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38910	93.123.85.205	7777	TCP
2024-10-28T09:16:18.614037+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38912	93.123.85.205	7777	TCP
2024-10-28T09:16:19.757843+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38914	93.123.85.205	7777	TCP
2024-10-28T09:16:20.973529+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38916	93.123.85.205	7777	TCP
2024-10-28T09:16:22.222766+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38918	93.123.85.205	7777	TCP
2024-10-28T09:16:23.382095+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38920	93.123.85.205	7777	TCP
2024-10-28T09:16:24.621305+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38922	93.123.85.205	7777	TCP
2024-10-28T09:16:25.767274+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38924	93.123.85.205	7777	TCP
2024-10-28T09:16:27.046411+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38926	93.123.85.205	7777	TCP
2024-10-28T09:16:28.161717+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38928	93.123.85.205	7777	TCP
2024-10-28T09:16:29.335292+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38930	93.123.85.205	7777	TCP
2024-10-28T09:16:30.534514+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38932	93.123.85.205	7777	TCP
2024-10-28T09:16:31.765877+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38934	93.123.85.205	7777	TCP
2024-10-28T09:16:32.924100+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38936	93.123.85.205	7777	TCP
2024-10-28T09:16:34.051167+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38938	93.123.85.205	7777	TCP
2024-10-28T09:16:35.165161+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38940	93.123.85.205	7777	TCP
2024-10-28T09:16:36.320426+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38942	93.123.85.205	7777	TCP
2024-10-28T09:16:37.448894+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38944	93.123.85.205	7777	TCP
2024-10-28T09:16:38.619429+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38946	93.123.85.205	7777	TCP
2024-10-28T09:16:39.733447+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38948	93.123.85.205	7777	TCP
2024-10-28T09:16:40.946179+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38950	93.123.85.205	7777	TCP
2024-10-28T09:16:42.166613+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38952	93.123.85.205	7777	TCP
2024-10-28T09:16:43.273059+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38954	93.123.85.205	7777	TCP
2024-10-28T09:16:44.466146+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38956	93.123.85.205	7777	TCP
2024-10-28T09:16:45.574346+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38958	93.123.85.205	7777	TCP
2024-10-28T09:16:46.725286+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38960	93.123.85.205	7777	TCP
2024-10-28T09:16:47.925468+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38962	93.123.85.205	7777	TCP
2024-10-28T09:16:49.064044+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38964	93.123.85.205	7777	TCP
2024-10-28T09:16:50.223328+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38966	93.123.85.205	7777	TCP
2024-10-28T09:16:51.435286+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38968	93.123.85.205	7777	TCP
2024-10-28T09:16:52.913076+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38970	93.123.85.205	7777	TCP
2024-10-28T09:16:54.053931+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38972	93.123.85.205	7777	TCP
2024-10-28T09:16:55.222975+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38974	93.123.85.205	7777	TCP
2024-10-28T09:16:56.439743+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38976	93.123.85.205	7777	TCP
2024-10-28T09:16:57.547209+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38978	93.123.85.205	7777	TCP
2024-10-28T09:16:58.724378+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38980	93.123.85.205	7777	TCP
2024-10-28T09:16:59.754736+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38982	93.123.85.205	7777	TCP
2024-10-28T09:17:01.030884+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38984	93.123.85.205	7777	TCP
2024-10-28T09:17:02.541620+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38986	93.123.85.205	7777	TCP
2024-10-28T09:17:03.668941+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38988	93.123.85.205	7777	TCP
2024-10-28T09:17:04.926634+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38990	93.123.85.205	7777	TCP
2024-10-28T09:17:06.050987+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38992	93.123.85.205	7777	TCP
2024-10-28T09:17:07.219783+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38994	93.123.85.205	7777	TCP
2024-10-28T09:17:08.433812+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38996	93.123.85.205	7777	TCP
2024-10-28T09:17:10.471306+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38998	93.123.85.205	7777	TCP
2024-10-28T09:17:11.665510+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	39000	93.123.85.205	7777	TCP
2024-10-28T09:17:12.772020+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	39002	93.123.85.205	7777	TCP
2024-10-28T09:17:13.971744+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	39004	93.123.85.205	7777	TCP
2024-10-28T09:17:15.223746+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	39006	93.123.85.205	7777	TCP
2024-10-28T09:17:16.427188+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	39008	93.123.85.205	7777	TCP
2024-10-28T09:17:17.622622+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	39010	93.123.85.205	7777	TCP
2024-10-28T09:17:18.823373+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	39012	93.123.85.205	7777	TCP
2024-10-28T09:17:19.913873+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	39014	93.123.85.205	7777	TCP
2024-10-28T09:17:21.021522+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	39016	93.123.85.205	7777	TCP
2024-10-28T09:17:22.174296+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	39018	93.123.85.205	7777	TCP
2024-10-28T09:17:23.919347+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	39020	93.123.85.205	7777	TCP
2024-10-28T09:17:25.122174+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	39022	93.123.85.205	7777	TCP
2024-10-28T09:17:26.328044+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	39024	93.123.85.205	7777	TCP
2024-10-28T09:17:27.424415+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	39026	93.123.85.205	7777	TCP
2024-10-28T09:17:28.532340+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	39028	93.123.85.205	7777	TCP
2024-10-28T09:17:29.729016+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	39030	93.123.85.205	7777	TCP
2024-10-28T09:17:30.867233+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	39032	93.123.85.205	7777	TCP
2024-10-28T09:17:31.970852+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	39034	93.123.85.205	7777	TCP
2024-10-28T09:17:33.366113+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	39036	93.123.85.205	7777	TCP
2024-10-28T09:17:34.646970+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	39038	93.123.85.205	7777	TCP
2024-10-28T09:17:35.819209+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	39040	93.123.85.205	7777	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 28, 2024 09:14:01.077008009 CET	38686	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:01.082546949 CET	7777	38686	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:01.082694054 CET	38686	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:01.083791018 CET	38686	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:01.089121103 CET	7777	38686	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:02.020611048 CET	7777	38686	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:02.020746946 CET	38686	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:02.312510967 CET	7777	38686	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:02.313711882 CET	38686	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:02.315412998 CET	38688	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:02.319360971 CET	7777	38686	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:02.321099043 CET	7777	38688	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:02.321162939 CET	38688	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:02.321198940 CET	38688	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:02.326535940 CET	7777	38688	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:03.250515938 CET	7777	38688	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:03.250750065 CET	38688	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:03.461683989 CET	7777	38688	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:03.461975098 CET	38688	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:03.462399960 CET	38690	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:03.467389107 CET	7777	38688	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:03.467720032 CET	7777	38690	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:03.467782021 CET	38690	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:03.467823029 CET	38690	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:03.473177910 CET	7777	38690	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:04.418936968 CET	7777	38690	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:04.419217110 CET	38690	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:04.630795956 CET	7777	38690	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:04.631063938 CET	38690	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:04.631628990 CET	38692	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:04.636384964 CET	7777	38690	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:04.636984110 CET	7777	38692	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:04.637032032 CET	38692	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:04.637070894 CET	38692	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:04.642384052 CET	7777	38692	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:05.625114918 CET	7777	38692	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:05.625389099 CET	38692	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:05.825433016 CET	7777	38692	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:05.825584888 CET	38692	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:05.826067924 CET	38694	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:05.831027031 CET	7777	38692	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:05.831466913 CET	7777	38694	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:05.831516981 CET	38694	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:05.831578016 CET	38694	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:05.836817026 CET	7777	38694	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:06.735496044 CET	7777	38694	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:06.735611916 CET	38694	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:06.965910912 CET	7777	38694	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:06.966105938 CET	38694	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:06.966717958 CET	38696	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:06.971465111 CET	7777	38694	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:06.972080946 CET	7777	38696	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:06.972227097 CET	38696	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:06.972278118 CET	38696	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:06.977655888 CET	7777	38696	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:07.929826021 CET	7777	38696	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:07.930232048 CET	38696	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:08.215275049 CET	7777	38696	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:08.215531111 CET	38696	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:08.216136932 CET	38698	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:08.220937014 CET	7777	38696	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:08.221689939 CET	7777	38698	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:08.221755028 CET	38698	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:08.221874952 CET	38698	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:08.227201939 CET	7777	38698	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:09.123764038 CET	7777	38698	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:09.124095917 CET	38698	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:09.332539082 CET	7777	38698	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:09.332710981 CET	38698	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:09.333144903 CET	38700	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:09.338284016 CET	7777	38698	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:09.338587046 CET	7777	38700	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:09.338654041 CET	38700	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:09.338706017 CET	38700	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:09.344285011 CET	7777	38700	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:10.335179090 CET	7777	38700	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:10.335587978 CET	38700	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:10.614002943 CET	7777	38700	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:10.614243984 CET	38700	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:10.614957094 CET	38702	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:10.619754076 CET	7777	38700	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:10.620385885 CET	7777	38702	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:10.620462894 CET	38702	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:10.620549917 CET	38702	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:10.626044035 CET	7777	38702	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:11.565829039 CET	7777	38702	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:11.566080093 CET	38702	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:11.815043926 CET	7777	38702	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:11.815372944 CET	38702	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:11.815773964 CET	38704	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:11.820755959 CET	7777	38702	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:11.821388006 CET	7777	38704	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:11.821475029 CET	38704	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:11.821521044 CET	38704	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:11.826886892 CET	7777	38704	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:12.737891912 CET	7777	38704	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:12.738260984 CET	38704	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:12.959501982 CET	7777	38704	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:12.960021019 CET	38704	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:12.961019039 CET	38706	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:12.965573072 CET	7777	38704	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:12.966541052 CET	7777	38706	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:12.966641903 CET	38706	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:12.966730118 CET	38706	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:12.972224951 CET	7777	38706	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:13.929939032 CET	7777	38706	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:13.930087090 CET	38706	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:14.208993912 CET	7777	38706	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:14.209316969 CET	38706	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:14.210361958 CET	38708	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:14.214740992 CET	7777	38706	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:14.215718985 CET	7777	38708	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:14.215792894 CET	38708	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:14.215902090 CET	38708	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:14.221157074 CET	7777	38708	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:15.237107992 CET	7777	38708	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:15.237236023 CET	38708	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:15.543051004 CET	7777	38708	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:15.543253899 CET	38708	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:15.543780088 CET	38710	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:15.548672915 CET	7777	38708	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:15.549073935 CET	7777	38710	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:15.549128056 CET	38710	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:15.549181938 CET	38710	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:15.554574966 CET	7777	38710	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:16.509387016 CET	7777	38710	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:16.509849072 CET	38710	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:16.716744900 CET	7777	38710	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:16.717263937 CET	38710	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:16.717914104 CET	38712	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:16.722949028 CET	7777	38710	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:16.723345995 CET	7777	38712	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:16.723484039 CET	38712	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:16.723556995 CET	38712	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:16.728892088 CET	7777	38712	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:17.631469965 CET	7777	38712	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:17.631745100 CET	38712	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:17.811494112 CET	7777	38712	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:17.812036037 CET	38712	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:17.813009977 CET	38714	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:17.818438053 CET	7777	38712	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:17.818479061 CET	7777	38714	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:17.818625927 CET	38714	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:17.818686008 CET	38714	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:17.824033976 CET	7777	38714	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:18.730098963 CET	7777	38714	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:18.730433941 CET	38714	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:18.942616940 CET	7777	38714	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:18.942935944 CET	38714	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:18.943691015 CET	38716	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:18.948477030 CET	7777	38714	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:18.949137926 CET	7777	38716	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:18.949250937 CET	38716	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:18.949250937 CET	38716	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:18.954767942 CET	7777	38716	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:19.918359041 CET	7777	38716	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:19.918632030 CET	38716	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:20.147106886 CET	7777	38716	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:20.151124954 CET	38716	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:20.151884079 CET	38718	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:20.156536102 CET	7777	38716	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:20.157300949 CET	7777	38718	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:20.157385111 CET	38718	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:20.157500982 CET	38718	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:20.162947893 CET	7777	38718	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:21.120277882 CET	7777	38718	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:21.120493889 CET	38718	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:21.317049026 CET	7777	38718	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:21.317280054 CET	38718	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:21.317735910 CET	38720	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:21.322539091 CET	7777	38718	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:21.322958946 CET	7777	38720	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:21.323081970 CET	38720	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:21.323103905 CET	38720	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:21.328371048 CET	7777	38720	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:22.451715946 CET	7777	38720	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:22.451841116 CET	7777	38720	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:22.451869965 CET	7777	38720	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:22.452020884 CET	38720	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:22.452020884 CET	38720	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:22.452020884 CET	38720	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:22.453574896 CET	38722	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:22.457680941 CET	7777	38720	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:22.458935976 CET	7777	38722	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:22.459002018 CET	38722	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:22.459095955 CET	38722	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:22.464446068 CET	7777	38722	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:23.446456909 CET	7777	38722	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:23.446813107 CET	38722	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:23.660092115 CET	7777	38722	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:23.660290003 CET	38722	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:23.661545038 CET	38724	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:23.665669918 CET	7777	38722	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:23.667007923 CET	7777	38724	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:23.667081118 CET	38724	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:23.667198896 CET	38724	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:23.672565937 CET	7777	38724	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:24.624736071 CET	7777	38724	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:24.624978065 CET	38724	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:24.856101990 CET	7777	38724	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:24.856266975 CET	38724	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:24.857189894 CET	38726	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:24.861752033 CET	7777	38724	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:24.862725973 CET	7777	38726	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:24.862777948 CET	38726	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:24.862837076 CET	38726	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:24.868519068 CET	7777	38726	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:25.815747976 CET	7777	38726	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:25.816057920 CET	38726	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:26.241437912 CET	7777	38726	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:26.241676092 CET	38726	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:26.242554903 CET	38728	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:26.243736982 CET	7777	38726	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:26.243793964 CET	38726	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:26.247095108 CET	7777	38726	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:26.247863054 CET	7777	38728	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:26.247962952 CET	38728	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:26.248044014 CET	38728	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:26.253334045 CET	7777	38728	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:27.154515028 CET	7777	38728	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:27.155005932 CET	38728	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:27.357755899 CET	7777	38728	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:27.358325005 CET	38728	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:27.359759092 CET	38730	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:27.363729000 CET	7777	38728	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:27.365207911 CET	7777	38730	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:27.365317106 CET	38730	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:27.365394115 CET	38730	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:27.370760918 CET	7777	38730	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:28.253294945 CET	7777	38730	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:28.253607035 CET	38730	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:28.445115089 CET	7777	38730	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:28.445723057 CET	38730	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:28.446955919 CET	38732	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:28.451564074 CET	7777	38730	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:28.452712059 CET	7777	38732	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:28.452799082 CET	38732	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:28.452910900 CET	38732	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:28.459042072 CET	7777	38732	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:29.409434080 CET	7777	38732	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:29.409719944 CET	38732	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:29.638926983 CET	7777	38732	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:29.639102936 CET	38732	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:29.639626980 CET	38734	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:29.644891977 CET	7777	38732	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:29.644987106 CET	7777	38734	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:29.645106077 CET	38734	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:29.645106077 CET	38734	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:29.650847912 CET	7777	38734	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:30.619422913 CET	7777	38734	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:30.619638920 CET	38734	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:30.849709988 CET	7777	38734	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:30.850050926 CET	38734	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:30.851145983 CET	38736	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:30.855534077 CET	7777	38734	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:30.856586933 CET	7777	38736	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:30.856719971 CET	38736	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:30.856828928 CET	38736	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:30.862166882 CET	7777	38736	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:31.819015980 CET	7777	38736	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:31.819190979 CET	38736	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:32.027525902 CET	7777	38736	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:32.027810097 CET	38736	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:32.028647900 CET	38738	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:32.033557892 CET	7777	38736	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:32.034512997 CET	7777	38738	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:32.034578085 CET	38738	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:32.034703970 CET	38738	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:32.040060997 CET	7777	38738	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:32.952590942 CET	7777	38738	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:32.952862978 CET	38738	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:33.217361927 CET	7777	38738	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:33.217662096 CET	38738	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:33.218525887 CET	38740	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:33.223021030 CET	7777	38738	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:33.223927021 CET	7777	38740	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:33.224018097 CET	38740	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:33.224112988 CET	38740	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:33.229459047 CET	7777	38740	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:34.148327112 CET	7777	38740	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:34.148679972 CET	38740	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:34.363687038 CET	7777	38740	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:34.364097118 CET	38740	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:34.366054058 CET	38742	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:34.369887114 CET	7777	38740	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:34.371634960 CET	7777	38742	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:34.371717930 CET	38742	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:34.371823072 CET	38742	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:34.377336979 CET	7777	38742	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:35.325814009 CET	7777	38742	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:35.326220036 CET	38742	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:35.537555933 CET	7777	38742	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:35.537780046 CET	38742	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:35.538844109 CET	38744	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:35.543100119 CET	7777	38742	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:35.544204950 CET	7777	38744	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:35.544348955 CET	38744	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:35.544434071 CET	38744	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:35.549874067 CET	7777	38744	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:36.511755943 CET	7777	38744	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:36.512206078 CET	38744	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:36.725349903 CET	7777	38744	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:36.725903034 CET	38744	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:36.727581978 CET	38746	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:36.731551886 CET	7777	38744	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:36.733360052 CET	7777	38746	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:36.733601093 CET	38746	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:36.733685017 CET	38746	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:36.739213943 CET	7777	38746	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:37.715430021 CET	7777	38746	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:37.715764999 CET	38746	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:37.942338943 CET	7777	38746	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:37.942848921 CET	38746	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:37.945116997 CET	38748	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:37.948282957 CET	7777	38746	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:37.950520992 CET	7777	38748	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:37.950644970 CET	38748	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:37.950787067 CET	38748	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:37.956180096 CET	7777	38748	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:38.918725967 CET	7777	38748	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:38.919045925 CET	38748	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:39.127587080 CET	7777	38748	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:39.127953053 CET	38748	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:39.128961086 CET	38750	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:39.135874033 CET	7777	38748	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:39.135888100 CET	7777	38750	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:39.136097908 CET	38750	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:39.136223078 CET	38750	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:39.141603947 CET	7777	38750	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:40.238574982 CET	7777	38750	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:40.238740921 CET	38750	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:40.347779989 CET	7777	38750	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:40.348150015 CET	38750	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:40.350171089 CET	38752	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:40.354063034 CET	7777	38750	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:40.355990887 CET	7777	38752	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:40.356089115 CET	38752	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:40.356353998 CET	38752	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:40.361731052 CET	7777	38752	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:41.249032021 CET	7777	38752	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:41.249455929 CET	38752	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:41.520543098 CET	7777	38752	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:41.521014929 CET	38752	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:41.522856951 CET	38754	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:41.526784897 CET	7777	38752	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:41.528353930 CET	7777	38754	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:41.528578043 CET	38754	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:41.528723955 CET	38754	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:41.534096003 CET	7777	38754	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:42.429227114 CET	7777	38754	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:42.429405928 CET	38754	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:42.652971029 CET	7777	38754	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:42.653388977 CET	38754	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:42.655544043 CET	38756	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:42.658730984 CET	7777	38754	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:42.660938978 CET	7777	38756	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:42.661012888 CET	38756	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:42.661287069 CET	38756	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:42.667016983 CET	7777	38756	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:43.628187895 CET	7777	38756	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:43.628654957 CET	38756	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:43.828870058 CET	7777	38756	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:43.829305887 CET	38756	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:43.830225945 CET	38758	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:43.834739923 CET	7777	38756	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:43.835767031 CET	7777	38758	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:43.835865974 CET	38758	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:43.835947037 CET	38758	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:43.841434956 CET	7777	38758	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:45.286007881 CET	7777	38758	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:45.286391020 CET	38758	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:45.287174940 CET	7777	38758	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:45.287374973 CET	7777	38758	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:45.287448883 CET	38758	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:45.287492990 CET	38758	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:45.288352966 CET	7777	38758	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:45.288420916 CET	38758	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:45.288661957 CET	38760	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:45.498513937 CET	38758	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:45.513632059 CET	7777	38758	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:45.513777971 CET	7777	38760	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:45.513956070 CET	7777	38758	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:45.514127970 CET	38760	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:45.514358044 CET	38758	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:45.514362097 CET	38760	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:45.520358086 CET	7777	38760	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:46.351562977 CET	7777	38760	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:46.351970911 CET	38760	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:46.624804974 CET	7777	38760	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:46.625264883 CET	38760	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:46.626390934 CET	38762	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:46.630681038 CET	7777	38760	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:46.631750107 CET	7777	38762	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:46.631989956 CET	38762	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:46.632138968 CET	38762	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:46.637836933 CET	7777	38762	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:47.527009964 CET	7777	38762	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:47.527389050 CET	38762	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:47.747350931 CET	7777	38762	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:47.747652054 CET	38762	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:47.749089956 CET	38764	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:47.753428936 CET	7777	38762	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:47.755141973 CET	7777	38764	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:47.755418062 CET	38764	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:47.755561113 CET	38764	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:47.761423111 CET	7777	38764	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:48.745779991 CET	7777	38764	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:48.746160030 CET	38764	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:49.016185045 CET	7777	38764	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:49.016630888 CET	38764	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:49.018711090 CET	38766	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:49.022094011 CET	7777	38764	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:49.024291992 CET	7777	38766	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:49.024358988 CET	38766	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:49.024632931 CET	38766	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:49.030308962 CET	7777	38766	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:49.931294918 CET	7777	38766	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:49.931781054 CET	38766	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:50.220448971 CET	7777	38766	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:50.221086025 CET	38766	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:50.223265886 CET	38768	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:50.226392031 CET	7777	38766	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:50.228573084 CET	7777	38768	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:50.228787899 CET	38768	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:50.229027033 CET	38768	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:50.234316111 CET	7777	38768	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:51.159964085 CET	7777	38768	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:51.160104036 CET	38768	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:51.357060909 CET	7777	38768	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:51.357255936 CET	38768	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:51.358441114 CET	38770	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:51.362665892 CET	7777	38768	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:51.363810062 CET	7777	38770	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:51.363918066 CET	38770	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:51.364002943 CET	38770	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:51.369296074 CET	7777	38770	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:52.257797003 CET	7777	38770	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:52.258160114 CET	38770	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:52.518301010 CET	7777	38770	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:52.518708944 CET	38770	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:52.521119118 CET	38772	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:52.524139881 CET	7777	38770	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:52.526535034 CET	7777	38772	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:52.526808023 CET	38772	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:52.526896000 CET	38772	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:52.532190084 CET	7777	38772	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:53.518904924 CET	7777	38772	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:53.519299030 CET	38772	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:53.757713079 CET	7777	38772	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:53.758604050 CET	38772	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:53.759437084 CET	38774	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:53.764261007 CET	7777	38772	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:53.765274048 CET	7777	38774	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:53.765568018 CET	38774	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:53.765635014 CET	38774	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:53.771478891 CET	7777	38774	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:54.725151062 CET	7777	38774	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:54.725480080 CET	38774	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:54.939965963 CET	7777	38774	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:54.940546989 CET	38774	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:54.941808939 CET	38776	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:54.946435928 CET	7777	38774	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:54.947563887 CET	7777	38776	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:54.947957993 CET	38776	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:54.947957993 CET	38776	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:54.953840017 CET	7777	38776	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:55.908621073 CET	7777	38776	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:55.909077883 CET	38776	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:56.135128975 CET	7777	38776	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:56.135814905 CET	38776	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:56.137195110 CET	38778	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:56.141856909 CET	7777	38776	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:56.142884016 CET	7777	38778	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:56.142982006 CET	38778	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:56.143187046 CET	38778	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:56.148945093 CET	7777	38778	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:57.111557007 CET	7777	38778	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:57.111855984 CET	38778	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:57.324198961 CET	7777	38778	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:57.324717999 CET	38778	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:57.326106071 CET	38780	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:57.330132961 CET	7777	38778	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:57.331367970 CET	7777	38780	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:57.331506968 CET	38780	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:57.331679106 CET	38780	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:57.336956978 CET	7777	38780	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:58.257924080 CET	7777	38780	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:58.258301973 CET	38780	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:58.452956915 CET	7777	38780	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:58.453665972 CET	38780	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:58.455835104 CET	38782	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:58.459594965 CET	7777	38780	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:58.461627960 CET	7777	38782	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:58.461990118 CET	38782	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:58.462245941 CET	38782	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:58.467808962 CET	7777	38782	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:59.360213041 CET	7777	38782	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:59.360621929 CET	38782	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:59.543981075 CET	7777	38782	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:59.544186115 CET	38782	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:59.545238018 CET	38784	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:59.549617052 CET	7777	38782	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:59.550620079 CET	7777	38784	93.123.85.205	192.168.2.15
Oct 28, 2024 09:14:59.550689936 CET	38784	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:59.550733089 CET	38784	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:14:59.556093931 CET	7777	38784	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:00.436234951 CET	7777	38784	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:00.436536074 CET	38784	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:00.654553890 CET	7777	38784	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:00.654973030 CET	38784	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:00.656136990 CET	38786	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:00.660393953 CET	7777	38784	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:00.661531925 CET	7777	38786	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:00.661616087 CET	38786	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:00.661708117 CET	38786	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:00.666997910 CET	7777	38786	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:01.666038990 CET	7777	38786	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:01.666651011 CET	38786	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:01.866203070 CET	7777	38786	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:01.866449118 CET	38786	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:01.867491961 CET	38788	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:01.872023106 CET	7777	38786	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:01.872997046 CET	7777	38788	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:01.873121023 CET	38788	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:01.873202085 CET	38788	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:01.878640890 CET	7777	38788	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:02.818464041 CET	7777	38788	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:02.818981886 CET	38788	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:03.084757090 CET	7777	38788	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:03.085222960 CET	38788	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:03.086905956 CET	38790	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:03.093137026 CET	7777	38788	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:03.094191074 CET	7777	38790	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:03.094314098 CET	38790	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:03.094557047 CET	38790	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:03.101926088 CET	7777	38790	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:04.416301012 CET	7777	38790	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:04.416656017 CET	38790	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:04.640218973 CET	7777	38790	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:04.640939951 CET	38790	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:04.642961979 CET	38792	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:04.646436930 CET	7777	38790	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:04.648958921 CET	7777	38792	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:04.649286985 CET	38792	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:04.649316072 CET	38792	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:04.655056953 CET	7777	38792	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:05.560144901 CET	7777	38792	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:05.560575008 CET	38792	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:05.752321959 CET	7777	38792	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:05.752715111 CET	38792	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:05.754703999 CET	38794	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:05.758130074 CET	7777	38792	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:05.760328054 CET	7777	38794	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:05.760472059 CET	38794	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:05.760767937 CET	38794	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:05.766290903 CET	7777	38794	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:06.744281054 CET	7777	38794	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:06.744604111 CET	38794	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:07.027122974 CET	7777	38794	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:07.027550936 CET	38794	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:07.029128075 CET	38796	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:07.033080101 CET	7777	38794	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:07.034737110 CET	7777	38796	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:07.034929037 CET	38796	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:07.035063028 CET	38796	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:07.040666103 CET	7777	38796	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:08.273395061 CET	7777	38796	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:08.273488998 CET	7777	38796	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:08.273561001 CET	7777	38796	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:08.274009943 CET	38796	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:08.274009943 CET	38796	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:08.274009943 CET	38796	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:08.275439024 CET	38798	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:08.284908056 CET	7777	38796	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:08.284965038 CET	7777	38798	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:08.285470963 CET	38798	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:08.285579920 CET	38798	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:08.291132927 CET	7777	38798	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:09.236745119 CET	7777	38798	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:09.237000942 CET	38798	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:09.438632011 CET	7777	38798	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:09.439361095 CET	38798	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:09.440112114 CET	38800	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:09.444818020 CET	7777	38798	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:09.445477009 CET	7777	38800	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:09.445638895 CET	38800	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:09.445715904 CET	38800	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:09.451054096 CET	7777	38800	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:10.413664103 CET	7777	38800	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:10.414096117 CET	38800	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:10.624692917 CET	7777	38800	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:10.625169992 CET	38800	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:10.627120972 CET	38802	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:10.630635977 CET	7777	38800	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:10.632654905 CET	7777	38802	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:10.632960081 CET	38802	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:10.633032084 CET	38802	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:10.638489962 CET	7777	38802	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:11.558741093 CET	7777	38802	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:11.559150934 CET	38802	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:11.755309105 CET	7777	38802	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:11.755953074 CET	38802	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:11.758219004 CET	38804	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:11.761459112 CET	7777	38802	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:11.763860941 CET	7777	38804	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:11.764019966 CET	38804	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:11.764040947 CET	38804	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:11.769445896 CET	7777	38804	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:12.711601973 CET	7777	38804	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:12.711966038 CET	38804	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:12.915306091 CET	7777	38804	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:12.916008949 CET	38804	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:12.918077946 CET	38806	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:12.921715021 CET	7777	38804	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:12.923845053 CET	7777	38806	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:12.924076080 CET	38806	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:12.924403906 CET	38806	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:12.929790020 CET	7777	38806	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:13.924710989 CET	7777	38806	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:13.925122023 CET	38806	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:14.152662992 CET	7777	38806	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:14.153321981 CET	38806	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:14.155646086 CET	38808	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:14.159173012 CET	7777	38806	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:14.161062002 CET	7777	38808	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:14.161148071 CET	38808	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:14.161243916 CET	38808	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:14.167051077 CET	7777	38808	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:15.134411097 CET	7777	38808	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:15.134865999 CET	38808	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:15.413135052 CET	7777	38808	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:15.413619041 CET	38808	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:15.414915085 CET	38810	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:15.419116974 CET	7777	38808	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:15.420304060 CET	7777	38810	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:15.420523882 CET	38810	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:15.420741081 CET	38810	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:15.426115036 CET	7777	38810	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:16.423849106 CET	7777	38810	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:16.424304008 CET	38810	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:16.665410042 CET	7777	38810	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:16.665908098 CET	38810	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:16.668138027 CET	38812	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:16.672408104 CET	7777	38810	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:16.673587084 CET	7777	38812	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:16.673818111 CET	38812	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:16.673907995 CET	38812	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:16.679246902 CET	7777	38812	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:17.630705118 CET	7777	38812	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:17.631076097 CET	38812	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:17.855947971 CET	7777	38812	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:17.856544018 CET	38812	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:17.858416080 CET	38814	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:17.862627983 CET	7777	38812	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:17.864351988 CET	7777	38814	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:17.864587069 CET	38814	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:17.864859104 CET	38814	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:17.870537996 CET	7777	38814	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:18.822833061 CET	7777	38814	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:18.823304892 CET	38814	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:19.018621922 CET	7777	38814	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:19.019211054 CET	38814	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:19.020648003 CET	38816	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:19.024650097 CET	7777	38814	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:19.026020050 CET	7777	38816	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:19.026232958 CET	38816	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:19.026587009 CET	38816	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:19.031984091 CET	7777	38816	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:20.030798912 CET	7777	38816	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:20.031079054 CET	38816	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:20.237786055 CET	7777	38816	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:20.238403082 CET	38816	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:20.241097927 CET	38818	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:20.244291067 CET	7777	38816	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:20.246980906 CET	7777	38818	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:20.247153044 CET	38818	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:20.247427940 CET	38818	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:20.252918005 CET	7777	38818	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:21.222750902 CET	7777	38818	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:21.222912073 CET	38818	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:21.517029047 CET	7777	38818	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:21.517693996 CET	38818	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:21.519603968 CET	38820	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:21.523519993 CET	7777	38818	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:21.525631905 CET	7777	38820	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:21.525888920 CET	38820	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:21.526015997 CET	38820	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:21.531510115 CET	7777	38820	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:22.432066917 CET	7777	38820	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:22.432399988 CET	38820	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:22.650573015 CET	7777	38820	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:22.651257992 CET	38820	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:22.653455019 CET	38822	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:22.658443928 CET	7777	38820	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:22.660535097 CET	7777	38822	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:22.660897017 CET	38822	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:22.661061049 CET	38822	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:22.666709900 CET	7777	38822	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:25.648336887 CET	7777	38822	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:25.648729086 CET	38822	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:25.937659979 CET	7777	38822	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:25.938165903 CET	38822	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:25.939466953 CET	38824	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:25.943561077 CET	7777	38822	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:25.944907904 CET	7777	38824	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:25.945143938 CET	38824	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:25.945513964 CET	38824	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:25.950880051 CET	7777	38824	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:26.841602087 CET	7777	38824	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:26.842036009 CET	38824	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:27.113951921 CET	7777	38824	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:27.114526033 CET	38824	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:27.116777897 CET	38826	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:27.120527029 CET	7777	38824	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:27.122165918 CET	7777	38826	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:27.122266054 CET	38826	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:27.122627974 CET	38826	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:27.128385067 CET	7777	38826	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:28.051455021 CET	7777	38826	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:28.051821947 CET	38826	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:28.319133997 CET	7777	38826	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:28.319664001 CET	38826	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:28.321429968 CET	38828	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:28.325105906 CET	7777	38826	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:28.326893091 CET	7777	38828	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:28.327109098 CET	38828	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:28.327348948 CET	38828	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:28.332679033 CET	7777	38828	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:29.253879070 CET	7777	38828	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:29.254190922 CET	38828	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:29.516171932 CET	7777	38828	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:29.516572952 CET	38828	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:29.518023968 CET	38830	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:29.522083998 CET	7777	38828	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:29.523330927 CET	7777	38830	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:29.523597002 CET	38830	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:29.523672104 CET	38830	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:29.529263020 CET	7777	38830	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:30.444777966 CET	7777	38830	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:30.445103884 CET	38830	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:30.711493015 CET	7777	38830	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:30.711935997 CET	38830	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:30.714307070 CET	38832	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:30.717461109 CET	7777	38830	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:30.719681025 CET	7777	38832	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:30.719969034 CET	38832	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:30.720062017 CET	38832	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:30.725418091 CET	7777	38832	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:31.555340052 CET	7777	38832	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:31.555707932 CET	38832	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:31.750336885 CET	7777	38832	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:31.750940084 CET	38832	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:31.752741098 CET	38834	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:31.756345034 CET	7777	38832	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:31.758290052 CET	7777	38834	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:31.758469105 CET	38834	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:31.758550882 CET	38834	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:31.763927937 CET	7777	38834	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:32.739348888 CET	7777	38834	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:32.739773989 CET	38834	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:32.961529970 CET	7777	38834	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:32.962223053 CET	38834	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:32.963751078 CET	38836	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:32.967741013 CET	7777	38834	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:32.969115019 CET	7777	38836	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:32.969415903 CET	38836	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:32.969636917 CET	38836	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:32.974939108 CET	7777	38836	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:33.917253017 CET	7777	38836	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:33.917941093 CET	38836	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:34.149014950 CET	7777	38836	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:34.149548054 CET	38836	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:34.150449991 CET	38838	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:34.155004978 CET	7777	38836	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:34.155747890 CET	7777	38838	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:34.155961990 CET	38838	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:34.156188011 CET	38838	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:34.161753893 CET	7777	38838	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:35.058234930 CET	7777	38838	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:35.058662891 CET	38838	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:35.252116919 CET	7777	38838	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:35.252599001 CET	38838	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:35.254342079 CET	38840	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:35.257915020 CET	7777	38838	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:35.259577036 CET	7777	38840	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:35.259771109 CET	38840	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:35.260085106 CET	38840	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:35.265547991 CET	7777	38840	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:36.154203892 CET	7777	38840	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:36.154592991 CET	38840	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:36.423409939 CET	7777	38840	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:36.423755884 CET	38840	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:36.425388098 CET	38842	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:36.429164886 CET	7777	38840	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:36.430756092 CET	7777	38842	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:36.430874109 CET	38842	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:36.431229115 CET	38842	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:36.436471939 CET	7777	38842	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:37.419996977 CET	7777	38842	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:37.420531988 CET	38842	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:37.618402004 CET	7777	38842	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:37.618727922 CET	38842	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:37.619929075 CET	38844	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:37.624190092 CET	7777	38842	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:37.625591993 CET	7777	38844	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:37.625653982 CET	38844	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:37.626000881 CET	38844	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:37.631464958 CET	7777	38844	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:38.531955957 CET	7777	38844	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:38.532373905 CET	38844	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:38.761323929 CET	7777	38844	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:38.761817932 CET	38844	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:38.763447046 CET	38846	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:38.767222881 CET	7777	38844	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:38.769049883 CET	7777	38846	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:38.769272089 CET	38846	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:38.769364119 CET	38846	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:38.774697065 CET	7777	38846	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:39.825762987 CET	7777	38846	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:39.826179981 CET	38846	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:40.058748007 CET	7777	38846	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:40.059242964 CET	38846	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:40.060383081 CET	38848	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:40.064941883 CET	7777	38846	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:40.065973043 CET	7777	38848	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:40.066219091 CET	38848	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:40.066462994 CET	38848	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:40.071989059 CET	7777	38848	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:41.026325941 CET	7777	38848	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:41.026731014 CET	38848	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:41.311908007 CET	7777	38848	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:41.312535048 CET	38848	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:41.314023972 CET	38850	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:41.318093061 CET	7777	38848	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:41.319392920 CET	7777	38850	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:41.319628954 CET	38850	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:41.319798946 CET	38850	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:41.325232029 CET	7777	38850	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:42.218626976 CET	7777	38850	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:42.219002962 CET	38850	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:42.419626951 CET	7777	38850	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:42.420253992 CET	38850	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:42.422008991 CET	38852	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:42.425920963 CET	7777	38850	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:42.427541971 CET	7777	38852	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:42.427778959 CET	38852	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:42.428050041 CET	38852	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:42.433536053 CET	7777	38852	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:43.423491955 CET	7777	38852	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:43.423872948 CET	38852	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:43.657241106 CET	7777	38852	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:43.657603979 CET	38852	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:43.658668041 CET	38854	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:43.665174961 CET	7777	38852	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:43.666098118 CET	7777	38854	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:43.666479111 CET	38854	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:43.666479111 CET	38854	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:43.671833038 CET	7777	38854	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:44.655761003 CET	7777	38854	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:44.656109095 CET	38854	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:44.933082104 CET	7777	38854	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:44.933372021 CET	38854	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:44.934906960 CET	38856	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:44.938946009 CET	7777	38854	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:44.940315008 CET	7777	38856	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:44.940530062 CET	38856	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:44.940824032 CET	38856	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:44.946270943 CET	7777	38856	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:45.925256968 CET	7777	38856	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:45.925641060 CET	38856	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:46.393937111 CET	7777	38856	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:46.394332886 CET	38856	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:46.395524979 CET	38858	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:46.395840883 CET	7777	38856	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:46.395915985 CET	38856	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:46.399759054 CET	7777	38856	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:46.401020050 CET	7777	38858	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:46.401281118 CET	38858	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:46.401424885 CET	38858	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:46.406729937 CET	7777	38858	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:47.417728901 CET	7777	38858	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:47.418056965 CET	38858	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:47.622082949 CET	7777	38858	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:47.622613907 CET	38858	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:47.623600006 CET	38860	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:47.627964973 CET	7777	38858	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:47.629046917 CET	7777	38860	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:47.629256010 CET	38860	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:47.629407883 CET	38860	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:47.634716988 CET	7777	38860	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:48.607451916 CET	7777	38860	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:48.607718945 CET	38860	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:48.828207970 CET	7777	38860	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:48.828490019 CET	38860	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:48.829511881 CET	38862	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:48.833997965 CET	7777	38860	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:48.835002899 CET	7777	38862	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:48.835103989 CET	38862	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:48.835160971 CET	38862	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:48.840684891 CET	7777	38862	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:49.737637043 CET	7777	38862	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:49.737903118 CET	38862	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:50.013070107 CET	7777	38862	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:50.013268948 CET	38862	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:50.014367104 CET	38864	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:50.018639088 CET	7777	38862	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:50.019870996 CET	7777	38864	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:50.020021915 CET	38864	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:50.020257950 CET	38864	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:50.025937080 CET	7777	38864	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:50.948178053 CET	7777	38864	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:50.948546886 CET	38864	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:51.226118088 CET	7777	38864	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:51.226991892 CET	38864	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:51.228344917 CET	38866	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:51.232700109 CET	7777	38864	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:51.234052896 CET	7777	38866	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:51.234345913 CET	38866	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:51.234601974 CET	38866	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:51.240551949 CET	7777	38866	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:52.222877979 CET	7777	38866	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:52.223253965 CET	38866	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:52.435148001 CET	7777	38866	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:52.435801029 CET	38866	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:52.437292099 CET	38868	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:52.441576004 CET	7777	38866	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:52.442759037 CET	7777	38868	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:52.442934036 CET	38868	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:52.443095922 CET	38868	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:52.448362112 CET	7777	38868	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:53.419478893 CET	7777	38868	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:53.419893980 CET	38868	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:53.622155905 CET	7777	38868	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:53.622556925 CET	38868	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:53.623831034 CET	38870	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:53.627939939 CET	7777	38868	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:53.629802942 CET	7777	38870	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:53.629920959 CET	38870	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:53.630073071 CET	38870	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:53.635349989 CET	7777	38870	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:54.537729979 CET	7777	38870	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:54.538203955 CET	38870	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:54.746469975 CET	7777	38870	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:54.746951103 CET	38870	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:54.748599052 CET	38872	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:54.752363920 CET	7777	38870	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:54.753959894 CET	7777	38872	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:54.754167080 CET	38872	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:54.754669905 CET	38872	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:54.760184050 CET	7777	38872	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:55.736453056 CET	7777	38872	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:55.736876965 CET	38872	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:56.023811102 CET	7777	38872	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:56.024566889 CET	38872	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:56.025468111 CET	38874	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:56.030117989 CET	7777	38872	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:56.030883074 CET	7777	38874	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:56.031039953 CET	38874	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:56.031249046 CET	38874	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:56.036592960 CET	7777	38874	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:56.954508066 CET	7777	38874	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:56.954776049 CET	38874	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:57.217587948 CET	7777	38874	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:57.218147993 CET	38874	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:57.220021009 CET	38876	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:57.223515034 CET	7777	38874	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:57.225337982 CET	7777	38876	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:57.225588083 CET	38876	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:57.225733995 CET	38876	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:57.231326103 CET	7777	38876	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:58.152435064 CET	7777	38876	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:58.152895927 CET	38876	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:58.347975969 CET	7777	38876	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:58.348452091 CET	38876	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:58.350331068 CET	38878	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:58.353951931 CET	7777	38876	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:58.355882883 CET	7777	38878	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:58.356127977 CET	38878	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:58.356446981 CET	38878	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:58.361969948 CET	7777	38878	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:59.252403975 CET	7777	38878	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:59.252774954 CET	38878	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:59.517596006 CET	7777	38878	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:59.518228054 CET	38878	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:59.520036936 CET	38880	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:59.524136066 CET	7777	38878	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:59.525546074 CET	7777	38880	93.123.85.205	192.168.2.15
Oct 28, 2024 09:15:59.525719881 CET	38880	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:59.525860071 CET	38880	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:15:59.531400919 CET	7777	38880	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:00.433681965 CET	7777	38880	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:00.434123039 CET	38880	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:00.720910072 CET	7777	38880	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:00.721431971 CET	38880	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:00.723174095 CET	38882	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:00.727047920 CET	7777	38880	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:00.728852987 CET	7777	38882	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:00.729074955 CET	38882	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:00.729351044 CET	38882	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:00.735023975 CET	7777	38882	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:01.844836950 CET	7777	38882	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:01.845369101 CET	38882	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:01.918431997 CET	7777	38882	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:01.918937922 CET	38882	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:01.920232058 CET	38884	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:01.924726009 CET	7777	38882	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:01.926106930 CET	7777	38884	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:01.926363945 CET	38884	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:01.926721096 CET	38884	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:01.932231903 CET	7777	38884	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:02.749586105 CET	7777	38884	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:02.750144005 CET	38884	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:03.033899069 CET	7777	38884	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:03.034640074 CET	38884	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:03.036025047 CET	38886	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:03.040039062 CET	7777	38884	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:03.041424036 CET	7777	38886	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:03.041667938 CET	38886	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:03.041868925 CET	38886	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:03.047187090 CET	7777	38886	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:04.006329060 CET	7777	38886	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:04.006896019 CET	38886	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:04.235392094 CET	7777	38886	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:04.235917091 CET	38886	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:04.237021923 CET	38888	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:04.241394997 CET	7777	38886	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:04.242611885 CET	7777	38888	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:04.242809057 CET	38888	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:04.242889881 CET	38888	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:04.248366117 CET	7777	38888	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:05.226468086 CET	7777	38888	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:05.227128029 CET	38888	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:05.450978994 CET	7777	38888	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:05.451546907 CET	38888	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:05.453187943 CET	38890	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:05.457371950 CET	7777	38888	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:05.458641052 CET	7777	38890	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:05.458997965 CET	38890	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:05.459089041 CET	38890	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:05.464489937 CET	7777	38890	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:06.438954115 CET	7777	38890	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:06.439234972 CET	38890	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:06.713948011 CET	7777	38890	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:06.714620113 CET	38890	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:06.715847969 CET	38892	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:06.720455885 CET	7777	38890	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:06.721282959 CET	7777	38892	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:06.721539974 CET	38892	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:06.721824884 CET	38892	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:06.727500916 CET	7777	38892	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:07.643938065 CET	7777	38892	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:07.644383907 CET	38892	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:07.850507975 CET	7777	38892	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:07.851176023 CET	38892	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:07.852349043 CET	38894	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:07.856914043 CET	7777	38892	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:07.857840061 CET	7777	38894	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:07.858067036 CET	38894	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:07.858309031 CET	38894	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:07.864113092 CET	7777	38894	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:08.821753025 CET	7777	38894	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:08.822168112 CET	38894	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:09.045427084 CET	7777	38894	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:09.045962095 CET	38894	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:09.047569990 CET	38896	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:09.051774025 CET	7777	38894	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:09.053258896 CET	7777	38896	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:09.053488970 CET	38896	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:09.053586006 CET	38896	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:09.059135914 CET	7777	38896	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:09.941698074 CET	7777	38896	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:09.942167044 CET	38896	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:10.158052921 CET	7777	38896	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:10.158546925 CET	38896	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:10.160044909 CET	38898	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:10.164016008 CET	7777	38896	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:10.165508986 CET	7777	38898	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:10.165725946 CET	38898	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:10.165952921 CET	38898	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:10.171520948 CET	7777	38898	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:11.145610094 CET	7777	38898	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:11.146061897 CET	38898	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:11.522835016 CET	7777	38898	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:11.523335934 CET	38898	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:11.524323940 CET	38900	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:11.529314041 CET	7777	38898	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:11.530072927 CET	7777	38900	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:11.530339003 CET	38900	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:11.530762911 CET	38900	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:11.536439896 CET	7777	38900	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:12.439874887 CET	7777	38900	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:12.440340042 CET	38900	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:12.720220089 CET	7777	38900	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:12.720854998 CET	38900	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:12.722186089 CET	38902	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:12.726170063 CET	7777	38900	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:12.727516890 CET	7777	38902	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:12.727650881 CET	38902	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:12.728086948 CET	38902	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:12.733346939 CET	7777	38902	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:13.622395039 CET	7777	38902	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:13.622766972 CET	38902	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:13.826353073 CET	7777	38902	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:13.826941013 CET	38902	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:13.828430891 CET	38904	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:13.832608938 CET	7777	38902	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:13.833901882 CET	7777	38904	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:13.834156036 CET	38904	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:13.834270954 CET	38904	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:13.839634895 CET	7777	38904	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:14.727344990 CET	7777	38904	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:14.727808952 CET	38904	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:14.955773115 CET	7777	38904	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:14.956254959 CET	38904	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:14.958066940 CET	38906	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:14.962353945 CET	7777	38904	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:14.963841915 CET	7777	38906	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:14.963967085 CET	38906	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:14.964234114 CET	38906	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:14.969715118 CET	7777	38906	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:15.944622040 CET	7777	38906	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:15.945091963 CET	38906	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:16.228512049 CET	7777	38906	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:16.228965044 CET	38906	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:16.230720997 CET	38908	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:16.234735966 CET	7777	38906	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:16.236419916 CET	7777	38908	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:16.236605883 CET	38908	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:16.236896992 CET	38908	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:16.242465019 CET	7777	38908	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:17.161156893 CET	7777	38908	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:17.161626101 CET	38908	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:17.359435081 CET	7777	38908	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:17.359941006 CET	38908	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:17.362114906 CET	38910	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:17.366030931 CET	7777	38908	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:17.368005037 CET	7777	38910	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:17.368127108 CET	38910	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:17.368375063 CET	38910	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:17.373936892 CET	7777	38910	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:18.463711023 CET	7777	38910	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:18.464078903 CET	38910	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:18.605345964 CET	7777	38910	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:18.605791092 CET	38910	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:18.607574940 CET	38912	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:18.611742020 CET	7777	38910	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:18.613481045 CET	7777	38912	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:18.613795042 CET	38912	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:18.614037037 CET	38912	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:18.619803905 CET	7777	38912	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:19.535309076 CET	7777	38912	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:19.535732985 CET	38912	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:19.749903917 CET	7777	38912	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:19.750340939 CET	38912	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:19.751759052 CET	38914	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:19.756201982 CET	7777	38912	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:19.757453918 CET	7777	38914	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:19.757579088 CET	38914	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:19.757843018 CET	38914	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:19.763509989 CET	7777	38914	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:20.754599094 CET	7777	38914	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:20.754859924 CET	38914	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:20.965023041 CET	7777	38914	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:20.965476990 CET	38914	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:20.966816902 CET	38916	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:20.970983028 CET	7777	38914	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:20.973114014 CET	7777	38916	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:20.973427057 CET	38916	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:20.973529100 CET	38916	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:20.980118036 CET	7777	38916	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:21.926487923 CET	7777	38916	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:21.926601887 CET	38916	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:22.215147018 CET	7777	38916	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:22.215574980 CET	38916	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:22.216984987 CET	38918	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:22.221081018 CET	7777	38916	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:22.222490072 CET	7777	38918	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:22.222683907 CET	38918	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:22.222765923 CET	38918	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:22.228674889 CET	7777	38918	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:23.125472069 CET	7777	38918	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:23.126023054 CET	38918	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:23.373512030 CET	7777	38918	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:23.373908997 CET	38918	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:23.375791073 CET	38920	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:23.379792929 CET	7777	38918	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:23.381406069 CET	7777	38920	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:23.381680012 CET	38920	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:23.382095098 CET	38920	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:23.387490988 CET	7777	38920	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:24.330403090 CET	7777	38920	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:24.330887079 CET	38920	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:24.613358021 CET	7777	38920	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:24.613826990 CET	38920	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:24.615694046 CET	38922	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:24.619440079 CET	7777	38920	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:24.621057987 CET	7777	38922	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:24.621185064 CET	38922	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:24.621304989 CET	38922	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:24.626590014 CET	7777	38922	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:25.543780088 CET	7777	38922	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:25.544323921 CET	38922	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:25.759018898 CET	7777	38922	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:25.759856939 CET	38922	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:25.761539936 CET	38924	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:25.765799999 CET	7777	38922	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:25.767018080 CET	7777	38924	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:25.767122984 CET	38924	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:25.767273903 CET	38924	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:25.772809982 CET	7777	38924	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:26.747925997 CET	7777	38924	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:26.748275042 CET	38924	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:27.038151026 CET	7777	38924	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:27.038729906 CET	38924	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:27.040411949 CET	38926	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:27.044408083 CET	7777	38924	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:27.045918941 CET	7777	38926	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:27.046171904 CET	38926	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:27.046411037 CET	38926	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:27.052242994 CET	7777	38926	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:27.921194077 CET	7777	38926	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:27.921611071 CET	38926	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:28.153532982 CET	7777	38926	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:28.153862000 CET	38926	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:28.155674934 CET	38928	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:28.159703970 CET	7777	38926	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:28.161190033 CET	7777	38928	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:28.161451101 CET	38928	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:28.161716938 CET	38928	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:28.167203903 CET	7777	38928	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:29.111432076 CET	7777	38928	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:29.111805916 CET	38928	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:29.327052116 CET	7777	38928	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:29.327811956 CET	38928	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:29.329119921 CET	38930	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:29.333712101 CET	7777	38928	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:29.334939003 CET	7777	38930	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:29.335211992 CET	38930	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:29.335292101 CET	38930	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:29.341013908 CET	7777	38930	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:30.255270958 CET	7777	38930	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:30.255774975 CET	38930	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:30.526133060 CET	7777	38930	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:30.526674032 CET	38930	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:30.528418064 CET	38932	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:30.532430887 CET	7777	38930	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:30.534137011 CET	7777	38932	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:30.534228086 CET	38932	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:30.534513950 CET	38932	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:30.540294886 CET	7777	38932	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:31.525810957 CET	7777	38932	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:31.526175976 CET	38932	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:31.758629084 CET	7777	38932	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:31.759033918 CET	38932	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:31.760154009 CET	38934	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:31.764453888 CET	7777	38932	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:31.765521049 CET	7777	38934	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:31.765726089 CET	38934	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:31.765877008 CET	38934	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:31.771181107 CET	7777	38934	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:32.719820976 CET	7777	38934	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:32.720315933 CET	38934	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:32.915534973 CET	7777	38934	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:32.916038036 CET	38934	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:32.917711973 CET	38936	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:32.922007084 CET	7777	38934	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:32.923590899 CET	7777	38936	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:32.923850060 CET	38936	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:32.924099922 CET	38936	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:32.929744959 CET	7777	38936	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:33.824136972 CET	7777	38936	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:33.824568033 CET	38936	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:34.043613911 CET	7777	38936	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:34.044239044 CET	38936	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:34.045461893 CET	38938	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:34.049689054 CET	7777	38936	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:34.050889015 CET	7777	38938	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:34.051073074 CET	38938	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:34.051167011 CET	38938	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:34.056685925 CET	7777	38938	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:34.962505102 CET	7777	38938	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:34.962924004 CET	38938	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:35.158108950 CET	7777	38938	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:35.158529043 CET	38938	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:35.159594059 CET	38940	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:35.163976908 CET	7777	38938	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:35.164959908 CET	7777	38940	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:35.165060997 CET	38940	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:35.165160894 CET	38940	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:35.170423031 CET	7777	38940	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:36.052722931 CET	7777	38940	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:36.053159952 CET	38940	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:36.311849117 CET	7777	38940	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:36.312280893 CET	38940	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:36.314083099 CET	38942	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:36.318191051 CET	7777	38940	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:36.320031881 CET	7777	38942	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:36.320216894 CET	38942	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:36.320425987 CET	38942	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:36.326042891 CET	7777	38942	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:37.229252100 CET	7777	38942	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:37.229593992 CET	38942	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:37.441827059 CET	7777	38942	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:37.442012072 CET	38942	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:37.443154097 CET	38944	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:37.448112965 CET	7777	38942	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:37.448787928 CET	7777	38944	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:37.448856115 CET	38944	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:37.448894024 CET	38944	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:37.454392910 CET	7777	38944	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:38.414593935 CET	7777	38944	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:38.414940119 CET	38944	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:38.612093925 CET	7777	38944	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:38.612441063 CET	38944	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:38.613682985 CET	38946	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:38.617965937 CET	7777	38944	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:38.619203091 CET	7777	38946	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:38.619304895 CET	38946	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:38.619429111 CET	38946	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:38.624855995 CET	7777	38946	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:39.524559021 CET	7777	38946	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:39.524955988 CET	38946	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:39.726751089 CET	7777	38946	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:39.726994991 CET	38946	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:39.727591038 CET	38948	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:39.732461929 CET	7777	38946	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:39.732969999 CET	7777	38948	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:39.733233929 CET	38948	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:39.733447075 CET	38948	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:39.739191055 CET	7777	38948	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:40.726345062 CET	7777	38948	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:40.726623058 CET	38948	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:40.938534975 CET	7777	38948	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:40.938913107 CET	38948	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:40.940437078 CET	38950	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:40.944307089 CET	7777	38948	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:40.945786953 CET	7777	38950	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:40.946018934 CET	38950	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:40.946178913 CET	38950	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:40.951477051 CET	7777	38950	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:41.918931007 CET	7777	38950	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:41.919296980 CET	38950	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:42.159523964 CET	7777	38950	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:42.159890890 CET	38950	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:42.160974979 CET	38952	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:42.165436029 CET	7777	38950	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:42.166433096 CET	7777	38952	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:42.166524887 CET	38952	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:42.166613102 CET	38952	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:42.172149897 CET	7777	38952	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:43.062516928 CET	7777	38952	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:43.062797070 CET	38952	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:43.266247988 CET	7777	38952	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:43.266706944 CET	38952	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:43.267494917 CET	38954	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:43.272357941 CET	7777	38952	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:43.272876978 CET	7777	38954	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:43.272953033 CET	38954	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:43.273058891 CET	38954	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:43.278419971 CET	7777	38954	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:44.259915113 CET	7777	38954	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:44.260138035 CET	38954	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:44.459012985 CET	7777	38954	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:44.459356070 CET	38954	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:44.460200071 CET	38956	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:44.465276003 CET	7777	38954	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:44.465713978 CET	7777	38956	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:44.465799093 CET	38956	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:44.466145992 CET	38956	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:44.471473932 CET	7777	38956	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:45.517548084 CET	7777	38956	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:45.517674923 CET	38956	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:45.567919016 CET	7777	38956	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:45.568038940 CET	38956	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:45.568733931 CET	38958	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:45.573628902 CET	7777	38956	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:45.574237108 CET	7777	38958	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:45.574295998 CET	38958	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:45.574346066 CET	38958	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:45.579802990 CET	7777	38958	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:46.520904064 CET	7777	38958	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:46.520987034 CET	38958	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:46.718857050 CET	7777	38958	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:46.718971968 CET	38958	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:46.719619036 CET	38960	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:46.724329948 CET	7777	38958	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:46.725158930 CET	7777	38960	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:46.725286007 CET	38960	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:46.725286007 CET	38960	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:46.730756998 CET	7777	38960	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:47.659766912 CET	7777	38960	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:47.660217047 CET	38960	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:47.919114113 CET	7777	38960	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:47.919431925 CET	38960	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:47.919886112 CET	38962	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:47.924936056 CET	7777	38960	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:47.925246000 CET	7777	38962	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:47.925303936 CET	38962	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:47.925467968 CET	38962	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:47.930810928 CET	7777	38962	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:48.833458900 CET	7777	38962	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:48.833677053 CET	38962	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:49.057559967 CET	7777	38962	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:49.057755947 CET	38962	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:49.058367968 CET	38964	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:49.063080072 CET	7777	38962	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:49.063920021 CET	7777	38964	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:49.063991070 CET	38964	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:49.064043999 CET	38964	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:49.069395065 CET	7777	38964	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:50.007126093 CET	7777	38964	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:50.007596016 CET	38964	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:50.215877056 CET	7777	38964	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:50.216408968 CET	38964	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:50.217719078 CET	38966	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:50.221729040 CET	7777	38964	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:50.223086119 CET	7777	38966	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:50.223151922 CET	38966	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:50.223328114 CET	38966	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:50.228652954 CET	7777	38966	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:51.214199066 CET	7777	38966	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:51.214570045 CET	38966	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:51.428447008 CET	7777	38966	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:51.428826094 CET	38966	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:51.429841995 CET	38968	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:51.434094906 CET	7777	38966	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:51.435173035 CET	7777	38968	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:51.435237885 CET	38968	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:51.435286045 CET	38968	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:51.440630913 CET	7777	38968	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:52.358776093 CET	7777	38968	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:52.359016895 CET	38968	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:52.906622887 CET	7777	38968	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:52.906950951 CET	38968	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:52.907519102 CET	7777	38968	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:52.907521963 CET	38970	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:52.907561064 CET	38968	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:52.912282944 CET	7777	38968	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:52.912895918 CET	7777	38970	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:52.913028002 CET	38970	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:52.913075924 CET	38970	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:52.918431044 CET	7777	38970	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:53.824471951 CET	7777	38970	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:53.824651003 CET	38970	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:54.047519922 CET	7777	38970	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:54.047822952 CET	38970	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:54.048435926 CET	38972	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:54.053220987 CET	7777	38970	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:54.053812981 CET	7777	38972	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:54.053880930 CET	38972	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:54.053930998 CET	38972	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:54.059282064 CET	7777	38972	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:55.007791996 CET	7777	38972	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:55.008241892 CET	38972	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:55.216753960 CET	7777	38972	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:55.216988087 CET	38972	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:55.217438936 CET	38974	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:55.222392082 CET	7777	38972	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:55.222706079 CET	7777	38974	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:55.222769976 CET	38974	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:55.222975016 CET	38974	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:55.228266001 CET	7777	38974	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:56.155731916 CET	7777	38974	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:56.156142950 CET	38974	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:56.432914972 CET	7777	38974	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:56.433273077 CET	38974	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:56.434134960 CET	38976	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:56.438822031 CET	7777	38974	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:56.439481974 CET	7777	38976	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:56.439543009 CET	38976	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:56.439743042 CET	38976	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:56.445295095 CET	7777	38976	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:57.353328943 CET	7777	38976	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:57.353617907 CET	38976	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:57.540277004 CET	7777	38976	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:57.540668011 CET	38976	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:57.541506052 CET	38978	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:57.546108007 CET	7777	38976	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:57.546914101 CET	7777	38978	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:57.546979904 CET	38978	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:57.547209024 CET	38978	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:57.552808046 CET	7777	38978	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:58.456181049 CET	7777	38978	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:58.456557035 CET	38978	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:58.717432022 CET	7777	38978	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:58.717834949 CET	38978	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:58.718755007 CET	38980	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:58.723539114 CET	7777	38978	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:58.724138021 CET	7777	38980	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:58.724220037 CET	38980	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:58.724378109 CET	38980	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:58.730098009 CET	7777	38980	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:59.553647041 CET	7777	38980	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:59.553930998 CET	38980	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:59.747311115 CET	7777	38980	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:59.747631073 CET	38980	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:59.748673916 CET	38982	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:59.753674030 CET	7777	38980	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:59.754368067 CET	7777	38982	93.123.85.205	192.168.2.15
Oct 28, 2024 09:16:59.754560947 CET	38982	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:59.754735947 CET	38982	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:16:59.760349989 CET	7777	38982	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:00.737521887 CET	7777	38982	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:00.737963915 CET	38982	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:01.022998095 CET	7777	38982	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:01.023411989 CET	38982	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:01.025100946 CET	38984	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:01.028903961 CET	7777	38982	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:01.030628920 CET	7777	38984	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:01.030725002 CET	38984	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:01.030884027 CET	38984	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:01.036674023 CET	7777	38984	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:01.957200050 CET	7777	38984	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:01.957452059 CET	38984	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:02.533520937 CET	7777	38984	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:02.534056902 CET	7777	38984	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:02.534085035 CET	38984	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:02.534497976 CET	38984	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:02.535758018 CET	38986	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:02.539791107 CET	7777	38984	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:02.541138887 CET	7777	38986	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:02.541392088 CET	38986	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:02.541620016 CET	38986	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:02.547215939 CET	7777	38986	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:03.461215973 CET	7777	38986	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:03.461679935 CET	38986	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:03.658983946 CET	7777	38986	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:03.659626961 CET	38986	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:03.661211967 CET	38988	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:03.667361975 CET	7777	38986	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:03.668579102 CET	7777	38988	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:03.668692112 CET	38988	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:03.668941021 CET	38988	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:03.676137924 CET	7777	38988	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:04.640602112 CET	7777	38988	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:04.641093016 CET	38988	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:04.919285059 CET	7777	38988	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:04.919626951 CET	38988	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:04.920835018 CET	38990	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:04.925368071 CET	7777	38988	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:04.926315069 CET	7777	38990	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:04.926404953 CET	38990	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:04.926634073 CET	38990	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:04.932157040 CET	7777	38990	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:06.043704033 CET	7777	38990	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:06.043766975 CET	7777	38990	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:06.043783903 CET	7777	38990	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:06.044001102 CET	38990	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:06.044001102 CET	38990	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:06.044095993 CET	38990	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:06.045015097 CET	38992	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:06.049925089 CET	7777	38990	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:06.050734997 CET	7777	38992	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:06.050987005 CET	38992	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:06.050987005 CET	38992	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:06.056716919 CET	7777	38992	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:06.959434986 CET	7777	38992	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:06.959868908 CET	38992	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:07.212632895 CET	7777	38992	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:07.213202000 CET	38992	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:07.214225054 CET	38994	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:07.219286919 CET	7777	38992	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:07.219624996 CET	7777	38994	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:07.219718933 CET	38994	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:07.219783068 CET	38994	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:07.225783110 CET	7777	38994	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:08.148247004 CET	7777	38994	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:08.148689985 CET	38994	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:08.426199913 CET	7777	38994	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:08.426561117 CET	38994	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:08.427925110 CET	38996	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:08.432434082 CET	7777	38994	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:08.433547974 CET	7777	38996	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:08.433711052 CET	38996	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:08.433811903 CET	38996	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:08.439610004 CET	7777	38996	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:09.405409098 CET	7777	38996	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:09.405916929 CET	38996	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:10.463782072 CET	7777	38996	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:10.463831902 CET	7777	38996	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:10.464221001 CET	38996	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:10.464221954 CET	38996	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:10.464884996 CET	38998	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:10.465131998 CET	7777	38996	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:10.465197086 CET	38996	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:10.465305090 CET	7777	38996	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:10.465361118 CET	38996	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:10.469985008 CET	7777	38996	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:10.471041918 CET	7777	38998	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:10.471265078 CET	38998	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:10.471306086 CET	38998	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:10.477054119 CET	7777	38998	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:11.460779905 CET	7777	38998	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:11.461206913 CET	38998	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:11.658088923 CET	7777	38998	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:11.658374071 CET	38998	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:11.659513950 CET	39000	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:11.664496899 CET	7777	38998	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:11.665199041 CET	7777	39000	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:11.665282011 CET	39000	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:11.665509939 CET	39000	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:11.671310902 CET	7777	39000	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:12.552860022 CET	7777	39000	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:12.553158998 CET	39000	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:12.765005112 CET	7777	39000	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:12.765398979 CET	39000	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:12.766535997 CET	39002	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:12.770967007 CET	7777	39000	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:12.771832943 CET	7777	39002	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:12.771903992 CET	39002	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:12.772020102 CET	39002	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:12.777503967 CET	7777	39002	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:13.734469891 CET	7777	39002	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:13.734811068 CET	39002	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:13.964034081 CET	7777	39002	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:13.964363098 CET	39002	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:13.965169907 CET	39004	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:13.970943928 CET	7777	39002	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:13.971478939 CET	7777	39004	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:13.971743107 CET	39004	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:13.971744061 CET	39004	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:13.977370977 CET	7777	39004	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:14.931751013 CET	7777	39004	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:14.932379961 CET	39004	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:15.215529919 CET	7777	39004	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:15.216181993 CET	39004	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:15.217230082 CET	39006	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:15.222273111 CET	7777	39004	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:15.223232031 CET	7777	39006	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:15.223428011 CET	39006	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:15.223746061 CET	39006	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:15.229373932 CET	7777	39006	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:16.155714035 CET	7777	39006	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:16.156100035 CET	39006	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:16.419094086 CET	7777	39006	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:16.419620991 CET	39006	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:16.420783997 CET	39008	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:16.425698996 CET	7777	39006	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:16.426970005 CET	7777	39008	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:16.427073956 CET	39008	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:16.427187920 CET	39008	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:16.432652950 CET	7777	39008	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:17.338176012 CET	7777	39008	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:17.338614941 CET	39008	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:17.614185095 CET	7777	39008	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:17.614686966 CET	39008	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:17.615508080 CET	39010	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:17.620989084 CET	7777	39008	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:17.622281075 CET	7777	39010	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:17.622371912 CET	39010	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:17.622622013 CET	39010	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:17.628290892 CET	7777	39010	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:18.539608002 CET	7777	39010	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:18.539938927 CET	39010	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:18.816427946 CET	7777	39010	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:18.816796064 CET	39010	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:18.817581892 CET	39012	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:18.822731018 CET	7777	39010	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:18.823230982 CET	7777	39012	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:18.823335886 CET	39012	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:18.823373079 CET	39012	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:18.828851938 CET	7777	39012	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:19.657663107 CET	7777	39012	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:19.657974005 CET	39012	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:19.906131983 CET	7777	39012	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:19.906914949 CET	39012	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:19.907676935 CET	39014	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:19.912875891 CET	7777	39012	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:19.913460016 CET	7777	39014	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:19.913568020 CET	39014	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:19.913872957 CET	39014	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:19.919420004 CET	7777	39014	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:20.824033022 CET	7777	39014	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:20.824373007 CET	39014	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:21.014149904 CET	7777	39014	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:21.014745951 CET	39014	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:21.015815973 CET	39016	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:21.020387888 CET	7777	39014	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:21.021295071 CET	7777	39016	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:21.021522045 CET	39016	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:21.021522045 CET	39016	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:21.027081013 CET	7777	39016	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:21.923578978 CET	7777	39016	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:21.923927069 CET	39016	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:22.166820049 CET	7777	39016	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:22.167221069 CET	39016	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:22.168543100 CET	39018	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:22.173244953 CET	7777	39016	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:22.174082041 CET	7777	39018	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:22.174295902 CET	39018	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:22.174295902 CET	39018	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:22.180090904 CET	7777	39018	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:23.911653042 CET	7777	39018	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:23.911916018 CET	7777	39018	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:23.911948919 CET	7777	39018	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:23.911977053 CET	7777	39018	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:23.912087917 CET	39018	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:23.912087917 CET	39018	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:23.912112951 CET	39018	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:23.912444115 CET	39018	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:23.913671970 CET	39020	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:23.918015003 CET	7777	39018	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:23.919147015 CET	7777	39020	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:23.919271946 CET	39020	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:23.919347048 CET	39020	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:23.925127029 CET	7777	39020	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:24.849508047 CET	7777	39020	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:24.849828005 CET	39020	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:25.114717007 CET	7777	39020	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:25.115212917 CET	39020	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:25.116331100 CET	39022	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:25.120635033 CET	7777	39020	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:25.121704102 CET	7777	39022	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:25.121783972 CET	39022	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:25.122174025 CET	39022	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:25.127552986 CET	7777	39022	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:26.058156967 CET	7777	39022	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:26.058418989 CET	39022	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:26.321090937 CET	7777	39022	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:26.321646929 CET	39022	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:26.322427988 CET	39024	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:26.327054977 CET	7777	39022	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:26.327739000 CET	7777	39024	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:26.327828884 CET	39024	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:26.328043938 CET	39024	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:26.333344936 CET	7777	39024	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:27.222573042 CET	7777	39024	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:27.222894907 CET	39024	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:27.416589975 CET	7777	39024	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:27.416868925 CET	39024	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:27.418180943 CET	39026	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:27.422877073 CET	7777	39024	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:27.424200058 CET	7777	39026	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:27.424284935 CET	39026	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:27.424415112 CET	39026	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:27.430114985 CET	7777	39026	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:28.312902927 CET	7777	39026	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:28.313090086 CET	39026	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:28.524065971 CET	7777	39026	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:28.524424076 CET	39026	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:28.526316881 CET	39028	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:28.530390024 CET	7777	39026	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:28.532083035 CET	7777	39028	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:28.532183886 CET	39028	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:28.532340050 CET	39028	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:28.538110971 CET	7777	39028	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:29.524569988 CET	7777	39028	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:29.524899006 CET	39028	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:29.720698118 CET	7777	39028	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:29.721570969 CET	39028	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:29.722670078 CET	39030	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:29.728044987 CET	7777	39028	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:29.728470087 CET	7777	39030	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:29.728725910 CET	39030	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:29.729016066 CET	39030	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:29.734596968 CET	7777	39030	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:30.650717974 CET	7777	39030	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:30.651137114 CET	39030	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:30.859016895 CET	7777	39030	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:30.859533072 CET	39030	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:30.861079931 CET	39032	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:30.865036964 CET	7777	39030	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:30.866842031 CET	7777	39032	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:30.867082119 CET	39032	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:30.867233038 CET	39032	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:30.872752905 CET	7777	39032	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:31.816458941 CET	7777	39032	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:31.816901922 CET	39032	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:31.962971926 CET	7777	39032	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:31.963336945 CET	39032	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:31.964987040 CET	39034	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:31.968872070 CET	7777	39032	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:31.970494986 CET	7777	39034	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:31.970613003 CET	39034	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:31.970851898 CET	39034	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:31.976286888 CET	7777	39034	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:32.924735069 CET	7777	39034	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:32.925146103 CET	39034	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:33.357594967 CET	7777	39034	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:33.358010054 CET	39034	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:33.359921932 CET	39036	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:33.364130974 CET	7777	39034	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:33.365740061 CET	7777	39036	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:33.365849018 CET	39036	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:33.366112947 CET	39036	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:33.371479034 CET	7777	39036	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:34.511854887 CET	7777	39036	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:34.512233019 CET	39036	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:34.639045000 CET	7777	39036	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:34.639492989 CET	39036	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:34.641016006 CET	39038	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:34.645113945 CET	7777	39036	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:34.646543026 CET	7777	39038	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:34.646600962 CET	39038	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:34.646970034 CET	39038	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:34.652272940 CET	7777	39038	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:35.549993038 CET	7777	39038	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:35.550271988 CET	39038	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:35.812320948 CET	7777	39038	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:35.812777042 CET	39038	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:35.813637018 CET	39040	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:35.818388939 CET	7777	39038	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:35.819016933 CET	7777	39040	93.123.85.205	192.168.2.15
Oct 28, 2024 09:17:35.819106102 CET	39040	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:35.819209099 CET	39040	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:17:35.824527025 CET	7777	39040	93.123.85.205	192.168.2.15

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 28, 2024 09:16:45.117903948 CET	53748	53	192.168.2.15	1.1.1.1
Oct 28, 2024 09:16:45.117959023 CET	34058	53	192.168.2.15	1.1.1.1
Oct 28, 2024 09:16:45.125813007 CET	53	53748	1.1.1.1	192.168.2.15
Oct 28, 2024 09:16:45.210398912 CET	53	34058	1.1.1.1	192.168.2.15

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 28, 2024 09:16:45.117903948 CET	192.168.2.15	1.1.1.1	0x401f	Standard query (0)	daisy.ubuntu.com	A (IP address)	IN (0x0001)	false
Oct 28, 2024 09:16:45.117959023 CET	192.168.2.15	1.1.1.1	0x1ad9	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 28, 2024 09:16:45.125813007 CET	1.1.1.1	192.168.2.15	0x401f	No error (0)	daisy.ubuntu.com		162.213.35.25	A (IP address)	IN (0x0001)	false
Oct 28, 2024 09:16:45.125813007 CET	1.1.1.1	192.168.2.15	0x401f	No error (0)	daisy.ubuntu.com		162.213.35.24	A (IP address)	IN (0x0001)	false

System Behavior

Analysis Process: na.elf PID: 5542, Parent PID: 5461

General

Start time (UTC):	08:13:59
Start date (UTC):	28/10/2024
Path:	/tmp/na.elf
Arguments:	/tmp/na.elf
File size:	5388968 bytes
MD5 hash:	ae65271c943d3451b7f026d1fadccea6

Chronological Activities

Analysis Process: na.elf PID: 5544, Parent PID: 5542

General

Start time (UTC):	08:14:00
Start date (UTC):	28/10/2024
Path:	/tmp/na.elf
Arguments:	-
File size:	5388968 bytes
MD5 hash:	ae65271c943d3451b7f026d1fadccea6

Chronological Activities

Analysis Process: na.elf PID: 5546, Parent PID: 5544

General

Start time (UTC):	08:14:00
Start date (UTC):	28/10/2024
Path:	/tmp/na.elf
Arguments:	-
File size:	5388968 bytes
MD5 hash:	ae65271c943d3451b7f026d1fadccea6

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system. Functionality could exist within remote access tools to enable this, but utilities available on the operating system could also be used such as Ping or `net view` using Net .
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Network Traffic: Network Connection Creation, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may obfuscate command and control traffic to make it more difficult to detect. Command and control (C2) communications are hidden (but not necessarily encrypted) in an attempt to make the content more difficult to discover or decipher and to make the communication less conspicuous and hide commands from being seen. This encompasses many methods, such as adding junk data to protocol traffic, using steganography, or impersonating legitimate protocols.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report na.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Threatname: Gafgyt

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/tmp/qemu-open.SqQQIe (deleted)

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

System Behavior

Analysis Process: na.elf PID: 5542, Parent PID: 5461

General

Chronological Activities

Analysis Process: na.elf PID: 5544, Parent PID: 5542

General

Chronological Activities

Analysis Process: na.elf PID: 5546, Parent PID: 5544

General

Chronological Activities

Linux Analysis Report
na.elf