Edit tour

Linux Analysis Report
gigops.mips.elf

Overview

General Information

Sample name:	gigops.mips.elf
Analysis ID:	1585606
MD5:	03288ec135533661f816d40f119c1359
SHA1:	42bb848c8efbec7b098d8d48bf65d0b7d0d492c8
SHA256:	b9a089b5234b3174010c87d08d03425cfd253e16e6916ff5c4baa1a747a2a2b6
Tags:	elfuser-abuse_ch
Infos:

Detection

Gafgyt

Score:	84
Range:	0 - 100
Whitelisted:	false

Signatures

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Gafgyt

Opens /proc/net/* files useful for finding connected devices and routers

Executes the "rm" command used to delete files or directories

Sample and/or dropped files contains symbols with suspicious names

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1585606
Start date and time:	2025-01-07 22:17:07 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 57s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	gigops.mips.elf
Detection:	MAL
Classification:	mal84.spre.troj.linELF@0/1@2/0

Warnings

VT rate limit hit for: gigops.mips.elf

Runtime Messages

Command:	/tmp/gigops.mips.elf
PID:	5434
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	BUILD DONGS BUILD DONGS
Standard Error:

Process Tree

system is lnxubuntu20

dash New Fork (PID: 5423, Parent: 3579)

rm (PID: 5423, Parent: 3579, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.uaZZQhk4qN /tmp/tmp.SXWrw9u982 /tmp/tmp.WIWpnuIAFd

dash New Fork (PID: 5424, Parent: 3579)

rm (PID: 5424, Parent: 3579, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.uaZZQhk4qN /tmp/tmp.SXWrw9u982 /tmp/tmp.WIWpnuIAFd

gigops.mips.elf (PID: 5434, Parent: 5358, MD5: 0083f1f0e77be34ad27f849842bbb00c) Arguments: /tmp/gigops.mips.elf

gigops.mips.elf New Fork (PID: 5436, Parent: 5434)

gigops.mips.elf New Fork (PID: 5438, Parent: 5436)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
gigops.mips.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
gigops.mips.elf	Linux_Trojan_Gafgyt_fb14e81f	unknown	unknown	0x1ae7c:$a: 4E 45 52 00 53 43 41 4E 4E 45 52 20 4F 4E 20 7C 20 4F 46 46 00

Memory Dumps

Source	Rule	Description	Author	Strings
5434.1.00007f4418400000.00007f441841d000.r-x.sdmp	Linux_Trojan_Gafgyt_fb14e81f	unknown	unknown	0x1ae7c:$a: 4E 45 52 00 53 43 41 4E 4E 45 52 20 4F 4E 20 7C 20 4F 46 46 00
5436.1.00007f4418400000.00007f441841d000.r-x.sdmp	Linux_Trojan_Gafgyt_fb14e81f	unknown	unknown	0x1ae7c:$a: 4E 45 52 00 53 43 41 4E 4E 45 52 20 4F 4E 20 7C 20 4F 46 46 00

Suricata Signatures

ETPRO MALWARE ELF/BASHLITE Variant CnC Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-07T22:17:53.555375+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51592	45.128.233.186	23	TCP
2025-01-07T22:17:55.433053+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51594	45.128.233.186	23	TCP
2025-01-07T22:17:57.191923+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51596	45.128.233.186	23	TCP
2025-01-07T22:17:58.973601+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51598	45.128.233.186	23	TCP
2025-01-07T22:18:00.723129+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51600	45.128.233.186	23	TCP
2025-01-07T22:18:02.475650+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51602	45.128.233.186	23	TCP
2025-01-07T22:18:04.229208+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51604	45.128.233.186	23	TCP
2025-01-07T22:18:06.015541+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51606	45.128.233.186	23	TCP
2025-01-07T22:18:07.801617+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51608	45.128.233.186	23	TCP
2025-01-07T22:18:09.543509+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51610	45.128.233.186	23	TCP
2025-01-07T22:18:11.328043+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51612	45.128.233.186	23	TCP
2025-01-07T22:18:13.074289+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51614	45.128.233.186	23	TCP
2025-01-07T22:18:14.809486+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51616	45.128.233.186	23	TCP
2025-01-07T22:18:16.537866+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51618	45.128.233.186	23	TCP
2025-01-07T22:18:18.322699+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51620	45.128.233.186	23	TCP
2025-01-07T22:18:20.117987+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51622	45.128.233.186	23	TCP
2025-01-07T22:18:21.911142+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51624	45.128.233.186	23	TCP
2025-01-07T22:18:23.730941+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51626	45.128.233.186	23	TCP
2025-01-07T22:18:25.571196+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51628	45.128.233.186	23	TCP
2025-01-07T22:18:27.423058+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51630	45.128.233.186	23	TCP
2025-01-07T22:18:29.204538+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51632	45.128.233.186	23	TCP
2025-01-07T22:18:30.942529+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51634	45.128.233.186	23	TCP
2025-01-07T22:18:32.718291+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51636	45.128.233.186	23	TCP
2025-01-07T22:18:34.508618+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51638	45.128.233.186	23	TCP
2025-01-07T22:18:36.283055+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51640	45.128.233.186	23	TCP
2025-01-07T22:18:38.066331+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51642	45.128.233.186	23	TCP
2025-01-07T22:18:39.849346+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51644	45.128.233.186	23	TCP
2025-01-07T22:18:41.635442+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51646	45.128.233.186	23	TCP
2025-01-07T22:18:43.381272+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51648	45.128.233.186	23	TCP
2025-01-07T22:18:45.161951+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51650	45.128.233.186	23	TCP
2025-01-07T22:18:46.927152+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51652	45.128.233.186	23	TCP
2025-01-07T22:18:48.709904+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51654	45.128.233.186	23	TCP
2025-01-07T22:18:50.452308+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51656	45.128.233.186	23	TCP
2025-01-07T22:18:52.199816+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51658	45.128.233.186	23	TCP
2025-01-07T22:18:53.967820+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51660	45.128.233.186	23	TCP
2025-01-07T22:18:55.752992+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51662	45.128.233.186	23	TCP
2025-01-07T22:18:57.511304+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51664	45.128.233.186	23	TCP
2025-01-07T22:18:59.328114+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51666	45.128.233.186	23	TCP
2025-01-07T22:19:01.110377+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51668	45.128.233.186	23	TCP
2025-01-07T22:19:02.857550+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51670	45.128.233.186	23	TCP
2025-01-07T22:19:04.639187+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51672	45.128.233.186	23	TCP
2025-01-07T22:19:06.415912+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51674	45.128.233.186	23	TCP
2025-01-07T22:19:08.238440+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51676	45.128.233.186	23	TCP
2025-01-07T22:19:10.020918+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51678	45.128.233.186	23	TCP
2025-01-07T22:19:11.798469+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51680	45.128.233.186	23	TCP
2025-01-07T22:19:13.638434+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51682	45.128.233.186	23	TCP
2025-01-07T22:19:15.368281+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51684	45.128.233.186	23	TCP
2025-01-07T22:19:17.104302+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51686	45.128.233.186	23	TCP
2025-01-07T22:19:18.881595+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51688	45.128.233.186	23	TCP
2025-01-07T22:19:20.665670+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51690	45.128.233.186	23	TCP
2025-01-07T22:19:22.439919+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51692	45.128.233.186	23	TCP
2025-01-07T22:19:24.218856+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51694	45.128.233.186	23	TCP
2025-01-07T22:19:25.953432+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51696	45.128.233.186	23	TCP
2025-01-07T22:19:27.688620+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51698	45.128.233.186	23	TCP
2025-01-07T22:19:29.421628+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51700	45.128.233.186	23	TCP
2025-01-07T22:19:31.182292+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51702	45.128.233.186	23	TCP
2025-01-07T22:19:32.976237+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51704	45.128.233.186	23	TCP
2025-01-07T22:19:34.728327+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51706	45.128.233.186	23	TCP
2025-01-07T22:19:36.468614+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51708	45.128.233.186	23	TCP
2025-01-07T22:19:38.245159+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51710	45.128.233.186	23	TCP
2025-01-07T22:19:39.974288+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51712	45.128.233.186	23	TCP
2025-01-07T22:19:41.727715+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51714	45.128.233.186	23	TCP
2025-01-07T22:19:43.513200+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51716	45.128.233.186	23	TCP
2025-01-07T22:19:45.275284+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51718	45.128.233.186	23	TCP
2025-01-07T22:19:47.081163+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51720	45.128.233.186	23	TCP
2025-01-07T22:19:49.869032+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51722	45.128.233.186	23	TCP
2025-01-07T22:19:51.676246+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51724	45.128.233.186	23	TCP
2025-01-07T22:19:53.426844+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51726	45.128.233.186	23	TCP
2025-01-07T22:19:55.243092+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51728	45.128.233.186	23	TCP
2025-01-07T22:19:57.057059+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51730	45.128.233.186	23	TCP
2025-01-07T22:19:58.821248+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51732	45.128.233.186	23	TCP
2025-01-07T22:20:00.616917+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51734	45.128.233.186	23	TCP
2025-01-07T22:20:02.394412+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51736	45.128.233.186	23	TCP
2025-01-07T22:20:04.174809+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51738	45.128.233.186	23	TCP
2025-01-07T22:20:05.948604+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51740	45.128.233.186	23	TCP
2025-01-07T22:20:07.743960+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51742	45.128.233.186	23	TCP
2025-01-07T22:20:09.517059+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51744	45.128.233.186	23	TCP
2025-01-07T22:20:11.667407+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51746	45.128.233.186	23	TCP
2025-01-07T22:20:13.445419+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51748	45.128.233.186	23	TCP
2025-01-07T22:20:15.178060+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51750	45.128.233.186	23	TCP
2025-01-07T22:20:16.963233+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51752	45.128.233.186	23	TCP
2025-01-07T22:20:18.712236+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51754	45.128.233.186	23	TCP
2025-01-07T22:20:20.481864+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51756	45.128.233.186	23	TCP
2025-01-07T22:20:22.265565+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51758	45.128.233.186	23	TCP
2025-01-07T22:20:24.073387+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51760	45.128.233.186	23	TCP
2025-01-07T22:20:26.634758+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51762	45.128.233.186	23	TCP
2025-01-07T22:20:28.409809+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51764	45.128.233.186	23	TCP
2025-01-07T22:20:30.226466+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51766	45.128.233.186	23	TCP
2025-01-07T22:20:31.988052+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51768	45.128.233.186	23	TCP
2025-01-07T22:20:33.739807+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51770	45.128.233.186	23	TCP
2025-01-07T22:20:35.519871+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51772	45.128.233.186	23	TCP
2025-01-07T22:20:37.256350+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51774	45.128.233.186	23	TCP
2025-01-07T22:20:39.042409+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51776	45.128.233.186	23	TCP
2025-01-07T22:20:40.836509+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51778	45.128.233.186	23	TCP
2025-01-07T22:20:42.611622+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51780	45.128.233.186	23	TCP
2025-01-07T22:20:44.367820+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51782	45.128.233.186	23	TCP
2025-01-07T22:20:46.098041+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51784	45.128.233.186	23	TCP
2025-01-07T22:20:47.850534+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51786	45.128.233.186	23	TCP
2025-01-07T22:20:49.637427+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51788	45.128.233.186	23	TCP
2025-01-07T22:20:51.363738+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51790	45.128.233.186	23	TCP
2025-01-07T22:20:53.143361+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51792	45.128.233.186	23	TCP
2025-01-07T22:20:54.882068+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51794	45.128.233.186	23	TCP
2025-01-07T22:20:56.680096+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51796	45.128.233.186	23	TCP
2025-01-07T22:20:58.473893+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51798	45.128.233.186	23	TCP
2025-01-07T22:21:00.228892+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51800	45.128.233.186	23	TCP
2025-01-07T22:21:01.998749+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51802	45.128.233.186	23	TCP
2025-01-07T22:21:03.841210+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51804	45.128.233.186	23	TCP
2025-01-07T22:21:05.644224+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51806	45.128.233.186	23	TCP
2025-01-07T22:21:07.385096+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51808	45.128.233.186	23	TCP
2025-01-07T22:21:09.156579+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51810	45.128.233.186	23	TCP
2025-01-07T22:21:10.925393+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51812	45.128.233.186	23	TCP
2025-01-07T22:21:12.716369+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51814	45.128.233.186	23	TCP
2025-01-07T22:21:14.514702+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51816	45.128.233.186	23	TCP
2025-01-07T22:21:16.338688+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51818	45.128.233.186	23	TCP
2025-01-07T22:21:18.126034+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51820	45.128.233.186	23	TCP
2025-01-07T22:21:19.869096+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51822	45.128.233.186	23	TCP
2025-01-07T22:21:21.624080+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51824	45.128.233.186	23	TCP
2025-01-07T22:21:23.389018+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51826	45.128.233.186	23	TCP
2025-01-07T22:21:25.194427+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51828	45.128.233.186	23	TCP
2025-01-07T22:21:27.004666+0100	2840333	1	Malware Command and Control Activity Detected	192.168.2.13	51830	45.128.233.186	23	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Found malware configuration

Source: gigops.mips.elf

Malware Configuration Extractor: Gafgyt {"C2 url": "45.128.233.186:23"}

Multi AV Scanner detection for submitted file

Source: gigops.mips.elf

ReversingLabs: Detection: 68%

Spreading

Opens /proc/net/* files useful for finding connected devices and routers

Source: /tmp/gigops.mips.elf (PID: 5434)

Opens: /proc/net/route

Jump to behavior

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51596 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51618 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51634 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51644 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51630 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51616 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51674 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51684 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51666 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51638 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51646 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51698 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51670 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51620 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51656 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51636 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51658 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51730 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51734 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51642 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51662 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51820 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51802 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51598 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51608 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51652 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51726 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51708 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51606 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51660 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51614 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51744 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51654 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51592 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51736 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51628 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51750 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51706 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51754 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51602 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51720 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51678 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51622 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51626 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51624 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51748 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51756 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51716 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51668 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51710 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51770 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51690 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51600 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51682 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51700 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51740 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51722 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51680 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51594 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51792 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51746 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51724 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51764 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51794 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51610 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51774 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51714 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51808 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51648 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51632 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51712 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51782 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51760 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51650 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51786 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51824 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51772 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51758 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51704 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51696 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51776 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51738 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51828 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51612 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51816 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51672 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51728 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51694 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51778 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51692 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51796 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51766 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51806 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51762 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51676 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51784 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51604 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51640 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51800 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51718 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51702 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51686 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51818 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51742 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51752 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51810 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51664 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51790 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51812 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51780 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51798 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51830 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51814 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51804 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51788 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51688 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51732 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51768 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51822 -> 45.128.233.186:23
Source: Network traffic	Suricata IDS: 2840333 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Activity : 192.168.2.13:51826 -> 45.128.233.186:23

Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186
Source: unknown	TCP traffic detected without corresponding DNS query: 45.128.233.186

Source: global traffic

DNS traffic detected: DNS query: daisy.ubuntu.com

Source: gigops.mips.elf

String found in binary or memory: http://5.206.225.136/bins.sh;

System Summary

Malicious sample detected (through community Yara rule)

Source: gigops.mips.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_fb14e81f Author: unknown
Source: 5434.1.00007f4418400000.00007f441841d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_fb14e81f Author: unknown
Source: 5436.1.00007f4418400000.00007f441841d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_fb14e81f Author: unknown

Source: gigops.mips.elf	ELF static info symbol of initial sample: passwords
Source: gigops.mips.elf	ELF static info symbol of initial sample: usernames

Source: gigops.mips.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_fb14e81f severity = 100, os = linux, arch_context = x86, creation_date = 2022-01-05, scan_context = file, memory, reference = 0fd07e6068a721774716eb4940e2c19faef02d5bdacf3b018bf5995fa98a3a27, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 12b430108256bd0f57f48b9dbbea12eba7405c0b3b66a1c4b882647051f1ec52, id = fb14e81f-be2a-4428-9877-958e394a7ae2, last_modified = 2022-01-26
Source: 5434.1.00007f4418400000.00007f441841d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_fb14e81f severity = 100, os = linux, arch_context = x86, creation_date = 2022-01-05, scan_context = file, memory, reference = 0fd07e6068a721774716eb4940e2c19faef02d5bdacf3b018bf5995fa98a3a27, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 12b430108256bd0f57f48b9dbbea12eba7405c0b3b66a1c4b882647051f1ec52, id = fb14e81f-be2a-4428-9877-958e394a7ae2, last_modified = 2022-01-26
Source: 5436.1.00007f4418400000.00007f441841d000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_fb14e81f severity = 100, os = linux, arch_context = x86, creation_date = 2022-01-05, scan_context = file, memory, reference = 0fd07e6068a721774716eb4940e2c19faef02d5bdacf3b018bf5995fa98a3a27, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 12b430108256bd0f57f48b9dbbea12eba7405c0b3b66a1c4b882647051f1ec52, id = fb14e81f-be2a-4428-9877-958e394a7ae2, last_modified = 2022-01-26

Source: classification engine

Classification label: mal84.spre.troj.linELF@0/1@2/0

Source: /usr/bin/dash (PID: 5423)	Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.uaZZQhk4qN /tmp/tmp.SXWrw9u982 /tmp/tmp.WIWpnuIAFd			Jump to behavior
Source: /usr/bin/dash (PID: 5424)	Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.uaZZQhk4qN /tmp/tmp.SXWrw9u982 /tmp/tmp.WIWpnuIAFd			Jump to behavior

Source: /tmp/gigops.mips.elf (PID: 5434)

Queries kernel information via 'uname':

Jump to behavior

Source: gigops.mips.elf, 5434.1.00007ffec9b24000.00007ffec9b45000.rw-.sdmp	Binary or memory string: xU/tmp/qemu-open.AtK6v5\d
Source: gigops.mips.elf, 5434.1.00007ffec9b24000.00007ffec9b45000.rw-.sdmp	Binary or memory string: /tmp/qemu-open.AtK6v5
Source: gigops.mips.elf, 5434.1.00007ffec9b24000.00007ffec9b45000.rw-.sdmp, gigops.mips.elf, 5436.1.00007ffec9b24000.00007ffec9b45000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-mips/tmp/gigops.mips.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/gigops.mips.elf
Source: gigops.mips.elf, 5434.1.000055789d4a1000.000055789d528000.rw-.sdmp, gigops.mips.elf, 5436.1.000055789d4a1000.000055789d528000.rw-.sdmp	Binary or memory string: xU!/etc/qemu-binfmt/mips
Source: gigops.mips.elf, 5434.1.000055789d4a1000.000055789d528000.rw-.sdmp, gigops.mips.elf, 5436.1.000055789d4a1000.000055789d528000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/mips
Source: gigops.mips.elf, 5434.1.00007ffec9b24000.00007ffec9b45000.rw-.sdmp, gigops.mips.elf, 5436.1.00007ffec9b24000.00007ffec9b45000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-mips

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match

File source: gigops.mips.elf, type: SAMPLE

Remote Access Functionality

Yara detected Gafgyt

Source: Yara match

File source: gigops.mips.elf, type: SAMPLE

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	1 Masquerading	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Non-Application Layer Protocol	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 File Deletion	LSASS Memory	1 Remote System Discovery	Remote Desktop Protocol	Data from Removable Media	1 Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service

Malware Configuration

Threatname: Gafgyt

{"C2 url": "45.128.233.186:23"}

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
gigops.mips.elf	68%	ReversingLabs	Linux.Backdoor.Gafgyt

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
45.128.233.186:23	0%	Avira URL Cloud	safe
http://5.206.225.136/bins.sh;	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
daisy.ubuntu.com	162.213.35.25	true	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
45.128.233.186:23	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://5.206.225.136/bins.sh;	gigops.mips.elf	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
45.128.233.186	unknown	United Kingdom		208861	RACKTECHRU	true

Joe Sandbox View / Context

IPs

⊘No context

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
daisy.ubuntu.com	miori.arc.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	botnet.mips.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	botnet.arm7.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	botnet.arm5.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	sora.ppc.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	sora.sh4.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	sora.arm7.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	sora.mips.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	94.156.227.153-sora.m68k-2025-01-07T16_09_14.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	94.156.227.153-sora.x86-2025-01-07T16_09_13.elf	Get hash	malicious	Mirai	Browse	162.213.35.24

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
RACKTECHRU	lEwK4xROgV.exe	Get hash	malicious	DCRat, PureLog Stealer, zgRAT	Browse	86.110.194.28
	zZ1Y43bxxV.exe	Get hash	malicious	DCRat	Browse	86.110.194.28
	updIMdPUj8.exe	Get hash	malicious	DCRat	Browse	86.110.194.28
	jew.sh4.elf	Get hash	malicious	Unknown	Browse	91.223.144.119
	la.bot.mipsel.elf	Get hash	malicious	Unknown	Browse	193.38.236.134
	oyCvLcfl3R.exe	Get hash	malicious	XenoRAT	Browse	194.113.106.81
	qsKo.ps1	Get hash	malicious	RHADAMANTHYS	Browse	194.113.106.180
	GsrDwm0DJG.ps1	Get hash	malicious	RHADAMANTHYS	Browse	194.113.106.180
	HeggBkMoYE.ps1	Get hash	malicious	RHADAMANTHYS	Browse	194.113.106.180
	b2J6hgvd51.elf	Get hash	malicious	Unknown	Browse	45.128.232.191

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

/tmp/qemu-open.AtK6v5 (deleted)

Download File

Process:	/tmp/gigops.mips.elf
File Type:	ASCII text
Category:	dropped
Size (bytes):	230
Entropy (8bit):	3.709552666863289
Encrypted:	false
SSDEEP:	6:iekrEcvwAsE5KlwSd4pzKaV6Lpms/a/1VCxGF:ur+m5MwSdIKaV6L1adVRF
MD5:	2E667F43AE18CD1FE3C108641708A82C
SHA1:	12B90DE2DA0FBCFE66F3D6130905E56C8D6A68D3
SHA-256:	6F721492E7A337C5B498A8F55F5EB7AC745AFF716D0B5B08EFF2C1B6B250F983
SHA-512:	D2A0EE2509154EC1098994F38BE172F98F4150399C534A04D5C675D7C05630802225019F19344CC9070C576BC465A4FEB382AC7712DE6BF25E9244B54A9DB830
Malicious:	false
Reputation:	high, very likely benign file
Preview:	Iface.Destination.Gateway .Flags.RefCnt.Use.Metric.Mask..MTU.Window.IRTT .ens160.00000000.c0a80201.0003.0.0.0.00000000.0.0.0.ens160.c0a80200.00000000.0001.0.0.0.ffffff00.0.0.0.

Static File Info

General

File type:	ELF 32-bit MSB executable, MIPS, MIPS-I version 1 (SYSV), statically linked, not stripped
Entropy (8bit):	5.1505033330222965
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	gigops.mips.elf
File size:	155'252 bytes
MD5:	03288ec135533661f816d40f119c1359
SHA1:	42bb848c8efbec7b098d8d48bf65d0b7d0d492c8
SHA256:	b9a089b5234b3174010c87d08d03425cfd253e16e6916ff5c4baa1a747a2a2b6
SHA512:	d846e912c16179867b12b20a6e6c4b3c68acbcc28c0d26b05653b749ccf34da8c4724e326928a5a04b3b98ca5c0586872759b05d1bfff7a70816494c81e77f7c
SSDEEP:	1536:uGedceYFMd0qXzPoNlexBb6txHD+2rKqYzLsGgUkiul9zq6DsaeFgjNkjOla4ogd:O+c/qnYzL+2ul1FsaFjNrlTd
TLSH:	4BE3866A3A11ABBED5A9C73507F35FB0C39529D223A19341E26CEB181F7128D1C8F790
File Content Preview:	.ELF.....................@.....4.........4. ...(....p........@...@...........................@...@.....H...H.................B...B.....X..xH...............D.B.D.B.D................dt.Q.................................................CSP<...'.Rd...!'......

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, big endian
Version:	1 (current)
Machine:	MIPS R3000
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x4002d0
Flags:	0x1007
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	5
Section Header Offset:	132236
Section Header Size:	40
Number of Section Headers:	22
Header String Table Index:	19

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.reginfo	MIPS_REGINFO	0x4000d4	0xd4	0x18	0x18	0x2	A	0	0	4
.init	PROGBITS	0x4000ec	0xec	0x8c	0x0	0x6	AX	0	0	4
.text	PROGBITS	0x400180	0x180	0x1a470	0x0	0x6	AX	0	0	16
.fini	PROGBITS	0x41a5f0	0x1a5f0	0x5c	0x0	0x6	AX	0	0	4
.rodata	PROGBITS	0x41a650	0x1a650	0x21f8	0x0	0x2	A	0	0	16
.eh_frame	PROGBITS	0x42d000	0x1d000	0x44	0x0	0x3	WA	0	0	4
.tbss	NOBITS	0x42d044	0x1d044	0x8	0x0	0x403	WAT	0	0	4
.ctors	PROGBITS	0x42d044	0x1d044	0x8	0x0	0x3	WA	0	0	4
.dtors	PROGBITS	0x42d04c	0x1d04c	0x8	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x42d054	0x1d054	0x4	0x0	0x3	WA	0	0	4
.data	PROGBITS	0x42d060	0x1d060	0x300	0x0	0x3	WA	0	0	16
.got	PROGBITS	0x42d360	0x1d360	0x4f4	0x4	0x10000003	WAp	0	0	16
.sdata	PROGBITS	0x42d854	0x1d854	0x4	0x0	0x10000003	WAp	0	0	4
.sbss	NOBITS	0x42d858	0x1d858	0x3c	0x0	0x10000003	WAp	0	0	4
.bss	NOBITS	0x42d8a0	0x1d858	0x6fa8	0x0	0x3	WA	0	0	16
.comment	PROGBITS	0x0	0x1d858	0xaf8	0x0	0x0		0	0	1
.mdebug.abi32	PROGBITS	0xaf8	0x1e350	0x0	0x0	0x0		0	0	1
.pdr	PROGBITS	0x0	0x1e350	0x20a0	0x0	0x0		0	0	4
.shstrtab	STRTAB	0x0	0x203f0	0x9a	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x207fc	0x31c0	0x10	0x0		21	310	4
.strtab	STRTAB	0x0	0x239bc	0x24b8	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
<unknown>	0xd4	0x4000d4	0x4000d4	0x18	0x18	0.9834	0x4	R	0x4	.reginfo
LOAD	0x0	0x400000	0x400000	0x1c848	0x1c848	5.1114	0x5	R E	0x10000	.reginfo .init .text .fini .rodata
LOAD	0x1d000	0x42d000	0x42d000	0x858	0x7848	4.5986	0x6	RW	0x10000	.eh_frame .tbss .ctors .dtors .jcr .data .got .sdata .sbss .bss
TLS	0x1d044	0x42d044	0x42d044	0x0	0x8	0.0000	0x4	R	0x4	.tbss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x4000d4	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x4000ec	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x400180	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x41a5f0	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x41a650	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x42d000	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x42d044	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x42d044	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x42d04c	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x42d054	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x42d060	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x42d360	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x42d854	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x42d858	0	SECTION	<unknown>	DEFAULT	14
	.symtab	0x42d8a0	0	SECTION	<unknown>	DEFAULT	15
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	16
	.symtab	0xaf8	0	SECTION	<unknown>	DEFAULT	17
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	18
C.1.5091	.symtab	0x41c760	24	OBJECT	<unknown>	DEFAULT	5
C.3.5380	.symtab	0x41c72c	12	OBJECT	<unknown>	DEFAULT	5
C.3.6092	.symtab	0x41c780	12	OBJECT	<unknown>	DEFAULT	5
C.3.6114	.symtab	0x41b5c8	12	OBJECT	<unknown>	DEFAULT	5
C.3.6172	.symtab	0x41c790	12	OBJECT	<unknown>	DEFAULT	5
C.381.6889	.symtab	0x41add4	8	OBJECT	<unknown>	DEFAULT	5
C.4.6115	.symtab	0x41b5bc	12	OBJECT	<unknown>	DEFAULT	5
C.5.6123	.symtab	0x41b5b0	12	OBJECT	<unknown>	DEFAULT	5
C.6.5518	.symtab	0x41c720	12	OBJECT	<unknown>	DEFAULT	5
FRAMESZ	.symtab	0x20	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
FRAMESZ	.symtab	0x18	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
GPOFF	.symtab	0x18	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
GPOFF	.symtab	0x14	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
LOCALSZ	.symtab	0x3	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
LOCALSZ	.symtab	0x1	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
Q	.symtab	0x42d8d8	16384	OBJECT	<unknown>	DEFAULT	15
RAOFF	.symtab	0x1c	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
StartTheLelz	.symtab	0x404668	8640	FUNC	<unknown>	DEFAULT	3
V0OFF	.symtab	0x14	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_Exit	.symtab	0x40ce80	76	FUNC	<unknown>	DEFAULT	3
_GLOBAL_OFFSET_TABLE_	.symtab	0x42d360	0	OBJECT	<unknown>	DEFAULT	12
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__CTOR_END__	.symtab	0x42d048	0	OBJECT	<unknown>	DEFAULT	8
__CTOR_LIST__	.symtab	0x42d044	0	OBJECT	<unknown>	DEFAULT	8
__C_ctype_b	.symtab	0x42d0f0	4	OBJECT	<unknown>	DEFAULT	11
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x41af90	768	OBJECT	<unknown>	DEFAULT	5
__C_ctype_toupper	.symtab	0x42d100	4	OBJECT	<unknown>	DEFAULT	11
__C_ctype_toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_toupper_data	.symtab	0x41b290	768	OBJECT	<unknown>	DEFAULT	5
__DTOR_END__	.symtab	0x42d050	0	OBJECT	<unknown>	DEFAULT	9
__DTOR_LIST__	.symtab	0x42d04c	0	OBJECT	<unknown>	DEFAULT	9
__EH_FRAME_BEGIN__	.symtab	0x42d000	0	OBJECT	<unknown>	DEFAULT	6
__FRAME_END__	.symtab	0x42d040	0	OBJECT	<unknown>	DEFAULT	6
__GI___C_ctype_b	.symtab	0x42d0f0	4	OBJECT	<unknown>	HIDDEN	11
__GI___C_ctype_toupper	.symtab	0x42d100	4	OBJECT	<unknown>	HIDDEN	11
__GI___close	.symtab	0x413e1c	176	FUNC	<unknown>	HIDDEN	3
__GI___close_nocancel	.symtab	0x413df4	40	FUNC	<unknown>	HIDDEN	3
__GI___ctype_b	.symtab	0x42d0f4	4	OBJECT	<unknown>	HIDDEN	11
__GI___ctype_toupper	.symtab	0x42d104	4	OBJECT	<unknown>	HIDDEN	11
__GI___errno_location	.symtab	0x40d460	28	FUNC	<unknown>	HIDDEN	3
__GI___fcntl_nocancel	.symtab	0x40cd00	108	FUNC	<unknown>	HIDDEN	3
__GI___fgetc_unlocked	.symtab	0x418500	388	FUNC	<unknown>	HIDDEN	3
__GI___glibc_strerror_r	.symtab	0x40fae0	68	FUNC	<unknown>	HIDDEN	3
__GI___libc_close	.symtab	0x413e1c	176	FUNC	<unknown>	HIDDEN	3
__GI___libc_fcntl	.symtab	0x40cd6c	268	FUNC	<unknown>	HIDDEN	3
__GI___libc_open	.symtab	0x413f0c	192	FUNC	<unknown>	HIDDEN	3
__GI___libc_read	.symtab	0x41410c	192	FUNC	<unknown>	HIDDEN	3
__GI___libc_waitpid	.symtab	0x41420c	192	FUNC	<unknown>	HIDDEN	3
__GI___libc_write	.symtab	0x41400c	192	FUNC	<unknown>	HIDDEN	3
__GI___open	.symtab	0x413f0c	192	FUNC	<unknown>	HIDDEN	3
__GI___open_nocancel	.symtab	0x413ee4	40	FUNC	<unknown>	HIDDEN	3
__GI___read	.symtab	0x41410c	192	FUNC	<unknown>	HIDDEN	3
__GI___read_nocancel	.symtab	0x4140e4	40	FUNC	<unknown>	HIDDEN	3
__GI___register_atfork	.symtab	0x413880	452	FUNC	<unknown>	HIDDEN	3
__GI___sigaddset	.symtab	0x410f98	44	FUNC	<unknown>	HIDDEN	3
__GI___sigdelset	.symtab	0x410fc4	48	FUNC	<unknown>	HIDDEN	3
__GI___sigismember	.symtab	0x410f70	40	FUNC	<unknown>	HIDDEN	3
__GI___uClibc_fini	.symtab	0x414480	204	FUNC	<unknown>	HIDDEN	3
__GI___uClibc_init	.symtab	0x4145d4	120	FUNC	<unknown>	HIDDEN	3
__GI___waitpid	.symtab	0x41420c	192	FUNC	<unknown>	HIDDEN	3
__GI___write	.symtab	0x41400c	192	FUNC	<unknown>	HIDDEN	3
__GI___write_nocancel	.symtab	0x413fe4	40	FUNC	<unknown>	HIDDEN	3
__GI___xpg_strerror_r	.symtab	0x40fb30	380	FUNC	<unknown>	HIDDEN	3
__GI__exit	.symtab	0x40ce80	76	FUNC	<unknown>	HIDDEN	3
__GI_abort	.symtab	0x412180	408	FUNC	<unknown>	HIDDEN	3
__GI_atoi	.symtab	0x412aa0	28	FUNC	<unknown>	HIDDEN	3
__GI_brk	.symtab	0x4198e0	80	FUNC	<unknown>	HIDDEN	3
__GI_chdir	.symtab	0x40ced0	56	FUNC	<unknown>	HIDDEN	3
__GI_close	.symtab	0x413e1c	176	FUNC	<unknown>	HIDDEN	3
__GI_closedir	.symtab	0x415680	292	FUNC	<unknown>	HIDDEN	3
__GI_config_close	.symtab	0x416074	132	FUNC	<unknown>	HIDDEN	3
__GI_config_open	.symtab	0x4160f8	116	FUNC	<unknown>	HIDDEN	3
__GI_config_read	.symtab	0x415bb0	1220	FUNC	<unknown>	HIDDEN	3
__GI_connect	.symtab	0x4107ec	220	FUNC	<unknown>	HIDDEN	3
__GI_dup2	.symtab	0x40cf10	60	FUNC	<unknown>	HIDDEN	3
__GI_execl	.symtab	0x412dc0	196	FUNC	<unknown>	HIDDEN	3
__GI_execve	.symtab	0x4153d0	60	FUNC	<unknown>	HIDDEN	3
__GI_exit	.symtab	0x412cd0	240	FUNC	<unknown>	HIDDEN	3
__GI_fclose	.symtab	0x4162e0	804	FUNC	<unknown>	HIDDEN	3
__GI_fcntl	.symtab	0x40cd6c	268	FUNC	<unknown>	HIDDEN	3
__GI_fdopen	.symtab	0x416610	128	FUNC	<unknown>	HIDDEN	3
__GI_fflush_unlocked	.symtab	0x418148	940	FUNC	<unknown>	HIDDEN	3
__GI_fgetc	.symtab	0x417c00	372	FUNC	<unknown>	HIDDEN	3
__GI_fgetc_unlocked	.symtab	0x418500	388	FUNC	<unknown>	HIDDEN	3
__GI_fgets	.symtab	0x417d80	320	FUNC	<unknown>	HIDDEN	3
__GI_fgets_unlocked	.symtab	0x418690	276	FUNC	<unknown>	HIDDEN	3
__GI_fopen	.symtab	0x416690	28	FUNC	<unknown>	HIDDEN	3
__GI_fork	.symtab	0x413450	988	FUNC	<unknown>	HIDDEN	3
__GI_fprintf	.symtab	0x40d540	72	FUNC	<unknown>	HIDDEN	3
__GI_fputs_unlocked	.symtab	0x40f260	124	FUNC	<unknown>	HIDDEN	3
__GI_fseek	.symtab	0x419e40	68	FUNC	<unknown>	HIDDEN	3
__GI_fseeko64	.symtab	0x419e90	500	FUNC	<unknown>	HIDDEN	3
__GI_fstat	.symtab	0x4199b0	136	FUNC	<unknown>	HIDDEN	3
__GI_fwrite_unlocked	.symtab	0x40f2e0	268	FUNC	<unknown>	HIDDEN	3
__GI_getc_unlocked	.symtab	0x418500	388	FUNC	<unknown>	HIDDEN	3
__GI_getdtablesize	.symtab	0x40cf50	72	FUNC	<unknown>	HIDDEN	3
__GI_getegid	.symtab	0x415410	16	FUNC	<unknown>	HIDDEN	3
__GI_geteuid	.symtab	0x415420	16	FUNC	<unknown>	HIDDEN	3
__GI_getgid	.symtab	0x415430	16	FUNC	<unknown>	HIDDEN	3
__GI_getpagesize	.symtab	0x415440	48	FUNC	<unknown>	HIDDEN	3
__GI_getpid	.symtab	0x413a50	84	FUNC	<unknown>	HIDDEN	3
__GI_getrlimit	.symtab	0x40cfa0	60	FUNC	<unknown>	HIDDEN	3
__GI_getsockname	.symtab	0x4108d0	60	FUNC	<unknown>	HIDDEN	3
__GI_getuid	.symtab	0x415470	16	FUNC	<unknown>	HIDDEN	3
__GI_htonl	.symtab	0x40fdd0	8	FUNC	<unknown>	HIDDEN	3
__GI_htons	.symtab	0x40fdd8	8	FUNC	<unknown>	HIDDEN	3
__GI_inet_addr	.symtab	0x410760	72	FUNC	<unknown>	HIDDEN	3
__GI_inet_aton	.symtab	0x418db0	244	FUNC	<unknown>	HIDDEN	3
__GI_inet_ntoa	.symtab	0x41073c	32	FUNC	<unknown>	HIDDEN	3
__GI_inet_ntoa_r	.symtab	0x410690	172	FUNC	<unknown>	HIDDEN	3
__GI_inet_ntop	.symtab	0x41033c	852	FUNC	<unknown>	HIDDEN	3
__GI_inet_pton	.symtab	0x40fec8	696	FUNC	<unknown>	HIDDEN	3
__GI_initstate_r	.symtab	0x41285c	300	FUNC	<unknown>	HIDDEN	3
__GI_ioctl	.symtab	0x40cfe0	248	FUNC	<unknown>	HIDDEN	3
__GI_isatty	.symtab	0x40fcd0	60	FUNC	<unknown>	HIDDEN	3
__GI_isspace	.symtab	0x40d3f0	44	FUNC	<unknown>	HIDDEN	3
__GI_kill	.symtab	0x40d0e0	56	FUNC	<unknown>	HIDDEN	3
__GI_lseek64	.symtab	0x41a4f0	140	FUNC	<unknown>	HIDDEN	3
__GI_memchr	.symtab	0x4187b0	260	FUNC	<unknown>	HIDDEN	3
__GI_memcpy	.symtab	0x40f3f0	308	FUNC	<unknown>	HIDDEN	3
__GI_mempcpy	.symtab	0x4188c0	76	FUNC	<unknown>	HIDDEN	3
__GI_memrchr	.symtab	0x418910	260	FUNC	<unknown>	HIDDEN	3
__GI_memset	.symtab	0x40f530	144	FUNC	<unknown>	HIDDEN	3
__GI_mmap	.symtab	0x4152b0	112	FUNC	<unknown>	HIDDEN	3
__GI_mremap	.symtab	0x419a40	96	FUNC	<unknown>	HIDDEN	3
__GI_munmap	.symtab	0x415480	60	FUNC	<unknown>	HIDDEN	3
__GI_nanosleep	.symtab	0x4154fc	200	FUNC	<unknown>	HIDDEN	3
__GI_ntohl	.symtab	0x40fdc0	8	FUNC	<unknown>	HIDDEN	3
__GI_ntohs	.symtab	0x40fdc8	8	FUNC	<unknown>	HIDDEN	3
__GI_open	.symtab	0x413f0c	192	FUNC	<unknown>	HIDDEN	3
__GI_opendir	.symtab	0x4158c4	240	FUNC	<unknown>	HIDDEN	3
__GI_perror	.symtab	0x40d480	92	FUNC	<unknown>	HIDDEN	3
__GI_pipe	.symtab	0x40cc60	64	FUNC	<unknown>	HIDDEN	3
__GI_printf	.symtab	0x40d4e0	92	FUNC	<unknown>	HIDDEN	3
__GI_raise	.symtab	0x413ab0	264	FUNC	<unknown>	HIDDEN	3
__GI_random	.symtab	0x412340	164	FUNC	<unknown>	HIDDEN	3
__GI_random_r	.symtab	0x412620	172	FUNC	<unknown>	HIDDEN	3
__GI_rawmemchr	.symtab	0x41a3d0	192	FUNC	<unknown>	HIDDEN	3
__GI_read	.symtab	0x41410c	192	FUNC	<unknown>	HIDDEN	3
__GI_readdir64	.symtab	0x415aa0	272	FUNC	<unknown>	HIDDEN	3
__GI_recv	.symtab	0x4109ac	240	FUNC	<unknown>	HIDDEN	3
__GI_sbrk	.symtab	0x4155d0	164	FUNC	<unknown>	HIDDEN	3
__GI_select	.symtab	0x40d1e0	260	FUNC	<unknown>	HIDDEN	3
__GI_send	.symtab	0x410adc	240	FUNC	<unknown>	HIDDEN	3
__GI_sendto	.symtab	0x410c40	280	FUNC	<unknown>	HIDDEN	3
__GI_setsid	.symtab	0x40d2f0	60	FUNC	<unknown>	HIDDEN	3
__GI_setsockopt	.symtab	0x410d60	96	FUNC	<unknown>	HIDDEN	3
__GI_setstate_r	.symtab	0x412988	272	FUNC	<unknown>	HIDDEN	3
__GI_sigaction	.symtab	0x415320	28	FUNC	<unknown>	HIDDEN	3
__GI_sigaddset	.symtab	0x410e00	76	FUNC	<unknown>	HIDDEN	3
__GI_sigemptyset	.symtab	0x410e50	36	FUNC	<unknown>	HIDDEN	3
__GI_signal	.symtab	0x410e80	228	FUNC	<unknown>	HIDDEN	3
__GI_sigprocmask	.symtab	0x40d330	176	FUNC	<unknown>	HIDDEN	3
__GI_sleep	.symtab	0x413bc0	404	FUNC	<unknown>	HIDDEN	3
__GI_socket	.symtab	0x410dc0	60	FUNC	<unknown>	HIDDEN	3
__GI_sprintf	.symtab	0x4166b0	80	FUNC	<unknown>	HIDDEN	3
__GI_srandom_r	.symtab	0x4126cc	400	FUNC	<unknown>	HIDDEN	3
__GI_strcat	.symtab	0x40f5c0	52	FUNC	<unknown>	HIDDEN	3
__GI_strchr	.symtab	0x40f600	248	FUNC	<unknown>	HIDDEN	3
__GI_strchrnul	.symtab	0x418a20	248	FUNC	<unknown>	HIDDEN	3
__GI_strcmp	.symtab	0x40f700	44	FUNC	<unknown>	HIDDEN	3
__GI_strcoll	.symtab	0x40f700	44	FUNC	<unknown>	HIDDEN	3
__GI_strcpy	.symtab	0x40f730	36	FUNC	<unknown>	HIDDEN	3
__GI_strcspn	.symtab	0x418b20	144	FUNC	<unknown>	HIDDEN	3
__GI_strlen	.symtab	0x40f760	184	FUNC	<unknown>	HIDDEN	3
__GI_strncpy	.symtab	0x40f820	188	FUNC	<unknown>	HIDDEN	3
__GI_strnlen	.symtab	0x40f8e0	248	FUNC	<unknown>	HIDDEN	3
__GI_strpbrk	.symtab	0x418d70	64	FUNC	<unknown>	HIDDEN	3
__GI_strrchr	.symtab	0x418bb0	160	FUNC	<unknown>	HIDDEN	3
__GI_strspn	.symtab	0x418c50	72	FUNC	<unknown>	HIDDEN	3
__GI_strstr	.symtab	0x40f9e0	256	FUNC	<unknown>	HIDDEN	3
__GI_strtok	.symtab	0x40fcb0	32	FUNC	<unknown>	HIDDEN	3
__GI_strtok_r	.symtab	0x418ca0	208	FUNC	<unknown>	HIDDEN	3
__GI_strtol	.symtab	0x412ac0	28	FUNC	<unknown>	HIDDEN	3
__GI_sysconf	.symtab	0x41308c	792	FUNC	<unknown>	HIDDEN	3
__GI_tcgetattr	.symtab	0x40fd10	176	FUNC	<unknown>	HIDDEN	3
__GI_time	.symtab	0x40d3e0	16	FUNC	<unknown>	HIDDEN	3
__GI_toupper	.symtab	0x40d420	60	FUNC	<unknown>	HIDDEN	3
__GI_vfork	.symtab	0x4133b0	152	FUNC	<unknown>	HIDDEN	3
__GI_vfprintf	.symtab	0x40dc20	372	FUNC	<unknown>	HIDDEN	3
__GI_vsnprintf	.symtab	0x416700	248	FUNC	<unknown>	HIDDEN	3
__GI_waitpid	.symtab	0x41420c	192	FUNC	<unknown>	HIDDEN	3
__GI_wcrtomb	.symtab	0x416170	108	FUNC	<unknown>	HIDDEN	3
__GI_wcsnrtombs	.symtab	0x416220	192	FUNC	<unknown>	HIDDEN	3
__GI_wcsrtombs	.symtab	0x4161e0	64	FUNC	<unknown>	HIDDEN	3
__GI_write	.symtab	0x41400c	192	FUNC	<unknown>	HIDDEN	3
__JCR_END__	.symtab	0x42d054	0	OBJECT	<unknown>	DEFAULT	10
__JCR_LIST__	.symtab	0x42d054	0	OBJECT	<unknown>	DEFAULT	10
__app_fini	.symtab	0x433ecc	4	OBJECT	<unknown>	HIDDEN	15
__atexit_lock	.symtab	0x42d320	24	OBJECT	<unknown>	DEFAULT	11
__bss_start	.symtab	0x42d858	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x41454c	136	FUNC	<unknown>	DEFAULT	3
__close	.symtab	0x413e1c	176	FUNC	<unknown>	DEFAULT	3
__close_nocancel	.symtab	0x413df4	40	FUNC	<unknown>	DEFAULT	3
__ctype_b	.symtab	0x42d0f4	4	OBJECT	<unknown>	DEFAULT	11
__ctype_toupper	.symtab	0x42d104	4	OBJECT	<unknown>	DEFAULT	11
__curbrk	.symtab	0x434460	4	OBJECT	<unknown>	HIDDEN	15
__data_start	.symtab	0x42d070	0	OBJECT	<unknown>	DEFAULT	11
__deregister_frame_info	.symtab	0x0	0	FUNC	<unknown>	DEFAULT	SHN_UNDEF
__do_global_ctors_aux	.symtab	0x41a580	0	FUNC	<unknown>	DEFAULT	3
__do_global_dtors_aux	.symtab	0x400180	0	FUNC	<unknown>	DEFAULT	3
__dso_handle	.symtab	0x42d854	0	OBJECT	<unknown>	HIDDEN	13
__environ	.symtab	0x433ec4	4	OBJECT	<unknown>	DEFAULT	15
__errno_location	.symtab	0x40d460	28	FUNC	<unknown>	DEFAULT	3
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x433960	4	OBJECT	<unknown>	HIDDEN	15
__fcntl_nocancel	.symtab	0x40cd00	108	FUNC	<unknown>	DEFAULT	3
__fgetc_unlocked	.symtab	0x418500	388	FUNC	<unknown>	DEFAULT	3
__fini_array_end	.symtab	0x42d044	0	NOTYPE	<unknown>	HIDDEN	7
__fini_array_start	.symtab	0x42d044	0	NOTYPE	<unknown>	HIDDEN	7
__fork	.symtab	0x413450	988	FUNC	<unknown>	DEFAULT	3
__fork_generation_pointer	.symtab	0x42d864	4	OBJECT	<unknown>	HIDDEN	14
__fork_handlers	.symtab	0x42d868	4	OBJECT	<unknown>	HIDDEN	14
__fork_lock	.symtab	0x433970	4	OBJECT	<unknown>	HIDDEN	15
__getdents64	.symtab	0x419c80	436	FUNC	<unknown>	HIDDEN	3
__getpagesize	.symtab	0x415440	48	FUNC	<unknown>	DEFAULT	3
__getpid	.symtab	0x413a50	84	FUNC	<unknown>	DEFAULT	3
__glibc_strerror_r	.symtab	0x40fae0	68	FUNC	<unknown>	DEFAULT	3
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__h_errno_location	.symtab	0x0	0	FUNC	<unknown>	DEFAULT	SHN_UNDEF
__init_array_end	.symtab	0x42d044	0	NOTYPE	<unknown>	HIDDEN	7
__init_array_start	.symtab	0x42d044	0	NOTYPE	<unknown>	HIDDEN	7
__libc_close	.symtab	0x413e1c	176	FUNC	<unknown>	DEFAULT	3
__libc_connect	.symtab	0x4107ec	220	FUNC	<unknown>	DEFAULT	3
__libc_disable_asynccancel	.symtab	0x4142d0	136	FUNC	<unknown>	HIDDEN	3
__libc_enable_asynccancel	.symtab	0x414358	220	FUNC	<unknown>	HIDDEN	3
__libc_errno	.symtab	0x0	4	TLS	<unknown>	HIDDEN	7
__libc_fcntl	.symtab	0x40cd6c	268	FUNC	<unknown>	DEFAULT	3
__libc_fork	.symtab	0x413450	988	FUNC	<unknown>	DEFAULT	3
__libc_h_errno	.symtab	0x4	4	TLS	<unknown>	HIDDEN	7
__libc_nanosleep	.symtab	0x4154fc	200	FUNC	<unknown>	DEFAULT	3
__libc_open	.symtab	0x413f0c	192	FUNC	<unknown>	DEFAULT	3
__libc_read	.symtab	0x41410c	192	FUNC	<unknown>	DEFAULT	3
__libc_recv	.symtab	0x4109ac	240	FUNC	<unknown>	DEFAULT	3
__libc_select	.symtab	0x40d1e0	260	FUNC	<unknown>	DEFAULT	3
__libc_send	.symtab	0x410adc	240	FUNC	<unknown>	DEFAULT	3
__libc_sendto	.symtab	0x410c40	280	FUNC	<unknown>	DEFAULT	3
__libc_setup_tls	.symtab	0x419568	660	FUNC	<unknown>	DEFAULT	3
__libc_sigaction	.symtab	0x415320	28	FUNC	<unknown>	DEFAULT	3
__libc_stack_end	.symtab	0x433ec0	4	OBJECT	<unknown>	DEFAULT	15
__libc_system	.symtab	0x4151cc	220	FUNC	<unknown>	DEFAULT	3
__libc_waitpid	.symtab	0x41420c	192	FUNC	<unknown>	DEFAULT	3
__libc_write	.symtab	0x41400c	192	FUNC	<unknown>	DEFAULT	3
__linkin_atfork	.symtab	0x413830	80	FUNC	<unknown>	HIDDEN	3
__lll_lock_wait_private	.symtab	0x413d60	120	FUNC	<unknown>	HIDDEN	3
__malloc_consolidate	.symtab	0x411c84	520	FUNC	<unknown>	HIDDEN	3
__malloc_largebin_index	.symtab	0x411000	140	FUNC	<unknown>	DEFAULT	3
__malloc_lock	.symtab	0x42d220	24	OBJECT	<unknown>	DEFAULT	11
__malloc_state	.symtab	0x4344d0	888	OBJECT	<unknown>	DEFAULT	15
__malloc_trim	.symtab	0x411b60	292	FUNC	<unknown>	DEFAULT	3
__nptl_deallocate_tsd	.symtab	0x0	0	FUNC	<unknown>	DEFAULT	SHN_UNDEF
__nptl_nthreads	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__open	.symtab	0x413f0c	192	FUNC	<unknown>	DEFAULT	3
__open_nocancel	.symtab	0x413ee4	40	FUNC	<unknown>	DEFAULT	3
__pagesize	.symtab	0x433ec8	4	OBJECT	<unknown>	DEFAULT	15
__preinit_array_end	.symtab	0x42d044	0	NOTYPE	<unknown>	HIDDEN	7
__preinit_array_start	.symtab	0x42d044	0	NOTYPE	<unknown>	HIDDEN	7
__progname	.symtab	0x42d344	4	OBJECT	<unknown>	DEFAULT	11
__progname_full	.symtab	0x42d348	4	OBJECT	<unknown>	DEFAULT	11
__pthread_initialize_minimal	.symtab	0x4197fc	28	FUNC	<unknown>	DEFAULT	3
__pthread_mutex_init	.symtab	0x414448	8	FUNC	<unknown>	DEFAULT	3
__pthread_mutex_lock	.symtab	0x414440	8	FUNC	<unknown>	DEFAULT	3
__pthread_mutex_trylock	.symtab	0x414440	8	FUNC	<unknown>	DEFAULT	3
__pthread_mutex_unlock	.symtab	0x414440	8	FUNC	<unknown>	DEFAULT	3
__pthread_return_0	.symtab	0x414440	8	FUNC	<unknown>	DEFAULT	3
__pthread_unwind	.symtab	0x0	0	FUNC	<unknown>	DEFAULT	SHN_UNDEF
__read	.symtab	0x41410c	192	FUNC	<unknown>	DEFAULT	3
__read_nocancel	.symtab	0x4140e4	40	FUNC	<unknown>	DEFAULT	3
__register_atfork	.symtab	0x413880	452	FUNC	<unknown>	DEFAULT	3
__register_frame_info	.symtab	0x0	0	FUNC	<unknown>	DEFAULT	SHN_UNDEF
__rtld_fini	.symtab	0x433ed0	4	OBJECT	<unknown>	HIDDEN	15
__sigaddset	.symtab	0x410f98	44	FUNC	<unknown>	DEFAULT	3
__sigdelset	.symtab	0x410fc4	48	FUNC	<unknown>	DEFAULT	3
__sigismember	.symtab	0x410f70	40	FUNC	<unknown>	DEFAULT	3
__sigjmp_save	.symtab	0x41a490	96	FUNC	<unknown>	HIDDEN	3
__sigsetjmp	.symtab	0x415360	36	FUNC	<unknown>	DEFAULT	3
__sigsetjmp_aux	.symtab	0x419930	128	FUNC	<unknown>	DEFAULT	3
__start	.symtab	0x4002d0	100	FUNC	<unknown>	DEFAULT	3
__stdin	.symtab	0x42d12c	4	OBJECT	<unknown>	DEFAULT	11
__stdio_READ	.symtab	0x41a090	144	FUNC	<unknown>	HIDDEN	3
__stdio_WRITE	.symtab	0x416800	344	FUNC	<unknown>	HIDDEN	3
__stdio_adjust_position	.symtab	0x41a120	256	FUNC	<unknown>	HIDDEN	3
__stdio_fwrite	.symtab	0x416df0	472	FUNC	<unknown>	HIDDEN	3
__stdio_rfill	.symtab	0x41a220	88	FUNC	<unknown>	HIDDEN	3
__stdio_seek	.symtab	0x41a360	112	FUNC	<unknown>	HIDDEN	3
__stdio_trans2r_o	.symtab	0x41a280	220	FUNC	<unknown>	HIDDEN	3
__stdio_trans2w_o	.symtab	0x416fd0	304	FUNC	<unknown>	HIDDEN	3
__stdio_wcommit	.symtab	0x40dbb0	100	FUNC	<unknown>	HIDDEN	3
__stdout	.symtab	0x42d130	4	OBJECT	<unknown>	DEFAULT	11
__sys_connect	.symtab	0x4107b0	60	FUNC	<unknown>	DEFAULT	3
__sys_recv	.symtab	0x410970	60	FUNC	<unknown>	DEFAULT	3
__sys_send	.symtab	0x410aa0	60	FUNC	<unknown>	DEFAULT	3
__sys_sendto	.symtab	0x410bd0	112	FUNC	<unknown>	DEFAULT	3
__syscall_error	.symtab	0x40cca0	92	FUNC	<unknown>	DEFAULT	3
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_nanosleep	.symtab	0x4154c0	60	FUNC	<unknown>	DEFAULT	3
__syscall_rt_sigaction	.symtab	0x415390	60	FUNC	<unknown>	DEFAULT	3
__syscall_rt_sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_select	.symtab	0x40d180	96	FUNC	<unknown>	DEFAULT	3
__tls_get_addr	.symtab	0x419548	32	FUNC	<unknown>	DEFAULT	3
__uClibc_fini	.symtab	0x414480	204	FUNC	<unknown>	DEFAULT	3
__uClibc_init	.symtab	0x4145d4	120	FUNC	<unknown>	DEFAULT	3
__uClibc_main	.symtab	0x41464c	1132	FUNC	<unknown>	DEFAULT	3
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x42d340	4	OBJECT	<unknown>	HIDDEN	11
__vfork	.symtab	0x4133b0	152	FUNC	<unknown>	DEFAULT	3
__waitpid	.symtab	0x41420c	192	FUNC	<unknown>	DEFAULT	3
__waitpid_nocancel	.symtab	0x4141e4	40	FUNC	<unknown>	DEFAULT	3
__write	.symtab	0x41400c	192	FUNC	<unknown>	DEFAULT	3
__write_nocancel	.symtab	0x413fe4	40	FUNC	<unknown>	DEFAULT	3
__xpg_strerror_r	.symtab	0x40fb30	380	FUNC	<unknown>	DEFAULT	3
__xpg_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__xstat32_conv	.symtab	0x419b98	220	FUNC	<unknown>	HIDDEN	3
__xstat64_conv	.symtab	0x419aa0	248	FUNC	<unknown>	HIDDEN	3
_adjust_pos.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_bss_custom_printf_spec	.symtab	0x433920	10	OBJECT	<unknown>	DEFAULT	15
_charpad	.symtab	0x40dda0	156	FUNC	<unknown>	DEFAULT	3
_cs_funcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_custom_printf_arginfo	.symtab	0x434470	40	OBJECT	<unknown>	HIDDEN	15
_custom_printf_handler	.symtab	0x434498	40	OBJECT	<unknown>	HIDDEN	15
_custom_printf_spec	.symtab	0x42d210	4	OBJECT	<unknown>	HIDDEN	11
_dl_aux_init	.symtab	0x419820	40	FUNC	<unknown>	DEFAULT	3
_dl_init_static_tls	.symtab	0x42d350	4	OBJECT	<unknown>	DEFAULT	11
_dl_nothread_init_static_tls	.symtab	0x419848	148	FUNC	<unknown>	HIDDEN	3
_dl_phdr	.symtab	0x42d88c	4	OBJECT	<unknown>	DEFAULT	14
_dl_phnum	.symtab	0x42d890	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_dtv_gaps	.symtab	0x42d880	1	OBJECT	<unknown>	DEFAULT	14
_dl_tls_dtv_slotinfo_list	.symtab	0x42d87c	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_generation	.symtab	0x42d884	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_max_dtv_idx	.symtab	0x42d874	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_setup	.symtab	0x4194e4	100	FUNC	<unknown>	DEFAULT	3
_dl_tls_static_align	.symtab	0x42d870	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_static_nelem	.symtab	0x42d888	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_static_size	.symtab	0x42d878	4	OBJECT	<unknown>	DEFAULT	14
_dl_tls_static_used	.symtab	0x42d86c	4	OBJECT	<unknown>	DEFAULT	14
_edata	.symtab	0x42d858	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x434848	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_exit	.symtab	0x40ce80	76	FUNC	<unknown>	DEFAULT	3
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fbss	.symtab	0x42d858	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_fdata	.symtab	0x42d060	0	NOTYPE	<unknown>	DEFAULT	11
_fini	.symtab	0x41a5f0	28	FUNC	<unknown>	DEFAULT	4
_fixed_buffers	.symtab	0x431920	8192	OBJECT	<unknown>	DEFAULT	15
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow	.symtab	0x40de3c	232	FUNC	<unknown>	DEFAULT	3
_fpmaxtostr	.symtab	0x417330	2252	FUNC	<unknown>	HIDDEN	3
_fpmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ftext	.symtab	0x400180	0	NOTYPE	<unknown>	DEFAULT	3
_fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_gp	.symtab	0x435350	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_gp_disp	.symtab	0x0	0	OBJECT	<unknown>	DEFAULT	SHN_UNDEF
_init	.symtab	0x4000ec	28	FUNC	<unknown>	DEFAULT	2
_load_inttype	.symtab	0x417100	136	FUNC	<unknown>	HIDDEN	3
_load_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_init	.symtab	0x40e7c0	248	FUNC	<unknown>	HIDDEN	3
_ppfs_init.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec	.symtab	0x40ebcc	1684	FUNC	<unknown>	HIDDEN	3
_ppfs_parsespec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs	.symtab	0x40e8c0	100	FUNC	<unknown>	HIDDEN	3
_ppfs_prepargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs	.symtab	0x40e930	548	FUNC	<unknown>	HIDDEN	3
_ppfs_setargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size	.symtab	0x40eb60	108	FUNC	<unknown>	DEFAULT	3
_pthread_cleanup_pop_restore	.symtab	0x41445c	36	FUNC	<unknown>	DEFAULT	3
_pthread_cleanup_push_defer	.symtab	0x414450	12	FUNC	<unknown>	DEFAULT	3
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_setjmp	.symtab	0x415340	28	FUNC	<unknown>	DEFAULT	3
_sigintr	.symtab	0x4344c0	16	OBJECT	<unknown>	HIDDEN	15
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x416960	1168	FUNC	<unknown>	HIDDEN	3
_stdio_init	.symtab	0x40d950	184	FUNC	<unknown>	HIDDEN	3
_stdio_openlist	.symtab	0x42d134	4	OBJECT	<unknown>	DEFAULT	11
_stdio_openlist_add_lock	.symtab	0x431900	12	OBJECT	<unknown>	DEFAULT	15
_stdio_openlist_dec_use	.symtab	0x417ec0	648	FUNC	<unknown>	HIDDEN	3
_stdio_openlist_del_count	.symtab	0x43191c	4	OBJECT	<unknown>	DEFAULT	15
_stdio_openlist_del_lock	.symtab	0x43190c	12	OBJECT	<unknown>	DEFAULT	15
_stdio_openlist_use_count	.symtab	0x431918	4	OBJECT	<unknown>	DEFAULT	15
_stdio_streams	.symtab	0x42d138	204	OBJECT	<unknown>	DEFAULT	11
_stdio_term	.symtab	0x40da08	416	FUNC	<unknown>	HIDDEN	3
_stdio_user_locking	.symtab	0x42d110	4	OBJECT	<unknown>	DEFAULT	11
_stdlib_strto_l	.symtab	0x412ae0	488	FUNC	<unknown>	HIDDEN	3
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_store_inttype	.symtab	0x417190	68	FUNC	<unknown>	HIDDEN	3
_store_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_string_syserrmsgs	.symtab	0x41b730	2934	OBJECT	<unknown>	HIDDEN	5
_string_syserrmsgs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr	.symtab	0x4171e0	332	FUNC	<unknown>	HIDDEN	3
_uintmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal	.symtab	0x40df24	2204	FUNC	<unknown>	HIDDEN	3
_vfprintf_internal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0x412180	408	FUNC	<unknown>	DEFAULT	3
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
adaptiveHOLD	.symtab	0x4084e8	2800	FUNC	<unknown>	DEFAULT	3
atoi	.symtab	0x412aa0	28	FUNC	<unknown>	DEFAULT	3
atol	.symtab	0x412aa0	28	FUNC	<unknown>	DEFAULT	3
atol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
been_there_done_that	.symtab	0x433950	4	OBJECT	<unknown>	DEFAULT	15
brk	.symtab	0x4198e0	80	FUNC	<unknown>	DEFAULT	3
brk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bsd_signal	.symtab	0x410e80	228	FUNC	<unknown>	DEFAULT	3
buf.4497	.symtab	0x433940	16	OBJECT	<unknown>	DEFAULT	15
c	.symtab	0x42d084	4	OBJECT	<unknown>	DEFAULT	11
calloc	.symtab	0x418eb0	344	FUNC	<unknown>	DEFAULT	3
calloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
cancel_handler	.symtab	0x414ac0	368	FUNC	<unknown>	DEFAULT	3
chdir	.symtab	0x40ced0	56	FUNC	<unknown>	DEFAULT	3
chdir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0x413e1c	176	FUNC	<unknown>	DEFAULT	3
closedir	.symtab	0x415680	292	FUNC	<unknown>	DEFAULT	3
closedir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
commServer	.symtab	0x42d094	4	OBJECT	<unknown>	DEFAULT	11
completed.4786	.symtab	0x42d8a0	1	OBJECT	<unknown>	DEFAULT	15
connect	.symtab	0x4107ec	220	FUNC	<unknown>	DEFAULT	3
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
connectTimeout	.symtab	0x402b38	828	FUNC	<unknown>	DEFAULT	3
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
csum	.symtab	0x404188	460	FUNC	<unknown>	DEFAULT	3
currentServer	.symtab	0x42d080	4	OBJECT	<unknown>	DEFAULT	11
data_start	.symtab	0x42d070	0	OBJECT	<unknown>	DEFAULT	11
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
do_system	.symtab	0x414c30	1436	FUNC	<unknown>	DEFAULT	3
dup2	.symtab	0x40cf10	60	FUNC	<unknown>	DEFAULT	3
dup2.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
environ	.symtab	0x433ec4	4	OBJECT	<unknown>	DEFAULT	15
errno	.symtab	0x0	4	TLS	<unknown>	DEFAULT	7
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
estridx	.symtab	0x41b6a0	126	OBJECT	<unknown>	DEFAULT	5
execl	.symtab	0x412dc0	196	FUNC	<unknown>	DEFAULT	3
execl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
execve	.symtab	0x4153d0	60	FUNC	<unknown>	DEFAULT	3
execve.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exit	.symtab	0x412cd0	240	FUNC	<unknown>	DEFAULT	3
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exp10_table	.symtab	0x41c7b8	72	OBJECT	<unknown>	DEFAULT	5
fclose	.symtab	0x4162e0	804	FUNC	<unknown>	DEFAULT	3
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0x40cd6c	268	FUNC	<unknown>	DEFAULT	3
fd_to_DIR	.symtab	0x4157b0	276	FUNC	<unknown>	DEFAULT	3
fdgets	.symtab	0x401ca8	292	FUNC	<unknown>	DEFAULT	3
fdopen	.symtab	0x416610	128	FUNC	<unknown>	DEFAULT	3
fdopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fdopen_pids	.symtab	0x4318d8	4	OBJECT	<unknown>	DEFAULT	15
fdopendir	.symtab	0x4159b4	228	FUNC	<unknown>	DEFAULT	3
fdpclose	.symtab	0x401a2c	636	FUNC	<unknown>	DEFAULT	3
fdpopen	.symtab	0x4015c0	1132	FUNC	<unknown>	DEFAULT	3
fflush_unlocked	.symtab	0x418148	940	FUNC	<unknown>	DEFAULT	3
fflush_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc	.symtab	0x417c00	372	FUNC	<unknown>	DEFAULT	3
fgetc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked	.symtab	0x418500	388	FUNC	<unknown>	DEFAULT	3
fgetc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets	.symtab	0x417d80	320	FUNC	<unknown>	DEFAULT	3
fgets.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked	.symtab	0x418690	276	FUNC	<unknown>	DEFAULT	3
fgets_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fmt	.symtab	0x41c7a0	20	OBJECT	<unknown>	DEFAULT	5
fopen	.symtab	0x416690	28	FUNC	<unknown>	DEFAULT	3
fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork	.symtab	0x413450	988	FUNC	<unknown>	DEFAULT	3
fork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork_handler_pool	.symtab	0x433974	1348	OBJECT	<unknown>	DEFAULT	15
fprintf	.symtab	0x40d540	72	FUNC	<unknown>	DEFAULT	3
fprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fputs_unlocked	.symtab	0x40f260	124	FUNC	<unknown>	DEFAULT	3
fputs_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
frame_dummy	.symtab	0x40023c	0	FUNC	<unknown>	DEFAULT	3
free	.symtab	0x411e8c	660	FUNC	<unknown>	DEFAULT	3
free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseek	.symtab	0x419e40	68	FUNC	<unknown>	DEFAULT	3
fseeko	.symtab	0x419e40	68	FUNC	<unknown>	DEFAULT	3
fseeko.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseeko64	.symtab	0x419e90	500	FUNC	<unknown>	DEFAULT	3
fseeko64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fstat	.symtab	0x4199b0	136	FUNC	<unknown>	DEFAULT	3
fstat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fuckit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fwrite_unlocked	.symtab	0x40f2e0	268	FUNC	<unknown>	DEFAULT	3
fwrite_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getBogos	.symtab	0x402250	768	FUNC	<unknown>	DEFAULT	3
getBuild	.symtab	0x40bcfc	56	FUNC	<unknown>	DEFAULT	3
getCores	.symtab	0x402550	316	FUNC	<unknown>	DEFAULT	3
getHost	.symtab	0x40210c	160	FUNC	<unknown>	DEFAULT	3
getOurIP	.symtab	0x40b97c	896	FUNC	<unknown>	DEFAULT	3
getRandomIP	.symtab	0x4040dc	172	FUNC	<unknown>	DEFAULT	3
getRandomPublicIP	.symtab	0x4038c4	2072	FUNC	<unknown>	DEFAULT	3
getc	.symtab	0x417c00	372	FUNC	<unknown>	DEFAULT	3
getc_unlocked	.symtab	0x418500	388	FUNC	<unknown>	DEFAULT	3
getdents64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getdtablesize	.symtab	0x40cf50	72	FUNC	<unknown>	DEFAULT	3
getdtablesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getegid	.symtab	0x415410	16	FUNC	<unknown>	DEFAULT	3
getegid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid	.symtab	0x415420	16	FUNC	<unknown>	DEFAULT	3
geteuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid	.symtab	0x415430	16	FUNC	<unknown>	DEFAULT	3
getgid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpagesize	.symtab	0x415440	48	FUNC	<unknown>	DEFAULT	3
getpagesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid	.symtab	0x413a50	84	FUNC	<unknown>	DEFAULT	3
getpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getrlimit	.symtab	0x40cfa0	60	FUNC	<unknown>	DEFAULT	3
getrlimit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockname	.symtab	0x4108d0	60	FUNC	<unknown>	DEFAULT	3
getsockname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt	.symtab	0x410910	96	FUNC	<unknown>	DEFAULT	3
getsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid	.symtab	0x415470	16	FUNC	<unknown>	DEFAULT	3
getuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gotIP	.symtab	0x42d8c4	4	OBJECT	<unknown>	DEFAULT	15
h_errno	.symtab	0x4	4	TLS	<unknown>	DEFAULT	7
hextable	.symtab	0x41a898	1024	OBJECT	<unknown>	DEFAULT	5
hlt	.symtab	0x40032c	0	NOTYPE	<unknown>	DEFAULT	3
htonl	.symtab	0x40fdd0	8	FUNC	<unknown>	DEFAULT	3
htons	.symtab	0x40fdd8	8	FUNC	<unknown>	DEFAULT	3
i.4709	.symtab	0x42d088	4	OBJECT	<unknown>	DEFAULT	11
index	.symtab	0x40f600	248	FUNC	<unknown>	DEFAULT	3
inet_addr	.symtab	0x410760	72	FUNC	<unknown>	DEFAULT	3
inet_aton	.symtab	0x418db0	244	FUNC	<unknown>	DEFAULT	3
inet_aton.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa	.symtab	0x41073c	32	FUNC	<unknown>	DEFAULT	3
inet_ntoa.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa_r	.symtab	0x410690	172	FUNC	<unknown>	DEFAULT	3
inet_ntop	.symtab	0x41033c	852	FUNC	<unknown>	DEFAULT	3
inet_ntop4	.symtab	0x410180	444	FUNC	<unknown>	DEFAULT	3
inet_pton	.symtab	0x40fec8	696	FUNC	<unknown>	DEFAULT	3
inet_pton4	.symtab	0x40fde0	232	FUNC	<unknown>	DEFAULT	3
infectline	.symtab	0x42d090	4	OBJECT	<unknown>	DEFAULT	11
initConnection	.symtab	0x40b72c	592	FUNC	<unknown>	DEFAULT	3
init_rand	.symtab	0x400340	300	FUNC	<unknown>	DEFAULT	3
init_static_tls	.symtab	0x419490	84	FUNC	<unknown>	DEFAULT	3
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initstate	.symtab	0x41249c	208	FUNC	<unknown>	DEFAULT	3
initstate_r	.symtab	0x41285c	300	FUNC	<unknown>	DEFAULT	3
intr	.symtab	0x433ee0	28	OBJECT	<unknown>	DEFAULT	15
ioctl	.symtab	0x40cfe0	248	FUNC	<unknown>	DEFAULT	3
ioctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ipState	.symtab	0x4318dc	5	OBJECT	<unknown>	DEFAULT	15
isatty	.symtab	0x40fcd0	60	FUNC	<unknown>	DEFAULT	3
isatty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isspace	.symtab	0x40d3f0	44	FUNC	<unknown>	DEFAULT	3
isspace.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill	.symtab	0x40d0e0	56	FUNC	<unknown>	DEFAULT	3
kill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc-cancellation.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc-lowlevellock.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc-tls.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
listFork	.symtab	0x402e74	668	FUNC	<unknown>	DEFAULT	3
llseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lock	.symtab	0x433f1c	4	OBJECT	<unknown>	DEFAULT	15
lseek64	.symtab	0x41a4f0	140	FUNC	<unknown>	DEFAULT	3
macAddress	.symtab	0x42d8d0	6	OBJECT	<unknown>	DEFAULT	15
main	.symtab	0x40bd34	3872	FUNC	<unknown>	DEFAULT	3
mainCommSock	.symtab	0x42d8c0	4	OBJECT	<unknown>	DEFAULT	15
makeIPPacket	.symtab	0x4044b0	312	FUNC	<unknown>	DEFAULT	3
makeRandomStr	.symtab	0x40268c	268	FUNC	<unknown>	DEFAULT	3
malloc	.symtab	0x41108c	2764	FUNC	<unknown>	DEFAULT	3
malloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
malloc_trim	.symtab	0x412120	84	FUNC	<unknown>	DEFAULT	3
matchPrompt	.symtab	0x403348	536	FUNC	<unknown>	DEFAULT	3
memchr	.symtab	0x4187b0	260	FUNC	<unknown>	DEFAULT	3
memchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memcpy	.symtab	0x40f3f0	308	FUNC	<unknown>	DEFAULT	3
mempcpy	.symtab	0x4188c0	76	FUNC	<unknown>	DEFAULT	3
mempcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memrchr	.symtab	0x418910	260	FUNC	<unknown>	DEFAULT	3
memrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset	.symtab	0x40f530	144	FUNC	<unknown>	DEFAULT	3
mmap	.symtab	0x4152b0	112	FUNC	<unknown>	DEFAULT	3
mmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mremap	.symtab	0x419a40	96	FUNC	<unknown>	DEFAULT	3
mremap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
munmap	.symtab	0x415480	60	FUNC	<unknown>	DEFAULT	3
munmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mylock	.symtab	0x42d240	24	OBJECT	<unknown>	DEFAULT	11
mylock	.symtab	0x42d260	24	OBJECT	<unknown>	DEFAULT	11
nanosleep	.symtab	0x4154fc	200	FUNC	<unknown>	DEFAULT	3
nanosleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
negotiate	.symtab	0x403110	568	FUNC	<unknown>	DEFAULT	3
next_start.1303	.symtab	0x433930	4	OBJECT	<unknown>	DEFAULT	15
nprocessors_onln	.symtab	0x412e90	508	FUNC	<unknown>	DEFAULT	3
ntohl	.symtab	0x40fdc0	8	FUNC	<unknown>	DEFAULT	3
ntohl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ntohs	.symtab	0x40fdc8	8	FUNC	<unknown>	DEFAULT	3
ntop.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
numpids	.symtab	0x42d8c8	8	OBJECT	<unknown>	DEFAULT	15
object.4798	.symtab	0x42d8a4	24	OBJECT	<unknown>	DEFAULT	15
open	.symtab	0x413f0c	192	FUNC	<unknown>	DEFAULT	3
opendir	.symtab	0x4158c4	240	FUNC	<unknown>	DEFAULT	3
opendir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ourIP	.symtab	0x42d858	4	OBJECT	<unknown>	DEFAULT	14
p.4784	.symtab	0x42d060	0	OBJECT	<unknown>	DEFAULT	11
parseHex	.symtab	0x401dcc	176	FUNC	<unknown>	DEFAULT	3
parse_config.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
passwords	.symtab	0x42d0b0	56	OBJECT	<unknown>	DEFAULT	11
pclose	.symtab	0x40d590	328	FUNC	<unknown>	DEFAULT	3
perror	.symtab	0x40d480	92	FUNC	<unknown>	DEFAULT	3
perror.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
pids	.symtab	0x42d860	4	OBJECT	<unknown>	DEFAULT	14
pipe	.symtab	0x40cc60	64	FUNC	<unknown>	DEFAULT	3
popen	.symtab	0x40d6d8	632	FUNC	<unknown>	DEFAULT	3
popen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
popen_list	.symtab	0x4318f0	4	OBJECT	<unknown>	DEFAULT	15
prctl	.symtab	0x40d120	96	FUNC	<unknown>	DEFAULT	3
prctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prefix.6318	.symtab	0x41b5f0	12	OBJECT	<unknown>	DEFAULT	5
print	.symtab	0x400d9c	1460	FUNC	<unknown>	DEFAULT	3
printchar	.symtab	0x40080c	184	FUNC	<unknown>	DEFAULT	3
printf	.symtab	0x40d4e0	92	FUNC	<unknown>	DEFAULT	3
printf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
printi	.symtab	0x400b00	668	FUNC	<unknown>	DEFAULT	3
prints	.symtab	0x4008c4	572	FUNC	<unknown>	DEFAULT	3
processCmd	.symtab	0x40979c	8080	FUNC	<unknown>	DEFAULT	3
program_invocation_name	.symtab	0x42d348	4	OBJECT	<unknown>	DEFAULT	11
program_invocation_short_name	.symtab	0x42d344	4	OBJECT	<unknown>	DEFAULT	11
qual_chars.6326	.symtab	0x41b610	20	OBJECT	<unknown>	DEFAULT	5
quit	.symtab	0x433efc	28	OBJECT	<unknown>	DEFAULT	15
raise	.symtab	0x413ab0	264	FUNC	<unknown>	DEFAULT	3
raise.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand	.symtab	0x412320	28	FUNC	<unknown>	DEFAULT	3
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand_cmwc	.symtab	0x40046c	468	FUNC	<unknown>	DEFAULT	3
random	.symtab	0x412340	164	FUNC	<unknown>	DEFAULT	3
random.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
random_poly_info	.symtab	0x41c2d0	40	OBJECT	<unknown>	DEFAULT	5
random_r	.symtab	0x412620	172	FUNC	<unknown>	DEFAULT	3
random_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
randtbl	.symtab	0x42d278	128	OBJECT	<unknown>	DEFAULT	11
rawmemchr	.symtab	0x41a3d0	192	FUNC	<unknown>	DEFAULT	3
rawmemchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read	.symtab	0x41410c	192	FUNC	<unknown>	DEFAULT	3
readUntil	.symtab	0x403560	868	FUNC	<unknown>	DEFAULT	3
readdir64	.symtab	0x415aa0	272	FUNC	<unknown>	DEFAULT	3
readdir64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
realloc	.symtab	0x419010	1152	FUNC	<unknown>	DEFAULT	3
realloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recv	.symtab	0x4109ac	240	FUNC	<unknown>	DEFAULT	3
recv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recvLine	.symtab	0x402798	928	FUNC	<unknown>	DEFAULT	3
register-atfork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rindex	.symtab	0x418bb0	160	FUNC	<unknown>	DEFAULT	3
sa_refcntr	.symtab	0x433f18	4	OBJECT	<unknown>	DEFAULT	15
sbrk	.symtab	0x4155d0	164	FUNC	<unknown>	DEFAULT	3
sbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
scanPid	.symtab	0x42d85c	4	OBJECT	<unknown>	DEFAULT	14
sclose	.symtab	0x4045e8	128	FUNC	<unknown>	DEFAULT	3
select	.symtab	0x40d1e0	260	FUNC	<unknown>	DEFAULT	3
select.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
send	.symtab	0x410adc	240	FUNC	<unknown>	DEFAULT	3
send.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sendCNC	.symtab	0x407148	372	FUNC	<unknown>	DEFAULT	3
sendHOLD	.symtab	0x408fd8	1988	FUNC	<unknown>	DEFAULT	3
sendHTTP	.symtab	0x4072bc	316	FUNC	<unknown>	DEFAULT	3
sendJUNK	.symtab	0x407db4	1844	FUNC	<unknown>	DEFAULT	3
sendTCP	.symtab	0x4073f8	2492	FUNC	<unknown>	DEFAULT	3
sendUDP	.symtab	0x406828	2336	FUNC	<unknown>	DEFAULT	3
sendto	.symtab	0x410c40	280	FUNC	<unknown>	DEFAULT	3
sendto.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setjmp_aux.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsid	.symtab	0x40d2f0	60	FUNC	<unknown>	DEFAULT	3
setsid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsockopt	.symtab	0x410d60	96	FUNC	<unknown>	DEFAULT	3
setsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setstate	.symtab	0x4123e4	184	FUNC	<unknown>	DEFAULT	3
setstate_r	.symtab	0x412988	272	FUNC	<unknown>	DEFAULT	3
sigaction	.symtab	0x415320	28	FUNC	<unknown>	DEFAULT	3
sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigaddset	.symtab	0x410e00	76	FUNC	<unknown>	DEFAULT	3
sigaddset.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigempty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigemptyset	.symtab	0x410e50	36	FUNC	<unknown>	DEFAULT	3
sigjmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
signal	.symtab	0x410e80	228	FUNC	<unknown>	DEFAULT	3
signal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigprocmask	.symtab	0x40d330	176	FUNC	<unknown>	DEFAULT	3
sigprocmask.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigsetops.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sleep	.symtab	0x413bc0	404	FUNC	<unknown>	DEFAULT	3
sleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket	.symtab	0x410dc0	60	FUNC	<unknown>	DEFAULT	3
socket.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sockprintf	.symtab	0x401440	384	FUNC	<unknown>	DEFAULT	3
spec_and_mask.6325	.symtab	0x41b624	16	OBJECT	<unknown>	DEFAULT	5
spec_base.6317	.symtab	0x41b5fc	7	OBJECT	<unknown>	DEFAULT	5
spec_chars.6322	.symtab	0x41b680	21	OBJECT	<unknown>	DEFAULT	5
spec_flags.6321	.symtab	0x41b698	8	OBJECT	<unknown>	DEFAULT	5
spec_or_mask.6324	.symtab	0x41b634	16	OBJECT	<unknown>	DEFAULT	5
spec_ranges.6323	.symtab	0x41b644	9	OBJECT	<unknown>	DEFAULT	5
sprintf	.symtab	0x4166b0	80	FUNC	<unknown>	DEFAULT	3
sprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
srand	.symtab	0x41256c	172	FUNC	<unknown>	DEFAULT	3
srandom	.symtab	0x41256c	172	FUNC	<unknown>	DEFAULT	3
srandom_r	.symtab	0x4126cc	400	FUNC	<unknown>	DEFAULT	3
static_dtv	.symtab	0x433f20	512	OBJECT	<unknown>	DEFAULT	15
static_map	.symtab	0x434428	52	OBJECT	<unknown>	DEFAULT	15
static_slotinfo	.symtab	0x434120	776	OBJECT	<unknown>	DEFAULT	15
stderr	.symtab	0x42d128	4	OBJECT	<unknown>	DEFAULT	11
stdin	.symtab	0x42d120	4	OBJECT	<unknown>	DEFAULT	11
stdout	.symtab	0x42d124	4	OBJECT	<unknown>	DEFAULT	11
strcat	.symtab	0x40f5c0	52	FUNC	<unknown>	DEFAULT	3
strcat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchr	.symtab	0x40f600	248	FUNC	<unknown>	DEFAULT	3
strchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchrnul	.symtab	0x418a20	248	FUNC	<unknown>	DEFAULT	3
strchrnul.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcmp	.symtab	0x40f700	44	FUNC	<unknown>	DEFAULT	3
strcmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcoll	.symtab	0x40f700	44	FUNC	<unknown>	DEFAULT	3
strcpy	.symtab	0x40f730	36	FUNC	<unknown>	DEFAULT	3
strcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcspn	.symtab	0x418b20	144	FUNC	<unknown>	DEFAULT	3
strcspn.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strerror_r	.symtab	0x40fb30	380	FUNC	<unknown>	DEFAULT	3
strlen	.symtab	0x40f760	184	FUNC	<unknown>	DEFAULT	3
strlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strncpy	.symtab	0x40f820	188	FUNC	<unknown>	DEFAULT	3
strncpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strnlen	.symtab	0x40f8e0	248	FUNC	<unknown>	DEFAULT	3
strnlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strpbrk	.symtab	0x418d70	64	FUNC	<unknown>	DEFAULT	3
strpbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strrchr	.symtab	0x418bb0	160	FUNC	<unknown>	DEFAULT	3
strrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strspn	.symtab	0x418c50	72	FUNC	<unknown>	DEFAULT	3
strspn.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strstr	.symtab	0x40f9e0	256	FUNC	<unknown>	DEFAULT	3
strstr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok	.symtab	0x40fcb0	32	FUNC	<unknown>	DEFAULT	3
strtok.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok_r	.symtab	0x418ca0	208	FUNC	<unknown>	DEFAULT	3
strtok_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtol	.symtab	0x412ac0	28	FUNC	<unknown>	DEFAULT	3
strtol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sysconf	.symtab	0x41308c	792	FUNC	<unknown>	DEFAULT	3
sysconf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
system	.symtab	0x4151cc	220	FUNC	<unknown>	DEFAULT	3
system.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
szprintf	.symtab	0x4013c8	120	FUNC	<unknown>	DEFAULT	3
tcgetattr	.symtab	0x40fd10	176	FUNC	<unknown>	DEFAULT	3
tcgetattr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcpcsum	.symtab	0x404354	348	FUNC	<unknown>	DEFAULT	3
time	.symtab	0x40d3e0	16	FUNC	<unknown>	DEFAULT	3
time.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
toupper	.symtab	0x40d420	60	FUNC	<unknown>	DEFAULT	3
toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
trim	.symtab	0x400640	460	FUNC	<unknown>	DEFAULT	3
type_codes	.symtab	0x41b650	24	OBJECT	<unknown>	DEFAULT	5
type_sizes	.symtab	0x41b668	12	OBJECT	<unknown>	DEFAULT	5
unknown.1327	.symtab	0x41b720	14	OBJECT	<unknown>	DEFAULT	5
unsafe_state	.symtab	0x42d300	20	OBJECT	<unknown>	DEFAULT	11
uppercase	.symtab	0x4021ac	164	FUNC	<unknown>	DEFAULT	3
usernames	.symtab	0x42d098	24	OBJECT	<unknown>	DEFAULT	11
vfork	.symtab	0x4133b0	152	FUNC	<unknown>	DEFAULT	3
vfprintf	.symtab	0x40dc20	372	FUNC	<unknown>	DEFAULT	3
vfprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
vsnprintf	.symtab	0x416700	248	FUNC	<unknown>	DEFAULT	3
vsnprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
waitpid	.symtab	0x41420c	192	FUNC	<unknown>	DEFAULT	3
wcrtomb	.symtab	0x416170	108	FUNC	<unknown>	DEFAULT	3
wcrtomb.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsnrtombs	.symtab	0x416220	192	FUNC	<unknown>	DEFAULT	3
wcsnrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsrtombs	.symtab	0x4161e0	64	FUNC	<unknown>	DEFAULT	3
wcsrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wildString	.symtab	0x401e7c	656	FUNC	<unknown>	DEFAULT	3
write	.symtab	0x41400c	192	FUNC	<unknown>	DEFAULT	3
xdigits.4935	.symtab	0x41c2b4	17	OBJECT	<unknown>	DEFAULT	5
xstatconv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
zprintf	.symtab	0x401350	120	FUNC	<unknown>	DEFAULT	3

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-01-07T22:17:53.555375+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51592	45.128.233.186	23	TCP
2025-01-07T22:17:55.433053+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51594	45.128.233.186	23	TCP
2025-01-07T22:17:57.191923+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51596	45.128.233.186	23	TCP
2025-01-07T22:17:58.973601+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51598	45.128.233.186	23	TCP
2025-01-07T22:18:00.723129+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51600	45.128.233.186	23	TCP
2025-01-07T22:18:02.475650+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51602	45.128.233.186	23	TCP
2025-01-07T22:18:04.229208+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51604	45.128.233.186	23	TCP
2025-01-07T22:18:06.015541+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51606	45.128.233.186	23	TCP
2025-01-07T22:18:07.801617+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51608	45.128.233.186	23	TCP
2025-01-07T22:18:09.543509+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51610	45.128.233.186	23	TCP
2025-01-07T22:18:11.328043+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51612	45.128.233.186	23	TCP
2025-01-07T22:18:13.074289+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51614	45.128.233.186	23	TCP
2025-01-07T22:18:14.809486+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51616	45.128.233.186	23	TCP
2025-01-07T22:18:16.537866+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51618	45.128.233.186	23	TCP
2025-01-07T22:18:18.322699+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51620	45.128.233.186	23	TCP
2025-01-07T22:18:20.117987+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51622	45.128.233.186	23	TCP
2025-01-07T22:18:21.911142+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51624	45.128.233.186	23	TCP
2025-01-07T22:18:23.730941+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51626	45.128.233.186	23	TCP
2025-01-07T22:18:25.571196+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51628	45.128.233.186	23	TCP
2025-01-07T22:18:27.423058+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51630	45.128.233.186	23	TCP
2025-01-07T22:18:29.204538+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51632	45.128.233.186	23	TCP
2025-01-07T22:18:30.942529+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51634	45.128.233.186	23	TCP
2025-01-07T22:18:32.718291+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51636	45.128.233.186	23	TCP
2025-01-07T22:18:34.508618+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51638	45.128.233.186	23	TCP
2025-01-07T22:18:36.283055+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51640	45.128.233.186	23	TCP
2025-01-07T22:18:38.066331+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51642	45.128.233.186	23	TCP
2025-01-07T22:18:39.849346+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51644	45.128.233.186	23	TCP
2025-01-07T22:18:41.635442+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51646	45.128.233.186	23	TCP
2025-01-07T22:18:43.381272+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51648	45.128.233.186	23	TCP
2025-01-07T22:18:45.161951+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51650	45.128.233.186	23	TCP
2025-01-07T22:18:46.927152+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51652	45.128.233.186	23	TCP
2025-01-07T22:18:48.709904+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51654	45.128.233.186	23	TCP
2025-01-07T22:18:50.452308+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51656	45.128.233.186	23	TCP
2025-01-07T22:18:52.199816+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51658	45.128.233.186	23	TCP
2025-01-07T22:18:53.967820+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51660	45.128.233.186	23	TCP
2025-01-07T22:18:55.752992+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51662	45.128.233.186	23	TCP
2025-01-07T22:18:57.511304+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51664	45.128.233.186	23	TCP
2025-01-07T22:18:59.328114+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51666	45.128.233.186	23	TCP
2025-01-07T22:19:01.110377+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51668	45.128.233.186	23	TCP
2025-01-07T22:19:02.857550+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51670	45.128.233.186	23	TCP
2025-01-07T22:19:04.639187+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51672	45.128.233.186	23	TCP
2025-01-07T22:19:06.415912+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51674	45.128.233.186	23	TCP
2025-01-07T22:19:08.238440+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51676	45.128.233.186	23	TCP
2025-01-07T22:19:10.020918+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51678	45.128.233.186	23	TCP
2025-01-07T22:19:11.798469+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51680	45.128.233.186	23	TCP
2025-01-07T22:19:13.638434+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51682	45.128.233.186	23	TCP
2025-01-07T22:19:15.368281+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51684	45.128.233.186	23	TCP
2025-01-07T22:19:17.104302+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51686	45.128.233.186	23	TCP
2025-01-07T22:19:18.881595+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51688	45.128.233.186	23	TCP
2025-01-07T22:19:20.665670+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51690	45.128.233.186	23	TCP
2025-01-07T22:19:22.439919+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51692	45.128.233.186	23	TCP
2025-01-07T22:19:24.218856+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51694	45.128.233.186	23	TCP
2025-01-07T22:19:25.953432+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51696	45.128.233.186	23	TCP
2025-01-07T22:19:27.688620+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51698	45.128.233.186	23	TCP
2025-01-07T22:19:29.421628+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51700	45.128.233.186	23	TCP
2025-01-07T22:19:31.182292+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51702	45.128.233.186	23	TCP
2025-01-07T22:19:32.976237+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51704	45.128.233.186	23	TCP
2025-01-07T22:19:34.728327+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51706	45.128.233.186	23	TCP
2025-01-07T22:19:36.468614+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51708	45.128.233.186	23	TCP
2025-01-07T22:19:38.245159+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51710	45.128.233.186	23	TCP
2025-01-07T22:19:39.974288+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51712	45.128.233.186	23	TCP
2025-01-07T22:19:41.727715+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51714	45.128.233.186	23	TCP
2025-01-07T22:19:43.513200+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51716	45.128.233.186	23	TCP
2025-01-07T22:19:45.275284+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51718	45.128.233.186	23	TCP
2025-01-07T22:19:47.081163+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51720	45.128.233.186	23	TCP
2025-01-07T22:19:49.869032+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51722	45.128.233.186	23	TCP
2025-01-07T22:19:51.676246+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51724	45.128.233.186	23	TCP
2025-01-07T22:19:53.426844+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51726	45.128.233.186	23	TCP
2025-01-07T22:19:55.243092+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51728	45.128.233.186	23	TCP
2025-01-07T22:19:57.057059+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51730	45.128.233.186	23	TCP
2025-01-07T22:19:58.821248+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51732	45.128.233.186	23	TCP
2025-01-07T22:20:00.616917+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51734	45.128.233.186	23	TCP
2025-01-07T22:20:02.394412+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51736	45.128.233.186	23	TCP
2025-01-07T22:20:04.174809+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51738	45.128.233.186	23	TCP
2025-01-07T22:20:05.948604+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51740	45.128.233.186	23	TCP
2025-01-07T22:20:07.743960+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51742	45.128.233.186	23	TCP
2025-01-07T22:20:09.517059+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51744	45.128.233.186	23	TCP
2025-01-07T22:20:11.667407+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51746	45.128.233.186	23	TCP
2025-01-07T22:20:13.445419+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51748	45.128.233.186	23	TCP
2025-01-07T22:20:15.178060+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51750	45.128.233.186	23	TCP
2025-01-07T22:20:16.963233+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51752	45.128.233.186	23	TCP
2025-01-07T22:20:18.712236+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51754	45.128.233.186	23	TCP
2025-01-07T22:20:20.481864+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51756	45.128.233.186	23	TCP
2025-01-07T22:20:22.265565+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51758	45.128.233.186	23	TCP
2025-01-07T22:20:24.073387+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51760	45.128.233.186	23	TCP
2025-01-07T22:20:26.634758+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51762	45.128.233.186	23	TCP
2025-01-07T22:20:28.409809+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51764	45.128.233.186	23	TCP
2025-01-07T22:20:30.226466+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51766	45.128.233.186	23	TCP
2025-01-07T22:20:31.988052+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51768	45.128.233.186	23	TCP
2025-01-07T22:20:33.739807+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51770	45.128.233.186	23	TCP
2025-01-07T22:20:35.519871+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51772	45.128.233.186	23	TCP
2025-01-07T22:20:37.256350+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51774	45.128.233.186	23	TCP
2025-01-07T22:20:39.042409+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51776	45.128.233.186	23	TCP
2025-01-07T22:20:40.836509+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51778	45.128.233.186	23	TCP
2025-01-07T22:20:42.611622+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51780	45.128.233.186	23	TCP
2025-01-07T22:20:44.367820+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51782	45.128.233.186	23	TCP
2025-01-07T22:20:46.098041+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51784	45.128.233.186	23	TCP
2025-01-07T22:20:47.850534+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51786	45.128.233.186	23	TCP
2025-01-07T22:20:49.637427+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51788	45.128.233.186	23	TCP
2025-01-07T22:20:51.363738+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51790	45.128.233.186	23	TCP
2025-01-07T22:20:53.143361+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51792	45.128.233.186	23	TCP
2025-01-07T22:20:54.882068+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51794	45.128.233.186	23	TCP
2025-01-07T22:20:56.680096+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51796	45.128.233.186	23	TCP
2025-01-07T22:20:58.473893+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51798	45.128.233.186	23	TCP
2025-01-07T22:21:00.228892+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51800	45.128.233.186	23	TCP
2025-01-07T22:21:01.998749+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51802	45.128.233.186	23	TCP
2025-01-07T22:21:03.841210+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51804	45.128.233.186	23	TCP
2025-01-07T22:21:05.644224+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51806	45.128.233.186	23	TCP
2025-01-07T22:21:07.385096+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51808	45.128.233.186	23	TCP
2025-01-07T22:21:09.156579+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51810	45.128.233.186	23	TCP
2025-01-07T22:21:10.925393+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51812	45.128.233.186	23	TCP
2025-01-07T22:21:12.716369+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51814	45.128.233.186	23	TCP
2025-01-07T22:21:14.514702+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51816	45.128.233.186	23	TCP
2025-01-07T22:21:16.338688+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51818	45.128.233.186	23	TCP
2025-01-07T22:21:18.126034+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51820	45.128.233.186	23	TCP
2025-01-07T22:21:19.869096+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51822	45.128.233.186	23	TCP
2025-01-07T22:21:21.624080+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51824	45.128.233.186	23	TCP
2025-01-07T22:21:23.389018+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51826	45.128.233.186	23	TCP
2025-01-07T22:21:25.194427+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51828	45.128.233.186	23	TCP
2025-01-07T22:21:27.004666+0100	2840333	ETPRO MALWARE ELF/BASHLITE Variant CnC Activity	1	192.168.2.13	51830	45.128.233.186	23	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 7, 2025 22:17:53.438618898 CET	51592	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:17:53.443880081 CET	23	51592	45.128.233.186	192.168.2.13
Jan 7, 2025 22:17:53.443924904 CET	51592	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:17:53.555375099 CET	51592	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:17:53.627087116 CET	23	51592	45.128.233.186	192.168.2.13
Jan 7, 2025 22:17:55.360694885 CET	23	51592	45.128.233.186	192.168.2.13
Jan 7, 2025 22:17:55.361012936 CET	51592	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:17:55.365773916 CET	23	51592	45.128.233.186	192.168.2.13
Jan 7, 2025 22:17:55.366266012 CET	51594	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:17:55.371040106 CET	23	51594	45.128.233.186	192.168.2.13
Jan 7, 2025 22:17:55.371115923 CET	51594	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:17:55.433053017 CET	51594	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:17:55.437846899 CET	23	51594	45.128.233.186	192.168.2.13
Jan 7, 2025 22:17:57.168880939 CET	23	51594	45.128.233.186	192.168.2.13
Jan 7, 2025 22:17:57.169059038 CET	51594	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:17:57.169563055 CET	51596	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:17:57.173803091 CET	23	51594	45.128.233.186	192.168.2.13
Jan 7, 2025 22:17:57.174397945 CET	23	51596	45.128.233.186	192.168.2.13
Jan 7, 2025 22:17:57.174448967 CET	51596	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:17:57.191922903 CET	51596	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:17:57.196717024 CET	23	51596	45.128.233.186	192.168.2.13
Jan 7, 2025 22:17:58.951371908 CET	23	51596	45.128.233.186	192.168.2.13
Jan 7, 2025 22:17:58.951522112 CET	51596	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:17:58.951978922 CET	51598	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:17:58.956341982 CET	23	51596	45.128.233.186	192.168.2.13
Jan 7, 2025 22:17:58.956774950 CET	23	51598	45.128.233.186	192.168.2.13
Jan 7, 2025 22:17:58.956859112 CET	51598	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:17:58.973601103 CET	51598	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:17:58.978331089 CET	23	51598	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:00.700544119 CET	23	51598	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:00.700720072 CET	51598	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:00.701206923 CET	51600	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:00.705507040 CET	23	51598	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:00.705965996 CET	23	51600	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:00.706023932 CET	51600	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:00.723129034 CET	51600	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:00.728066921 CET	23	51600	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:02.453301907 CET	23	51600	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:02.453485966 CET	51600	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:02.454004049 CET	51602	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:02.458249092 CET	23	51600	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:02.458776951 CET	23	51602	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:02.458816051 CET	51602	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:02.475650072 CET	51602	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:02.480508089 CET	23	51602	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:04.205279112 CET	23	51602	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:04.205455065 CET	51602	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:04.205971003 CET	51604	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:04.211628914 CET	23	51602	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:04.211642027 CET	23	51604	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:04.211711884 CET	51604	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:04.229207993 CET	51604	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:04.234008074 CET	23	51604	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:05.992973089 CET	23	51604	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:05.993330956 CET	51604	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:05.993805885 CET	51606	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:05.998153925 CET	23	51604	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:05.998591900 CET	23	51606	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:05.998639107 CET	51606	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:06.015541077 CET	51606	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:06.020344973 CET	23	51606	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:07.774467945 CET	23	51606	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:07.774873972 CET	51606	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:07.775619030 CET	51608	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:07.779639959 CET	23	51606	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:07.780431986 CET	23	51608	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:07.780497074 CET	51608	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:07.801616907 CET	51608	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:07.806433916 CET	23	51608	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:09.516568899 CET	23	51608	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:09.516943932 CET	51608	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:09.517539024 CET	51610	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:09.522070885 CET	23	51608	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:09.522588015 CET	23	51610	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:09.522669077 CET	51610	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:09.543509007 CET	51610	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:09.548242092 CET	23	51610	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:11.307326078 CET	23	51610	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:11.307498932 CET	51610	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:11.308010101 CET	51612	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:11.312273979 CET	23	51610	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:11.312796116 CET	23	51612	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:11.312838078 CET	51612	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:11.328042984 CET	51612	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:11.332882881 CET	23	51612	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:13.046648026 CET	23	51612	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:13.047020912 CET	51612	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:13.047750950 CET	51614	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:13.051800966 CET	23	51612	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:13.052617073 CET	23	51614	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:13.052737951 CET	51614	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:13.074289083 CET	51614	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:13.079133987 CET	23	51614	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:14.780597925 CET	23	51614	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:14.780795097 CET	51614	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:14.781519890 CET	51616	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:14.785628080 CET	23	51614	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:14.786309958 CET	23	51616	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:14.786362886 CET	51616	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:14.809485912 CET	51616	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:14.814286947 CET	23	51616	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:16.516730070 CET	23	51616	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:16.516983032 CET	51616	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:16.517402887 CET	51618	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:16.521718979 CET	23	51616	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:16.522185087 CET	23	51618	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:16.522229910 CET	51618	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:16.537866116 CET	51618	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:16.542594910 CET	23	51618	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:18.293236971 CET	23	51618	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:18.293556929 CET	51618	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:18.295321941 CET	51620	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:18.298386097 CET	23	51618	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:18.300153971 CET	23	51620	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:18.300275087 CET	51620	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:18.322699070 CET	51620	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:18.328413963 CET	23	51620	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:20.091357946 CET	23	51620	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:20.091618061 CET	51620	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:20.092061043 CET	51622	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:20.097320080 CET	23	51620	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:20.097809076 CET	23	51622	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:20.097893000 CET	51622	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:20.117986917 CET	51622	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:20.123692036 CET	23	51622	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:21.888473988 CET	23	51622	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:21.888696909 CET	51622	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:21.889228106 CET	51624	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:21.893618107 CET	23	51622	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:21.894059896 CET	23	51624	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:21.894121885 CET	51624	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:21.911142111 CET	51624	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:21.915894032 CET	23	51624	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:23.702646971 CET	23	51624	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:23.702908993 CET	51624	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:23.703658104 CET	51626	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:23.708173037 CET	23	51624	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:23.708455086 CET	23	51626	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:23.708554029 CET	51626	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:23.730941057 CET	51626	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:23.735728025 CET	23	51626	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:25.543021917 CET	23	51626	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:25.543214083 CET	51626	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:25.543884039 CET	51628	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:25.548121929 CET	23	51626	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:25.548852921 CET	23	51628	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:25.548901081 CET	51628	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:25.571196079 CET	51628	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:25.576042891 CET	23	51628	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:27.391901970 CET	23	51628	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:27.392288923 CET	51628	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:27.393004894 CET	51630	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:27.397089958 CET	23	51628	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:27.397903919 CET	23	51630	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:27.397960901 CET	51630	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:27.423058033 CET	51630	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:27.427889109 CET	23	51630	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:29.180805922 CET	23	51630	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:29.181140900 CET	51630	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:29.181813002 CET	51632	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:29.185920000 CET	23	51630	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:29.186575890 CET	23	51632	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:29.186636925 CET	51632	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:29.204538107 CET	51632	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:29.209336996 CET	23	51632	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:30.919698954 CET	23	51632	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:30.920160055 CET	51632	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:30.920646906 CET	51634	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:30.925026894 CET	23	51632	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:30.925426006 CET	23	51634	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:30.925471067 CET	51634	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:30.942528963 CET	51634	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:30.947298050 CET	23	51634	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:32.695157051 CET	23	51634	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:32.695516109 CET	51634	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:32.695950031 CET	51636	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:32.700350046 CET	23	51634	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:32.700732946 CET	23	51636	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:32.700845957 CET	51636	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:32.718291044 CET	51636	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:32.723063946 CET	23	51636	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:34.479883909 CET	23	51636	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:34.480289936 CET	51636	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:34.480997086 CET	51638	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:34.485117912 CET	23	51636	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:34.485779047 CET	23	51638	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:34.485847950 CET	51638	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:34.508618116 CET	51638	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:34.513370991 CET	23	51638	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:36.262115955 CET	23	51638	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:36.262295961 CET	51638	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:36.262783051 CET	51640	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:36.267056942 CET	23	51638	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:36.267616034 CET	23	51640	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:36.267657995 CET	51640	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:36.283055067 CET	51640	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:36.287858009 CET	23	51640	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:38.045810938 CET	23	51640	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:38.046170950 CET	51640	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:38.046750069 CET	51642	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:38.051011086 CET	23	51640	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:38.051574945 CET	23	51642	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:38.051664114 CET	51642	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:38.066330910 CET	51642	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:38.071069002 CET	23	51642	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:39.826332092 CET	23	51642	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:39.826647043 CET	51642	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:39.827086926 CET	51644	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:39.831473112 CET	23	51642	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:39.831916094 CET	23	51644	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:39.831968069 CET	51644	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:39.849345922 CET	51644	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:39.854176998 CET	23	51644	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:41.609282017 CET	23	51644	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:41.609544992 CET	51644	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:41.610214949 CET	51646	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:41.614345074 CET	23	51644	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:41.615041971 CET	23	51646	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:41.615204096 CET	51646	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:41.635442019 CET	51646	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:41.640240908 CET	23	51646	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:43.359350920 CET	23	51646	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:43.359543085 CET	51646	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:43.360114098 CET	51648	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:43.364351988 CET	23	51646	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:43.364974976 CET	23	51648	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:43.365060091 CET	51648	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:43.381272078 CET	51648	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:43.386142015 CET	23	51648	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:45.133707047 CET	23	51648	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:45.134016037 CET	51648	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:45.134702921 CET	51650	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:45.138892889 CET	23	51648	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:45.139533043 CET	23	51650	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:45.139611006 CET	51650	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:45.161951065 CET	51650	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:45.166742086 CET	23	51650	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:46.897687912 CET	23	51650	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:46.898061991 CET	51650	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:46.898833990 CET	51652	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:46.902887106 CET	23	51650	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:46.903604984 CET	23	51652	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:46.903722048 CET	51652	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:46.927151918 CET	51652	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:46.931942940 CET	23	51652	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:48.681488037 CET	23	51652	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:48.681694984 CET	51652	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:48.682312965 CET	51654	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:48.686472893 CET	23	51652	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:48.687150002 CET	23	51654	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:48.687242031 CET	51654	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:48.709903955 CET	51654	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:48.714706898 CET	23	51654	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:50.424798012 CET	23	51654	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:50.425002098 CET	51654	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:50.425662041 CET	51656	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:50.429761887 CET	23	51654	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:50.430439949 CET	23	51656	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:50.430505037 CET	51656	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:50.452307940 CET	51656	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:50.457129002 CET	23	51656	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:52.175574064 CET	23	51656	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:52.175721884 CET	51656	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:52.176372051 CET	51658	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:52.180444002 CET	23	51656	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:52.181170940 CET	23	51658	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:52.181236029 CET	51658	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:52.199815989 CET	51658	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:52.204555988 CET	23	51658	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:53.944308043 CET	23	51658	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:53.944523096 CET	51658	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:53.945035934 CET	51660	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:53.949341059 CET	23	51658	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:53.949873924 CET	23	51660	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:53.949929953 CET	51660	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:53.967819929 CET	51660	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:53.972680092 CET	23	51660	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:55.732193947 CET	23	51660	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:55.732322931 CET	51660	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:55.732769012 CET	51662	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:55.737091064 CET	23	51660	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:55.737534046 CET	23	51662	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:55.737627029 CET	51662	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:55.752991915 CET	51662	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:55.757750034 CET	23	51662	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:57.483640909 CET	23	51662	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:57.483915091 CET	51662	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:57.484549999 CET	51664	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:57.488691092 CET	23	51662	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:57.489331007 CET	23	51664	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:57.489422083 CET	51664	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:57.511303902 CET	51664	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:57.516041994 CET	23	51664	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:59.307868004 CET	23	51664	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:59.308022976 CET	51664	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:59.308557034 CET	51666	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:59.312755108 CET	23	51664	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:59.313422918 CET	23	51666	45.128.233.186	192.168.2.13
Jan 7, 2025 22:18:59.313493013 CET	51666	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:59.328114033 CET	51666	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:18:59.332847118 CET	23	51666	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:01.091008902 CET	23	51666	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:01.091300964 CET	51666	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:01.091660023 CET	51668	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:01.096035004 CET	23	51666	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:01.096462011 CET	23	51668	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:01.096606970 CET	51668	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:01.110377073 CET	51668	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:01.115107059 CET	23	51668	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:02.831614971 CET	23	51668	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:02.831928015 CET	51668	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:02.832626104 CET	51670	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:02.836926937 CET	23	51668	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:02.837366104 CET	23	51670	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:02.837460995 CET	51670	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:02.857549906 CET	51670	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:02.862313986 CET	23	51670	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:04.615111113 CET	23	51670	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:04.615447998 CET	51670	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:04.616061926 CET	51672	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:04.620213032 CET	23	51670	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:04.620851040 CET	23	51672	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:04.620915890 CET	51672	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:04.639187098 CET	51672	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:04.643914938 CET	23	51672	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:06.394329071 CET	23	51672	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:06.394496918 CET	51672	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:06.394969940 CET	51674	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:06.400616884 CET	23	51672	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:06.401138067 CET	23	51674	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:06.401225090 CET	51674	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:06.415911913 CET	51674	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:06.420799971 CET	23	51674	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:08.217266083 CET	23	51674	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:08.217458963 CET	51674	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:08.217935085 CET	51676	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:08.222254038 CET	23	51674	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:08.222740889 CET	23	51676	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:08.222800970 CET	51676	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:08.238440037 CET	51676	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:08.243263960 CET	23	51676	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:09.997776031 CET	23	51676	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:09.998163939 CET	51676	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:09.998723984 CET	51678	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:10.003237963 CET	23	51676	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:10.003503084 CET	23	51678	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:10.003582001 CET	51678	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:10.020917892 CET	51678	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:10.025728941 CET	23	51678	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:11.773329020 CET	23	51678	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:11.773542881 CET	51678	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:11.774171114 CET	51680	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:11.778347969 CET	23	51678	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:11.778908968 CET	23	51680	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:11.778969049 CET	51680	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:11.798469067 CET	51680	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:11.803193092 CET	23	51680	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:13.613029003 CET	23	51680	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:13.613447905 CET	51680	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:13.614272118 CET	51682	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:13.618246078 CET	23	51680	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:13.619112968 CET	23	51682	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:13.619204044 CET	51682	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:13.638433933 CET	51682	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:13.643241882 CET	23	51682	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:15.343740940 CET	23	51682	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:15.343951941 CET	51682	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:15.344717026 CET	51684	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:15.348716974 CET	23	51682	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:15.349467993 CET	23	51684	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:15.349540949 CET	51684	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:15.368280888 CET	51684	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:15.373140097 CET	23	51684	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:17.076885939 CET	23	51684	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:17.077315092 CET	51684	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:17.078027964 CET	51686	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:17.082160950 CET	23	51684	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:17.082817078 CET	23	51686	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:17.082858086 CET	51686	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:17.104301929 CET	51686	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:17.110866070 CET	23	51686	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:18.857341051 CET	23	51686	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:18.857723951 CET	51686	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:18.858267069 CET	51688	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:18.862538099 CET	23	51686	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:18.863095999 CET	23	51688	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:18.863162994 CET	51688	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:18.881594896 CET	51688	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:18.886801004 CET	23	51688	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:20.639691114 CET	23	51688	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:20.640067101 CET	51688	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:20.640635967 CET	51690	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:20.644886017 CET	23	51688	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:20.645395994 CET	23	51690	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:20.645478010 CET	51690	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:20.665669918 CET	51690	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:20.670485020 CET	23	51690	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:22.415373087 CET	23	51690	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:22.415735960 CET	51690	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:22.416258097 CET	51692	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:22.420559883 CET	23	51690	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:22.421052933 CET	23	51692	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:22.421142101 CET	51692	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:22.439918995 CET	51692	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:22.444654942 CET	23	51692	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:24.198795080 CET	23	51692	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:24.199172974 CET	51692	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:24.199811935 CET	51694	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:24.203959942 CET	23	51692	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:24.204596996 CET	23	51694	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:24.204669952 CET	51694	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:24.218856096 CET	51694	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:24.223618031 CET	23	51694	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:25.938443899 CET	23	51694	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:25.938654900 CET	51694	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:25.939029932 CET	51696	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:25.943433046 CET	23	51694	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:25.943844080 CET	23	51696	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:25.943886995 CET	51696	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:25.953432083 CET	51696	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:25.958264112 CET	23	51696	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:27.673258066 CET	23	51696	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:27.673557043 CET	51696	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:27.673907995 CET	51698	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:27.678296089 CET	23	51696	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:27.678610086 CET	23	51698	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:27.678673983 CET	51698	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:27.688620090 CET	51698	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:27.693387985 CET	23	51698	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:29.405944109 CET	23	51698	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:29.406097889 CET	51698	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:29.406503916 CET	51700	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:29.410851002 CET	23	51698	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:29.411288023 CET	23	51700	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:29.411359072 CET	51700	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:29.421627998 CET	51700	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:29.426403046 CET	23	51700	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:31.159770966 CET	23	51700	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:31.160135984 CET	51700	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:31.160842896 CET	51702	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:31.164886951 CET	23	51700	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:31.165596008 CET	23	51702	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:31.165688038 CET	51702	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:31.182291985 CET	51702	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:31.187031984 CET	23	51702	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:32.955194950 CET	23	51702	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:32.955713987 CET	51702	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:32.956257105 CET	51704	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:32.960508108 CET	23	51702	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:32.961091995 CET	23	51704	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:32.961153030 CET	51704	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:32.976237059 CET	51704	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:32.980999947 CET	23	51704	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:34.708475113 CET	23	51704	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:34.708731890 CET	51704	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:34.709405899 CET	51706	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:34.713534117 CET	23	51704	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:34.714179039 CET	23	51706	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:34.714267015 CET	51706	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:34.728327036 CET	51706	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:34.733146906 CET	23	51706	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:36.453561068 CET	23	51706	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:36.453737974 CET	51706	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:36.454157114 CET	51708	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:36.458513021 CET	23	51706	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:36.459074974 CET	23	51708	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:36.459120989 CET	51708	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:36.468614101 CET	51708	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:36.475089073 CET	23	51708	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:38.223284960 CET	23	51708	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:38.223546028 CET	51708	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:38.224244118 CET	51710	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:38.228334904 CET	23	51708	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:38.228979111 CET	23	51710	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:38.229125977 CET	51710	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:38.245158911 CET	51710	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:38.249973059 CET	23	51710	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:39.952390909 CET	23	51710	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:39.952599049 CET	51710	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:39.953150988 CET	51712	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:39.957592964 CET	23	51710	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:39.958391905 CET	23	51712	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:39.958462954 CET	51712	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:39.974287987 CET	51712	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:39.979048967 CET	23	51712	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:41.707952023 CET	23	51712	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:41.708199024 CET	51712	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:41.708616018 CET	51714	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:41.712944984 CET	23	51712	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:41.713434935 CET	23	51714	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:41.713515043 CET	51714	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:41.727715015 CET	51714	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:41.733141899 CET	23	51714	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:43.497311115 CET	23	51714	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:43.497535944 CET	51714	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:43.497972012 CET	51716	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:43.502365112 CET	23	51714	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:43.502871037 CET	23	51716	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:43.502965927 CET	51716	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:43.513200045 CET	51716	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:43.517981052 CET	23	51716	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:45.252998114 CET	23	51716	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:45.253407955 CET	51716	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:45.254184008 CET	51718	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:45.258197069 CET	23	51716	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:45.258979082 CET	23	51718	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:45.259048939 CET	51718	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:45.275284052 CET	51718	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:45.280062914 CET	23	51718	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:47.064271927 CET	23	51718	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:47.064560890 CET	51718	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:47.064999104 CET	51720	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:47.070317030 CET	23	51718	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:47.070482969 CET	23	51720	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:47.070523977 CET	51720	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:47.081162930 CET	51720	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:47.086014986 CET	23	51720	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:49.843959093 CET	23	51720	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:49.844124079 CET	51720	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:49.844541073 CET	51722	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:49.844923019 CET	23	51720	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:49.844960928 CET	51720	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:49.845309973 CET	23	51720	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:49.845351934 CET	51720	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:49.847002983 CET	23	51720	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:49.847069979 CET	51720	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:49.854577065 CET	23	51720	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:49.854594946 CET	23	51722	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:49.854718924 CET	51722	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:49.869031906 CET	51722	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:49.873769045 CET	23	51722	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:51.654793024 CET	23	51722	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:51.655160904 CET	51722	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:51.655817986 CET	51724	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:51.659960032 CET	23	51722	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:51.660567999 CET	23	51724	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:51.660638094 CET	51724	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:51.676245928 CET	51724	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:51.681024075 CET	23	51724	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:53.405687094 CET	23	51724	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:53.406096935 CET	51724	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:53.406753063 CET	51726	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:53.410870075 CET	23	51724	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:53.411516905 CET	23	51726	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:53.411633968 CET	51726	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:53.426843882 CET	51726	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:53.431577921 CET	23	51726	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:55.220320940 CET	23	51726	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:55.220674038 CET	51726	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:55.221364975 CET	51728	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:55.225475073 CET	23	51726	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:55.226156950 CET	23	51728	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:55.226211071 CET	51728	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:55.243092060 CET	51728	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:55.247978926 CET	23	51728	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:57.035300016 CET	23	51728	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:57.035552025 CET	51728	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:57.036245108 CET	51730	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:57.040359974 CET	23	51728	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:57.041033983 CET	23	51730	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:57.041105986 CET	51730	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:57.057059050 CET	51730	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:57.061819077 CET	23	51730	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:58.799146891 CET	23	51730	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:58.799442053 CET	51730	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:58.800101995 CET	51732	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:58.804280043 CET	23	51730	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:58.804863930 CET	23	51732	45.128.233.186	192.168.2.13
Jan 7, 2025 22:19:58.804940939 CET	51732	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:58.821248055 CET	51732	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:19:58.826005936 CET	23	51732	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:00.595606089 CET	23	51732	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:00.595869064 CET	51732	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:00.596620083 CET	51734	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:00.600686073 CET	23	51732	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:00.601362944 CET	23	51734	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:00.601432085 CET	51734	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:00.616916895 CET	51734	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:00.621849060 CET	23	51734	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:02.379254103 CET	23	51734	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:02.379414082 CET	51734	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:02.379972935 CET	51736	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:02.384300947 CET	23	51734	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:02.384829998 CET	23	51736	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:02.384876013 CET	51736	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:02.394412041 CET	51736	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:02.399187088 CET	23	51736	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:04.157447100 CET	23	51736	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:04.157608986 CET	51736	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:04.158015013 CET	51738	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:04.162482023 CET	23	51736	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:04.162801027 CET	23	51738	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:04.162923098 CET	51738	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:04.174808979 CET	51738	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:04.179559946 CET	23	51738	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:05.931024075 CET	23	51738	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:05.931529999 CET	51738	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:05.932064056 CET	51740	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:05.936369896 CET	23	51738	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:05.936851025 CET	23	51740	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:05.936899900 CET	51740	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:05.948604107 CET	51740	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:05.953407049 CET	23	51740	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:07.723176003 CET	23	51740	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:07.723417997 CET	51740	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:07.723874092 CET	51742	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:07.728208065 CET	23	51740	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:07.728666067 CET	23	51742	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:07.728775024 CET	51742	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:07.743959904 CET	51742	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:07.748713970 CET	23	51742	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:09.501372099 CET	23	51742	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:09.501667023 CET	51742	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:09.502057076 CET	51744	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:09.506464958 CET	23	51742	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:09.506865978 CET	23	51744	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:09.506920099 CET	51744	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:09.517059088 CET	51744	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:09.521831989 CET	23	51744	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:11.641532898 CET	23	51744	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:11.641725063 CET	51744	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:11.641988039 CET	23	51744	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:11.642086029 CET	51744	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:11.642318964 CET	51746	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:11.654186964 CET	23	51744	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:11.656171083 CET	23	51746	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:11.656240940 CET	51746	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:11.667407036 CET	51746	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:11.672162056 CET	23	51746	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:13.425414085 CET	23	51746	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:13.425565958 CET	51746	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:13.426071882 CET	51748	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:13.430305004 CET	23	51746	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:13.430818081 CET	23	51748	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:13.430902004 CET	51748	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:13.445419073 CET	51748	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:13.450217962 CET	23	51748	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:15.157536030 CET	23	51748	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:15.157768965 CET	51748	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:15.158513069 CET	51750	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:15.163264036 CET	23	51748	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:15.163860083 CET	23	51750	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:15.163925886 CET	51750	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:15.178060055 CET	51750	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:15.184345961 CET	23	51750	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:16.940120935 CET	23	51750	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:16.940532923 CET	51750	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:16.941198111 CET	51752	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:16.945292950 CET	23	51750	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:16.945966959 CET	23	51752	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:16.946026087 CET	51752	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:16.963232994 CET	51752	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:16.967967033 CET	23	51752	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:18.690162897 CET	23	51752	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:18.690486908 CET	51752	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:18.691061020 CET	51754	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:18.695276022 CET	23	51752	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:18.695833921 CET	23	51754	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:18.695945024 CET	51754	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:18.712235928 CET	51754	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:18.716991901 CET	23	51754	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:20.466069937 CET	23	51754	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:20.466259956 CET	51754	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:20.466728926 CET	51756	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:20.471729994 CET	23	51754	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:20.471739054 CET	23	51756	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:20.471793890 CET	51756	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:20.481863976 CET	51756	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:20.486625910 CET	23	51756	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:22.244566917 CET	23	51756	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:22.244971991 CET	51756	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:22.245634079 CET	51758	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:22.249911070 CET	23	51756	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:22.250565052 CET	23	51758	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:22.250644922 CET	51758	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:22.265564919 CET	51758	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:22.270392895 CET	23	51758	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:24.057046890 CET	23	51758	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:24.057370901 CET	51758	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:24.057779074 CET	51760	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:24.062141895 CET	23	51758	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:24.062556982 CET	23	51760	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:24.062674046 CET	51760	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:24.073386908 CET	51760	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:24.078622103 CET	23	51760	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:26.606975079 CET	23	51760	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:26.607238054 CET	51760	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:26.607517958 CET	23	51760	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:26.607616901 CET	51760	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:26.607989073 CET	23	51760	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:26.608026028 CET	51762	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:26.608041048 CET	51760	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:26.617450953 CET	23	51760	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:26.619035006 CET	23	51762	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:26.619117975 CET	51762	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:26.634757996 CET	51762	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:26.639595985 CET	23	51762	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:28.391417980 CET	23	51762	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:28.391561031 CET	51762	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:28.392071962 CET	51764	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:28.396899939 CET	23	51762	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:28.397543907 CET	23	51764	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:28.397634983 CET	51764	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:28.409809113 CET	51764	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:28.414577961 CET	23	51764	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:30.205149889 CET	23	51764	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:30.205527067 CET	51764	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:30.206235886 CET	51766	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:30.210378885 CET	23	51764	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:30.211086988 CET	23	51766	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:30.211149931 CET	51766	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:30.226465940 CET	51766	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:30.231276989 CET	23	51766	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:31.968427896 CET	23	51766	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:31.968744993 CET	51766	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:31.969441891 CET	51768	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:31.973608971 CET	23	51766	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:31.974312067 CET	23	51768	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:31.974386930 CET	51768	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:31.988051891 CET	51768	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:31.992852926 CET	23	51768	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:33.723109007 CET	23	51768	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:33.723414898 CET	51768	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:33.723809958 CET	51770	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:33.728701115 CET	23	51768	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:33.729017973 CET	23	51770	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:33.729087114 CET	51770	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:33.739806890 CET	51770	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:33.744631052 CET	23	51770	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:35.505143881 CET	23	51770	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:35.505307913 CET	51770	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:35.505703926 CET	51772	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:35.510056019 CET	23	51770	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:35.510488033 CET	23	51772	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:35.510533094 CET	51772	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:35.519870996 CET	51772	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:35.524612904 CET	23	51772	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:37.235939980 CET	23	51772	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:37.236118078 CET	51772	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:37.236515999 CET	51774	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:37.240916014 CET	23	51772	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:37.241322041 CET	23	51774	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:37.241401911 CET	51774	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:37.256350040 CET	51774	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:37.261111021 CET	23	51774	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:39.026719093 CET	23	51774	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:39.026885986 CET	51774	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:39.027338982 CET	51776	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:39.031745911 CET	23	51774	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:39.032147884 CET	23	51776	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:39.032196045 CET	51776	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:39.042408943 CET	51776	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:39.047189951 CET	23	51776	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:40.812746048 CET	23	51776	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:40.812882900 CET	51776	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:40.813285112 CET	51778	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:40.817697048 CET	23	51776	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:40.818072081 CET	23	51778	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:40.818144083 CET	51778	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:40.836508989 CET	51778	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:40.841373920 CET	23	51778	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:42.593688965 CET	23	51778	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:42.593935966 CET	51778	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:42.594310045 CET	51780	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:42.598691940 CET	23	51778	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:42.599149942 CET	23	51780	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:42.599236965 CET	51780	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:42.611622095 CET	51780	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:42.616383076 CET	23	51780	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:44.349554062 CET	23	51780	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:44.349742889 CET	51780	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:44.350220919 CET	51782	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:44.354484081 CET	23	51780	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:44.354942083 CET	23	51782	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:44.354993105 CET	51782	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:44.367820024 CET	51782	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:44.372606993 CET	23	51782	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:46.078444958 CET	23	51782	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:46.078644037 CET	51782	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:46.079161882 CET	51784	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:46.083365917 CET	23	51782	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:46.083904028 CET	23	51784	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:46.083951950 CET	51784	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:46.098041058 CET	51784	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:46.102812052 CET	23	51784	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:47.832307100 CET	23	51784	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:47.832564116 CET	51784	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:47.833051920 CET	51786	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:47.837348938 CET	23	51784	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:47.837912083 CET	23	51786	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:47.837990046 CET	51786	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:47.850533962 CET	51786	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:47.855309963 CET	23	51786	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:49.619119883 CET	23	51786	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:49.619255066 CET	51786	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:49.619735956 CET	51788	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:49.624063015 CET	23	51786	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:49.624489069 CET	23	51788	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:49.624536991 CET	51788	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:49.637427092 CET	51788	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:49.642175913 CET	23	51788	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:51.345551014 CET	23	51788	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:51.345714092 CET	51788	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:51.346221924 CET	51790	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:51.350539923 CET	23	51788	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:51.351066113 CET	23	51790	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:51.351145029 CET	51790	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:51.363738060 CET	51790	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:51.368493080 CET	23	51790	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:53.124877930 CET	23	51790	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:53.125050068 CET	51790	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:53.125587940 CET	51792	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:53.129816055 CET	23	51790	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:53.130368948 CET	23	51792	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:53.130419016 CET	51792	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:53.143361092 CET	51792	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:53.148087025 CET	23	51792	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:54.862029076 CET	23	51792	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:54.862186909 CET	51792	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:54.862723112 CET	51794	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:54.867049932 CET	23	51792	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:54.867531061 CET	23	51794	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:54.867583036 CET	51794	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:54.882067919 CET	51794	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:54.886823893 CET	23	51794	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:56.657708883 CET	23	51794	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:56.657958984 CET	51794	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:56.658581972 CET	51796	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:56.662758112 CET	23	51794	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:56.663362980 CET	23	51796	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:56.663410902 CET	51796	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:56.680095911 CET	51796	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:56.684886932 CET	23	51796	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:58.452178001 CET	23	51796	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:58.452411890 CET	51796	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:58.452827930 CET	51798	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:58.458297014 CET	23	51796	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:58.458417892 CET	23	51798	45.128.233.186	192.168.2.13
Jan 7, 2025 22:20:58.458472013 CET	51798	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:58.473892927 CET	51798	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:20:58.479377031 CET	23	51798	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:00.207593918 CET	23	51798	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:00.207803965 CET	51798	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:00.208409071 CET	51800	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:00.212611914 CET	23	51798	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:00.213176966 CET	23	51800	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:00.213232994 CET	51800	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:00.228892088 CET	51800	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:00.233625889 CET	23	51800	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:01.977560043 CET	23	51800	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:01.977858067 CET	51800	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:01.978420973 CET	51802	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:01.982646942 CET	23	51800	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:01.983211040 CET	23	51802	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:01.983275890 CET	51802	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:01.998749018 CET	51802	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:02.006593943 CET	23	51802	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:03.812592030 CET	23	51802	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:03.812769890 CET	51802	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:03.813536882 CET	51804	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:03.817568064 CET	23	51802	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:03.818341970 CET	23	51804	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:03.818423033 CET	51804	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:03.841209888 CET	51804	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:03.846039057 CET	23	51804	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:05.624874115 CET	23	51804	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:05.625036955 CET	51804	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:05.625519991 CET	51806	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:05.629832983 CET	23	51804	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:05.630338907 CET	23	51806	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:05.630428076 CET	51806	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:05.644223928 CET	51806	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:05.649013996 CET	23	51806	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:07.363552094 CET	23	51806	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:07.363755941 CET	51806	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:07.364258051 CET	51808	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:07.368601084 CET	23	51806	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:07.369060993 CET	23	51808	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:07.369143009 CET	51808	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:07.385096073 CET	51808	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:07.390650988 CET	23	51808	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:09.136904001 CET	23	51808	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:09.137238979 CET	51808	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:09.137762070 CET	51810	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:09.142043114 CET	23	51808	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:09.142618895 CET	23	51810	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:09.142703056 CET	51810	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:09.156579018 CET	51810	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:09.161412954 CET	23	51810	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:10.900703907 CET	23	51810	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:10.901201010 CET	51810	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:10.901882887 CET	51812	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:10.906088114 CET	23	51810	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:10.906697035 CET	23	51812	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:10.906796932 CET	51812	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:10.925393105 CET	51812	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:10.930253029 CET	23	51812	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:12.709996939 CET	23	51812	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:12.710294008 CET	51812	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:12.710733891 CET	51814	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:12.715054035 CET	23	51812	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:12.715493917 CET	23	51814	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:12.715564966 CET	51814	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:12.716368914 CET	51814	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:12.721143961 CET	23	51814	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:14.508968115 CET	23	51814	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:14.509188890 CET	51814	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:14.509716988 CET	51816	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:14.513969898 CET	23	51814	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:14.514502048 CET	23	51816	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:14.514570951 CET	51816	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:14.514702082 CET	51816	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:14.519453049 CET	23	51816	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:16.331549883 CET	23	51816	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:16.331712008 CET	51816	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:16.332431078 CET	51818	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:16.337805986 CET	23	51816	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:16.338546991 CET	23	51818	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:16.338624001 CET	51818	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:16.338687897 CET	51818	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:16.343394041 CET	23	51818	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:18.120059013 CET	23	51818	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:18.120496035 CET	51818	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:18.121061087 CET	51820	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:18.125284910 CET	23	51818	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:18.125854969 CET	23	51820	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:18.125921011 CET	51820	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:18.126034021 CET	51820	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:18.130778074 CET	23	51820	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:19.863123894 CET	23	51820	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:19.863470078 CET	51820	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:19.864078999 CET	51822	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:19.868264914 CET	23	51820	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:19.868880987 CET	23	51822	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:19.868989944 CET	51822	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:19.869096041 CET	51822	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:19.873847961 CET	23	51822	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:21.618150949 CET	23	51822	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:21.618496895 CET	51822	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:21.619129896 CET	51824	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:21.623337984 CET	23	51822	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:21.623915911 CET	23	51824	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:21.623972893 CET	51824	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:21.624079943 CET	51824	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:21.628837109 CET	23	51824	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:23.383512020 CET	23	51824	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:23.383683920 CET	51824	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:23.384150982 CET	51826	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:23.388597012 CET	23	51824	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:23.388923883 CET	23	51826	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:23.388976097 CET	51826	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:23.389018059 CET	51826	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:23.393806934 CET	23	51826	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:25.188525915 CET	23	51826	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:25.188819885 CET	51826	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:25.189423084 CET	51828	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:25.193635941 CET	23	51826	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:25.194278955 CET	23	51828	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:25.194348097 CET	51828	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:25.194427013 CET	51828	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:25.199243069 CET	23	51828	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:26.998430014 CET	23	51828	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:26.998821974 CET	51828	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:26.999625921 CET	51830	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:27.004002094 CET	23	51828	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:27.004479885 CET	23	51830	45.128.233.186	192.168.2.13
Jan 7, 2025 22:21:27.004554987 CET	51830	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:27.004666090 CET	51830	23	192.168.2.13	45.128.233.186
Jan 7, 2025 22:21:27.009463072 CET	23	51830	45.128.233.186	192.168.2.13

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 7, 2025 22:20:39.494410992 CET	56312	53	192.168.2.13	1.1.1.1
Jan 7, 2025 22:20:39.494456053 CET	49949	53	192.168.2.13	1.1.1.1
Jan 7, 2025 22:20:39.501949072 CET	53	49949	1.1.1.1	192.168.2.13
Jan 7, 2025 22:20:39.501987934 CET	53	56312	1.1.1.1	192.168.2.13

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 7, 2025 22:20:39.494410992 CET	192.168.2.13	1.1.1.1	0x7026	Standard query (0)	daisy.ubuntu.com	A (IP address)	IN (0x0001)	false
Jan 7, 2025 22:20:39.494456053 CET	192.168.2.13	1.1.1.1	0x4408	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 7, 2025 22:20:39.501987934 CET	1.1.1.1	192.168.2.13	0x7026	No error (0)	daisy.ubuntu.com		162.213.35.25	A (IP address)	IN (0x0001)	false
Jan 7, 2025 22:20:39.501987934 CET	1.1.1.1	192.168.2.13	0x7026	No error (0)	daisy.ubuntu.com		162.213.35.24	A (IP address)	IN (0x0001)	false

System Behavior

Analysis Process: dash PID: 5423, Parent PID: 3579

General

Start time (UTC):	21:17:44
Start date (UTC):	07/01/2025
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: rm PID: 5423, Parent PID: 3579

General

Start time (UTC):	21:17:44
Start date (UTC):	07/01/2025
Path:	/usr/bin/rm
Arguments:	rm -f /tmp/tmp.uaZZQhk4qN /tmp/tmp.SXWrw9u982 /tmp/tmp.WIWpnuIAFd
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Chronological Activities

Analysis Process: dash PID: 5424, Parent PID: 3579

General

Start time (UTC):	21:17:44
Start date (UTC):	07/01/2025
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: rm PID: 5424, Parent PID: 3579

General

Start time (UTC):	21:17:44
Start date (UTC):	07/01/2025
Path:	/usr/bin/rm
Arguments:	rm -f /tmp/tmp.uaZZQhk4qN /tmp/tmp.SXWrw9u982 /tmp/tmp.WIWpnuIAFd
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Chronological Activities

Analysis Process: gigops.mips.elf PID: 5434, Parent PID: 5358

General

Start time (UTC):	21:17:52
Start date (UTC):	07/01/2025
Path:	/tmp/gigops.mips.elf
Arguments:	/tmp/gigops.mips.elf
File size:	5777432 bytes
MD5 hash:	0083f1f0e77be34ad27f849842bbb00c

Chronological Activities

Analysis Process: gigops.mips.elf PID: 5436, Parent PID: 5434

General

Start time (UTC):	21:17:52
Start date (UTC):	07/01/2025
Path:	/tmp/gigops.mips.elf
Arguments:	-
File size:	5777432 bytes
MD5 hash:	0083f1f0e77be34ad27f849842bbb00c

Chronological Activities

Analysis Process: gigops.mips.elf PID: 5438, Parent PID: 5436

General

Start time (UTC):	21:17:52
Start date (UTC):	07/01/2025
Path:	/tmp/gigops.mips.elf
Arguments:	-
File size:	5777432 bytes
MD5 hash:	0083f1f0e77be34ad27f849842bbb00c

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system. Functionality could exist within remote access tools to enable this, but utilities available on the operating system could also be used such as Ping or `net view` using Net .
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Network Traffic: Network Connection Creation, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report gigops.mips.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Persistence and Installation Behavior

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Threatname: Gafgyt

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/tmp/qemu-open.AtK6v5 (deleted)

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

System Behavior

Analysis Process: dash PID: 5423, Parent PID: 3579

General

Chronological Activities

Analysis Process: rm PID: 5423, Parent PID: 3579

General

Chronological Activities

Analysis Process: dash PID: 5424, Parent PID: 3579

General

Chronological Activities

Analysis Process: rm PID: 5424, Parent PID: 3579

General

Linux Analysis Report
gigops.mips.elf