Edit tour

Linux Analysis Report
na.elf

Overview

General Information

Sample name:	na.elf
Analysis ID:	1543688
MD5:	dfa1f75be77ec732f133338460e60187
SHA1:	36c5a05a9ed5c961e12e2e00fc654348a10df818
SHA256:	fabb2ffc230d3033b25217310e97da8872eb2e03e7647173951c7469021e2729
Tags:	elfuser-abuse_ch
Infos:

Detection

Gafgyt, Mirai

Score:	100
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Gafgyt

Yara detected Mirai

Contains symbols with names commonly found in malware

Opens /proc/net/* files useful for finding connected devices and routers

Detected TCP or UDP traffic on non-standard ports

Sample contains strings that are user agent strings indicative of HTTP manipulation

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1543688
Start date and time:	2024-10-28 09:17:41 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 13s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	na.elf
Detection:	MAL
Classification:	mal100.spre.troj.linELF@0/1@2/0

Warnings

VT rate limit hit for: na.elf

Runtime Messages

Command:	/tmp/na.elf
PID:	5517
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:

Process Tree

system is lnxubuntu20

na.elf (PID: 5517, Parent: 5436, MD5: 0083f1f0e77be34ad27f849842bbb00c) Arguments: /tmp/na.elf

na.elf New Fork (PID: 5519, Parent: 5517)

na.elf New Fork (PID: 5521, Parent: 5519)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
na.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
na.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
na.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x14f90:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14fa4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14fb8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14fcc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14fe0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14ff4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15008:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1501c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15030:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15044:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15058:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1506c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15080:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15094:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x150a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x150bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x150d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x150e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x150f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1510c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15120:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F

Memory Dumps

Source	Rule	Description	Author	Strings
5517.1.00007f68a8400000.00007f68a8418000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5517.1.00007f68a8400000.00007f68a8418000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x14f90:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14fa4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14fb8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14fcc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14fe0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14ff4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15008:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1501c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15030:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15044:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15058:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1506c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15080:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15094:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x150a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x150bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x150d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x150e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x150f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1510c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15120:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5519.1.00007f68a8400000.00007f68a8418000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5519.1.00007f68a8400000.00007f68a8418000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x14f90:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14fa4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14fb8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14fcc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14fe0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14ff4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15008:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1501c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15030:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15044:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15058:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1506c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15080:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15094:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x150a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x150bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x150d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x150e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x150f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1510c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15120:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: na.elf PID: 5517	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: na.elf PID: 5517	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x3a31:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3a45:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3a59:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3a6d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3a81:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3a95:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3aa9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3abd:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3ad1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3ae5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3af9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3b0d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3b21:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3b35:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3b49:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3b5d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3b71:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3b85:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3b99:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3bad:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3bc1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: na.elf PID: 5519	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: na.elf PID: 5519	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x4747:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x475b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x476f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x4783:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x4797:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x47ab:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x47bf:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x47d3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x47e7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x47fb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x480f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x4823:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x4837:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x484b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x485f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x4873:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x4887:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x489b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x48af:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x48c3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x48d7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Click to see the 3 entries

Suricata Signatures

ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-28T09:18:35.909217+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38088	93.123.85.205	7777	TCP
2024-10-28T09:18:37.132766+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38090	93.123.85.205	7777	TCP
2024-10-28T09:18:38.223988+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38092	93.123.85.205	7777	TCP
2024-10-28T09:18:39.336399+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38094	93.123.85.205	7777	TCP
2024-10-28T09:18:40.624128+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38096	93.123.85.205	7777	TCP
2024-10-28T09:18:41.758733+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38098	93.123.85.205	7777	TCP
2024-10-28T09:18:42.945958+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38100	93.123.85.205	7777	TCP
2024-10-28T09:18:44.242968+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38102	93.123.85.205	7777	TCP
2024-10-28T09:18:45.433156+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38104	93.123.85.205	7777	TCP
2024-10-28T09:18:46.565745+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38106	93.123.85.205	7777	TCP
2024-10-28T09:18:47.844980+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38108	93.123.85.205	7777	TCP
2024-10-28T09:18:49.026217+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38110	93.123.85.205	7777	TCP
2024-10-28T09:18:50.221633+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38112	93.123.85.205	7777	TCP
2024-10-28T09:18:51.344876+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38114	93.123.85.205	7777	TCP
2024-10-28T09:18:53.587350+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38116	93.123.85.205	7777	TCP
2024-10-28T09:18:54.810461+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38118	93.123.85.205	7777	TCP
2024-10-28T09:18:56.042429+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38120	93.123.85.205	7777	TCP
2024-10-28T09:18:57.260604+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38122	93.123.85.205	7777	TCP
2024-10-28T09:18:58.434107+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38124	93.123.85.205	7777	TCP
2024-10-28T09:18:59.567062+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38126	93.123.85.205	7777	TCP
2024-10-28T09:19:01.079669+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38128	93.123.85.205	7777	TCP
2024-10-28T09:19:02.217024+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38130	93.123.85.205	7777	TCP
2024-10-28T09:19:03.368567+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38132	93.123.85.205	7777	TCP
2024-10-28T09:19:05.659973+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38134	93.123.85.205	7777	TCP
2024-10-28T09:19:06.924335+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38136	93.123.85.205	7777	TCP
2024-10-28T09:19:08.063080+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38138	93.123.85.205	7777	TCP
2024-10-28T09:19:09.327136+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38140	93.123.85.205	7777	TCP
2024-10-28T09:19:10.534374+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38142	93.123.85.205	7777	TCP
2024-10-28T09:19:11.736738+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38144	93.123.85.205	7777	TCP
2024-10-28T09:19:12.927281+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38146	93.123.85.205	7777	TCP
2024-10-28T09:19:14.169151+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38148	93.123.85.205	7777	TCP
2024-10-28T09:19:15.327547+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38150	93.123.85.205	7777	TCP
2024-10-28T09:19:16.561344+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38152	93.123.85.205	7777	TCP
2024-10-28T09:19:18.064368+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38154	93.123.85.205	7777	TCP
2024-10-28T09:19:19.394620+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38156	93.123.85.205	7777	TCP
2024-10-28T09:19:20.558523+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38158	93.123.85.205	7777	TCP
2024-10-28T09:19:21.753125+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38160	93.123.85.205	7777	TCP
2024-10-28T09:19:23.017129+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38162	93.123.85.205	7777	TCP
2024-10-28T09:19:24.331549+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38164	93.123.85.205	7777	TCP
2024-10-28T09:19:25.535469+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38166	93.123.85.205	7777	TCP
2024-10-28T09:19:26.579730+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38168	93.123.85.205	7777	TCP
2024-10-28T09:19:27.752802+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38170	93.123.85.205	7777	TCP
2024-10-28T09:19:28.940110+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38172	93.123.85.205	7777	TCP
2024-10-28T09:19:30.218258+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38174	93.123.85.205	7777	TCP
2024-10-28T09:19:31.532025+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38176	93.123.85.205	7777	TCP
2024-10-28T09:19:32.661004+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38178	93.123.85.205	7777	TCP
2024-10-28T09:19:33.823065+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38180	93.123.85.205	7777	TCP
2024-10-28T09:19:35.029588+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38182	93.123.85.205	7777	TCP
2024-10-28T09:19:36.134196+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38184	93.123.85.205	7777	TCP
2024-10-28T09:19:37.330839+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38186	93.123.85.205	7777	TCP
2024-10-28T09:19:38.432749+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38188	93.123.85.205	7777	TCP
2024-10-28T09:19:39.655858+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38190	93.123.85.205	7777	TCP
2024-10-28T09:19:41.472536+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38192	93.123.85.205	7777	TCP
2024-10-28T09:19:42.721259+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38194	93.123.85.205	7777	TCP
2024-10-28T09:19:43.824482+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38196	93.123.85.205	7777	TCP
2024-10-28T09:19:44.917249+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38198	93.123.85.205	7777	TCP
2024-10-28T09:19:46.474686+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38200	93.123.85.205	7777	TCP
2024-10-28T09:19:47.869459+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38202	93.123.85.205	7777	TCP
2024-10-28T09:19:49.065716+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38204	93.123.85.205	7777	TCP
2024-10-28T09:19:50.219005+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38206	93.123.85.205	7777	TCP
2024-10-28T09:19:51.539034+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38208	93.123.85.205	7777	TCP
2024-10-28T09:19:52.675148+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38210	93.123.85.205	7777	TCP
2024-10-28T09:19:53.864910+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38212	93.123.85.205	7777	TCP
2024-10-28T09:19:55.067215+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38214	93.123.85.205	7777	TCP
2024-10-28T09:19:56.485610+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38216	93.123.85.205	7777	TCP
2024-10-28T09:19:57.654269+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38218	93.123.85.205	7777	TCP
2024-10-28T09:19:58.922442+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38220	93.123.85.205	7777	TCP
2024-10-28T09:20:00.045251+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38222	93.123.85.205	7777	TCP
2024-10-28T09:20:02.034063+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38224	93.123.85.205	7777	TCP
2024-10-28T09:20:03.251554+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38226	93.123.85.205	7777	TCP
2024-10-28T09:20:04.426371+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38228	93.123.85.205	7777	TCP
2024-10-28T09:20:05.549822+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38230	93.123.85.205	7777	TCP
2024-10-28T09:20:06.662835+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38232	93.123.85.205	7777	TCP
2024-10-28T09:20:07.944131+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38234	93.123.85.205	7777	TCP
2024-10-28T09:20:09.125566+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38236	93.123.85.205	7777	TCP
2024-10-28T09:20:10.695003+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38238	93.123.85.205	7777	TCP
2024-10-28T09:20:11.826449+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38240	93.123.85.205	7777	TCP
2024-10-28T09:20:13.073063+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38242	93.123.85.205	7777	TCP
2024-10-28T09:20:14.376407+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38244	93.123.85.205	7777	TCP
2024-10-28T09:20:15.516243+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38246	93.123.85.205	7777	TCP
2024-10-28T09:20:16.708615+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38248	93.123.85.205	7777	TCP
2024-10-28T09:20:17.782680+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38250	93.123.85.205	7777	TCP
2024-10-28T09:20:18.953782+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38252	93.123.85.205	7777	TCP
2024-10-28T09:20:20.342217+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38254	93.123.85.205	7777	TCP
2024-10-28T09:20:21.542958+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38256	93.123.85.205	7777	TCP
2024-10-28T09:20:23.891007+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38258	93.123.85.205	7777	TCP
2024-10-28T09:20:25.047749+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38260	93.123.85.205	7777	TCP
2024-10-28T09:20:26.234478+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38262	93.123.85.205	7777	TCP
2024-10-28T09:20:27.356905+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38264	93.123.85.205	7777	TCP
2024-10-28T09:20:28.544901+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38266	93.123.85.205	7777	TCP
2024-10-28T09:20:29.720237+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38268	93.123.85.205	7777	TCP
2024-10-28T09:20:30.860008+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38270	93.123.85.205	7777	TCP
2024-10-28T09:20:31.962192+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38272	93.123.85.205	7777	TCP
2024-10-28T09:20:33.127807+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38274	93.123.85.205	7777	TCP
2024-10-28T09:20:34.263071+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38276	93.123.85.205	7777	TCP
2024-10-28T09:20:35.780025+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38278	93.123.85.205	7777	TCP
2024-10-28T09:20:37.382707+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38280	93.123.85.205	7777	TCP
2024-10-28T09:20:38.525057+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38282	93.123.85.205	7777	TCP
2024-10-28T09:20:39.656716+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38284	93.123.85.205	7777	TCP
2024-10-28T09:20:40.855850+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38286	93.123.85.205	7777	TCP
2024-10-28T09:20:42.035359+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38288	93.123.85.205	7777	TCP
2024-10-28T09:20:43.320136+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38290	93.123.85.205	7777	TCP
2024-10-28T09:20:44.530127+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38292	93.123.85.205	7777	TCP
2024-10-28T09:20:45.773081+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38294	93.123.85.205	7777	TCP
2024-10-28T09:20:46.929306+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38296	93.123.85.205	7777	TCP
2024-10-28T09:20:48.219875+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38298	93.123.85.205	7777	TCP
2024-10-28T09:20:49.426704+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38300	93.123.85.205	7777	TCP
2024-10-28T09:20:50.840108+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38302	93.123.85.205	7777	TCP
2024-10-28T09:20:52.131052+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38304	93.123.85.205	7777	TCP
2024-10-28T09:20:53.264612+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38306	93.123.85.205	7777	TCP
2024-10-28T09:20:54.417365+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38308	93.123.85.205	7777	TCP
2024-10-28T09:20:55.785640+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38310	93.123.85.205	7777	TCP
2024-10-28T09:20:56.936898+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38312	93.123.85.205	7777	TCP
2024-10-28T09:20:58.026792+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38314	93.123.85.205	7777	TCP
2024-10-28T09:20:59.149838+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38316	93.123.85.205	7777	TCP
2024-10-28T09:21:00.323217+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38318	93.123.85.205	7777	TCP
2024-10-28T09:21:01.431392+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38320	93.123.85.205	7777	TCP
2024-10-28T09:21:02.538800+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38322	93.123.85.205	7777	TCP
2024-10-28T09:21:03.675759+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38324	93.123.85.205	7777	TCP
2024-10-28T09:21:05.022418+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38326	93.123.85.205	7777	TCP
2024-10-28T09:21:06.220237+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38328	93.123.85.205	7777	TCP
2024-10-28T09:21:07.443393+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38330	93.123.85.205	7777	TCP
2024-10-28T09:21:08.824470+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38332	93.123.85.205	7777	TCP
2024-10-28T09:21:09.935629+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38334	93.123.85.205	7777	TCP
2024-10-28T09:21:11.064486+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38336	93.123.85.205	7777	TCP
2024-10-28T09:21:12.170009+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38338	93.123.85.205	7777	TCP
2024-10-28T09:21:13.270306+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38340	93.123.85.205	7777	TCP
2024-10-28T09:21:14.419381+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38342	93.123.85.205	7777	TCP
2024-10-28T09:21:15.565685+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38344	93.123.85.205	7777	TCP
2024-10-28T09:21:16.765530+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38346	93.123.85.205	7777	TCP
2024-10-28T09:21:17.969921+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38348	93.123.85.205	7777	TCP
2024-10-28T09:21:19.124669+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38350	93.123.85.205	7777	TCP
2024-10-28T09:21:20.340015+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38352	93.123.85.205	7777	TCP
2024-10-28T09:21:21.530085+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38354	93.123.85.205	7777	TCP
2024-10-28T09:21:22.764542+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38356	93.123.85.205	7777	TCP
2024-10-28T09:21:23.870429+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38358	93.123.85.205	7777	TCP
2024-10-28T09:21:25.134313+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38360	93.123.85.205	7777	TCP
2024-10-28T09:21:26.248843+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38362	93.123.85.205	7777	TCP
2024-10-28T09:21:27.462642+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38364	93.123.85.205	7777	TCP
2024-10-28T09:21:28.722252+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38366	93.123.85.205	7777	TCP
2024-10-28T09:21:29.855827+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38368	93.123.85.205	7777	TCP
2024-10-28T09:21:31.069138+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38370	93.123.85.205	7777	TCP
2024-10-28T09:21:32.319855+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38372	93.123.85.205	7777	TCP
2024-10-28T09:21:33.422743+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38374	93.123.85.205	7777	TCP
2024-10-28T09:21:34.465889+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38376	93.123.85.205	7777	TCP
2024-10-28T09:21:35.651479+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38378	93.123.85.205	7777	TCP
2024-10-28T09:21:36.818009+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38380	93.123.85.205	7777	TCP
2024-10-28T09:21:37.929969+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38382	93.123.85.205	7777	TCP
2024-10-28T09:21:39.138270+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38384	93.123.85.205	7777	TCP
2024-10-28T09:21:40.334307+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38386	93.123.85.205	7777	TCP
2024-10-28T09:21:41.349475+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38388	93.123.85.205	7777	TCP
2024-10-28T09:21:42.518614+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38390	93.123.85.205	7777	TCP
2024-10-28T09:21:43.642830+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38392	93.123.85.205	7777	TCP
2024-10-28T09:21:44.837800+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38394	93.123.85.205	7777	TCP
2024-10-28T09:21:46.035606+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38396	93.123.85.205	7777	TCP
2024-10-28T09:21:47.239216+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38398	93.123.85.205	7777	TCP
2024-10-28T09:21:48.366608+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38400	93.123.85.205	7777	TCP
2024-10-28T09:21:49.519102+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38402	93.123.85.205	7777	TCP
2024-10-28T09:21:50.784317+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38404	93.123.85.205	7777	TCP
2024-10-28T09:21:51.869318+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38406	93.123.85.205	7777	TCP
2024-10-28T09:21:53.011734+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38408	93.123.85.205	7777	TCP
2024-10-28T09:21:54.132343+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38410	93.123.85.205	7777	TCP
2024-10-28T09:21:55.315203+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38412	93.123.85.205	7777	TCP
2024-10-28T09:21:56.465852+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38414	93.123.85.205	7777	TCP
2024-10-28T09:21:57.652665+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38416	93.123.85.205	7777	TCP
2024-10-28T09:21:58.819400+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38418	93.123.85.205	7777	TCP
2024-10-28T09:22:00.053317+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38420	93.123.85.205	7777	TCP
2024-10-28T09:22:01.125617+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38422	93.123.85.205	7777	TCP
2024-10-28T09:22:02.232087+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38424	93.123.85.205	7777	TCP
2024-10-28T09:22:03.325728+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38426	93.123.85.205	7777	TCP
2024-10-28T09:22:04.464443+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38428	93.123.85.205	7777	TCP
2024-10-28T09:22:05.720492+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38430	93.123.85.205	7777	TCP
2024-10-28T09:22:06.864944+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38432	93.123.85.205	7777	TCP
2024-10-28T09:22:08.064733+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38434	93.123.85.205	7777	TCP
2024-10-28T09:22:09.254475+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38436	93.123.85.205	7777	TCP
2024-10-28T09:22:10.368882+0100	2846526	1	A Network Trojan was detected	192.168.2.14	38438	93.123.85.205	7777	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: na.elf

Avira: detected

Found malware configuration

Source: na.elf

Malware Configuration Extractor: Gafgyt {"C2 url": "93.123.85.205:7777"}

Multi AV Scanner detection for submitted file

Source: na.elf

ReversingLabs: Detection: 63%

Spreading

Opens /proc/net/* files useful for finding connected devices and routers

Source: /tmp/na.elf (PID: 5517)

Opens: /proc/net/route

Jump to behavior

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38102 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38092 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38128 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38104 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38140 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38088 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38130 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38096 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38148 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38098 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38100 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38094 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38164 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38116 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38202 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38136 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38118 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38090 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38180 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38114 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38138 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38240 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38106 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38190 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38160 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38220 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38124 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38192 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38132 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38178 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38108 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38194 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38112 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38142 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38210 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38134 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38246 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38162 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38250 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38222 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38230 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38168 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38218 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38314 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38122 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38186 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38308 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38248 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38174 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38270 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38146 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38260 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38244 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38156 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38338 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38208 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38120 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38152 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38300 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38262 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38170 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38348 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38318 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38272 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38286 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38236 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38172 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38216 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38324 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38264 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38200 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38144 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38212 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38228 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38176 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38278 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38310 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38150 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38188 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38288 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38398 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38110 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38282 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38254 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38242 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38154 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38284 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38304 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38312 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38412 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38408 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38354 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38400 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38352 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38166 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38334 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38392 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38126 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38258 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38226 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38364 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38290 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38422 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38206 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38356 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38432 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38360 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38158 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38184 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38322 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38198 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38316 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38344 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38238 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38182 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38386 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38332 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38224 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38232 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38388 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38358 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38406 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38428 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38252 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38376 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38370 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38368 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38436 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38294 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38326 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38336 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38380 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38204 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38266 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38234 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38404 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38382 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38384 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38256 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38268 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38438 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38292 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38196 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38402 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38280 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38366 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38420 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38426 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38434 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38372 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38276 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38418 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38374 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38214 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38296 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38394 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38302 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38320 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38350 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38424 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38298 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38430 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38396 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38328 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38346 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38306 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38416 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38342 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38340 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38362 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38274 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38390 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38378 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38410 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38330 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:38414 -> 93.123.85.205:7777

Source: global traffic

TCP traffic: 192.168.2.14:38088 -> 93.123.85.205:7777

Source: global traffic

TCP traffic: 192.168.2.14:46540 -> 185.125.190.26:443

Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 185.125.190.26
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205

Source: global traffic

DNS traffic detected: DNS query: daisy.ubuntu.com

Source: unknown

Network traffic detected: HTTP traffic on port 46540 -> 443

System Summary

Malicious sample detected (through community Yara rule)

Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5517.1.00007f68a8400000.00007f68a8418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5519.1.00007f68a8400000.00007f68a8418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: na.elf PID: 5517, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: na.elf PID: 5519, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown

Contains symbols with names commonly found in malware

Source: ELF static info symbol of initial sample

Name: vseattack

Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5517.1.00007f68a8400000.00007f68a8418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5519.1.00007f68a8400000.00007f68a8418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: na.elf PID: 5517, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: na.elf PID: 5519, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16

Source: classification engine

Classification label: mal100.spre.troj.linELF@0/1@2/0

Source: na.elf	ELF static info symbol of initial sample: libc/string/mips/memcpy.S
Source: na.elf	ELF static info symbol of initial sample: libc/string/mips/memset.S
Source: na.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/mips/crt1.S
Source: na.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/mips/crti.S
Source: na.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/mips/crtn.S

Source: /tmp/na.elf (PID: 5517)

Queries kernel information via 'uname':

Jump to behavior

Source: na.elf, 5517.1.00007ffdd1af6000.00007ffdd1b17000.rw-.sdmp, na.elf, 5519.1.00007ffdd1af6000.00007ffdd1b17000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-mips/tmp/na.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/na.elf
Source: na.elf, 5517.1.00007ffdd1af6000.00007ffdd1b17000.rw-.sdmp	Binary or memory string: /tmp/qemu-open.MnLeFo
Source: na.elf, 5517.1.0000559e12b8e000.0000559e12c15000.rw-.sdmp, na.elf, 5519.1.0000559e12b8e000.0000559e12c15000.rw-.sdmp	Binary or memory string: U!/etc/qemu-binfmt/mips
Source: na.elf, 5517.1.0000559e12b8e000.0000559e12c15000.rw-.sdmp, na.elf, 5519.1.0000559e12b8e000.0000559e12c15000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/mips
Source: na.elf, 5517.1.00007ffdd1af6000.00007ffdd1b17000.rw-.sdmp, na.elf, 5519.1.00007ffdd1af6000.00007ffdd1b17000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-mips
Source: na.elf, 5517.1.00007ffdd1af6000.00007ffdd1b17000.rw-.sdmp	Binary or memory string: U/tmp/qemu-open.MnLeFo\

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match

File source: na.elf, type: SAMPLE

Yara detected Mirai

Source: Yara match	File source: na.elf, type: SAMPLE
Source: Yara match	File source: 5517.1.00007f68a8400000.00007f68a8418000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5519.1.00007f68a8400000.00007f68a8418000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: na.elf PID: 5517, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: na.elf PID: 5519, type: MEMORYSTR

Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36

Remote Access Functionality

Yara detected Gafgyt

Source: Yara match

File source: na.elf, type: SAMPLE

Yara detected Mirai

Source: Yara match	File source: na.elf, type: SAMPLE
Source: Yara match	File source: 5517.1.00007f68a8400000.00007f68a8418000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5519.1.00007f68a8400000.00007f68a8418000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: na.elf PID: 5517, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: na.elf PID: 5519, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Data Obfuscation	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	1 Remote System Discovery	Remote Desktop Protocol	Data from Removable Media	1 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Standard Port	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	2 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact

Malware Configuration

Threatname: Gafgyt

{"C2 url": "93.123.85.205:7777"}

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
na.elf	63%	ReversingLabs	Linux.Exploit.Mirai
na.elf	100%	Avira	EXP/ELF.Mirai.Z.A

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
daisy.ubuntu.com	162.213.35.25	true	false		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
93.123.85.205:7777	true		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
185.125.190.26	unknown	United Kingdom		41231	CANONICAL-ASGB	false
93.123.85.205	unknown	Bulgaria		43561	NET1-ASBG	true

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
185.125.190.26	la.bot.arm7.elf	Get hash	malicious	Unknown	Browse
	FBI.mpsl.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	c0r0n4x.ppc.elf	Get hash	malicious	Unknown	Browse
	dlr.x86.elf	Get hash	malicious	Okiru	Browse
	main_sh4.elf	Get hash	malicious	Mirai	Browse
	main_ppc.elf	Get hash	malicious	Mirai	Browse
	main_arm5.elf	Get hash	malicious	Mirai	Browse
	main_arm7.elf	Get hash	malicious	Mirai	Browse
	arm7.elf	Get hash	malicious	Unknown	Browse
	m68k.elf	Get hash	malicious	Unknown	Browse
93.123.85.205	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
daisy.ubuntu.com	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	la.bot.sparc.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	la.bot.powerpc.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	la.bot.arm5.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	la.bot.m68k.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.24
	la.bot.m68k.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	la.bot.arm5.elf	Get hash	malicious	Unknown	Browse	162.213.35.24

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CANONICAL-ASGB	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse	91.189.91.42
	arm.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	mips.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	la.bot.arm7.elf	Get hash	malicious	Unknown	Browse	185.125.190.26
	zermips.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	splarm6.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	arm6.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	la.bot.arc.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	la.bot.arm7.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	arm7.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
NET1-ASBG	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse	93.123.85.205
	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse	93.123.85.205
	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse	93.123.85.205
	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse	93.123.85.205
	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse	93.123.85.205
	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse	93.123.85.205
	la.bot.sparc.elf	Get hash	malicious	Unknown	Browse	93.123.30.220
	nabmips.elf	Get hash	malicious	Unknown	Browse	91.92.16.121
	Statement Of Account.exe	Get hash	malicious	Lokibot	Browse	94.156.177.220
	Purchase order.xls	Get hash	malicious	Lokibot	Browse	94.156.177.220

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

/tmp/qemu-open.MnLeFo (deleted)

Download File

Process:	/tmp/na.elf
File Type:	ASCII text
Category:	dropped
Size (bytes):	230
Entropy (8bit):	3.709552666863289
Encrypted:	false
SSDEEP:	6:iekrEcvwAsE5KlwSd4pzKaV6Lpms/a/1VCxGF:ur+m5MwSdIKaV6L1adVRF
MD5:	2E667F43AE18CD1FE3C108641708A82C
SHA1:	12B90DE2DA0FBCFE66F3D6130905E56C8D6A68D3
SHA-256:	6F721492E7A337C5B498A8F55F5EB7AC745AFF716D0B5B08EFF2C1B6B250F983
SHA-512:	D2A0EE2509154EC1098994F38BE172F98F4150399C534A04D5C675D7C05630802225019F19344CC9070C576BC465A4FEB382AC7712DE6BF25E9244B54A9DB830
Malicious:	false
Reputation:	high, very likely benign file
Preview:	Iface.Destination.Gateway .Flags.RefCnt.Use.Metric.Mask..MTU.Window.IRTT .ens160.00000000.c0a80201.0003.0.0.0.00000000.0.0.0.ens160.c0a80200.00000000.0001.0.0.0.ffffff00.0.0.0.

Static File Info

General

File type:	ELF 32-bit MSB executable, MIPS, MIPS-I version 1 (SYSV), statically linked, not stripped
Entropy (8bit):	5.259982316564114
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	na.elf
File size:	125'962 bytes
MD5:	dfa1f75be77ec732f133338460e60187
SHA1:	36c5a05a9ed5c961e12e2e00fc654348a10df818
SHA256:	fabb2ffc230d3033b25217310e97da8872eb2e03e7647173951c7469021e2729
SHA512:	babee559eef68c1929360f62d976248dabd3fedbadd8d441c666c6688e45fa2e5be83ce52004d349bb878c0a96af86d9d91b188235e0670191227da57812e425
SSDEEP:	1536:M7je1TMGq+f+AQ2rK7zeXeReXe8V2rK7Ie+u60GAzQj1l72HBeHEdWfRZrmW+IFj:Ted0W0MZQHzd6RZrmW+IFB1Dt1hR/
TLSH:	EAC3842E7E12BFBEE668863107F35F70879521D227A19382F26CD6181E7128D1C5FB64
File Content Preview:	.ELF.....................@.....4.........4. ...(....p........@...@...........................@...@....pD..pD..............pD.EpD.EpD......l.........dt.Q.................................................E..<...'......!'.......................<...'......!...

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, big endian
Version:	1 (current)
Machine:	MIPS R3000
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x4002a0
Flags:	0x1007
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	4
Section Header Offset:	106268
Section Header Size:	40
Number of Section Headers:	21
Header String Table Index:	18

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.reginfo	MIPS_REGINFO	0x4000b4	0xb4	0x18	0x18	0x2	A	0	0	4
.init	PROGBITS	0x4000cc	0xcc	0x8c	0x0	0x6	AX	0	0	4
.text	PROGBITS	0x400160	0x160	0x146c0	0x0	0x6	AX	0	0	16
.fini	PROGBITS	0x414820	0x14820	0x5c	0x0	0x6	AX	0	0	4
.rodata	PROGBITS	0x414880	0x14880	0x27c0	0x0	0x2	A	0	0	16
.eh_frame	PROGBITS	0x417040	0x17040	0x4	0x0	0x2	A	0	0	4
.ctors	PROGBITS	0x457044	0x17044	0x8	0x0	0x3	WA	0	0	4
.dtors	PROGBITS	0x45704c	0x1704c	0x8	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x457054	0x17054	0x4	0x0	0x3	WA	0	0	4
.data.rel.ro	PROGBITS	0x457058	0x17058	0x20	0x0	0x3	WA	0	0	4
.data	PROGBITS	0x457080	0x17080	0x440	0x0	0x3	WA	0	0	16
.got	PROGBITS	0x4574c0	0x174c0	0x460	0x4	0x10000003	WAp	0	0	16
.sbss	NOBITS	0x457920	0x17920	0x18	0x0	0x10000003	WAp	0	0	4
.bss	NOBITS	0x457940	0x17920	0x63a4	0x0	0x3	WA	0	0	16
.comment	PROGBITS	0x0	0x17920	0xa9e	0x0	0x0		0	0	1
.mdebug.abi32	PROGBITS	0xa9e	0x183be	0x0	0x0	0x0		0	0	1
.pdr	PROGBITS	0x0	0x183c0	0x1ac0	0x0	0x0		0	0	4
.shstrtab	STRTAB	0x0	0x19e80	0x9a	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x1a264	0x2a30	0x10	0x0		20	285	4
.strtab	STRTAB	0x0	0x1cc94	0x1f76	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
<unknown>	0xb4	0x4000b4	0x4000b4	0x18	0x18	0.9834	0x4	R	0x4	.reginfo
LOAD	0x0	0x400000	0x400000	0x17044	0x17044	5.2164	0x5	R E	0x10000	.reginfo .init .text .fini .rodata .eh_frame
LOAD	0x17044	0x457044	0x457044	0x8dc	0x6ca0	3.9535	0x6	RW	0x10000	.ctors .dtors .jcr .data.rel.ro .data .got .sbss .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x4000b4	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x4000cc	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x400160	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x414820	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x414880	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x417040	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x457044	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x45704c	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x457054	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x457058	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x457080	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x4574c0	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x457920	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x457940	0	SECTION	<unknown>	DEFAULT	14
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	15
	.symtab	0xa9e	0	SECTION	<unknown>	DEFAULT	16
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	17
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	18
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	19
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	20
C.111.5048	.symtab	0x457058	8	OBJECT	<unknown>	DEFAULT	10
C.148.5367	.symtab	0x457060	24	OBJECT	<unknown>	DEFAULT	10
Q	.symtab	0x457978	16384	OBJECT	<unknown>	DEFAULT	14
Sakura_Bot.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
SendSTD	.symtab	0x404774	516	FUNC	<unknown>	DEFAULT	3
SendSTDHEX	.symtab	0x4038c4	540	FUNC	<unknown>	DEFAULT	3
SendSTD_HEX	.symtab	0x404b88	588	FUNC	<unknown>	DEFAULT	3
SendUDP	.symtab	0x4028f8	1712	FUNC	<unknown>	DEFAULT	3
_GLOBAL_OFFSET_TABLE_	.symtab	0x4574c0	0	OBJECT	<unknown>	DEFAULT	12
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__CTOR_END__	.symtab	0x457048	0	OBJECT	<unknown>	DEFAULT	7
__CTOR_LIST__	.symtab	0x457044	0	OBJECT	<unknown>	DEFAULT	7
__C_ctype_b	.symtab	0x4570e0	4	OBJECT	<unknown>	DEFAULT	11
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x4158a0	768	OBJECT	<unknown>	DEFAULT	5
__C_ctype_tolower	.symtab	0x4574b0	4	OBJECT	<unknown>	DEFAULT	11
__C_ctype_tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_tolower_data	.symtab	0x415fd0	768	OBJECT	<unknown>	DEFAULT	5
__C_ctype_toupper	.symtab	0x4570f0	4	OBJECT	<unknown>	DEFAULT	11
__C_ctype_toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_toupper_data	.symtab	0x415ba0	768	OBJECT	<unknown>	DEFAULT	5
__DTOR_END__	.symtab	0x457050	0	OBJECT	<unknown>	DEFAULT	8
__DTOR_LIST__	.symtab	0x45704c	0	OBJECT	<unknown>	DEFAULT	8
__EH_FRAME_BEGIN__	.symtab	0x417040	0	OBJECT	<unknown>	DEFAULT	6
__FRAME_END__	.symtab	0x417040	0	OBJECT	<unknown>	DEFAULT	6
__GI___C_ctype_b	.symtab	0x4570e0	4	OBJECT	<unknown>	HIDDEN	11
__GI___C_ctype_b_data	.symtab	0x4158a0	768	OBJECT	<unknown>	HIDDEN	5
__GI___C_ctype_tolower	.symtab	0x4574b0	4	OBJECT	<unknown>	HIDDEN	11
__GI___C_ctype_tolower_data	.symtab	0x415fd0	768	OBJECT	<unknown>	HIDDEN	5
__GI___C_ctype_toupper	.symtab	0x4570f0	4	OBJECT	<unknown>	HIDDEN	11
__GI___C_ctype_toupper_data	.symtab	0x415ba0	768	OBJECT	<unknown>	HIDDEN	5
__GI___ctype_b	.symtab	0x4570e4	4	OBJECT	<unknown>	HIDDEN	11
__GI___ctype_tolower	.symtab	0x4574b4	4	OBJECT	<unknown>	HIDDEN	11
__GI___ctype_toupper	.symtab	0x4570f4	4	OBJECT	<unknown>	HIDDEN	11
__GI___errno_location	.symtab	0x40a780	24	FUNC	<unknown>	HIDDEN	3
__GI___fgetc_unlocked	.symtab	0x4127d0	388	FUNC	<unknown>	HIDDEN	3
__GI___glibc_strerror_r	.symtab	0x412c50	68	FUNC	<unknown>	HIDDEN	3
__GI___h_errno_location	.symtab	0x40d5f0	24	FUNC	<unknown>	HIDDEN	3
__GI___libc_fcntl	.symtab	0x40a050	136	FUNC	<unknown>	HIDDEN	3
__GI___libc_fcntl64	.symtab	0x40a0e0	104	FUNC	<unknown>	HIDDEN	3
__GI___libc_open	.symtab	0x40a450	124	FUNC	<unknown>	HIDDEN	3
__GI___uClibc_fini	.symtab	0x40cbe0	196	FUNC	<unknown>	HIDDEN	3
__GI___uClibc_init	.symtab	0x40cd3c	140	FUNC	<unknown>	HIDDEN	3
__GI___xpg_strerror_r	.symtab	0x412ca0	392	FUNC	<unknown>	HIDDEN	3
__GI__exit	.symtab	0x40a150	80	FUNC	<unknown>	HIDDEN	3
__GI_abort	.symtab	0x40ebd0	428	FUNC	<unknown>	HIDDEN	3
__GI_atoi	.symtab	0x40c590	28	FUNC	<unknown>	HIDDEN	3
__GI_atol	.symtab	0x40c590	28	FUNC	<unknown>	HIDDEN	3
__GI_brk	.symtab	0x40edb0	112	FUNC	<unknown>	HIDDEN	3
__GI_chdir	.symtab	0x40a200	88	FUNC	<unknown>	HIDDEN	3
__GI_close	.symtab	0x40a260	84	FUNC	<unknown>	HIDDEN	3
__GI_connect	.symtab	0x40b300	84	FUNC	<unknown>	HIDDEN	3
__GI_errno	.symtab	0x45bbd0	4	OBJECT	<unknown>	HIDDEN	14
__GI_exit	.symtab	0x40c820	236	FUNC	<unknown>	HIDDEN	3
__GI_fclose	.symtab	0x40ee80	512	FUNC	<unknown>	HIDDEN	3
__GI_fcntl	.symtab	0x40a050	136	FUNC	<unknown>	HIDDEN	3
__GI_fcntl64	.symtab	0x40a0e0	104	FUNC	<unknown>	HIDDEN	3
__GI_fflush_unlocked	.symtab	0x40f8f0	628	FUNC	<unknown>	HIDDEN	3
__GI_fgetc_unlocked	.symtab	0x4127d0	388	FUNC	<unknown>	HIDDEN	3
__GI_fgets	.symtab	0x40f680	216	FUNC	<unknown>	HIDDEN	3
__GI_fgets_unlocked	.symtab	0x40fb70	268	FUNC	<unknown>	HIDDEN	3
__GI_fopen	.symtab	0x40f080	28	FUNC	<unknown>	HIDDEN	3
__GI_fork	.symtab	0x40a2c0	84	FUNC	<unknown>	HIDDEN	3
__GI_fputs_unlocked	.symtab	0x412960	128	FUNC	<unknown>	HIDDEN	3
__GI_fseek	.symtab	0x414360	68	FUNC	<unknown>	HIDDEN	3
__GI_fseeko64	.symtab	0x4143b0	388	FUNC	<unknown>	HIDDEN	3
__GI_fwrite_unlocked	.symtab	0x4129e0	280	FUNC	<unknown>	HIDDEN	3
__GI_getc_unlocked	.symtab	0x4127d0	388	FUNC	<unknown>	HIDDEN	3
__GI_getegid	.symtab	0x40d280	88	FUNC	<unknown>	HIDDEN	3
__GI_geteuid	.symtab	0x40d2e0	88	FUNC	<unknown>	HIDDEN	3
__GI_getgid	.symtab	0x40d340	84	FUNC	<unknown>	HIDDEN	3
__GI_gethostbyname	.symtab	0x40ae20	116	FUNC	<unknown>	HIDDEN	3
__GI_gethostbyname_r	.symtab	0x40aea0	1108	FUNC	<unknown>	HIDDEN	3
__GI_getpid	.symtab	0x40a320	84	FUNC	<unknown>	HIDDEN	3
__GI_getsockname	.symtab	0x40b360	84	FUNC	<unknown>	HIDDEN	3
__GI_getuid	.symtab	0x40d3a0	84	FUNC	<unknown>	HIDDEN	3
__GI_h_errno	.symtab	0x45bbd4	4	OBJECT	<unknown>	HIDDEN	14
__GI_inet_addr	.symtab	0x40add0	72	FUNC	<unknown>	HIDDEN	3
__GI_inet_aton	.symtab	0x40dc70	244	FUNC	<unknown>	HIDDEN	3
__GI_inet_ntoa	.symtab	0x40adac	32	FUNC	<unknown>	HIDDEN	3
__GI_inet_ntoa_r	.symtab	0x40ad10	156	FUNC	<unknown>	HIDDEN	3
__GI_inet_ntop	.symtab	0x410580	852	FUNC	<unknown>	HIDDEN	3
__GI_inet_pton	.symtab	0x4100d0	700	FUNC	<unknown>	HIDDEN	3
__GI_initstate_r	.symtab	0x40c440	328	FUNC	<unknown>	HIDDEN	3
__GI_ioctl	.symtab	0x40a380	104	FUNC	<unknown>	HIDDEN	3
__GI_isatty	.symtab	0x40fef0	60	FUNC	<unknown>	HIDDEN	3
__GI_kill	.symtab	0x40a3f0	88	FUNC	<unknown>	HIDDEN	3
__GI_lseek64	.symtab	0x414700	168	FUNC	<unknown>	HIDDEN	3
__GI_memchr	.symtab	0x414140	264	FUNC	<unknown>	HIDDEN	3
__GI_memcpy	.symtab	0x40a7a0	308	FUNC	<unknown>	HIDDEN	3
__GI_memmove	.symtab	0x40d770	816	FUNC	<unknown>	HIDDEN	3
__GI_mempcpy	.symtab	0x412b00	76	FUNC	<unknown>	HIDDEN	3
__GI_memrchr	.symtab	0x414250	272	FUNC	<unknown>	HIDDEN	3
__GI_memset	.symtab	0x40a8e0	144	FUNC	<unknown>	HIDDEN	3
__GI_nanosleep	.symtab	0x40d400	84	FUNC	<unknown>	HIDDEN	3
__GI_open	.symtab	0x40a450	124	FUNC	<unknown>	HIDDEN	3
__GI_poll	.symtab	0x40ee20	84	FUNC	<unknown>	HIDDEN	3
__GI_raise	.symtab	0x4111e0	76	FUNC	<unknown>	HIDDEN	3
__GI_random	.symtab	0x40be10	164	FUNC	<unknown>	HIDDEN	3
__GI_random_r	.symtab	0x40c21c	176	FUNC	<unknown>	HIDDEN	3
__GI_rawmemchr	.symtab	0x40fc80	200	FUNC	<unknown>	HIDDEN	3
__GI_read	.symtab	0x40a4f0	84	FUNC	<unknown>	HIDDEN	3
__GI_recv	.symtab	0x40b440	84	FUNC	<unknown>	HIDDEN	3
__GI_sbrk	.symtab	0x40d460	144	FUNC	<unknown>	HIDDEN	3
__GI_select	.symtab	0x40a550	120	FUNC	<unknown>	HIDDEN	3
__GI_send	.symtab	0x40b4a0	84	FUNC	<unknown>	HIDDEN	3
__GI_sendto	.symtab	0x40b500	128	FUNC	<unknown>	HIDDEN	3
__GI_setsid	.symtab	0x40a5d0	84	FUNC	<unknown>	HIDDEN	3
__GI_setsockopt	.symtab	0x40b580	120	FUNC	<unknown>	HIDDEN	3
__GI_setstate_r	.symtab	0x40c0e0	316	FUNC	<unknown>	HIDDEN	3
__GI_sigaction	.symtab	0x40d130	232	FUNC	<unknown>	HIDDEN	3
__GI_signal	.symtab	0x40b660	252	FUNC	<unknown>	HIDDEN	3
__GI_sigprocmask	.symtab	0x40d4f0	148	FUNC	<unknown>	HIDDEN	3
__GI_sleep	.symtab	0x40c910	564	FUNC	<unknown>	HIDDEN	3
__GI_socket	.symtab	0x40b600	84	FUNC	<unknown>	HIDDEN	3
__GI_sprintf	.symtab	0x411270	80	FUNC	<unknown>	HIDDEN	3
__GI_srandom_r	.symtab	0x40c2cc	372	FUNC	<unknown>	HIDDEN	3
__GI_strcasecmp	.symtab	0x412e30	108	FUNC	<unknown>	HIDDEN	3
__GI_strchr	.symtab	0x40a970	256	FUNC	<unknown>	HIDDEN	3
__GI_strcmp	.symtab	0x40aa70	44	FUNC	<unknown>	HIDDEN	3
__GI_strcoll	.symtab	0x40aa70	44	FUNC	<unknown>	HIDDEN	3
__GI_strcpy	.symtab	0x40aaa0	36	FUNC	<unknown>	HIDDEN	3
__GI_strdup	.symtab	0x40fe60	144	FUNC	<unknown>	HIDDEN	3
__GI_strlen	.symtab	0x40aad0	184	FUNC	<unknown>	HIDDEN	3
__GI_strncat	.symtab	0x40fd50	180	FUNC	<unknown>	HIDDEN	3
__GI_strncpy	.symtab	0x40daa0	188	FUNC	<unknown>	HIDDEN	3
__GI_strnlen	.symtab	0x412b50	256	FUNC	<unknown>	HIDDEN	3
__GI_strpbrk	.symtab	0x40dc30	64	FUNC	<unknown>	HIDDEN	3
__GI_strspn	.symtab	0x40fe10	76	FUNC	<unknown>	HIDDEN	3
__GI_strstr	.symtab	0x40ab90	256	FUNC	<unknown>	HIDDEN	3
__GI_strtok	.symtab	0x40acd0	32	FUNC	<unknown>	HIDDEN	3
__GI_strtok_r	.symtab	0x40db60	204	FUNC	<unknown>	HIDDEN	3
__GI_strtol	.symtab	0x40c5b0	28	FUNC	<unknown>	HIDDEN	3
__GI_tcgetattr	.symtab	0x40ff30	176	FUNC	<unknown>	HIDDEN	3
__GI_time	.symtab	0x40a630	84	FUNC	<unknown>	HIDDEN	3
__GI_tolower	.symtab	0x411230	60	FUNC	<unknown>	HIDDEN	3
__GI_toupper	.symtab	0x40a740	60	FUNC	<unknown>	HIDDEN	3
__GI_vsnprintf	.symtab	0x4112c0	260	FUNC	<unknown>	HIDDEN	3
__GI_wait4	.symtab	0x40d590	88	FUNC	<unknown>	HIDDEN	3
__GI_waitpid	.symtab	0x40a690	28	FUNC	<unknown>	HIDDEN	3
__GI_wcrtomb	.symtab	0x413170	112	FUNC	<unknown>	HIDDEN	3
__GI_wcsnrtombs	.symtab	0x413220	228	FUNC	<unknown>	HIDDEN	3
__GI_wcsrtombs	.symtab	0x4131e0	64	FUNC	<unknown>	HIDDEN	3
__GI_write	.symtab	0x40a6b0	84	FUNC	<unknown>	HIDDEN	3
__JCR_END__	.symtab	0x457054	0	OBJECT	<unknown>	DEFAULT	9
__JCR_LIST__	.symtab	0x457054	0	OBJECT	<unknown>	DEFAULT	9
__app_fini	.symtab	0x45bbbc	4	OBJECT	<unknown>	HIDDEN	14
__atexit_lock	.symtab	0x4572e0	24	OBJECT	<unknown>	DEFAULT	11
__bsd_signal	.symtab	0x40b660	252	FUNC	<unknown>	HIDDEN	3
__bss_start	.symtab	0x457920	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x40ccb4	136	FUNC	<unknown>	DEFAULT	3
__ctype_b	.symtab	0x4570e4	4	OBJECT	<unknown>	DEFAULT	11
__ctype_tolower	.symtab	0x4574b4	4	OBJECT	<unknown>	DEFAULT	11
__ctype_toupper	.symtab	0x4570f4	4	OBJECT	<unknown>	DEFAULT	11
__curbrk	.symtab	0x45bc10	4	OBJECT	<unknown>	HIDDEN	14
__data_start	.symtab	0x4570a0	0	OBJECT	<unknown>	DEFAULT	11
__decode_answer	.symtab	0x410be0	340	FUNC	<unknown>	HIDDEN	3
__decode_dotted	.symtab	0x412fc0	340	FUNC	<unknown>	HIDDEN	3
__decode_header	.symtab	0x4109f0	228	FUNC	<unknown>	HIDDEN	3
__deregister_frame_info	.symtab	0x0	0	FUNC	<unknown>	DEFAULT	SHN_UNDEF
__dns_lookup	.symtab	0x40dd70	2568	FUNC	<unknown>	HIDDEN	3
__do_global_ctors_aux	.symtab	0x4147b0	0	FUNC	<unknown>	DEFAULT	3
__do_global_dtors_aux	.symtab	0x400160	0	FUNC	<unknown>	DEFAULT	3
__dso_handle	.symtab	0x457080	0	OBJECT	<unknown>	HIDDEN	11
__encode_dotted	.symtab	0x412ea0	280	FUNC	<unknown>	HIDDEN	3
__encode_header	.symtab	0x4108e0	272	FUNC	<unknown>	HIDDEN	3
__encode_question	.symtab	0x410ae0	172	FUNC	<unknown>	HIDDEN	3
__environ	.symtab	0x45bbb4	4	OBJECT	<unknown>	DEFAULT	14
__errno_location	.symtab	0x40a780	24	FUNC	<unknown>	DEFAULT	3
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x45bba0	4	OBJECT	<unknown>	HIDDEN	14
__fgetc_unlocked	.symtab	0x4127d0	388	FUNC	<unknown>	DEFAULT	3
__fini_array_end	.symtab	0x457044	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__fini_array_start	.symtab	0x457044	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__get_hosts_byname_r	.symtab	0x40eb60	104	FUNC	<unknown>	HIDDEN	3
__glibc_strerror_r	.symtab	0x412c50	68	FUNC	<unknown>	DEFAULT	3
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__h_errno_location	.symtab	0x40d5f0	24	FUNC	<unknown>	DEFAULT	3
__h_errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__heap_alloc	.symtab	0x40bb70	188	FUNC	<unknown>	DEFAULT	3
__heap_free	.symtab	0x40bc78	364	FUNC	<unknown>	DEFAULT	3
__heap_link_free_area	.symtab	0x40bc30	44	FUNC	<unknown>	DEFAULT	3
__heap_link_free_area_after	.symtab	0x40bc5c	28	FUNC	<unknown>	DEFAULT	3
__init_array_end	.symtab	0x457044	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__init_array_start	.symtab	0x457044	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__length_dotted	.symtab	0x413120	72	FUNC	<unknown>	HIDDEN	3
__length_question	.symtab	0x410b90	72	FUNC	<unknown>	HIDDEN	3
__libc_close	.symtab	0x40a260	84	FUNC	<unknown>	DEFAULT	3
__libc_connect	.symtab	0x40b300	84	FUNC	<unknown>	DEFAULT	3
__libc_creat	.symtab	0x40a4cc	28	FUNC	<unknown>	DEFAULT	3
__libc_fcntl	.symtab	0x40a050	136	FUNC	<unknown>	DEFAULT	3
__libc_fcntl64	.symtab	0x40a0e0	104	FUNC	<unknown>	DEFAULT	3
__libc_fork	.symtab	0x40a2c0	84	FUNC	<unknown>	DEFAULT	3
__libc_getpid	.symtab	0x40a320	84	FUNC	<unknown>	DEFAULT	3
__libc_lseek64	.symtab	0x414700	168	FUNC	<unknown>	DEFAULT	3
__libc_nanosleep	.symtab	0x40d400	84	FUNC	<unknown>	DEFAULT	3
__libc_open	.symtab	0x40a450	124	FUNC	<unknown>	DEFAULT	3
__libc_poll	.symtab	0x40ee20	84	FUNC	<unknown>	DEFAULT	3
__libc_read	.symtab	0x40a4f0	84	FUNC	<unknown>	DEFAULT	3
__libc_recv	.symtab	0x40b440	84	FUNC	<unknown>	DEFAULT	3
__libc_select	.symtab	0x40a550	120	FUNC	<unknown>	DEFAULT	3
__libc_send	.symtab	0x40b4a0	84	FUNC	<unknown>	DEFAULT	3
__libc_sendto	.symtab	0x40b500	128	FUNC	<unknown>	DEFAULT	3
__libc_sigaction	.symtab	0x40d130	232	FUNC	<unknown>	DEFAULT	3
__libc_stack_end	.symtab	0x45bbb0	4	OBJECT	<unknown>	DEFAULT	14
__libc_waitpid	.symtab	0x40a690	28	FUNC	<unknown>	DEFAULT	3
__libc_write	.symtab	0x40a6b0	84	FUNC	<unknown>	DEFAULT	3
__malloc_heap	.symtab	0x457210	4	OBJECT	<unknown>	DEFAULT	11
__malloc_heap_lock	.symtab	0x45bb80	24	OBJECT	<unknown>	DEFAULT	14
__malloc_sbrk_lock	.symtab	0x45dcb0	24	OBJECT	<unknown>	DEFAULT	14
__nameserver	.symtab	0x45dcd8	12	OBJECT	<unknown>	HIDDEN	14
__nameservers	.symtab	0x457928	4	OBJECT	<unknown>	HIDDEN	13
__open_etc_hosts	.symtab	0x410d40	108	FUNC	<unknown>	HIDDEN	3
__open_nameservers	.symtab	0x40e780	984	FUNC	<unknown>	HIDDEN	3
__pagesize	.symtab	0x45bbb8	4	OBJECT	<unknown>	DEFAULT	14
__preinit_array_end	.symtab	0x457044	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__preinit_array_start	.symtab	0x457044	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__pthread_initialize_minimal	.symtab	0x0	0	FUNC	<unknown>	DEFAULT	SHN_UNDEF
__pthread_mutex_init	.symtab	0x40cca4	8	FUNC	<unknown>	DEFAULT	3
__pthread_mutex_lock	.symtab	0x40cca4	8	FUNC	<unknown>	DEFAULT	3
__pthread_mutex_trylock	.symtab	0x40cca4	8	FUNC	<unknown>	DEFAULT	3
__pthread_mutex_unlock	.symtab	0x40cca4	8	FUNC	<unknown>	DEFAULT	3
__pthread_return_0	.symtab	0x40cca4	8	FUNC	<unknown>	DEFAULT	3
__pthread_return_void	.symtab	0x40ccac	8	FUNC	<unknown>	DEFAULT	3
__raise	.symtab	0x4111e0	76	FUNC	<unknown>	HIDDEN	3
__read_etc_hosts_r	.symtab	0x410dac	1076	FUNC	<unknown>	HIDDEN	3
__register_frame_info	.symtab	0x0	0	FUNC	<unknown>	DEFAULT	SHN_UNDEF
__resolv_lock	.symtab	0x457320	24	OBJECT	<unknown>	DEFAULT	11
__rtld_fini	.symtab	0x45bbc0	4	OBJECT	<unknown>	HIDDEN	14
__searchdomain	.symtab	0x45dcc8	16	OBJECT	<unknown>	HIDDEN	14
__searchdomains	.symtab	0x45792c	4	OBJECT	<unknown>	HIDDEN	13
__sigaddset	.symtab	0x40b788	44	FUNC	<unknown>	DEFAULT	3
__sigdelset	.symtab	0x40b7b4	48	FUNC	<unknown>	DEFAULT	3
__sigismember	.symtab	0x40b760	40	FUNC	<unknown>	DEFAULT	3
__start	.symtab	0x4002a0	100	FUNC	<unknown>	DEFAULT	3
__stdin	.symtab	0x4573ac	4	OBJECT	<unknown>	DEFAULT	11
__stdio_READ	.symtab	0x413310	140	FUNC	<unknown>	HIDDEN	3
__stdio_WRITE	.symtab	0x4113d0	280	FUNC	<unknown>	HIDDEN	3
__stdio_adjust_position	.symtab	0x414540	324	FUNC	<unknown>	HIDDEN	3
__stdio_fwrite	.symtab	0x4133a0	472	FUNC	<unknown>	HIDDEN	3
__stdio_init_mutex	.symtab	0x40f4c8	32	FUNC	<unknown>	HIDDEN	3
__stdio_mutex_initializer.3833	.symtab	0x415f50	24	OBJECT	<unknown>	DEFAULT	5
__stdio_rfill	.symtab	0x413580	88	FUNC	<unknown>	HIDDEN	3
__stdio_seek	.symtab	0x414690	112	FUNC	<unknown>	HIDDEN	3
__stdio_trans2r_o	.symtab	0x4135e0	228	FUNC	<unknown>	HIDDEN	3
__stdio_trans2w_o	.symtab	0x4136d0	308	FUNC	<unknown>	HIDDEN	3
__stdio_wcommit	.symtab	0x40f610	100	FUNC	<unknown>	HIDDEN	3
__stdout	.symtab	0x4573b0	4	OBJECT	<unknown>	DEFAULT	11
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fcntl64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_rt_sigaction	.symtab	0x40d220	84	FUNC	<unknown>	HIDDEN	3
__syscall_rt_sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uClibc_fini	.symtab	0x40cbe0	196	FUNC	<unknown>	DEFAULT	3
__uClibc_init	.symtab	0x40cd3c	140	FUNC	<unknown>	DEFAULT	3
__uClibc_main	.symtab	0x40cdc8	864	FUNC	<unknown>	DEFAULT	3
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x457300	4	OBJECT	<unknown>	HIDDEN	11
__xpg_strerror_r	.symtab	0x412ca0	392	FUNC	<unknown>	DEFAULT	3
__xpg_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_adjust_pos.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_charpad	.symtab	0x4114f0	128	FUNC	<unknown>	DEFAULT	3
_cs_funcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_dl_aux_init	.symtab	0x40ed80	44	FUNC	<unknown>	DEFAULT	3
_dl_phdr	.symtab	0x457930	4	OBJECT	<unknown>	DEFAULT	13
_dl_phnum	.symtab	0x457934	4	OBJECT	<unknown>	DEFAULT	13
_edata	.symtab	0x457920	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x45dce4	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_errno	.symtab	0x45bbd0	4	OBJECT	<unknown>	DEFAULT	14
_exit	.symtab	0x40a150	80	FUNC	<unknown>	DEFAULT	3
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fbss	.symtab	0x457920	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_fdata	.symtab	0x457080	0	NOTYPE	<unknown>	DEFAULT	11
_fini	.symtab	0x414820	28	FUNC	<unknown>	DEFAULT	4
_fixed_buffers	.symtab	0x45bc28	8192	OBJECT	<unknown>	DEFAULT	14
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow	.symtab	0x411570	228	FUNC	<unknown>	DEFAULT	3
_fpmaxtostr	.symtab	0x4138f0	2120	FUNC	<unknown>	HIDDEN	3
_fpmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ftext	.symtab	0x400160	0	NOTYPE	<unknown>	DEFAULT	3
_fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_gp	.symtab	0x45f4b0	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_gp_disp	.symtab	0x0	0	OBJECT	<unknown>	DEFAULT	SHN_UNDEF
_h_errno	.symtab	0x45bbd4	4	OBJECT	<unknown>	DEFAULT	14
_init	.symtab	0x4000cc	28	FUNC	<unknown>	DEFAULT	2
_load_inttype	.symtab	0x413810	136	FUNC	<unknown>	HIDDEN	3
_load_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_init	.symtab	0x411e00	220	FUNC	<unknown>	HIDDEN	3
_ppfs_init.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec	.symtab	0x4121dc	1512	FUNC	<unknown>	HIDDEN	3
_ppfs_parsespec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs	.symtab	0x411ee0	100	FUNC	<unknown>	HIDDEN	3
_ppfs_prepargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs	.symtab	0x411f50	540	FUNC	<unknown>	HIDDEN	3
_ppfs_setargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size	.symtab	0x412170	108	FUNC	<unknown>	DEFAULT	3
_pthread_cleanup_pop_restore	.symtab	0x40ccac	8	FUNC	<unknown>	DEFAULT	3
_pthread_cleanup_push_defer	.symtab	0x40ccac	8	FUNC	<unknown>	DEFAULT	3
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_sigintr	.symtab	0x45dc30	128	OBJECT	<unknown>	HIDDEN	14
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x40f0a0	880	FUNC	<unknown>	HIDDEN	3
_stdio_init	.symtab	0x40f410	184	FUNC	<unknown>	HIDDEN	3
_stdio_openlist	.symtab	0x4573b4	4	OBJECT	<unknown>	DEFAULT	11
_stdio_openlist_add_lock	.symtab	0x457360	24	OBJECT	<unknown>	DEFAULT	11
_stdio_openlist_dec_use	.symtab	0x40f760	400	FUNC	<unknown>	DEFAULT	3
_stdio_openlist_del_count	.symtab	0x45bc24	4	OBJECT	<unknown>	DEFAULT	14
_stdio_openlist_del_lock	.symtab	0x457378	24	OBJECT	<unknown>	DEFAULT	11
_stdio_openlist_use_count	.symtab	0x45bc20	4	OBJECT	<unknown>	DEFAULT	14
_stdio_streams	.symtab	0x4573b8	240	OBJECT	<unknown>	DEFAULT	11
_stdio_term	.symtab	0x40f4e8	284	FUNC	<unknown>	HIDDEN	3
_stdio_user_locking	.symtab	0x457390	4	OBJECT	<unknown>	DEFAULT	11
_stdlib_strto_l	.symtab	0x40c5d0	592	FUNC	<unknown>	HIDDEN	3
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_store_inttype	.symtab	0x4138a0	68	FUNC	<unknown>	HIDDEN	3
_store_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_string_syserrmsgs	.symtab	0x416420	2934	OBJECT	<unknown>	HIDDEN	5
_string_syserrmsgs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr	.symtab	0x40d610	340	FUNC	<unknown>	HIDDEN	3
_uintmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal	.symtab	0x411654	1960	FUNC	<unknown>	HIDDEN	3
_vfprintf_internal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0x40ebd0	428	FUNC	<unknown>	DEFAULT	3
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
access	.symtab	0x40a1a0	84	FUNC	<unknown>	DEFAULT	3
access.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
astd	.symtab	0x406650	536	FUNC	<unknown>	DEFAULT	3
atcp	.symtab	0x405d34	2332	FUNC	<unknown>	DEFAULT	3
atoi	.symtab	0x40c590	28	FUNC	<unknown>	DEFAULT	3
atol	.symtab	0x40c590	28	FUNC	<unknown>	DEFAULT	3
atol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
audp	.symtab	0x4054a8	2188	FUNC	<unknown>	DEFAULT	3
bcopy	.symtab	0x40ac90	32	FUNC	<unknown>	DEFAULT	3
bcopy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
been_there_done_that	.symtab	0x45bc00	4	OBJECT	<unknown>	DEFAULT	14
been_there_done_that.2792	.symtab	0x45bbc4	4	OBJECT	<unknown>	DEFAULT	14
brk	.symtab	0x40edb0	112	FUNC	<unknown>	DEFAULT	3
brk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bsd_signal	.symtab	0x40b660	252	FUNC	<unknown>	DEFAULT	3
buf.2601	.symtab	0x45b990	16	OBJECT	<unknown>	DEFAULT	14
buf.4833	.symtab	0x45b9a0	460	OBJECT	<unknown>	DEFAULT	14
bzero	.symtab	0x40acb0	28	FUNC	<unknown>	DEFAULT	3
bzero.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
c	.symtab	0x4570b4	4	OBJECT	<unknown>	DEFAULT	11
chdir	.symtab	0x40a200	88	FUNC	<unknown>	DEFAULT	3
chdir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0x40a260	84	FUNC	<unknown>	DEFAULT	3
close.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
commServer	.symtab	0x4570c0	4	OBJECT	<unknown>	DEFAULT	11
completed.2296	.symtab	0x457940	1	OBJECT	<unknown>	DEFAULT	14
connect	.symtab	0x40b300	84	FUNC	<unknown>	DEFAULT	3
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
connectTimeout	.symtab	0x401ed8	828	FUNC	<unknown>	DEFAULT	3
creat	.symtab	0x40a4cc	28	FUNC	<unknown>	DEFAULT	3
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
csum	.symtab	0x402490	460	FUNC	<unknown>	DEFAULT	3
currentServer	.symtab	0x4570b0	4	OBJECT	<unknown>	DEFAULT	11
data_start	.symtab	0x4570a0	0	OBJECT	<unknown>	DEFAULT	11
decodea.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dnslookup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
environ	.symtab	0x45bbb4	4	OBJECT	<unknown>	DEFAULT	14
errno	.symtab	0x45bbd0	4	OBJECT	<unknown>	DEFAULT	14
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
estridx	.symtab	0x416390	126	OBJECT	<unknown>	DEFAULT	5
exit	.symtab	0x40c820	236	FUNC	<unknown>	DEFAULT	3
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exp10_table	.symtab	0x416ff8	72	OBJECT	<unknown>	DEFAULT	5
fclose	.symtab	0x40ee80	512	FUNC	<unknown>	DEFAULT	3
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0x40a050	136	FUNC	<unknown>	DEFAULT	3
fcntl64	.symtab	0x40a0e0	104	FUNC	<unknown>	DEFAULT	3
fdgets	.symtab	0x4006bc	292	FUNC	<unknown>	DEFAULT	3
fflush_unlocked	.symtab	0x40f8f0	628	FUNC	<unknown>	DEFAULT	3
fflush_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked	.symtab	0x4127d0	388	FUNC	<unknown>	DEFAULT	3
fgetc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets	.symtab	0x40f680	216	FUNC	<unknown>	DEFAULT	3
fgets.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked	.symtab	0x40fb70	268	FUNC	<unknown>	DEFAULT	3
fgets_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fmt	.symtab	0x416fe0	20	OBJECT	<unknown>	DEFAULT	5
fopen	.symtab	0x40f080	28	FUNC	<unknown>	DEFAULT	3
fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork	.symtab	0x40a2c0	84	FUNC	<unknown>	DEFAULT	3
fork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fputs_unlocked	.symtab	0x412960	128	FUNC	<unknown>	DEFAULT	3
fputs_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
frame_dummy	.symtab	0x40021c	0	FUNC	<unknown>	DEFAULT	3
free	.symtab	0x40b9e0	396	FUNC	<unknown>	DEFAULT	3
free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseek	.symtab	0x414360	68	FUNC	<unknown>	DEFAULT	3
fseeko	.symtab	0x414360	68	FUNC	<unknown>	DEFAULT	3
fseeko.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseeko64	.symtab	0x4143b0	388	FUNC	<unknown>	DEFAULT	3
fseeko64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ftcp	.symtab	0x402fa8	2332	FUNC	<unknown>	DEFAULT	3
fwrite_unlocked	.symtab	0x4129e0	280	FUNC	<unknown>	DEFAULT	3
fwrite_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getArch	.symtab	0x406868	56	FUNC	<unknown>	DEFAULT	3
getHost	.symtab	0x4019c0	160	FUNC	<unknown>	DEFAULT	3
getOurIP	.symtab	0x4007e0	896	FUNC	<unknown>	DEFAULT	3
getPortz	.symtab	0x4068a0	380	FUNC	<unknown>	DEFAULT	3
getRandomIP	.symtab	0x400610	172	FUNC	<unknown>	DEFAULT	3
get_hosts_byname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getc_unlocked	.symtab	0x4127d0	388	FUNC	<unknown>	DEFAULT	3
getegid	.symtab	0x40d280	88	FUNC	<unknown>	DEFAULT	3
getegid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid	.symtab	0x40d2e0	88	FUNC	<unknown>	DEFAULT	3
geteuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid	.symtab	0x40d340	84	FUNC	<unknown>	DEFAULT	3
getgid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname	.symtab	0x40ae20	116	FUNC	<unknown>	DEFAULT	3
gethostbyname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname_r	.symtab	0x40aea0	1108	FUNC	<unknown>	DEFAULT	3
gethostbyname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid	.symtab	0x40a320	84	FUNC	<unknown>	DEFAULT	3
getpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockname	.symtab	0x40b360	84	FUNC	<unknown>	DEFAULT	3
getsockname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt	.symtab	0x40b3c0	120	FUNC	<unknown>	DEFAULT	3
getsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid	.symtab	0x40d3a0	84	FUNC	<unknown>	DEFAULT	3
getuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gotIP	.symtab	0x457964	4	OBJECT	<unknown>	DEFAULT	14
h.4832	.symtab	0x45bb6c	20	OBJECT	<unknown>	DEFAULT	14
h_errno	.symtab	0x45bbd4	4	OBJECT	<unknown>	DEFAULT	14
heap_alloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
heap_free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
hlt	.symtab	0x4002fc	0	NOTYPE	<unknown>	DEFAULT	3
htonl	.symtab	0x40ad00	8	FUNC	<unknown>	DEFAULT	3
htons	.symtab	0x40ad08	8	FUNC	<unknown>	DEFAULT	3
i.4126	.symtab	0x4570b8	4	OBJECT	<unknown>	DEFAULT	11
index	.symtab	0x40a970	256	FUNC	<unknown>	DEFAULT	3
inet_addr	.symtab	0x40add0	72	FUNC	<unknown>	DEFAULT	3
inet_aton	.symtab	0x40dc70	244	FUNC	<unknown>	DEFAULT	3
inet_aton.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa	.symtab	0x40adac	32	FUNC	<unknown>	DEFAULT	3
inet_ntoa.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa_r	.symtab	0x40ad10	156	FUNC	<unknown>	DEFAULT	3
inet_ntop	.symtab	0x410580	852	FUNC	<unknown>	DEFAULT	3
inet_ntop4	.symtab	0x41038c	500	FUNC	<unknown>	DEFAULT	3
inet_pton	.symtab	0x4100d0	700	FUNC	<unknown>	DEFAULT	3
inet_pton4	.symtab	0x40ffe0	240	FUNC	<unknown>	DEFAULT	3
initConnection	.symtab	0x409220	592	FUNC	<unknown>	DEFAULT	3
init_rand	.symtab	0x400310	300	FUNC	<unknown>	DEFAULT	3
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initial_fa	.symtab	0x457100	264	OBJECT	<unknown>	DEFAULT	11
initstate	.symtab	0x40bf64	208	FUNC	<unknown>	DEFAULT	3
initstate_r	.symtab	0x40c440	328	FUNC	<unknown>	DEFAULT	3
ioctl	.symtab	0x40a380	104	FUNC	<unknown>	DEFAULT	3
ioctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isatty	.symtab	0x40fef0	60	FUNC	<unknown>	DEFAULT	3
isatty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isspace	.symtab	0x40a710	44	FUNC	<unknown>	DEFAULT	3
isspace.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill	.symtab	0x40a3f0	88	FUNC	<unknown>	DEFAULT	3
kill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lengthd.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lengthq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/mips/memcpy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/mips/memset.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/mips/crt1.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/mips/crti.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/mips/crtn.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
listFork	.symtab	0x402214	636	FUNC	<unknown>	DEFAULT	3
llseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lseek64	.symtab	0x414700	168	FUNC	<unknown>	DEFAULT	3
macAddress	.symtab	0x457970	6	OBJECT	<unknown>	DEFAULT	14
main	.symtab	0x409470	3028	FUNC	<unknown>	DEFAULT	3
mainCommSock	.symtab	0x457960	4	OBJECT	<unknown>	DEFAULT	14
makeIPPacket	.symtab	0x4027c0	312	FUNC	<unknown>	DEFAULT	3
makeRandomStr	.symtab	0x401a60	268	FUNC	<unknown>	DEFAULT	3
makevsepacket	.symtab	0x403c9c	348	FUNC	<unknown>	DEFAULT	3
malloc	.symtab	0x40b7f0	492	FUNC	<unknown>	DEFAULT	3
malloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memchr	.symtab	0x414140	264	FUNC	<unknown>	DEFAULT	3
memchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memcpy	.symtab	0x40a7a0	308	FUNC	<unknown>	DEFAULT	3
memmove	.symtab	0x40d770	816	FUNC	<unknown>	DEFAULT	3
memmove.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mempcpy	.symtab	0x412b00	76	FUNC	<unknown>	DEFAULT	3
mempcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memrchr	.symtab	0x414250	272	FUNC	<unknown>	DEFAULT	3
memrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset	.symtab	0x40a8e0	144	FUNC	<unknown>	DEFAULT	3
mylock	.symtab	0x457220	24	OBJECT	<unknown>	DEFAULT	11
mylock	.symtab	0x45bbe0	24	OBJECT	<unknown>	DEFAULT	14
mylock	.symtab	0x457340	24	OBJECT	<unknown>	DEFAULT	11
nanosleep	.symtab	0x40d400	84	FUNC	<unknown>	DEFAULT	3
nanosleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
next_start.1065	.symtab	0x45b980	4	OBJECT	<unknown>	DEFAULT	14
ntohl	.symtab	0x40acf0	8	FUNC	<unknown>	DEFAULT	3
ntohl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ntohs	.symtab	0x40acf8	8	FUNC	<unknown>	DEFAULT	3
ntop.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
numpids	.symtab	0x457968	8	OBJECT	<unknown>	DEFAULT	14
object.2349	.symtab	0x457944	24	OBJECT	<unknown>	DEFAULT	14
open	.symtab	0x40a450	124	FUNC	<unknown>	DEFAULT	3
open.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
opennameservers.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ourIP	.symtab	0x457920	4	OBJECT	<unknown>	DEFAULT	13
p.2294	.symtab	0x457090	0	OBJECT	<unknown>	DEFAULT	11
pids	.symtab	0x457924	4	OBJECT	<unknown>	DEFAULT	13
poll	.symtab	0x40ee20	84	FUNC	<unknown>	DEFAULT	3
poll.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prefix.4045	.symtab	0x4162e0	12	OBJECT	<unknown>	DEFAULT	5
print	.symtab	0x4012b8	1456	FUNC	<unknown>	DEFAULT	3
printchar	.symtab	0x400d2c	184	FUNC	<unknown>	DEFAULT	3
printi	.symtab	0x401020	664	FUNC	<unknown>	DEFAULT	3
prints	.symtab	0x400de4	572	FUNC	<unknown>	DEFAULT	3
processCmd	.symtab	0x406a1c	10244	FUNC	<unknown>	DEFAULT	3
qual_chars.4050	.symtab	0x416300	20	OBJECT	<unknown>	DEFAULT	5
raise	.symtab	0x4111e0	76	FUNC	<unknown>	DEFAULT	3
raise.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand	.symtab	0x40bdf0	28	FUNC	<unknown>	DEFAULT	3
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand_cmwc	.symtab	0x40043c	468	FUNC	<unknown>	DEFAULT	3
random	.symtab	0x40be10	164	FUNC	<unknown>	DEFAULT	3
random.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
random_poly_info	.symtab	0x415ea0	40	OBJECT	<unknown>	DEFAULT	5
random_r	.symtab	0x40c21c	176	FUNC	<unknown>	DEFAULT	3
random_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
randtbl	.symtab	0x457238	128	OBJECT	<unknown>	DEFAULT	11
rawmemchr	.symtab	0x40fc80	200	FUNC	<unknown>	DEFAULT	3
rawmemchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read	.symtab	0x40a4f0	84	FUNC	<unknown>	DEFAULT	3
read.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read_etc_hosts_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recv	.symtab	0x40b440	84	FUNC	<unknown>	DEFAULT	3
recv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recvLine	.symtab	0x401b6c	876	FUNC	<unknown>	DEFAULT	3
rtcp	.symtab	0x404dd4	1748	FUNC	<unknown>	DEFAULT	3
sbrk	.symtab	0x40d460	144	FUNC	<unknown>	DEFAULT	3
sbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
select	.symtab	0x40a550	120	FUNC	<unknown>	DEFAULT	3
select.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
send	.symtab	0x40b4a0	84	FUNC	<unknown>	DEFAULT	3
send.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sendto	.symtab	0x40b500	128	FUNC	<unknown>	DEFAULT	3
sendto.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsid	.symtab	0x40a5d0	84	FUNC	<unknown>	DEFAULT	3
setsid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsockopt	.symtab	0x40b580	120	FUNC	<unknown>	DEFAULT	3
setsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setstate	.symtab	0x40beb4	176	FUNC	<unknown>	DEFAULT	3
setstate_r	.symtab	0x40c0e0	316	FUNC	<unknown>	DEFAULT	3
sigaction	.symtab	0x40d130	232	FUNC	<unknown>	DEFAULT	3
sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
signal	.symtab	0x40b660	252	FUNC	<unknown>	DEFAULT	3
signal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigprocmask	.symtab	0x40d4f0	148	FUNC	<unknown>	DEFAULT	3
sigprocmask.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigsetops.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sleep	.symtab	0x40c910	564	FUNC	<unknown>	DEFAULT	3
sleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket	.symtab	0x40b600	84	FUNC	<unknown>	DEFAULT	3
socket.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket_connect	.symtab	0x403ae0	444	FUNC	<unknown>	DEFAULT	3
sockprintf	.symtab	0x401868	344	FUNC	<unknown>	DEFAULT	3
spec_and_mask.4049	.symtab	0x416314	16	OBJECT	<unknown>	DEFAULT	5
spec_base.4044	.symtab	0x4162ec	7	OBJECT	<unknown>	DEFAULT	5
spec_chars.4046	.symtab	0x416340	21	OBJECT	<unknown>	DEFAULT	5
spec_flags.4045	.symtab	0x416358	8	OBJECT	<unknown>	DEFAULT	5
spec_or_mask.4048	.symtab	0x416324	16	OBJECT	<unknown>	DEFAULT	5
spec_ranges.4047	.symtab	0x416334	9	OBJECT	<unknown>	DEFAULT	5
sprintf	.symtab	0x411270	80	FUNC	<unknown>	DEFAULT	3
sprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
srand	.symtab	0x40c034	172	FUNC	<unknown>	DEFAULT	3
srandom	.symtab	0x40c034	172	FUNC	<unknown>	DEFAULT	3
srandom_r	.symtab	0x40c2cc	372	FUNC	<unknown>	DEFAULT	3
static_id	.symtab	0x457310	2	OBJECT	<unknown>	DEFAULT	11
static_ns	.symtab	0x45bbf8	4	OBJECT	<unknown>	DEFAULT	14
stderr	.symtab	0x4573a8	4	OBJECT	<unknown>	DEFAULT	11
stdhexflood	.symtab	0x404978	528	FUNC	<unknown>	DEFAULT	3
stdin	.symtab	0x4573a0	4	OBJECT	<unknown>	DEFAULT	11
stdout	.symtab	0x4573a4	4	OBJECT	<unknown>	DEFAULT	11
strcasecmp	.symtab	0x412e30	108	FUNC	<unknown>	DEFAULT	3
strcasecmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchr	.symtab	0x40a970	256	FUNC	<unknown>	DEFAULT	3
strchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcmp	.symtab	0x40aa70	44	FUNC	<unknown>	DEFAULT	3
strcmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcoll	.symtab	0x40aa70	44	FUNC	<unknown>	DEFAULT	3
strcpy	.symtab	0x40aaa0	36	FUNC	<unknown>	DEFAULT	3
strcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strdup	.symtab	0x40fe60	144	FUNC	<unknown>	DEFAULT	3
strdup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strerror_r	.symtab	0x412ca0	392	FUNC	<unknown>	DEFAULT	3
strlen	.symtab	0x40aad0	184	FUNC	<unknown>	DEFAULT	3
strlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strncat	.symtab	0x40fd50	180	FUNC	<unknown>	DEFAULT	3
strncat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strncpy	.symtab	0x40daa0	188	FUNC	<unknown>	DEFAULT	3
strncpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strnlen	.symtab	0x412b50	256	FUNC	<unknown>	DEFAULT	3
strnlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strpbrk	.symtab	0x40dc30	64	FUNC	<unknown>	DEFAULT	3
strpbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strspn	.symtab	0x40fe10	76	FUNC	<unknown>	DEFAULT	3
strspn.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strstr	.symtab	0x40ab90	256	FUNC	<unknown>	DEFAULT	3
strstr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok	.symtab	0x40acd0	32	FUNC	<unknown>	DEFAULT	3
strtok.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok_r	.symtab	0x40db60	204	FUNC	<unknown>	DEFAULT	3
strtok_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtol	.symtab	0x40c5b0	28	FUNC	<unknown>	DEFAULT	3
strtol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcgetattr	.symtab	0x40ff30	176	FUNC	<unknown>	DEFAULT	3
tcgetattr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcpcsum	.symtab	0x40265c	356	FUNC	<unknown>	DEFAULT	3
time	.symtab	0x40a630	84	FUNC	<unknown>	DEFAULT	3
time.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tolower	.symtab	0x411230	60	FUNC	<unknown>	DEFAULT	3
tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
toupper	.symtab	0x40a740	60	FUNC	<unknown>	DEFAULT	3
toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
trim	.symtab	0x400b60	460	FUNC	<unknown>	DEFAULT	3
type_codes	.symtab	0x416360	24	OBJECT	<unknown>	DEFAULT	5
type_sizes	.symtab	0x416378	12	OBJECT	<unknown>	DEFAULT	5
unknown.1088	.symtab	0x416410	14	OBJECT	<unknown>	DEFAULT	5
unsafe_state	.symtab	0x4572c0	28	OBJECT	<unknown>	DEFAULT	11
useragents	.symtab	0x4570c4	28	OBJECT	<unknown>	DEFAULT	11
usleep	.symtab	0x40cb50	144	FUNC	<unknown>	DEFAULT	3
usleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
vseattack	.symtab	0x403df8	2428	FUNC	<unknown>	DEFAULT	3
vsnprintf	.symtab	0x4112c0	260	FUNC	<unknown>	DEFAULT	3
vsnprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wait4	.symtab	0x40d590	88	FUNC	<unknown>	DEFAULT	3
wait4.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
waitpid	.symtab	0x40a690	28	FUNC	<unknown>	DEFAULT	3
waitpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcrtomb	.symtab	0x413170	112	FUNC	<unknown>	DEFAULT	3
wcrtomb.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsnrtombs	.symtab	0x413220	228	FUNC	<unknown>	DEFAULT	3
wcsnrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsrtombs	.symtab	0x4131e0	64	FUNC	<unknown>	DEFAULT	3
wcsrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
write	.symtab	0x40a6b0	84	FUNC	<unknown>	DEFAULT	3
write.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
xdigits.3043	.symtab	0x415f84	17	OBJECT	<unknown>	DEFAULT	5

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-28T09:18:35.909217+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38088	93.123.85.205	7777	TCP
2024-10-28T09:18:37.132766+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38090	93.123.85.205	7777	TCP
2024-10-28T09:18:38.223988+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38092	93.123.85.205	7777	TCP
2024-10-28T09:18:39.336399+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38094	93.123.85.205	7777	TCP
2024-10-28T09:18:40.624128+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38096	93.123.85.205	7777	TCP
2024-10-28T09:18:41.758733+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38098	93.123.85.205	7777	TCP
2024-10-28T09:18:42.945958+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38100	93.123.85.205	7777	TCP
2024-10-28T09:18:44.242968+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38102	93.123.85.205	7777	TCP
2024-10-28T09:18:45.433156+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38104	93.123.85.205	7777	TCP
2024-10-28T09:18:46.565745+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38106	93.123.85.205	7777	TCP
2024-10-28T09:18:47.844980+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38108	93.123.85.205	7777	TCP
2024-10-28T09:18:49.026217+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38110	93.123.85.205	7777	TCP
2024-10-28T09:18:50.221633+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38112	93.123.85.205	7777	TCP
2024-10-28T09:18:51.344876+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38114	93.123.85.205	7777	TCP
2024-10-28T09:18:53.587350+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38116	93.123.85.205	7777	TCP
2024-10-28T09:18:54.810461+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38118	93.123.85.205	7777	TCP
2024-10-28T09:18:56.042429+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38120	93.123.85.205	7777	TCP
2024-10-28T09:18:57.260604+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38122	93.123.85.205	7777	TCP
2024-10-28T09:18:58.434107+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38124	93.123.85.205	7777	TCP
2024-10-28T09:18:59.567062+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38126	93.123.85.205	7777	TCP
2024-10-28T09:19:01.079669+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38128	93.123.85.205	7777	TCP
2024-10-28T09:19:02.217024+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38130	93.123.85.205	7777	TCP
2024-10-28T09:19:03.368567+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38132	93.123.85.205	7777	TCP
2024-10-28T09:19:05.659973+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38134	93.123.85.205	7777	TCP
2024-10-28T09:19:06.924335+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38136	93.123.85.205	7777	TCP
2024-10-28T09:19:08.063080+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38138	93.123.85.205	7777	TCP
2024-10-28T09:19:09.327136+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38140	93.123.85.205	7777	TCP
2024-10-28T09:19:10.534374+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38142	93.123.85.205	7777	TCP
2024-10-28T09:19:11.736738+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38144	93.123.85.205	7777	TCP
2024-10-28T09:19:12.927281+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38146	93.123.85.205	7777	TCP
2024-10-28T09:19:14.169151+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38148	93.123.85.205	7777	TCP
2024-10-28T09:19:15.327547+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38150	93.123.85.205	7777	TCP
2024-10-28T09:19:16.561344+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38152	93.123.85.205	7777	TCP
2024-10-28T09:19:18.064368+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38154	93.123.85.205	7777	TCP
2024-10-28T09:19:19.394620+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38156	93.123.85.205	7777	TCP
2024-10-28T09:19:20.558523+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38158	93.123.85.205	7777	TCP
2024-10-28T09:19:21.753125+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38160	93.123.85.205	7777	TCP
2024-10-28T09:19:23.017129+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38162	93.123.85.205	7777	TCP
2024-10-28T09:19:24.331549+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38164	93.123.85.205	7777	TCP
2024-10-28T09:19:25.535469+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38166	93.123.85.205	7777	TCP
2024-10-28T09:19:26.579730+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38168	93.123.85.205	7777	TCP
2024-10-28T09:19:27.752802+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38170	93.123.85.205	7777	TCP
2024-10-28T09:19:28.940110+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38172	93.123.85.205	7777	TCP
2024-10-28T09:19:30.218258+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38174	93.123.85.205	7777	TCP
2024-10-28T09:19:31.532025+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38176	93.123.85.205	7777	TCP
2024-10-28T09:19:32.661004+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38178	93.123.85.205	7777	TCP
2024-10-28T09:19:33.823065+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38180	93.123.85.205	7777	TCP
2024-10-28T09:19:35.029588+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38182	93.123.85.205	7777	TCP
2024-10-28T09:19:36.134196+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38184	93.123.85.205	7777	TCP
2024-10-28T09:19:37.330839+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38186	93.123.85.205	7777	TCP
2024-10-28T09:19:38.432749+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38188	93.123.85.205	7777	TCP
2024-10-28T09:19:39.655858+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38190	93.123.85.205	7777	TCP
2024-10-28T09:19:41.472536+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38192	93.123.85.205	7777	TCP
2024-10-28T09:19:42.721259+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38194	93.123.85.205	7777	TCP
2024-10-28T09:19:43.824482+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38196	93.123.85.205	7777	TCP
2024-10-28T09:19:44.917249+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38198	93.123.85.205	7777	TCP
2024-10-28T09:19:46.474686+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38200	93.123.85.205	7777	TCP
2024-10-28T09:19:47.869459+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38202	93.123.85.205	7777	TCP
2024-10-28T09:19:49.065716+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38204	93.123.85.205	7777	TCP
2024-10-28T09:19:50.219005+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38206	93.123.85.205	7777	TCP
2024-10-28T09:19:51.539034+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38208	93.123.85.205	7777	TCP
2024-10-28T09:19:52.675148+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38210	93.123.85.205	7777	TCP
2024-10-28T09:19:53.864910+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38212	93.123.85.205	7777	TCP
2024-10-28T09:19:55.067215+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38214	93.123.85.205	7777	TCP
2024-10-28T09:19:56.485610+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38216	93.123.85.205	7777	TCP
2024-10-28T09:19:57.654269+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38218	93.123.85.205	7777	TCP
2024-10-28T09:19:58.922442+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38220	93.123.85.205	7777	TCP
2024-10-28T09:20:00.045251+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38222	93.123.85.205	7777	TCP
2024-10-28T09:20:02.034063+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38224	93.123.85.205	7777	TCP
2024-10-28T09:20:03.251554+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38226	93.123.85.205	7777	TCP
2024-10-28T09:20:04.426371+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38228	93.123.85.205	7777	TCP
2024-10-28T09:20:05.549822+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38230	93.123.85.205	7777	TCP
2024-10-28T09:20:06.662835+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38232	93.123.85.205	7777	TCP
2024-10-28T09:20:07.944131+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38234	93.123.85.205	7777	TCP
2024-10-28T09:20:09.125566+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38236	93.123.85.205	7777	TCP
2024-10-28T09:20:10.695003+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38238	93.123.85.205	7777	TCP
2024-10-28T09:20:11.826449+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38240	93.123.85.205	7777	TCP
2024-10-28T09:20:13.073063+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38242	93.123.85.205	7777	TCP
2024-10-28T09:20:14.376407+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38244	93.123.85.205	7777	TCP
2024-10-28T09:20:15.516243+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38246	93.123.85.205	7777	TCP
2024-10-28T09:20:16.708615+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38248	93.123.85.205	7777	TCP
2024-10-28T09:20:17.782680+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38250	93.123.85.205	7777	TCP
2024-10-28T09:20:18.953782+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38252	93.123.85.205	7777	TCP
2024-10-28T09:20:20.342217+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38254	93.123.85.205	7777	TCP
2024-10-28T09:20:21.542958+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38256	93.123.85.205	7777	TCP
2024-10-28T09:20:23.891007+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38258	93.123.85.205	7777	TCP
2024-10-28T09:20:25.047749+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38260	93.123.85.205	7777	TCP
2024-10-28T09:20:26.234478+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38262	93.123.85.205	7777	TCP
2024-10-28T09:20:27.356905+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38264	93.123.85.205	7777	TCP
2024-10-28T09:20:28.544901+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38266	93.123.85.205	7777	TCP
2024-10-28T09:20:29.720237+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38268	93.123.85.205	7777	TCP
2024-10-28T09:20:30.860008+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38270	93.123.85.205	7777	TCP
2024-10-28T09:20:31.962192+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38272	93.123.85.205	7777	TCP
2024-10-28T09:20:33.127807+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38274	93.123.85.205	7777	TCP
2024-10-28T09:20:34.263071+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38276	93.123.85.205	7777	TCP
2024-10-28T09:20:35.780025+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38278	93.123.85.205	7777	TCP
2024-10-28T09:20:37.382707+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38280	93.123.85.205	7777	TCP
2024-10-28T09:20:38.525057+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38282	93.123.85.205	7777	TCP
2024-10-28T09:20:39.656716+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38284	93.123.85.205	7777	TCP
2024-10-28T09:20:40.855850+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38286	93.123.85.205	7777	TCP
2024-10-28T09:20:42.035359+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38288	93.123.85.205	7777	TCP
2024-10-28T09:20:43.320136+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38290	93.123.85.205	7777	TCP
2024-10-28T09:20:44.530127+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38292	93.123.85.205	7777	TCP
2024-10-28T09:20:45.773081+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38294	93.123.85.205	7777	TCP
2024-10-28T09:20:46.929306+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38296	93.123.85.205	7777	TCP
2024-10-28T09:20:48.219875+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38298	93.123.85.205	7777	TCP
2024-10-28T09:20:49.426704+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38300	93.123.85.205	7777	TCP
2024-10-28T09:20:50.840108+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38302	93.123.85.205	7777	TCP
2024-10-28T09:20:52.131052+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38304	93.123.85.205	7777	TCP
2024-10-28T09:20:53.264612+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38306	93.123.85.205	7777	TCP
2024-10-28T09:20:54.417365+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38308	93.123.85.205	7777	TCP
2024-10-28T09:20:55.785640+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38310	93.123.85.205	7777	TCP
2024-10-28T09:20:56.936898+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38312	93.123.85.205	7777	TCP
2024-10-28T09:20:58.026792+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38314	93.123.85.205	7777	TCP
2024-10-28T09:20:59.149838+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38316	93.123.85.205	7777	TCP
2024-10-28T09:21:00.323217+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38318	93.123.85.205	7777	TCP
2024-10-28T09:21:01.431392+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38320	93.123.85.205	7777	TCP
2024-10-28T09:21:02.538800+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38322	93.123.85.205	7777	TCP
2024-10-28T09:21:03.675759+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38324	93.123.85.205	7777	TCP
2024-10-28T09:21:05.022418+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38326	93.123.85.205	7777	TCP
2024-10-28T09:21:06.220237+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38328	93.123.85.205	7777	TCP
2024-10-28T09:21:07.443393+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38330	93.123.85.205	7777	TCP
2024-10-28T09:21:08.824470+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38332	93.123.85.205	7777	TCP
2024-10-28T09:21:09.935629+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38334	93.123.85.205	7777	TCP
2024-10-28T09:21:11.064486+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38336	93.123.85.205	7777	TCP
2024-10-28T09:21:12.170009+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38338	93.123.85.205	7777	TCP
2024-10-28T09:21:13.270306+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38340	93.123.85.205	7777	TCP
2024-10-28T09:21:14.419381+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38342	93.123.85.205	7777	TCP
2024-10-28T09:21:15.565685+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38344	93.123.85.205	7777	TCP
2024-10-28T09:21:16.765530+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38346	93.123.85.205	7777	TCP
2024-10-28T09:21:17.969921+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38348	93.123.85.205	7777	TCP
2024-10-28T09:21:19.124669+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38350	93.123.85.205	7777	TCP
2024-10-28T09:21:20.340015+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38352	93.123.85.205	7777	TCP
2024-10-28T09:21:21.530085+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38354	93.123.85.205	7777	TCP
2024-10-28T09:21:22.764542+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38356	93.123.85.205	7777	TCP
2024-10-28T09:21:23.870429+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38358	93.123.85.205	7777	TCP
2024-10-28T09:21:25.134313+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38360	93.123.85.205	7777	TCP
2024-10-28T09:21:26.248843+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38362	93.123.85.205	7777	TCP
2024-10-28T09:21:27.462642+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38364	93.123.85.205	7777	TCP
2024-10-28T09:21:28.722252+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38366	93.123.85.205	7777	TCP
2024-10-28T09:21:29.855827+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38368	93.123.85.205	7777	TCP
2024-10-28T09:21:31.069138+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38370	93.123.85.205	7777	TCP
2024-10-28T09:21:32.319855+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38372	93.123.85.205	7777	TCP
2024-10-28T09:21:33.422743+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38374	93.123.85.205	7777	TCP
2024-10-28T09:21:34.465889+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38376	93.123.85.205	7777	TCP
2024-10-28T09:21:35.651479+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38378	93.123.85.205	7777	TCP
2024-10-28T09:21:36.818009+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38380	93.123.85.205	7777	TCP
2024-10-28T09:21:37.929969+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38382	93.123.85.205	7777	TCP
2024-10-28T09:21:39.138270+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38384	93.123.85.205	7777	TCP
2024-10-28T09:21:40.334307+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38386	93.123.85.205	7777	TCP
2024-10-28T09:21:41.349475+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38388	93.123.85.205	7777	TCP
2024-10-28T09:21:42.518614+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38390	93.123.85.205	7777	TCP
2024-10-28T09:21:43.642830+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38392	93.123.85.205	7777	TCP
2024-10-28T09:21:44.837800+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38394	93.123.85.205	7777	TCP
2024-10-28T09:21:46.035606+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38396	93.123.85.205	7777	TCP
2024-10-28T09:21:47.239216+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38398	93.123.85.205	7777	TCP
2024-10-28T09:21:48.366608+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38400	93.123.85.205	7777	TCP
2024-10-28T09:21:49.519102+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38402	93.123.85.205	7777	TCP
2024-10-28T09:21:50.784317+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38404	93.123.85.205	7777	TCP
2024-10-28T09:21:51.869318+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38406	93.123.85.205	7777	TCP
2024-10-28T09:21:53.011734+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38408	93.123.85.205	7777	TCP
2024-10-28T09:21:54.132343+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38410	93.123.85.205	7777	TCP
2024-10-28T09:21:55.315203+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38412	93.123.85.205	7777	TCP
2024-10-28T09:21:56.465852+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38414	93.123.85.205	7777	TCP
2024-10-28T09:21:57.652665+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38416	93.123.85.205	7777	TCP
2024-10-28T09:21:58.819400+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38418	93.123.85.205	7777	TCP
2024-10-28T09:22:00.053317+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38420	93.123.85.205	7777	TCP
2024-10-28T09:22:01.125617+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38422	93.123.85.205	7777	TCP
2024-10-28T09:22:02.232087+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38424	93.123.85.205	7777	TCP
2024-10-28T09:22:03.325728+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38426	93.123.85.205	7777	TCP
2024-10-28T09:22:04.464443+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38428	93.123.85.205	7777	TCP
2024-10-28T09:22:05.720492+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38430	93.123.85.205	7777	TCP
2024-10-28T09:22:06.864944+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38432	93.123.85.205	7777	TCP
2024-10-28T09:22:08.064733+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38434	93.123.85.205	7777	TCP
2024-10-28T09:22:09.254475+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38436	93.123.85.205	7777	TCP
2024-10-28T09:22:10.368882+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	38438	93.123.85.205	7777	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 28, 2024 09:18:35.902050018 CET	38088	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:35.907674074 CET	7777	38088	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:35.907732010 CET	38088	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:35.909216881 CET	38088	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:35.914529085 CET	7777	38088	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:36.910459042 CET	7777	38088	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:36.910634995 CET	38088	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:37.125097990 CET	7777	38088	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:37.125298023 CET	38088	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:37.127321005 CET	38090	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:37.130764961 CET	7777	38088	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:37.132638931 CET	7777	38090	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:37.132766008 CET	38090	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:37.132766008 CET	38090	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:37.138251066 CET	7777	38090	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:38.018651009 CET	7777	38090	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:38.018829107 CET	38090	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:38.217554092 CET	7777	38090	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:38.217880011 CET	38090	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:38.218336105 CET	38092	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:38.223336935 CET	7777	38090	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:38.223768950 CET	7777	38092	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:38.223855972 CET	38092	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:38.223988056 CET	38092	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:38.229458094 CET	7777	38092	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:39.109319925 CET	7777	38092	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:39.109498024 CET	38092	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:39.328906059 CET	7777	38092	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:39.329236984 CET	38092	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:39.330022097 CET	38094	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:39.335897923 CET	7777	38092	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:39.336193085 CET	7777	38094	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:39.336282015 CET	38094	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:39.336399078 CET	38094	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:39.341836929 CET	7777	38094	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:40.340831041 CET	7777	38094	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:40.341104031 CET	38094	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:40.617636919 CET	7777	38094	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:40.617892981 CET	38094	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:40.618470907 CET	38096	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:40.623692036 CET	7777	38094	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:40.624022961 CET	7777	38096	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:40.624075890 CET	38096	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:40.624128103 CET	38096	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:40.629919052 CET	7777	38096	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:41.548437119 CET	7777	38096	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:41.548629999 CET	38096	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:41.752454042 CET	7777	38096	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:41.752665997 CET	38096	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:41.753165960 CET	38098	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:41.758268118 CET	7777	38096	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:41.758574009 CET	7777	38098	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:41.758688927 CET	38098	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:41.758733034 CET	38098	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:41.764163017 CET	7777	38098	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:42.714929104 CET	7777	38098	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:42.715076923 CET	38098	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:42.939461946 CET	7777	38098	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:42.939745903 CET	38098	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:42.940300941 CET	38100	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:42.945280075 CET	7777	38098	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:42.945848942 CET	7777	38100	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:42.945905924 CET	38100	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:42.945957899 CET	38100	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:42.951381922 CET	7777	38100	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:43.859769106 CET	7777	38100	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:43.859911919 CET	38100	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:44.236700058 CET	7777	38100	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:44.236941099 CET	38100	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:44.237447977 CET	38102	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:44.242402077 CET	7777	38100	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:44.242826939 CET	7777	38102	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:44.242918968 CET	38102	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:44.242968082 CET	38102	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:44.249917030 CET	7777	38102	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:44.859361887 CET	46540	443	192.168.2.14	185.125.190.26
Oct 28, 2024 09:18:45.217916965 CET	7777	38102	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:45.218099117 CET	38102	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:45.426497936 CET	7777	38102	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:45.426951885 CET	38102	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:45.427591085 CET	38104	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:45.432487965 CET	7777	38102	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:45.433046103 CET	7777	38104	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:45.433100939 CET	38104	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:45.433156013 CET	38104	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:45.438635111 CET	7777	38104	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:46.331526995 CET	7777	38104	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:46.331864119 CET	38104	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:46.559146881 CET	7777	38104	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:46.559390068 CET	38104	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:46.560172081 CET	38106	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:46.564970970 CET	7777	38104	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:46.565529108 CET	7777	38106	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:46.565602064 CET	38106	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:46.565745115 CET	38106	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:46.571063995 CET	7777	38106	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:47.838159084 CET	7777	38106	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:47.838350058 CET	38106	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:47.838486910 CET	7777	38106	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:47.838521957 CET	7777	38106	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:47.838552952 CET	38106	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:47.838687897 CET	38106	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:47.839400053 CET	38108	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:47.844197989 CET	7777	38106	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:47.844851017 CET	7777	38108	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:47.844926119 CET	38108	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:47.844980001 CET	38108	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:47.850414038 CET	7777	38108	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:48.819072962 CET	7777	38108	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:48.819247007 CET	38108	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:49.019378901 CET	7777	38108	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:49.019819021 CET	38108	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:49.020627022 CET	38110	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:49.025432110 CET	7777	38108	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:49.025988102 CET	7777	38110	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:49.026077032 CET	38110	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:49.026216984 CET	38110	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:49.031588078 CET	7777	38110	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:49.955856085 CET	7777	38110	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:49.956135988 CET	38110	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:50.214690924 CET	7777	38110	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:50.215240955 CET	38110	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:50.216026068 CET	38112	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:50.220586061 CET	7777	38110	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:50.221406937 CET	7777	38112	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:50.221492052 CET	38112	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:50.221632957 CET	38112	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:50.226886988 CET	7777	38112	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:51.115010023 CET	7777	38112	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:51.115228891 CET	38112	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:51.338489056 CET	7777	38112	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:51.338829994 CET	38112	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:51.339432001 CET	38114	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:51.344186068 CET	7777	38112	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:51.344759941 CET	7777	38114	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:51.344808102 CET	38114	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:51.344876051 CET	38114	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:51.350182056 CET	7777	38114	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:53.575520992 CET	7777	38114	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:53.575678110 CET	7777	38114	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:53.575711012 CET	7777	38114	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:53.575735092 CET	38114	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:53.575778008 CET	38114	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:53.575802088 CET	38114	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:53.575859070 CET	7777	38114	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:53.575917006 CET	38114	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:53.575969934 CET	7777	38114	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:53.576023102 CET	38114	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:53.576560974 CET	38116	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:53.581934929 CET	7777	38114	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:53.587169886 CET	7777	38116	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:53.587321997 CET	38116	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:53.587349892 CET	38116	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:53.592744112 CET	7777	38116	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:54.517838001 CET	7777	38116	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:54.518086910 CET	38116	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:54.803118944 CET	7777	38116	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:54.803694010 CET	38116	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:54.804713011 CET	38118	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:54.809361935 CET	7777	38116	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:54.810168028 CET	7777	38118	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:54.810250044 CET	38118	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:54.810461044 CET	38118	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:54.816200018 CET	7777	38118	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:55.750283957 CET	7777	38118	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:55.750509024 CET	38118	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:56.035952091 CET	7777	38118	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:56.036223888 CET	38118	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:56.036782026 CET	38120	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:56.041652918 CET	7777	38118	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:56.042249918 CET	7777	38120	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:56.042367935 CET	38120	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:56.042428970 CET	38120	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:56.047734022 CET	7777	38120	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:57.019954920 CET	7777	38120	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:57.020167112 CET	38120	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:57.254174948 CET	7777	38120	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:57.254436970 CET	38120	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:57.255062103 CET	38122	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:57.259852886 CET	7777	38120	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:57.260481119 CET	7777	38122	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:57.260548115 CET	38122	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:57.260603905 CET	38122	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:57.265882969 CET	7777	38122	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:58.217447996 CET	7777	38122	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:58.217737913 CET	38122	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:58.427196026 CET	7777	38122	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:58.427577972 CET	38122	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:58.428255081 CET	38124	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:58.433856010 CET	7777	38122	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:58.433896065 CET	7777	38124	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:58.434010983 CET	38124	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:58.434107065 CET	38124	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:58.440668106 CET	7777	38124	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:59.529747009 CET	7777	38124	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:59.529890060 CET	38124	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:59.560725927 CET	7777	38124	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:59.560913086 CET	38124	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:59.561662912 CET	38126	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:59.566414118 CET	7777	38124	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:59.566956043 CET	7777	38126	93.123.85.205	192.168.2.14
Oct 28, 2024 09:18:59.567015886 CET	38126	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:59.567061901 CET	38126	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:18:59.572395086 CET	7777	38126	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:00.612754107 CET	7777	38126	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:00.613121986 CET	38126	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:01.072590113 CET	7777	38126	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:01.072679043 CET	7777	38126	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:01.072972059 CET	38126	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:01.072972059 CET	38126	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:01.073801994 CET	38128	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:01.078499079 CET	7777	38126	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:01.079479933 CET	7777	38128	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:01.079555988 CET	38128	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:01.079668999 CET	38128	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:01.085151911 CET	7777	38128	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:02.013592005 CET	7777	38128	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:02.013781071 CET	38128	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:02.210814953 CET	7777	38128	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:02.211005926 CET	38128	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:02.211493015 CET	38130	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:02.216511965 CET	7777	38128	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:02.216886044 CET	7777	38130	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:02.216984987 CET	38130	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:02.217024088 CET	38130	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:02.222321033 CET	7777	38130	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:03.147577047 CET	7777	38130	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:03.147769928 CET	38130	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:03.361954927 CET	7777	38130	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:03.362225056 CET	38130	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:03.362976074 CET	38132	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:03.367491961 CET	7777	38130	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:03.368324041 CET	7777	38132	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:03.368448019 CET	38132	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:03.368566990 CET	38132	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:03.373837948 CET	7777	38132	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:04.432220936 CET	7777	38132	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:04.432374001 CET	38132	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:05.653155088 CET	7777	38132	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:05.653475046 CET	38132	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:05.653490067 CET	7777	38132	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:05.653547049 CET	38132	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:05.653778076 CET	7777	38132	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:05.653846025 CET	38132	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:05.654192924 CET	7777	38132	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:05.654298067 CET	38132	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:05.654299021 CET	38134	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:05.658879042 CET	7777	38132	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:05.659773111 CET	7777	38134	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:05.659899950 CET	38134	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:05.659972906 CET	38134	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:05.665317059 CET	7777	38134	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:06.712420940 CET	7777	38134	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:06.712650061 CET	38134	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:06.917911053 CET	7777	38134	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:06.918224096 CET	38134	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:06.918780088 CET	38136	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:06.923623085 CET	7777	38134	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:06.924149990 CET	7777	38136	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:06.924226999 CET	38136	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:06.924335003 CET	38136	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:06.929701090 CET	7777	38136	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:07.833256960 CET	7777	38136	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:07.833503008 CET	38136	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:08.056627035 CET	7777	38136	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:08.056879997 CET	38136	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:08.057504892 CET	38138	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:08.062424898 CET	7777	38136	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:08.062896013 CET	7777	38138	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:08.063007116 CET	38138	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:08.063080072 CET	38138	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:08.068563938 CET	7777	38138	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:09.100603104 CET	7777	38138	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:09.100931883 CET	38138	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:09.320080996 CET	7777	38138	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:09.320094109 CET	7777	38138	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:09.320274115 CET	38138	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:09.320432901 CET	38138	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:09.321686029 CET	38140	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:09.325797081 CET	7777	38138	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:09.326931953 CET	7777	38140	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:09.327012062 CET	38140	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:09.327136040 CET	38140	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:09.332392931 CET	7777	38140	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:10.527261019 CET	7777	38140	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:10.527472973 CET	38140	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:10.527647972 CET	7777	38140	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:10.527713060 CET	38140	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:10.527755976 CET	7777	38140	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:10.527833939 CET	38140	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:10.528706074 CET	38142	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:10.533478022 CET	7777	38140	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:10.534208059 CET	7777	38142	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:10.534338951 CET	38142	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:10.534373999 CET	38142	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:10.539906025 CET	7777	38142	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:11.506083012 CET	7777	38142	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:11.506325960 CET	38142	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:11.729878902 CET	7777	38142	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:11.730283022 CET	38142	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:11.730988979 CET	38144	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:11.735861063 CET	7777	38142	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:11.736552954 CET	7777	38144	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:11.736650944 CET	38144	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:11.736737967 CET	38144	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:11.742129087 CET	7777	38144	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:12.641437054 CET	7777	38144	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:12.641581059 CET	38144	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:12.920480013 CET	7777	38144	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:12.920757055 CET	38144	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:12.921611071 CET	38146	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:12.926170111 CET	7777	38144	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:12.927086115 CET	7777	38146	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:12.927164078 CET	38146	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:12.927280903 CET	38146	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:12.932770014 CET	7777	38146	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:13.840977907 CET	7777	38146	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:13.841303110 CET	38146	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:14.162209988 CET	7777	38146	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:14.162671089 CET	38146	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:14.163496017 CET	38148	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:14.168068886 CET	7777	38146	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:14.168934107 CET	7777	38148	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:14.169040918 CET	38148	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:14.169151068 CET	38148	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:14.174449921 CET	7777	38148	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:15.063131094 CET	7777	38148	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:15.063388109 CET	38148	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:15.320641994 CET	7777	38148	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:15.320836067 CET	38148	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:15.321552992 CET	38150	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:15.326756954 CET	7777	38148	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:15.327419996 CET	7777	38150	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:15.327488899 CET	38150	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:15.327547073 CET	38150	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:15.332866907 CET	7777	38150	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:16.310976028 CET	7777	38150	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:16.311383009 CET	38150	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:16.554538965 CET	7777	38150	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:16.554883003 CET	38150	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:16.555775881 CET	38152	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:16.560431957 CET	7777	38150	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:16.561127901 CET	7777	38152	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:16.561248064 CET	38152	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:16.561343908 CET	38152	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:16.566701889 CET	7777	38152	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:16.602018118 CET	46540	443	192.168.2.14	185.125.190.26
Oct 28, 2024 09:19:17.528681993 CET	7777	38152	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:17.528865099 CET	38152	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:18.057409048 CET	7777	38152	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:18.057452917 CET	7777	38152	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:18.057848930 CET	38152	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:18.057971954 CET	38152	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:18.058765888 CET	38154	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:18.063256025 CET	7777	38152	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:18.064033031 CET	7777	38154	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:18.064105988 CET	38154	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:18.064368010 CET	38154	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:18.070580006 CET	7777	38154	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:18.940795898 CET	7777	38154	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:18.941111088 CET	38154	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:19.387938976 CET	7777	38154	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:19.388187885 CET	38154	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:19.389015913 CET	38156	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:19.393733025 CET	7777	38154	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:19.394474983 CET	7777	38156	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:19.394579887 CET	38156	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:19.394619942 CET	38156	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:19.400218010 CET	7777	38156	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:20.324197054 CET	7777	38156	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:20.324373960 CET	38156	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:20.551017046 CET	7777	38156	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:20.551528931 CET	38156	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:20.552877903 CET	38158	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:20.557107925 CET	7777	38156	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:20.558331013 CET	7777	38158	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:20.558413982 CET	38158	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:20.558522940 CET	38158	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:20.564044952 CET	7777	38158	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:21.536705017 CET	7777	38158	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:21.537030935 CET	38158	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:21.746391058 CET	7777	38158	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:21.746579885 CET	38158	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:21.747279882 CET	38160	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:21.752301931 CET	7777	38158	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:21.752996922 CET	7777	38160	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:21.753124952 CET	38160	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:21.753124952 CET	38160	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:21.758795023 CET	7777	38160	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:22.769330978 CET	7777	38160	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:22.769701958 CET	38160	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:23.010364056 CET	7777	38160	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:23.010680914 CET	38160	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:23.011621952 CET	38162	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:23.016232014 CET	7777	38160	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:23.016977072 CET	7777	38162	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:23.017065048 CET	38162	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:23.017128944 CET	38162	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:23.022780895 CET	7777	38162	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:24.323740005 CET	7777	38162	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:24.324099064 CET	38162	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:24.324114084 CET	7777	38162	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:24.324147940 CET	7777	38162	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:24.324407101 CET	38162	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:24.324508905 CET	38162	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:24.325669050 CET	38164	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:24.330039978 CET	7777	38162	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:24.331098080 CET	7777	38164	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:24.331378937 CET	38164	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:24.331548929 CET	38164	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:24.336843967 CET	7777	38164	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:25.259495020 CET	7777	38164	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:25.259852886 CET	38164	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:25.528471947 CET	7777	38164	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:25.528794050 CET	38164	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:25.529654980 CET	38166	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:25.534188032 CET	7777	38164	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:25.535092115 CET	7777	38166	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:25.535208941 CET	38166	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:25.535469055 CET	38166	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:25.541363001 CET	7777	38166	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:26.345599890 CET	7777	38166	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:26.345793962 CET	38166	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:26.572843075 CET	7777	38166	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:26.572902918 CET	7777	38166	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:26.573004007 CET	38166	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:26.573117018 CET	38166	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:26.573999882 CET	38168	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:26.578588009 CET	7777	38166	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:26.579554081 CET	7777	38168	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:26.579627991 CET	38168	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:26.579730034 CET	38168	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:26.585513115 CET	7777	38168	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:27.686506033 CET	7777	38168	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:27.686736107 CET	38168	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:27.746418953 CET	7777	38168	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:27.746656895 CET	38168	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:27.747252941 CET	38170	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:27.752068996 CET	7777	38168	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:27.752640963 CET	7777	38170	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:27.752760887 CET	38170	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:27.752801895 CET	38170	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:27.758236885 CET	7777	38170	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:28.715701103 CET	7777	38170	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:28.715889931 CET	38170	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:28.933011055 CET	7777	38170	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:28.933360100 CET	38170	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:28.934108973 CET	38172	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:28.939045906 CET	7777	38170	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:28.939558983 CET	7777	38172	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:28.939815998 CET	38172	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:28.940109968 CET	38172	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:28.945888042 CET	7777	38172	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:29.932712078 CET	7777	38172	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:29.932959080 CET	38172	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:30.211549997 CET	7777	38172	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:30.211935997 CET	38172	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:30.212757111 CET	38174	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:30.217343092 CET	7777	38172	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:30.218076944 CET	7777	38174	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:30.218167067 CET	38174	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:30.218257904 CET	38174	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:30.223603010 CET	7777	38174	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:31.140223026 CET	7777	38174	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:31.140438080 CET	38174	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:31.525386095 CET	7777	38174	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:31.525830984 CET	38174	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:31.526590109 CET	38176	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:31.531111956 CET	7777	38174	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:31.531896114 CET	7777	38176	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:31.531989098 CET	38176	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:31.532025099 CET	38176	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:31.537313938 CET	7777	38176	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:32.430717945 CET	7777	38176	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:32.430936098 CET	38176	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:32.654038906 CET	7777	38176	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:32.654603958 CET	38176	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:32.655472040 CET	38178	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:32.660041094 CET	7777	38176	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:32.660811901 CET	7777	38178	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:32.660912991 CET	38178	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:32.661004066 CET	38178	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:32.666738033 CET	7777	38178	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:33.700575113 CET	7777	38178	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:33.700907946 CET	38178	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:33.815912008 CET	7777	38178	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:33.816200972 CET	38178	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:33.817154884 CET	38180	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:33.821749926 CET	7777	38178	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:33.822825909 CET	7777	38180	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:33.822962046 CET	38180	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:33.823065042 CET	38180	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:33.828669071 CET	7777	38180	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:34.742733955 CET	7777	38180	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:34.743134975 CET	38180	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:35.018954039 CET	7777	38180	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:35.019552946 CET	38180	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:35.020813942 CET	38182	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:35.025163889 CET	7777	38180	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:35.029110909 CET	7777	38182	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:35.029433966 CET	38182	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:35.029587984 CET	38182	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:35.036096096 CET	7777	38182	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:35.903899908 CET	7777	38182	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:35.904216051 CET	38182	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:36.126727104 CET	7777	38182	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:36.127136946 CET	38182	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:36.128297091 CET	38184	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:36.133101940 CET	7777	38182	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:36.133816004 CET	7777	38184	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:36.134196043 CET	38184	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:36.134196043 CET	38184	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:36.139869928 CET	7777	38184	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:37.118026972 CET	7777	38184	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:37.118510962 CET	38184	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:37.323345900 CET	7777	38184	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:37.323962927 CET	38184	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:37.324929953 CET	38186	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:37.329339027 CET	7777	38184	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:37.330471039 CET	7777	38186	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:37.330732107 CET	38186	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:37.330838919 CET	38186	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:37.336366892 CET	7777	38186	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:38.228256941 CET	7777	38186	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:38.228766918 CET	38186	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:38.425091982 CET	7777	38186	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:38.425620079 CET	38186	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:38.426687002 CET	38188	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:38.431750059 CET	7777	38186	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:38.432482004 CET	7777	38188	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:38.432632923 CET	38188	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:38.432749033 CET	38188	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:38.438323021 CET	7777	38188	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:39.414840937 CET	7777	38188	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:39.415043116 CET	38188	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:39.649559021 CET	7777	38188	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:39.649852991 CET	38188	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:39.650381088 CET	38190	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:39.655589104 CET	7777	38188	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:39.655746937 CET	7777	38190	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:39.655801058 CET	38190	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:39.655858040 CET	38190	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:39.661206961 CET	7777	38190	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:41.461009979 CET	7777	38190	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:41.461112976 CET	7777	38190	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:41.461148977 CET	7777	38190	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:41.461313009 CET	7777	38190	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:41.461410999 CET	38190	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:41.461410999 CET	38190	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:41.461457014 CET	38190	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:41.461710930 CET	38190	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:41.462757111 CET	38192	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:41.467572927 CET	7777	38190	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:41.472402096 CET	7777	38192	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:41.472470999 CET	38192	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:41.472536087 CET	38192	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:41.478154898 CET	7777	38192	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:42.446578026 CET	7777	38192	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:42.446922064 CET	38192	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:42.714396954 CET	7777	38192	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:42.714693069 CET	38192	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:42.715514898 CET	38194	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:42.720141888 CET	7777	38192	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:42.721023083 CET	7777	38194	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:42.721147060 CET	38194	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:42.721259117 CET	38194	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:42.726681948 CET	7777	38194	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:43.620708942 CET	7777	38194	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:43.621074915 CET	38194	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:43.817641020 CET	7777	38194	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:43.818123102 CET	38194	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:43.818839073 CET	38196	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:43.823610067 CET	7777	38194	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:43.824306011 CET	7777	38196	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:43.824481964 CET	38196	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:43.824481964 CET	38196	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:43.829941988 CET	7777	38196	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:44.713224888 CET	7777	38196	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:44.713380098 CET	38196	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:44.910321951 CET	7777	38196	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:44.910621881 CET	38196	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:44.911732912 CET	38198	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:44.916050911 CET	7777	38196	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:44.917062998 CET	7777	38198	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:44.917195082 CET	38198	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:44.917248964 CET	38198	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:44.922528028 CET	7777	38198	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:46.463100910 CET	7777	38198	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:46.463287115 CET	7777	38198	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:46.463335991 CET	7777	38198	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:46.463351011 CET	38198	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:46.463351011 CET	38198	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:46.463362932 CET	7777	38198	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:46.463422060 CET	38198	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:46.463572979 CET	38198	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:46.464647055 CET	38200	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:46.474371910 CET	7777	38198	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:46.474423885 CET	7777	38200	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:46.474499941 CET	38200	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:46.474685907 CET	38200	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:46.481956005 CET	7777	38200	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:47.558634043 CET	7777	38200	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:47.558893919 CET	38200	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:47.638866901 CET	7777	38200	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:47.639086962 CET	38200	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:47.639883041 CET	38202	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:47.852891922 CET	38200	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:47.868417025 CET	7777	38200	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:47.868602037 CET	38200	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:47.869110107 CET	7777	38200	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:47.869162083 CET	7777	38202	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:47.869221926 CET	7777	38200	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:47.869271994 CET	38202	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:47.869326115 CET	38200	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:47.869458914 CET	38202	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:47.874845982 CET	7777	38202	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:48.813087940 CET	7777	38202	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:48.813254118 CET	38202	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:49.057270050 CET	7777	38202	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:49.057729959 CET	38202	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:49.059279919 CET	38204	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:49.063512087 CET	7777	38202	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:49.065351009 CET	7777	38204	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:49.065587997 CET	38204	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:49.065716028 CET	38204	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:49.071125031 CET	7777	38204	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:50.020303965 CET	7777	38204	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:50.020510912 CET	38204	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:50.212307930 CET	7777	38204	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:50.212568998 CET	38204	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:50.213326931 CET	38206	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:50.218033075 CET	7777	38204	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:50.218739986 CET	7777	38206	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:50.218883038 CET	38206	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:50.219005108 CET	38206	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:50.224427938 CET	7777	38206	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:51.218986034 CET	7777	38206	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:51.219293118 CET	38206	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:51.532254934 CET	7777	38206	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:51.532718897 CET	38206	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:51.533469915 CET	38208	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:51.538187027 CET	7777	38206	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:51.538800001 CET	7777	38208	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:51.538919926 CET	38208	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:51.539033890 CET	38208	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:51.544369936 CET	7777	38208	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:52.456463099 CET	7777	38208	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:52.456680059 CET	38208	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:52.668401957 CET	7777	38208	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:52.668684006 CET	38208	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:52.669559002 CET	38210	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:52.673991919 CET	7777	38208	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:52.674959898 CET	7777	38210	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:52.675055981 CET	38210	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:52.675148010 CET	38210	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:52.680588961 CET	7777	38210	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:53.636149883 CET	7777	38210	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:53.636543036 CET	38210	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:53.857621908 CET	7777	38210	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:53.858006954 CET	38210	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:53.858994007 CET	38212	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:53.863526106 CET	7777	38210	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:53.864427090 CET	7777	38212	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:53.864614010 CET	38212	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:53.864909887 CET	38212	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:53.870239019 CET	7777	38212	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:54.823499918 CET	7777	38212	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:54.823755026 CET	38212	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:55.060416937 CET	7777	38212	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:55.060825109 CET	38212	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:55.061690092 CET	38214	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:55.066289902 CET	7777	38212	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:55.067053080 CET	7777	38214	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:55.067121983 CET	38214	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:55.067214966 CET	38214	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:55.072467089 CET	7777	38214	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:56.049659967 CET	7777	38214	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:56.050010920 CET	38214	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:56.478547096 CET	7777	38214	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:56.478610039 CET	7777	38214	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:56.478878975 CET	38214	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:56.478928089 CET	38214	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:56.479787111 CET	38216	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:56.484572887 CET	7777	38214	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:56.485399008 CET	7777	38216	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:56.485517025 CET	38216	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:56.485610008 CET	38216	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:56.490901947 CET	7777	38216	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:57.435395002 CET	7777	38216	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:57.435643911 CET	38216	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:57.647094011 CET	7777	38216	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:57.647568941 CET	38216	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:57.648627043 CET	38218	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:57.653068066 CET	7777	38216	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:57.654074907 CET	7777	38218	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:57.654159069 CET	38218	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:57.654268980 CET	38218	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:57.659606934 CET	7777	38218	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:58.625682116 CET	7777	38218	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:58.625871897 CET	38218	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:58.915538073 CET	7777	38218	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:58.915960073 CET	38218	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:58.916968107 CET	38220	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:58.921462059 CET	7777	38218	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:58.922292948 CET	7777	38220	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:58.922408104 CET	38220	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:58.922441959 CET	38220	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:19:58.927787066 CET	7777	38220	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:59.815004110 CET	7777	38220	93.123.85.205	192.168.2.14
Oct 28, 2024 09:19:59.815237045 CET	38220	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:00.038343906 CET	7777	38220	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:00.038795948 CET	38220	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:00.039668083 CET	38222	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:00.044270039 CET	7777	38220	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:00.045066118 CET	7777	38222	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:00.045152903 CET	38222	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:00.045250893 CET	38222	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:00.050564051 CET	7777	38222	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:00.983349085 CET	7777	38222	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:00.983637094 CET	38222	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:02.027084112 CET	7777	38222	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:02.027117968 CET	7777	38222	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:02.027175903 CET	7777	38222	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:02.027400970 CET	38222	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:02.027400970 CET	38222	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:02.027400970 CET	38222	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:02.027451038 CET	7777	38222	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:02.027570009 CET	38222	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:02.028474092 CET	38224	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:02.033078909 CET	7777	38222	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:02.033874989 CET	7777	38224	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:02.033957958 CET	38224	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:02.034063101 CET	38224	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:02.039402962 CET	7777	38224	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:03.013711929 CET	7777	38224	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:03.013947010 CET	38224	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:03.244144917 CET	7777	38224	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:03.244577885 CET	38224	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:03.245565891 CET	38226	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:03.251311064 CET	7777	38224	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:03.251353025 CET	7777	38226	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:03.251473904 CET	38226	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:03.251554012 CET	38226	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:03.257050037 CET	7777	38226	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:04.146991014 CET	7777	38226	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:04.147097111 CET	38226	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:04.419806004 CET	7777	38226	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:04.420164108 CET	38226	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:04.420909882 CET	38228	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:04.425438881 CET	7777	38226	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:04.426186085 CET	7777	38228	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:04.426259995 CET	38228	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:04.426371098 CET	38228	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:04.431699991 CET	7777	38228	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:05.475542068 CET	7777	38228	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:05.475878000 CET	38228	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:05.543159008 CET	7777	38228	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:05.543461084 CET	38228	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:05.544219017 CET	38230	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:05.549113989 CET	7777	38228	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:05.549618959 CET	7777	38230	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:05.549740076 CET	38230	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:05.549822092 CET	38230	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:05.555068970 CET	7777	38230	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:06.435475111 CET	7777	38230	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:06.435657024 CET	38230	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:06.655245066 CET	7777	38230	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:06.655601978 CET	38230	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:06.657116890 CET	38232	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:06.661278009 CET	7777	38230	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:06.662650108 CET	7777	38232	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:06.662729025 CET	38232	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:06.662834883 CET	38232	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:06.668277025 CET	7777	38232	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:07.642627001 CET	7777	38232	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:07.642990112 CET	38232	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:07.936054945 CET	7777	38232	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:07.936484098 CET	38232	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:07.938307047 CET	38234	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:07.942364931 CET	7777	38232	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:07.943727016 CET	7777	38234	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:07.943857908 CET	38234	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:07.944130898 CET	38234	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:07.949697018 CET	7777	38234	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:09.015671015 CET	7777	38234	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:09.015883923 CET	38234	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:09.117929935 CET	7777	38234	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:09.118474007 CET	38234	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:09.119518995 CET	38236	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:09.124089956 CET	7777	38234	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:09.125386953 CET	7777	38236	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:09.125463009 CET	38236	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:09.125566006 CET	38236	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:09.130973101 CET	7777	38236	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:10.683377981 CET	7777	38236	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:10.683552027 CET	7777	38236	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:10.683572054 CET	38236	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:10.683610916 CET	7777	38236	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:10.683621883 CET	38236	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:10.683676958 CET	38236	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:10.683773994 CET	7777	38236	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:10.683820963 CET	38236	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:10.684626102 CET	38238	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:10.689547062 CET	7777	38236	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:10.694818020 CET	7777	38238	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:10.694911957 CET	38238	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:10.695003033 CET	38238	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:10.700474024 CET	7777	38238	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:11.625026941 CET	7777	38238	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:11.625236034 CET	38238	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:11.819400072 CET	7777	38238	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:11.819863081 CET	38238	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:11.820828915 CET	38240	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:11.825335026 CET	7777	38238	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:11.826267958 CET	7777	38240	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:11.826402903 CET	38240	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:11.826448917 CET	38240	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:11.831934929 CET	7777	38240	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:12.758239985 CET	7777	38240	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:12.758717060 CET	38240	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:13.066070080 CET	7777	38240	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:13.066632032 CET	38240	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:13.067459106 CET	38242	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:13.071971893 CET	7777	38240	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:13.072779894 CET	7777	38242	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:13.072904110 CET	38242	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:13.073062897 CET	38242	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:13.078434944 CET	7777	38242	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:14.017647982 CET	7777	38242	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:14.017858028 CET	38242	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:14.367136955 CET	7777	38242	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:14.367700100 CET	38242	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:14.369133949 CET	38244	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:14.375983000 CET	7777	38242	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:14.376090050 CET	7777	38244	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:14.376274109 CET	38244	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:14.376406908 CET	38244	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:14.381711960 CET	7777	38244	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:15.252707958 CET	7777	38244	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:15.253138065 CET	38244	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:15.508323908 CET	7777	38244	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:15.509103060 CET	38244	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:15.510647058 CET	38246	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:15.514555931 CET	7777	38244	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:15.516041994 CET	7777	38246	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:15.516120911 CET	38246	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:15.516242981 CET	38246	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:15.521610022 CET	7777	38246	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:16.433197021 CET	7777	38246	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:16.433721066 CET	38246	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:16.700320005 CET	7777	38246	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:16.700849056 CET	38246	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:16.702913046 CET	38248	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:16.706234932 CET	7777	38246	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:16.708290100 CET	7777	38248	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:16.708458900 CET	38248	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:16.708615065 CET	38248	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:16.714071989 CET	7777	38248	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:17.558427095 CET	7777	38248	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:17.558895111 CET	38248	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:17.774405956 CET	7777	38248	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:17.774810076 CET	38248	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:17.777106047 CET	38250	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:17.780267954 CET	7777	38248	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:17.782488108 CET	7777	38250	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:17.782572031 CET	38250	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:17.782680035 CET	38250	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:17.788388968 CET	7777	38250	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:18.756277084 CET	7777	38250	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:18.756692886 CET	38250	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:18.946293116 CET	7777	38250	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:18.946813107 CET	38250	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:18.948134899 CET	38252	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:18.952244043 CET	7777	38250	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:18.953560114 CET	7777	38252	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:18.953686953 CET	38252	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:18.953782082 CET	38252	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:18.959135056 CET	7777	38252	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:20.108311892 CET	7777	38252	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:20.108381987 CET	7777	38252	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:20.108439922 CET	7777	38252	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:20.108620882 CET	38252	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:20.108620882 CET	38252	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:20.108804941 CET	38252	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:20.109930992 CET	38254	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:20.319503069 CET	38252	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:20.341442108 CET	7777	38252	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:20.341584921 CET	7777	38252	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:20.341649055 CET	7777	38254	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:20.341716051 CET	38252	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:20.341795921 CET	7777	38252	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:20.341871977 CET	38254	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:20.342048883 CET	38252	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:20.342216969 CET	38254	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:20.348094940 CET	7777	38254	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:21.317044020 CET	7777	38254	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:21.317210913 CET	38254	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:21.535085917 CET	7777	38254	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:21.535521030 CET	38254	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:21.537112951 CET	38256	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:21.541088104 CET	7777	38254	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:21.542671919 CET	7777	38256	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:21.542908907 CET	38256	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:21.542958021 CET	38256	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:21.548409939 CET	7777	38256	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:22.519844055 CET	7777	38256	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:22.520344019 CET	38256	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:23.657742023 CET	7777	38256	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:23.657834053 CET	7777	38256	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:23.657947063 CET	7777	38256	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:23.658040047 CET	38256	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:23.658040047 CET	38256	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:23.658090115 CET	7777	38256	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:23.658216953 CET	38256	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:23.658216953 CET	38256	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:23.659406900 CET	38258	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:23.867497921 CET	38256	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:23.890552998 CET	7777	38256	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:23.890616894 CET	7777	38258	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:23.890706062 CET	7777	38256	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:23.890770912 CET	38258	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:23.890814066 CET	38256	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:23.891006947 CET	38258	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:23.896562099 CET	7777	38258	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:24.819868088 CET	7777	38258	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:24.820102930 CET	38258	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:25.039645910 CET	7777	38258	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:25.040070057 CET	38258	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:25.041946888 CET	38260	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:25.045435905 CET	7777	38258	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:25.047333002 CET	7777	38260	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:25.047430038 CET	38260	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:25.047749043 CET	38260	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:25.053177118 CET	7777	38260	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:26.014599085 CET	7777	38260	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:26.015141010 CET	38260	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:26.226665020 CET	7777	38260	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:26.227243900 CET	38260	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:26.228547096 CET	38262	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:26.232964039 CET	7777	38260	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:26.234024048 CET	7777	38262	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:26.234353065 CET	38262	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:26.234477997 CET	38262	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:26.239923954 CET	7777	38262	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:27.140213013 CET	7777	38262	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:27.140741110 CET	38262	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:27.348520994 CET	7777	38262	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:27.348825932 CET	38262	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:27.351139069 CET	38264	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:27.354497910 CET	7777	38262	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:27.356575012 CET	7777	38264	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:27.356673002 CET	38264	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:27.356904984 CET	38264	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:27.362535000 CET	7777	38264	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:28.330780983 CET	7777	38264	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:28.331165075 CET	38264	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:28.537450075 CET	7777	38264	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:28.537981033 CET	38264	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:28.539225101 CET	38266	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:28.543411016 CET	7777	38264	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:28.544548988 CET	7777	38266	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:28.544657946 CET	38266	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:28.544900894 CET	38266	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:28.550144911 CET	7777	38266	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:29.451208115 CET	7777	38266	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:29.451566935 CET	38266	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:29.712414980 CET	7777	38266	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:29.712904930 CET	38266	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:29.714556932 CET	38268	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:29.718303919 CET	7777	38266	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:29.720000029 CET	7777	38268	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:29.720176935 CET	38268	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:29.720237017 CET	38268	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:29.725545883 CET	7777	38268	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:30.634500980 CET	7777	38268	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:30.635059118 CET	38268	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:30.852920055 CET	7777	38268	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:30.853370905 CET	38268	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:30.854288101 CET	38270	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:30.858844995 CET	7777	38268	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:30.859780073 CET	7777	38270	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:30.859883070 CET	38270	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:30.860008001 CET	38270	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:30.865372896 CET	7777	38270	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:31.754224062 CET	7777	38270	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:31.754488945 CET	38270	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:31.955254078 CET	7777	38270	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:31.955576897 CET	38270	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:31.956554890 CET	38272	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:31.960910082 CET	7777	38270	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:31.961977005 CET	7777	38272	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:31.962052107 CET	38272	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:31.962192059 CET	38272	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:31.967573881 CET	7777	38272	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:32.909821033 CET	7777	38272	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:32.910168886 CET	38272	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:33.120385885 CET	7777	38272	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:33.120836020 CET	38272	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:33.122086048 CET	38274	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:33.126437902 CET	7777	38272	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:33.127651930 CET	7777	38274	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:33.127742052 CET	38274	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:33.127806902 CET	38274	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:33.133245945 CET	7777	38274	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:34.027550936 CET	7777	38274	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:34.027936935 CET	38274	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:34.255150080 CET	7777	38274	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:34.255538940 CET	38274	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:34.257299900 CET	38276	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:34.261025906 CET	7777	38274	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:34.262732983 CET	7777	38276	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:34.262826920 CET	38276	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:34.263071060 CET	38276	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:34.268470049 CET	7777	38276	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:35.768596888 CET	7777	38276	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:35.768696070 CET	7777	38276	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:35.768801928 CET	7777	38276	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:35.768865108 CET	7777	38276	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:35.768971920 CET	38276	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:35.768971920 CET	38276	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:35.769010067 CET	38276	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:35.769090891 CET	38276	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:35.769740105 CET	38278	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:35.774635077 CET	7777	38276	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:35.779827118 CET	7777	38278	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:35.779917002 CET	38278	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:35.780025005 CET	38278	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:35.785361052 CET	7777	38278	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:37.371423006 CET	7777	38278	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:37.371567965 CET	7777	38278	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:37.371736050 CET	7777	38278	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:37.371772051 CET	7777	38278	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:37.372152090 CET	38278	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:37.372153044 CET	38278	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:37.372153044 CET	38278	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:37.372153044 CET	38278	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:37.374233961 CET	38280	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:37.378077030 CET	7777	38278	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:37.382452011 CET	7777	38280	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:37.382556915 CET	38280	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:37.382707119 CET	38280	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:37.388022900 CET	7777	38280	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:38.312942982 CET	7777	38280	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:38.313146114 CET	38280	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:38.516251087 CET	7777	38280	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:38.516804934 CET	38280	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:38.519290924 CET	38282	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:38.522188902 CET	7777	38280	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:38.524840117 CET	7777	38282	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:38.524962902 CET	38282	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:38.525057077 CET	38282	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:38.530561924 CET	7777	38282	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:39.429153919 CET	7777	38282	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:39.429699898 CET	38282	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:39.648638964 CET	7777	38282	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:39.649112940 CET	38282	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:39.651036978 CET	38284	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:39.654536009 CET	7777	38282	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:39.656384945 CET	7777	38284	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:39.656478882 CET	38284	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:39.656716108 CET	38284	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:39.662087917 CET	7777	38284	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:40.631778955 CET	7777	38284	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:40.632210970 CET	38284	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:40.847270012 CET	7777	38284	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:40.847781897 CET	38284	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:40.850133896 CET	38286	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:40.853106976 CET	7777	38284	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:40.855407953 CET	7777	38286	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:40.855624914 CET	38286	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:40.855849981 CET	38286	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:40.861171007 CET	7777	38286	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:41.829340935 CET	7777	38286	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:41.829806089 CET	38286	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:42.027383089 CET	7777	38286	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:42.027725935 CET	38286	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:42.028999090 CET	38288	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:42.034254074 CET	7777	38286	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:42.035051107 CET	7777	38288	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:42.035116911 CET	38288	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:42.035358906 CET	38288	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:42.040689945 CET	7777	38288	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:43.021236897 CET	7777	38288	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:43.021733999 CET	38288	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:43.312058926 CET	7777	38288	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:43.312578917 CET	38288	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:43.314445019 CET	38290	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:43.318206072 CET	7777	38288	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:43.319823027 CET	7777	38290	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:43.319886923 CET	38290	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:43.320136070 CET	38290	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:43.325548887 CET	7777	38290	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:44.248040915 CET	7777	38290	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:44.248265982 CET	38290	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:44.518774986 CET	7777	38290	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:44.519449949 CET	38290	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:44.522011042 CET	38292	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:44.526935101 CET	7777	38290	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:44.529592991 CET	7777	38292	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:44.529858112 CET	38292	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:44.530127048 CET	38292	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:44.536384106 CET	7777	38292	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:45.520458937 CET	7777	38292	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:45.520744085 CET	38292	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:45.764913082 CET	7777	38292	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:45.765321970 CET	38292	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:45.767327070 CET	38294	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:45.771142960 CET	7777	38292	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:45.772720098 CET	7777	38294	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:45.772816896 CET	38294	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:45.773081064 CET	38294	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:45.778489113 CET	7777	38294	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:46.670763016 CET	7777	38294	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:46.671345949 CET	38294	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:46.920963049 CET	7777	38294	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:46.921622038 CET	38294	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:46.923659086 CET	38296	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:46.927292109 CET	7777	38294	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:46.929105997 CET	7777	38296	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:46.929198980 CET	38296	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:46.929306030 CET	38296	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:46.934679985 CET	7777	38296	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:47.933120012 CET	7777	38296	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:47.933336973 CET	38296	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:48.211795092 CET	7777	38296	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:48.212317944 CET	38296	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:48.214240074 CET	38298	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:48.217784882 CET	7777	38296	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:48.219597101 CET	7777	38298	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:48.219748974 CET	38298	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:48.219875097 CET	38298	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:48.225595951 CET	7777	38298	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:49.149857998 CET	7777	38298	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:49.150028944 CET	38298	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:49.418498993 CET	7777	38298	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:49.419027090 CET	38298	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:49.420661926 CET	38300	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:49.424536943 CET	7777	38298	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:49.426306009 CET	7777	38300	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:49.426548958 CET	38300	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:49.426703930 CET	38300	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:49.432041883 CET	7777	38300	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:50.326853037 CET	7777	38300	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:50.327008963 CET	38300	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:50.608321905 CET	7777	38300	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:50.608643055 CET	38300	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:50.609869957 CET	38302	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:50.818300009 CET	38300	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:50.839164972 CET	7777	38300	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:50.839289904 CET	38300	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:50.839797020 CET	7777	38300	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:50.839834929 CET	7777	38302	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:50.839867115 CET	7777	38300	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:50.839951038 CET	38300	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:50.839968920 CET	38302	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:50.840107918 CET	38302	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:50.845400095 CET	7777	38302	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:51.854392052 CET	7777	38302	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:51.854566097 CET	38302	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:52.124105930 CET	7777	38302	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:52.124533892 CET	38302	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:52.125474930 CET	38304	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:52.129942894 CET	7777	38302	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:52.130870104 CET	7777	38304	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:52.130935907 CET	38304	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:52.131052017 CET	38304	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:52.136426926 CET	7777	38304	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:53.057931900 CET	7777	38304	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:53.058242083 CET	38304	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:53.258109093 CET	7777	38304	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:53.258479118 CET	38304	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:53.259202003 CET	38306	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:53.263942003 CET	7777	38304	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:53.264486074 CET	7777	38306	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:53.264553070 CET	38306	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:53.264611959 CET	38306	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:53.270073891 CET	7777	38306	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:54.217252970 CET	7777	38306	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:54.217477083 CET	38306	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:54.410913944 CET	7777	38306	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:54.411104918 CET	38306	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:54.411926031 CET	38308	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:54.416598082 CET	7777	38306	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:54.417248011 CET	7777	38308	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:54.417313099 CET	38308	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:54.417365074 CET	38308	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:54.422693968 CET	7777	38308	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:55.420347929 CET	7777	38308	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:55.420747042 CET	38308	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:55.778091908 CET	7777	38308	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:55.778637886 CET	38308	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:55.779961109 CET	38310	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:55.784292936 CET	7777	38308	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:55.785372972 CET	7777	38310	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:55.785440922 CET	38310	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:55.785640001 CET	38310	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:55.791057110 CET	7777	38310	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:56.727715015 CET	7777	38310	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:56.727916002 CET	38310	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:56.930409908 CET	7777	38310	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:56.930664062 CET	38310	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:56.931416035 CET	38312	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:56.935972929 CET	7777	38310	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:56.936728001 CET	7777	38312	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:56.936795950 CET	38312	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:56.936897993 CET	38312	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:56.942153931 CET	7777	38312	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:57.825484991 CET	7777	38312	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:57.825788975 CET	38312	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:58.019694090 CET	7777	38312	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:58.020077944 CET	38312	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:58.021219015 CET	38314	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:58.025681019 CET	7777	38312	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:58.026649952 CET	7777	38314	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:58.026721954 CET	38314	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:58.026792049 CET	38314	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:58.032546997 CET	7777	38314	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:58.917519093 CET	7777	38314	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:58.917690039 CET	38314	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:59.142673016 CET	7777	38314	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:59.142843008 CET	38314	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:59.144300938 CET	38316	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:59.148227930 CET	7777	38314	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:59.149665117 CET	7777	38316	93.123.85.205	192.168.2.14
Oct 28, 2024 09:20:59.149732113 CET	38316	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:59.149837971 CET	38316	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:20:59.155277014 CET	7777	38316	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:00.045713902 CET	7777	38316	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:00.045945883 CET	38316	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:00.316375971 CET	7777	38316	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:00.316633940 CET	38316	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:00.317487955 CET	38318	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:00.322958946 CET	7777	38316	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:00.323102951 CET	7777	38318	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:00.323165894 CET	38318	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:00.323216915 CET	38318	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:00.328875065 CET	7777	38318	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:01.331423044 CET	7777	38318	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:01.331603050 CET	38318	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:01.424082041 CET	7777	38318	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:01.424240112 CET	38318	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:01.425071955 CET	38320	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:01.430639982 CET	7777	38318	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:01.431154966 CET	7777	38320	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:01.431257010 CET	38320	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:01.431391954 CET	38320	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:01.437905073 CET	7777	38320	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:02.318794012 CET	7777	38320	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:02.318988085 CET	38320	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:02.531338930 CET	7777	38320	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:02.531759977 CET	38320	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:02.533155918 CET	38322	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:02.537575960 CET	7777	38320	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:02.538553953 CET	7777	38322	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:02.538650036 CET	38322	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:02.538800001 CET	38322	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:02.544167995 CET	7777	38322	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:03.459391117 CET	7777	38322	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:03.459923983 CET	38322	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:03.666116953 CET	7777	38322	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:03.666573048 CET	38322	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:03.668792009 CET	38324	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:03.672230005 CET	7777	38322	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:03.675369978 CET	7777	38324	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:03.675714016 CET	38324	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:03.675759077 CET	38324	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:03.681457996 CET	7777	38324	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:04.612611055 CET	7777	38324	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:04.613203049 CET	38324	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:05.012877941 CET	7777	38324	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:05.013303041 CET	38324	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:05.015638113 CET	38326	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:05.019594908 CET	7777	38324	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:05.022027969 CET	7777	38326	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:05.022325993 CET	38326	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:05.022418022 CET	38326	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:05.028140068 CET	7777	38326	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:05.936644077 CET	7777	38326	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:05.937086105 CET	38326	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:06.211776018 CET	7777	38326	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:06.212454081 CET	38326	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:06.214092970 CET	38328	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:06.218372107 CET	7777	38326	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:06.219744921 CET	7777	38328	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:06.219978094 CET	38328	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:06.220237017 CET	38328	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:06.225650072 CET	7777	38328	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:07.158508062 CET	7777	38328	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:07.158922911 CET	38328	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:07.436238050 CET	7777	38328	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:07.436549902 CET	38328	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:07.437736988 CET	38330	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:07.442061901 CET	7777	38328	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:07.443253040 CET	7777	38330	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:07.443363905 CET	38330	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:07.443392992 CET	38330	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:07.448831081 CET	7777	38330	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:08.352787018 CET	7777	38330	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:08.352997065 CET	38330	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:08.816943884 CET	7777	38330	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:08.817248106 CET	38330	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:08.818238020 CET	38332	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:08.823409081 CET	7777	38330	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:08.824351072 CET	7777	38332	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:08.824419022 CET	38332	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:08.824470043 CET	38332	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:08.829884052 CET	7777	38332	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:09.709095001 CET	7777	38332	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:09.709270000 CET	38332	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:09.928672075 CET	7777	38332	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:09.928957939 CET	38332	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:09.930041075 CET	38334	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:09.934461117 CET	7777	38332	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:09.935442924 CET	7777	38334	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:09.935539007 CET	38334	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:09.935628891 CET	38334	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:09.941078901 CET	7777	38334	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:10.823735952 CET	7777	38334	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:10.824007988 CET	38334	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:11.057166100 CET	7777	38334	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:11.057537079 CET	38334	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:11.058801889 CET	38336	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:11.062961102 CET	7777	38334	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:11.064271927 CET	7777	38336	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:11.064361095 CET	38336	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:11.064486027 CET	38336	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:11.069750071 CET	7777	38336	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:11.957956076 CET	7777	38336	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:11.958188057 CET	38336	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:12.162981033 CET	7777	38336	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:12.163290024 CET	38336	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:12.164453983 CET	38338	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:12.168761015 CET	7777	38336	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:12.169797897 CET	7777	38338	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:12.169899940 CET	38338	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:12.170008898 CET	38338	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:12.175307035 CET	7777	38338	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:13.113012075 CET	7777	38338	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:13.113248110 CET	38338	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:13.262320995 CET	7777	38338	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:13.262501955 CET	38338	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:13.263535976 CET	38340	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:13.269247055 CET	7777	38338	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:13.270159960 CET	7777	38340	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:13.270260096 CET	38340	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:13.270306110 CET	38340	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:13.276894093 CET	7777	38340	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:14.381259918 CET	7777	38340	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:14.381500959 CET	38340	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:14.411885023 CET	7777	38340	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:14.412266016 CET	38340	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:14.413361073 CET	38342	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:14.419171095 CET	7777	38340	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:14.419188023 CET	7777	38342	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:14.419267893 CET	38342	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:14.419380903 CET	38342	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:14.424643993 CET	7777	38342	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:15.343337059 CET	7777	38342	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:15.343470097 CET	38342	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:15.559247017 CET	7777	38342	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:15.559433937 CET	38342	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:15.560281992 CET	38344	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:15.564745903 CET	7777	38342	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:15.565561056 CET	7777	38344	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:15.565630913 CET	38344	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:15.565685034 CET	38344	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:15.570964098 CET	7777	38344	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:16.541448116 CET	7777	38344	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:16.541659117 CET	38344	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:16.758569002 CET	7777	38344	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:16.758893013 CET	38344	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:16.760008097 CET	38346	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:16.764352083 CET	7777	38344	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:16.765332937 CET	7777	38346	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:16.765422106 CET	38346	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:16.765530109 CET	38346	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:16.770804882 CET	7777	38346	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:17.809992075 CET	7777	38346	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:17.810184956 CET	38346	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:17.962771893 CET	7777	38346	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:17.963028908 CET	38346	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:17.964148998 CET	38348	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:17.968766928 CET	7777	38346	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:17.969726086 CET	7777	38348	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:17.969822884 CET	38348	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:17.969921112 CET	38348	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:17.975301027 CET	7777	38348	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:18.922638893 CET	7777	38348	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:18.922796965 CET	38348	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:19.117770910 CET	7777	38348	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:19.118168116 CET	38348	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:19.119139910 CET	38350	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:19.123509884 CET	7777	38348	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:19.124469042 CET	7777	38350	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:19.124569893 CET	38350	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:19.124669075 CET	38350	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:19.130008936 CET	7777	38350	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:20.113415003 CET	7777	38350	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:20.113487005 CET	38350	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:20.333158970 CET	7777	38350	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:20.333264112 CET	38350	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:20.334469080 CET	38352	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:20.338613033 CET	7777	38350	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:20.339910984 CET	7777	38352	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:20.339970112 CET	38352	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:20.340014935 CET	38352	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:20.345304012 CET	7777	38352	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:21.326747894 CET	7777	38352	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:21.326838017 CET	38352	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:21.523175955 CET	7777	38352	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:21.523304939 CET	38352	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:21.524568081 CET	38354	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:21.528635025 CET	7777	38352	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:21.529967070 CET	7777	38354	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:21.530054092 CET	38354	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:21.530085087 CET	38354	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:21.535394907 CET	7777	38354	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:22.516997099 CET	7777	38354	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:22.517302036 CET	38354	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:22.758304119 CET	7777	38354	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:22.758579969 CET	38354	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:22.759150028 CET	38356	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:22.763885975 CET	7777	38354	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:22.764440060 CET	7777	38356	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:22.764497042 CET	38356	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:22.764542103 CET	38356	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:22.769853115 CET	7777	38356	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:23.661000013 CET	7777	38356	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:23.661211967 CET	38356	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:23.864085913 CET	7777	38356	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:23.864370108 CET	38356	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:23.864942074 CET	38358	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:23.869776011 CET	7777	38356	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:23.870316982 CET	7777	38358	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:23.870392084 CET	38358	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:23.870429039 CET	38358	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:23.875844002 CET	7777	38358	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:24.841233015 CET	7777	38358	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:24.841468096 CET	38358	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:25.127980947 CET	7777	38358	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:25.128262997 CET	38358	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:25.128772020 CET	38360	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:25.133894920 CET	7777	38358	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:25.134205103 CET	7777	38360	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:25.134267092 CET	38360	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:25.134313107 CET	38360	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:25.139687061 CET	7777	38360	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:26.024254084 CET	7777	38360	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:26.024394035 CET	38360	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:26.242508888 CET	7777	38360	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:26.242789984 CET	38360	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:26.243374109 CET	38362	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:26.248348951 CET	7777	38360	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:26.248733044 CET	7777	38362	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:26.248811960 CET	38362	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:26.248842955 CET	38362	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:26.254160881 CET	7777	38362	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:27.237848043 CET	7777	38362	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:27.238073111 CET	38362	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:27.456124067 CET	7777	38362	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:27.456388950 CET	38362	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:27.457221985 CET	38364	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:27.461725950 CET	7777	38362	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:27.462538004 CET	7777	38364	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:27.462598085 CET	38364	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:27.462641954 CET	38364	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:27.467979908 CET	7777	38364	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:28.422873020 CET	7777	38364	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:28.423139095 CET	38364	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:28.715284109 CET	7777	38364	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:28.715568066 CET	38364	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:28.716479063 CET	38366	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:28.721143961 CET	7777	38364	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:28.722069979 CET	7777	38366	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:28.722174883 CET	38366	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:28.722251892 CET	38366	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:28.727642059 CET	7777	38366	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:29.647828102 CET	7777	38366	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:29.647959948 CET	38366	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:29.849322081 CET	7777	38366	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:29.849562883 CET	38366	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:29.850390911 CET	38368	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:29.854896069 CET	7777	38366	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:29.855721951 CET	7777	38368	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:29.855783939 CET	38368	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:29.855827093 CET	38368	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:29.861155033 CET	7777	38368	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:30.828479052 CET	7777	38368	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:30.828797102 CET	38368	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:31.062491894 CET	7777	38368	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:31.062721968 CET	38368	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:31.063528061 CET	38370	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:31.068085909 CET	7777	38368	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:31.068993092 CET	7777	38370	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:31.069061995 CET	38370	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:31.069138050 CET	38370	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:31.074469090 CET	7777	38370	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:32.050930023 CET	7777	38370	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:32.051245928 CET	38370	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:32.313307047 CET	7777	38370	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:32.313468933 CET	38370	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:32.314327955 CET	38372	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:32.318933964 CET	7777	38370	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:32.319722891 CET	7777	38372	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:32.319792986 CET	38372	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:32.319854975 CET	38372	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:32.325210094 CET	7777	38372	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:33.227824926 CET	7777	38372	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:33.228157043 CET	38372	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:33.416105986 CET	7777	38372	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:33.416335106 CET	38372	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:33.417171001 CET	38374	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:33.421813011 CET	7777	38372	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:33.422625065 CET	7777	38374	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:33.422687054 CET	38374	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:33.422743082 CET	38374	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:33.428061962 CET	7777	38374	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:34.255043030 CET	7777	38374	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:34.255337954 CET	38374	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:34.459253073 CET	7777	38374	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:34.459461927 CET	38374	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:34.460316896 CET	38376	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:34.464901924 CET	7777	38374	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:34.465749025 CET	7777	38376	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:34.465833902 CET	38376	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:34.465888977 CET	38376	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:34.471251965 CET	7777	38376	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:35.457839966 CET	7777	38376	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:35.458007097 CET	38376	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:35.645060062 CET	7777	38376	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:35.645342112 CET	38376	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:35.646053076 CET	38378	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:35.650767088 CET	7777	38376	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:35.651355982 CET	7777	38378	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:35.651415110 CET	38378	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:35.651479006 CET	38378	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:35.656805038 CET	7777	38378	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:36.553317070 CET	7777	38378	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:36.553517103 CET	38378	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:36.811357975 CET	7777	38378	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:36.811549902 CET	38378	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:36.812361956 CET	38380	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:36.817109108 CET	7777	38378	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:36.817854881 CET	7777	38380	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:36.817950010 CET	38380	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:36.818008900 CET	38380	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:36.823396921 CET	7777	38380	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:37.706707954 CET	7777	38380	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:37.706971884 CET	38380	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:37.923209906 CET	7777	38380	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:37.923650026 CET	38380	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:37.924503088 CET	38382	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:37.929079056 CET	7777	38380	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:37.929830074 CET	7777	38382	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:37.929908991 CET	38382	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:37.929969072 CET	38382	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:37.935292959 CET	7777	38382	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:38.913424015 CET	7777	38382	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:38.913661957 CET	38382	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:39.131614923 CET	7777	38382	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:39.131923914 CET	38382	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:39.132767916 CET	38384	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:39.137315035 CET	7777	38382	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:39.138144970 CET	7777	38384	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:39.138196945 CET	38384	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:39.138269901 CET	38384	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:39.143627882 CET	7777	38384	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:40.116894007 CET	7777	38384	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:40.117058039 CET	38384	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:40.327567101 CET	7777	38384	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:40.327841043 CET	38384	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:40.328706026 CET	38386	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:40.333489895 CET	7777	38384	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:40.334145069 CET	7777	38386	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:40.334214926 CET	38386	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:40.334306955 CET	38386	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:40.339745998 CET	7777	38386	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:41.162542105 CET	7777	38386	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:41.162740946 CET	38386	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:41.342482090 CET	7777	38386	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:41.342688084 CET	38386	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:41.343812943 CET	38388	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:41.348057032 CET	7777	38386	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:41.349246025 CET	7777	38388	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:41.349359989 CET	38388	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:41.349474907 CET	38388	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:41.354784966 CET	7777	38388	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:42.409816980 CET	7777	38388	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:42.410002947 CET	38388	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:42.511996031 CET	7777	38388	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:42.512154102 CET	38388	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:42.512965918 CET	38390	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:42.517950058 CET	7777	38388	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:42.518356085 CET	7777	38390	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:42.518518925 CET	38390	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:42.518614054 CET	38390	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:42.524142981 CET	7777	38390	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:43.409903049 CET	7777	38390	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:43.410449028 CET	38390	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:43.635375023 CET	7777	38390	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:43.635797977 CET	38390	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:43.636760950 CET	38392	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:43.641350985 CET	7777	38390	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:43.642515898 CET	7777	38392	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:43.642729044 CET	38392	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:43.642829895 CET	38392	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:43.648489952 CET	7777	38392	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:44.615761042 CET	7777	38392	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:44.615894079 CET	38392	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:44.830810070 CET	7777	38392	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:44.831183910 CET	38392	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:44.832186937 CET	38394	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:44.836611032 CET	7777	38392	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:44.837635040 CET	7777	38394	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:44.837707996 CET	38394	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:44.837800026 CET	38394	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:44.843095064 CET	7777	38394	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:45.814574957 CET	7777	38394	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:45.814783096 CET	38394	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:46.028501987 CET	7777	38394	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:46.028780937 CET	38394	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:46.029946089 CET	38396	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:46.034254074 CET	7777	38394	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:46.035370111 CET	7777	38396	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:46.035485029 CET	38396	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:46.035605907 CET	38396	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:46.040920973 CET	7777	38396	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:47.022962093 CET	7777	38396	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:47.023104906 CET	38396	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:47.231952906 CET	7777	38396	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:47.232109070 CET	38396	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:47.233376980 CET	38398	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:47.237590075 CET	7777	38396	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:47.238889933 CET	7777	38398	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:47.239187956 CET	38398	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:47.239216089 CET	38398	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:47.244857073 CET	7777	38398	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:48.154813051 CET	7777	38398	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:48.154984951 CET	38398	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:48.358561039 CET	7777	38398	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:48.358937025 CET	38398	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:48.360707045 CET	38400	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:48.364291906 CET	7777	38398	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:48.366148949 CET	7777	38400	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:48.366339922 CET	38400	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:48.366607904 CET	38400	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:48.371963024 CET	7777	38400	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:49.321331024 CET	7777	38400	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:49.321490049 CET	38400	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:49.510960102 CET	7777	38400	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:49.511341095 CET	38400	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:49.513298035 CET	38402	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:49.516659975 CET	7777	38400	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:49.518740892 CET	7777	38402	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:49.518935919 CET	38402	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:49.519102097 CET	38402	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:49.524874926 CET	7777	38402	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:50.526015043 CET	7777	38402	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:50.526326895 CET	38402	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:50.776602030 CET	7777	38402	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:50.777000904 CET	38402	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:50.778759003 CET	38404	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:50.782277107 CET	7777	38402	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:50.784112930 CET	7777	38404	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:50.784254074 CET	38404	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:50.784317017 CET	38404	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:50.789617062 CET	7777	38404	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:51.717364073 CET	7777	38404	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:51.717567921 CET	38404	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:51.862215996 CET	7777	38404	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:51.862616062 CET	38404	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:51.863686085 CET	38406	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:51.868040085 CET	7777	38404	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:51.869127989 CET	7777	38406	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:51.869210958 CET	38406	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:51.869318008 CET	38406	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:51.874739885 CET	7777	38406	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:52.751633883 CET	7777	38406	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:52.752127886 CET	38406	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:53.003807068 CET	7777	38406	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:53.004292965 CET	38406	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:53.005851030 CET	38408	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:53.009876966 CET	7777	38406	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:53.011249065 CET	7777	38408	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:53.011352062 CET	38408	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:53.011734009 CET	38408	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:53.017046928 CET	7777	38408	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:53.911983013 CET	7777	38408	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:53.912271976 CET	38408	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:54.125102043 CET	7777	38408	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:54.125514984 CET	38408	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:54.126652002 CET	38410	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:54.130809069 CET	7777	38408	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:54.131978989 CET	7777	38410	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:54.132289886 CET	38410	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:54.132343054 CET	38410	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:54.137587070 CET	7777	38410	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:55.031902075 CET	7777	38410	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:55.032031059 CET	38410	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:55.308429956 CET	7777	38410	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:55.308821917 CET	38410	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:55.309659958 CET	38412	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:55.314405918 CET	7777	38410	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:55.314997911 CET	7777	38412	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:55.315090895 CET	38412	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:55.315202951 CET	38412	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:55.320700884 CET	7777	38412	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:56.226807117 CET	7777	38412	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:56.227233887 CET	38412	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:56.459012985 CET	7777	38412	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:56.459630013 CET	38412	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:56.460383892 CET	38414	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:56.464983940 CET	7777	38412	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:56.465707064 CET	7777	38414	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:56.465780020 CET	38414	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:56.465852022 CET	38414	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:56.471651077 CET	7777	38414	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:57.419540882 CET	7777	38414	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:57.419805050 CET	38414	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:57.644510984 CET	7777	38414	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:57.645049095 CET	38414	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:57.646841049 CET	38416	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:57.650460005 CET	7777	38414	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:57.652291059 CET	7777	38416	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:57.652401924 CET	38416	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:57.652664900 CET	38416	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:57.658051014 CET	7777	38416	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:58.542660952 CET	7777	38416	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:58.542840004 CET	38416	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:58.812568903 CET	7777	38416	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:58.813002110 CET	38416	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:58.813858986 CET	38418	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:58.818346024 CET	7777	38416	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:58.819230080 CET	7777	38418	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:58.819344997 CET	38418	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:58.819400072 CET	38418	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:21:58.824723005 CET	7777	38418	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:59.818327904 CET	7777	38418	93.123.85.205	192.168.2.14
Oct 28, 2024 09:21:59.818473101 CET	38418	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:22:00.045195103 CET	7777	38418	93.123.85.205	192.168.2.14
Oct 28, 2024 09:22:00.045460939 CET	38418	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:22:00.046456099 CET	38420	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:22:00.052170992 CET	7777	38418	93.123.85.205	192.168.2.14
Oct 28, 2024 09:22:00.053128958 CET	7777	38420	93.123.85.205	192.168.2.14
Oct 28, 2024 09:22:00.053210974 CET	38420	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:22:00.053317070 CET	38420	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:22:00.059837103 CET	7777	38420	93.123.85.205	192.168.2.14
Oct 28, 2024 09:22:00.929117918 CET	7777	38420	93.123.85.205	192.168.2.14
Oct 28, 2024 09:22:00.929277897 CET	38420	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:22:01.118480921 CET	7777	38420	93.123.85.205	192.168.2.14
Oct 28, 2024 09:22:01.118949890 CET	38420	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:22:01.119932890 CET	38422	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:22:01.124419928 CET	7777	38420	93.123.85.205	192.168.2.14
Oct 28, 2024 09:22:01.125381947 CET	7777	38422	93.123.85.205	192.168.2.14
Oct 28, 2024 09:22:01.125484943 CET	38422	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:22:01.125617027 CET	38422	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:22:01.131067991 CET	7777	38422	93.123.85.205	192.168.2.14
Oct 28, 2024 09:22:02.026696920 CET	7777	38422	93.123.85.205	192.168.2.14
Oct 28, 2024 09:22:02.027117968 CET	38422	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:22:02.223862886 CET	7777	38422	93.123.85.205	192.168.2.14
Oct 28, 2024 09:22:02.224162102 CET	38422	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:22:02.226353884 CET	38424	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:22:02.229585886 CET	7777	38422	93.123.85.205	192.168.2.14
Oct 28, 2024 09:22:02.231848955 CET	7777	38424	93.123.85.205	192.168.2.14
Oct 28, 2024 09:22:02.232006073 CET	38424	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:22:02.232086897 CET	38424	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:22:02.237901926 CET	7777	38424	93.123.85.205	192.168.2.14
Oct 28, 2024 09:22:03.114063025 CET	7777	38424	93.123.85.205	192.168.2.14
Oct 28, 2024 09:22:03.114629984 CET	38424	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:22:03.318104982 CET	7777	38424	93.123.85.205	192.168.2.14
Oct 28, 2024 09:22:03.318816900 CET	38424	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:22:03.319998026 CET	38426	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:22:03.324301004 CET	7777	38424	93.123.85.205	192.168.2.14
Oct 28, 2024 09:22:03.325387955 CET	7777	38426	93.123.85.205	192.168.2.14
Oct 28, 2024 09:22:03.325634003 CET	38426	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:22:03.325727940 CET	38426	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:22:03.331645966 CET	7777	38426	93.123.85.205	192.168.2.14
Oct 28, 2024 09:22:04.261166096 CET	7777	38426	93.123.85.205	192.168.2.14
Oct 28, 2024 09:22:04.261529922 CET	38426	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:22:04.456877947 CET	7777	38426	93.123.85.205	192.168.2.14
Oct 28, 2024 09:22:04.457340956 CET	38426	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:22:04.458611965 CET	38428	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:22:04.462816954 CET	7777	38426	93.123.85.205	192.168.2.14
Oct 28, 2024 09:22:04.464122057 CET	7777	38428	93.123.85.205	192.168.2.14
Oct 28, 2024 09:22:04.464183092 CET	38428	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:22:04.464442968 CET	38428	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:22:04.470022917 CET	7777	38428	93.123.85.205	192.168.2.14
Oct 28, 2024 09:22:05.429673910 CET	7777	38428	93.123.85.205	192.168.2.14
Oct 28, 2024 09:22:05.429991007 CET	38428	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:22:05.712718964 CET	7777	38428	93.123.85.205	192.168.2.14
Oct 28, 2024 09:22:05.713376999 CET	38428	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:22:05.714895010 CET	38430	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:22:05.718822002 CET	7777	38428	93.123.85.205	192.168.2.14
Oct 28, 2024 09:22:05.720242977 CET	7777	38430	93.123.85.205	192.168.2.14
Oct 28, 2024 09:22:05.720305920 CET	38430	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:22:05.720491886 CET	38430	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:22:05.725799084 CET	7777	38430	93.123.85.205	192.168.2.14
Oct 28, 2024 09:22:06.647310019 CET	7777	38430	93.123.85.205	192.168.2.14
Oct 28, 2024 09:22:06.647663116 CET	38430	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:22:06.857275963 CET	7777	38430	93.123.85.205	192.168.2.14
Oct 28, 2024 09:22:06.857625008 CET	38430	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:22:06.858978033 CET	38432	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:22:06.863122940 CET	7777	38430	93.123.85.205	192.168.2.14
Oct 28, 2024 09:22:06.864557981 CET	7777	38432	93.123.85.205	192.168.2.14
Oct 28, 2024 09:22:06.864799023 CET	38432	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:22:06.864943981 CET	38432	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:22:06.870348930 CET	7777	38432	93.123.85.205	192.168.2.14
Oct 28, 2024 09:22:07.816910028 CET	7777	38432	93.123.85.205	192.168.2.14
Oct 28, 2024 09:22:07.817063093 CET	38432	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:22:08.057801008 CET	7777	38432	93.123.85.205	192.168.2.14
Oct 28, 2024 09:22:08.058111906 CET	38432	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:22:08.059092999 CET	38434	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:22:08.063596964 CET	7777	38432	93.123.85.205	192.168.2.14
Oct 28, 2024 09:22:08.064438105 CET	7777	38434	93.123.85.205	192.168.2.14
Oct 28, 2024 09:22:08.064584970 CET	38434	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:22:08.064733028 CET	38434	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:22:08.070080042 CET	7777	38434	93.123.85.205	192.168.2.14
Oct 28, 2024 09:22:09.029761076 CET	7777	38434	93.123.85.205	192.168.2.14
Oct 28, 2024 09:22:09.030010939 CET	38434	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:22:09.247586966 CET	7777	38434	93.123.85.205	192.168.2.14
Oct 28, 2024 09:22:09.248042107 CET	38434	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:22:09.248884916 CET	38436	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:22:09.253465891 CET	7777	38434	93.123.85.205	192.168.2.14
Oct 28, 2024 09:22:09.254219055 CET	7777	38436	93.123.85.205	192.168.2.14
Oct 28, 2024 09:22:09.254348993 CET	38436	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:22:09.254475117 CET	38436	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:22:09.259885073 CET	7777	38436	93.123.85.205	192.168.2.14
Oct 28, 2024 09:22:10.130172014 CET	7777	38436	93.123.85.205	192.168.2.14
Oct 28, 2024 09:22:10.130474091 CET	38436	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:22:10.361084938 CET	7777	38436	93.123.85.205	192.168.2.14
Oct 28, 2024 09:22:10.361496925 CET	38436	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:22:10.362082958 CET	38438	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:22:10.368128061 CET	7777	38436	93.123.85.205	192.168.2.14
Oct 28, 2024 09:22:10.368714094 CET	7777	38438	93.123.85.205	192.168.2.14
Oct 28, 2024 09:22:10.368809938 CET	38438	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:22:10.368881941 CET	38438	7777	192.168.2.14	93.123.85.205
Oct 28, 2024 09:22:10.375746012 CET	7777	38438	93.123.85.205	192.168.2.14

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 28, 2024 09:21:20.525903940 CET	48679	53	192.168.2.14	8.8.8.8
Oct 28, 2024 09:21:20.525975943 CET	59995	53	192.168.2.14	8.8.8.8
Oct 28, 2024 09:21:20.533499956 CET	53	48679	8.8.8.8	192.168.2.14
Oct 28, 2024 09:21:20.533529997 CET	53	59995	8.8.8.8	192.168.2.14

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 28, 2024 09:21:20.525903940 CET	192.168.2.14	8.8.8.8	0xc0e8	Standard query (0)	daisy.ubuntu.com	A (IP address)	IN (0x0001)	false
Oct 28, 2024 09:21:20.525975943 CET	192.168.2.14	8.8.8.8	0xf20e	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 28, 2024 09:21:20.533499956 CET	8.8.8.8	192.168.2.14	0xc0e8	No error (0)	daisy.ubuntu.com		162.213.35.25	A (IP address)	IN (0x0001)	false
Oct 28, 2024 09:21:20.533499956 CET	8.8.8.8	192.168.2.14	0xc0e8	No error (0)	daisy.ubuntu.com		162.213.35.24	A (IP address)	IN (0x0001)	false

System Behavior

Analysis Process: na.elf PID: 5517, Parent PID: 5436

General

Start time (UTC):	08:18:34
Start date (UTC):	28/10/2024
Path:	/tmp/na.elf
Arguments:	/tmp/na.elf
File size:	5777432 bytes
MD5 hash:	0083f1f0e77be34ad27f849842bbb00c

Chronological Activities

Analysis Process: na.elf PID: 5519, Parent PID: 5517

General

Start time (UTC):	08:18:34
Start date (UTC):	28/10/2024
Path:	/tmp/na.elf
Arguments:	-
File size:	5777432 bytes
MD5 hash:	0083f1f0e77be34ad27f849842bbb00c

Chronological Activities

Analysis Process: na.elf PID: 5521, Parent PID: 5519

General

Start time (UTC):	08:18:34
Start date (UTC):	28/10/2024
Path:	/tmp/na.elf
Arguments:	-
File size:	5777432 bytes
MD5 hash:	0083f1f0e77be34ad27f849842bbb00c

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system. Functionality could exist within remote access tools to enable this, but utilities available on the operating system could also be used such as Ping or `net view` using Net .
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Network Traffic: Network Connection Creation, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may obfuscate command and control traffic to make it more difficult to detect. Command and control (C2) communications are hidden (but not necessarily encrypted) in an attempt to make the content more difficult to discover or decipher and to make the communication less conspicuous and hide commands from being seen. This encompasses many methods, such as adding junk data to protocol traffic, using steganography, or impersonating legitimate protocols.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report na.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Threatname: Gafgyt

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/tmp/qemu-open.MnLeFo (deleted)

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

System Behavior

Analysis Process: na.elf PID: 5517, Parent PID: 5436

General

Chronological Activities

Analysis Process: na.elf PID: 5519, Parent PID: 5517

General

Chronological Activities

Analysis Process: na.elf PID: 5521, Parent PID: 5519

General

Chronological Activities

Linux Analysis Report
na.elf