Edit tour

Linux Analysis Report
hidakibest.mpsl.elf

Overview

General Information

Sample name:	hidakibest.mpsl.elf
Analysis ID:	1579488
MD5:	10f27b73c98a7e959c9c03f516440d93
SHA1:	e777e3799da3bb11a3f4dd0943b6b886c9502f96
SHA256:	ddb6cc0c77f8c72bb52f7ff1390dc152327bcf00defbdb1c88a0dd9ed2e9a8d0
Tags:	elfuser-abuse_ch
Infos:

Detection

Gafgyt, Mirai

Score:	92
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Yara detected Gafgyt

Yara detected Mirai

Opens /proc/net/* files useful for finding connected devices and routers

Detected TCP or UDP traffic on non-standard ports

Sample contains strings that are user agent strings indicative of HTTP manipulation

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1579488
Start date and time:	2024-12-22 15:58:10 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 6s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	hidakibest.mpsl.elf
Detection:	MAL
Classification:	mal92.spre.troj.linELF@0/0@2/0

Warnings

VT rate limit hit for: 185.216.71.152:4258
VT rate limit hit for: http://fast.no/support/crawler.asp)
VT rate limit hit for: http://feedback.redkolibri.com/
VT rate limit hit for: http://www.billybobbot.com/crawler/)

Runtime Messages

Command:	/tmp/hidakibest.mpsl.elf
PID:	5525
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:

Process Tree

system is lnxubuntu20

hidakibest.mpsl.elf (PID: 5525, Parent: 5445, MD5: 0d6f61f82cf2f781c6eb0661071d42d9) Arguments: /tmp/hidakibest.mpsl.elf

hidakibest.mpsl.elf New Fork (PID: 5527, Parent: 5525)

hidakibest.mpsl.elf New Fork (PID: 5529, Parent: 5527)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
hidakibest.mpsl.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
hidakibest.mpsl.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
hidakibest.mpsl.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x16e38:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16e4c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16e60:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16e74:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16e88:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16e9c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16eb0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16ec4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16ed8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16eec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16f00:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16f14:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16f28:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16f3c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16f50:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16f64:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16f78:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16f8c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16fa0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16fb4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16fc8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
hidakibest.mpsl.elf	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x16de8:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64

Memory Dumps

Source	Rule	Description	Author	Strings
5525.1.00007f4074400000.00007f407441a000.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
5525.1.00007f4074400000.00007f407441a000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5525.1.00007f4074400000.00007f407441a000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x16e38:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16e4c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16e60:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16e74:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16e88:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16e9c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16eb0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16ec4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16ed8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16eec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16f00:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16f14:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16f28:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16f3c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16f50:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16f64:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16f78:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16f8c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16fa0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16fb4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16fc8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5525.1.00007f4074400000.00007f407441a000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x16de8:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
5527.1.00007f4074400000.00007f407441a000.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
5527.1.00007f4074400000.00007f407441a000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5527.1.00007f4074400000.00007f407441a000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x16e38:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16e4c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16e60:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16e74:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16e88:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16e9c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16eb0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16ec4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16ed8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16eec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16f00:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16f14:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16f28:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16f3c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16f50:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16f64:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16f78:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16f8c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16fa0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16fb4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16fc8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5527.1.00007f4074400000.00007f407441a000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x16de8:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: hidakibest.mpsl.elf PID: 5525	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: hidakibest.mpsl.elf PID: 5525	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x4ab2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x4ac6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x4ada:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x4aee:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x4b02:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x4b16:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x4b2a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x4b3e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x4b52:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x4b66:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x4b7a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x4b8e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x4ba2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x4bb6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x4bca:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x4bde:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x4bf2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x4c06:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x4c1a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x4c2e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x4c42:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: hidakibest.mpsl.elf PID: 5525	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x4a65:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64 0x4ed7:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: hidakibest.mpsl.elf PID: 5527	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: hidakibest.mpsl.elf PID: 5527	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xad50:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xad64:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xad78:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xad8c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xada0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xadb4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xadc8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xaddc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xadf0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xae04:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xae18:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xae2c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xae40:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xae54:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xae68:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xae7c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xae90:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xaea4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xaeb8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xaecc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xaee0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: hidakibest.mpsl.elf PID: 5527	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0xad03:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64 0xb175:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Click to see the 9 entries

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: hidakibest.mpsl.elf

Avira: detected

Found malware configuration

Source: hidakibest.mpsl.elf

Malware Configuration Extractor: Gafgyt {"C2 url": "185.216.71.152:4258"}

Multi AV Scanner detection for submitted file

Source: hidakibest.mpsl.elf	Virustotal: Detection: 65%			Perma Link
Source: hidakibest.mpsl.elf	ReversingLabs: Detection: 63%

Spreading

Opens /proc/net/* files useful for finding connected devices and routers

Source: /tmp/hidakibest.mpsl.elf (PID: 5525)

Opens: /proc/net/route

Jump to behavior

Source: global traffic

TCP traffic: 192.168.2.15:42818 -> 185.216.71.152:4258

Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152

Source: global traffic

DNS traffic detected: DNS query: daisy.ubuntu.com

Source: hidakibest.mpsl.elf	String found in binary or memory: http://fast.no/support/crawler.asp)
Source: hidakibest.mpsl.elf	String found in binary or memory: http://feedback.redkolibri.com/
Source: hidakibest.mpsl.elf	String found in binary or memory: http://www.baidu.com/search/spider.htm)
Source: hidakibest.mpsl.elf	String found in binary or memory: http://www.baidu.com/search/spider.html)
Source: hidakibest.mpsl.elf	String found in binary or memory: http://www.billybobbot.com/crawler/)

System Summary

Malicious sample detected (through community Yara rule)

Source: hidakibest.mpsl.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: hidakibest.mpsl.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5525.1.00007f4074400000.00007f407441a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5525.1.00007f4074400000.00007f407441a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5527.1.00007f4074400000.00007f407441a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5527.1.00007f4074400000.00007f407441a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: hidakibest.mpsl.elf PID: 5525, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: hidakibest.mpsl.elf PID: 5525, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: hidakibest.mpsl.elf PID: 5527, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: hidakibest.mpsl.elf PID: 5527, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown

Source: hidakibest.mpsl.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: hidakibest.mpsl.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5525.1.00007f4074400000.00007f407441a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5525.1.00007f4074400000.00007f407441a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5527.1.00007f4074400000.00007f407441a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5527.1.00007f4074400000.00007f407441a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: hidakibest.mpsl.elf PID: 5525, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: hidakibest.mpsl.elf PID: 5525, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: hidakibest.mpsl.elf PID: 5527, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: hidakibest.mpsl.elf PID: 5527, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16

Source: classification engine

Classification label: mal92.spre.troj.linELF@0/0@2/0

Source: /tmp/hidakibest.mpsl.elf (PID: 5525)

Queries kernel information via 'uname':

Jump to behavior

Source: hidakibest.mpsl.elf, 5525.1.000055c280ec3000.000055c280f4a000.rw-.sdmp, hidakibest.mpsl.elf, 5527.1.000055c280ec3000.000055c280f4a000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/mipsel
Source: hidakibest.mpsl.elf, 5525.1.00007ffc37dd9000.00007ffc37dfa000.rw-.sdmp, hidakibest.mpsl.elf, 5527.1.00007ffc37dd9000.00007ffc37dfa000.rw-.sdmp	Binary or memory string: 6x86_64/usr/bin/qemu-mipsel/tmp/hidakibest.mpsl.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/hidakibest.mpsl.elf
Source: hidakibest.mpsl.elf, 5525.1.000055c280ec3000.000055c280f4a000.rw-.sdmp, hidakibest.mpsl.elf, 5527.1.000055c280ec3000.000055c280f4a000.rw-.sdmp	Binary or memory string: U!/etc/qemu-binfmt/mipsel
Source: hidakibest.mpsl.elf, 5525.1.00007ffc37dd9000.00007ffc37dfa000.rw-.sdmp, hidakibest.mpsl.elf, 5527.1.00007ffc37dd9000.00007ffc37dfa000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-mipsel

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match	File source: hidakibest.mpsl.elf, type: SAMPLE
Source: Yara match	File source: 5525.1.00007f4074400000.00007f407441a000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5527.1.00007f4074400000.00007f407441a000.r-x.sdmp, type: MEMORY

Yara detected Mirai

Source: Yara match	File source: hidakibest.mpsl.elf, type: SAMPLE
Source: Yara match	File source: 5525.1.00007f4074400000.00007f407441a000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5527.1.00007f4074400000.00007f407441a000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: hidakibest.mpsl.elf PID: 5525, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: hidakibest.mpsl.elf PID: 5527, type: MEMORYSTR

Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36
Source: Initial sample	User agent string found: Opera/9.80 (X11; Linux i686; Ubuntu/14.10) Presto/2.12.388 Version/12.16
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows; U; Windows NT 6.1; rv:2.2) Gecko/20110201
Source: Initial sample	User agent string found: Opera/9.80 (Windows NT 5.2; U; ru) Presto/2.5.22 Version/10.51
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; AS; rv:11.0) like Gecko
Source: Initial sample	User agent string found: Mozilla/5.0 (Android; Linux armv7l; rv:9.0) Gecko/20111216 Firefox/9.0 Fennec/9.0
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/536.5 (KHTML, like Gecko) Chrome/19.0.1084.56 Safari/536.5
Source: Initial sample	User agent string found: Opera/9.80 (Windows NT 5.1; U; en) Presto/2.10.229 Version/11.60
Source: Initial sample	User agent string found: Mozilla/5.0 (iPad; U; CPU OS 5_1 like Mac OS X) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B367 Safari/531.21.10 UCBrowser/3.4.3.532
Source: Initial sample	User agent string found: Mozilla/5.0 (Nintendo WiiU) AppleWebKit/536.30 (KHTML, like Gecko) NX/3.0.4.2.12 NintendoBrowser/4.3.1.11264.US
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:25.0) Gecko/20100101 Firefox/25.0
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; pl) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; en) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; ja) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; cn) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; fr) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:12.0) Gecko/20100101 Firefox/12.0
Source: Initial sample	User agent string found: Mozilla/5.0 (X11; U; Linux x86_64; de; rv:1.9.2.8) Gecko/20100723 Ubuntu/10.04 (lucid) Firefox/3.6.8
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1; rv:13.0) Gecko/20100101 Firefox/13.0.1
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:11.0) Gecko/20100101 Firefox/11.0
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1
Source: Initial sample	User agent string found: Opera/9.80 (Windows NT 5.1; U; en) Presto/2.10.289 Version/12.01
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1; rv:5.0.1) Gecko/20100101 Firefox/5.0.1
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; rv:5.0) Gecko/20100101 Firefox/5.02
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.0) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.112 Safari/535.1
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36

Remote Access Functionality

Yara detected Gafgyt

Source: Yara match	File source: hidakibest.mpsl.elf, type: SAMPLE
Source: Yara match	File source: 5525.1.00007f4074400000.00007f407441a000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5527.1.00007f4074400000.00007f407441a000.r-x.sdmp, type: MEMORY

Yara detected Mirai

Source: Yara match	File source: hidakibest.mpsl.elf, type: SAMPLE
Source: Yara match	File source: 5525.1.00007f4074400000.00007f407441a000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5527.1.00007f4074400000.00007f407441a000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: hidakibest.mpsl.elf PID: 5525, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: hidakibest.mpsl.elf PID: 5527, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Data Obfuscation	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	1 Remote System Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Application Layer Protocol	Traffic Duplication	Data Destruction

Malware Configuration

Threatname: Gafgyt

{"C2 url": "185.216.71.152:4258"}

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
hidakibest.mpsl.elf	65%	Virustotal		Browse
hidakibest.mpsl.elf	63%	ReversingLabs	Linux.Trojan.LnxGafgyt
hidakibest.mpsl.elf	100%	Avira	EXP/ELF.Mirai.Z.A

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
daisy.ubuntu.com	162.213.35.24	true	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
185.216.71.152:4258	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://www.baidu.com/search/spider.html)	hidakibest.mpsl.elf	false	high
http://www.billybobbot.com/crawler/)	hidakibest.mpsl.elf	false	unknown
http://fast.no/support/crawler.asp)	hidakibest.mpsl.elf	false	unknown
http://feedback.redkolibri.com/	hidakibest.mpsl.elf	false	unknown
http://www.baidu.com/search/spider.htm)	hidakibest.mpsl.elf	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
185.216.71.152	unknown	Germany		43659	CLOUDCOMPUTINGDE	true

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.216.71.152	hidakibest.arm7.elf	Get hash	malicious	Gafgyt, Mirai	Browse
185.216.71.152	hidakibest.sparc.elf	Get hash	malicious	Gafgyt, Mirai	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
daisy.ubuntu.com	hidakibest.arm7.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.24
	hidakibest.sparc.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	Space.arm6.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	most-mpsl.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	arm.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	byte.x86.elf	Get hash	malicious	Mirai, Okiru	Browse	162.213.35.25
	x86_64.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	162.213.35.24
	m68k.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	162.213.35.24
	vlxx.arm6.elf	Get hash	malicious	Mirai, Okiru	Browse	162.213.35.25
	la.bot.powerpc.elf	Get hash	malicious	Mirai	Browse	162.213.35.24

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDCOMPUTINGDE	hidakibest.arm7.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.216.71.152
	hidakibest.sparc.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.216.71.152
	https://www.google.gr/url?url=https://pniuvlpkjqhdwff&exox=rvhqtix&eaydny=ysf&gzfds=lqrwiz&nci=qtwmzch&iccvb=yhwtsp&vtqs=avtajyu&oagvzgp=irlq&mvdoc=embwrj&yylmwei=tmn&mntt=qqcvuhkd&lkydbjfiod=izjcgyubqc&q=amp/anre6g6.j%c2%adh%c2%adhn%c2%adt%c2%addd%c2%adsm%c2%ado%c2%admcw%c2%adw%c2%adgu%c2%adno.com%e2%80%8b/99twfh3p8&gcyx=ncgobia&yfevoul=wtloixvv&hukl=qfkmtky&nlhwnbr=bwkoiopy&eqfw=bmcpntp&vlvegw=zdbpajeyq&ghrv=kcdfwrl&kyddme=myxsnvtxf&asco=mgumegd&dvvibf=hzfexefeg&osme=bdyguyp&njtjvd=bkelfwmxg&bxrb=ltpyjsv&girpat=lswjchrwc&qapj=wwwowde&vahefc=ghseyzgyf&ahaj=zfqmkuo&pfsfeu=ttucmtamu&sffs=oxaajjo&hbwhgy=mgfzglmmo&bdwl=oifsufx&befsmv=jskhtmnps&sfjy=powmsnr&zixjqp=jyttdwbmu&fzkp=hztiqjm&jmzuvc=ufyoeqgfi&zujr=jxtbdtg&plvxoh=fxumxxddw&nkin=ykbzrdh&lghzli=agvbttfta&suag=ioudcjc&zpptpx=dxacgdnox&hmfz=yueoymp&fnshpz=wgayslegy&gjtg=qcjjozv&rymask=thcxzfpca&zcgn=ywtonnx&kqrpog=kgfvcqswk&imwa=wlvocxf&ggqznt=budaflbgp&zjhr=zscgach&esrhmq=qjdngljnl&ppoz=nhwzlik&zejsqg=vnvpaymyl&dnqb=kjswpyt&kunwbg=pzauoqliz&bqlz=qabnsnu&dlfnsr=dakxdfzen&uffg=uwnswdr&ywjevz=bnvkfavcb&rrob=celdmvn&czdusr=sjfjazfqw&ipgr=exylggn&fltcvh=sdfsricvf&byfs=apntxot&javhwh=nyphchiee&owbh=haflpez&mbyvqw=pdzpxeedx&ejov=taakkyw&oylsfz=qnzuplrnz&hxrq=ovegslq&duqjcc=pjwdpyvec&uoec=pjouxrb&eiezwk=okbkttiao&knji=kcmfaqe&qmathj=vymnqrvxa&gajs=riewukz&czxhiu=uysriqpma&avwe=gssbenk&jnwgpb=iqkroelwx&sjyt=zhxfzpx&liqoqs=bbajxgpxm&dqqu=ztzooam&haagcu=gkijlwgjy&mnsq=uervedi&yckhpb=ngqrbrqpc&pkne=nwisdfz&eqsiqu=mlrhvpuav	Get hash	malicious	Unknown	Browse	85.31.47.165
	6G4au3vWsI.lnk	Get hash	malicious	Unknown	Browse	80.76.51.231
	tegga.hta	Get hash	malicious	Xmrig	Browse	185.216.68.189
	KzHndnydSG.dll	Get hash	malicious	CobaltStrike	Browse	185.216.71.202
	bot.sh4.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	80.76.51.45
	bot.arm.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	80.76.51.45
	bot.arm7.elf	Get hash	malicious	Mirai, Okiru	Browse	80.76.51.45
	bot.x86_64.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	80.76.51.45

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 32-bit LSB executable, MIPS, MIPS-I version 1 (SYSV), statically linked, not stripped
Entropy (8bit):	5.409179892310609
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	hidakibest.mpsl.elf
File size:	144'442 bytes
MD5:	10f27b73c98a7e959c9c03f516440d93
SHA1:	e777e3799da3bb11a3f4dd0943b6b886c9502f96
SHA256:	ddb6cc0c77f8c72bb52f7ff1390dc152327bcf00defbdb1c88a0dd9ed2e9a8d0
SHA512:	a0776eb1b67153e8a7792f41fdc4971c9c6f2dadafaaccbbe1c990f5dd8446294c9ab12ba320731c4abbcc40006662cfaecee9f24ea1295abddddede6e7fb071
SSDEEP:	3072:lBXpqf9VHGn7vsN5htpRvHpVFm0/5ApYADn:llp4WvsN5htvp7m0/5ASADn
TLSH:	9EE3F907EB614DB7C84FCE3202D68525148EA5A653D56FABB278CB5CFB0798B49E3C40
File Content Preview:	.ELF......................@.4...........4. ...(........p......@...@...........................@...@...........................B...B.....x...............D...D.B.D.B.................Q.td.................................................(C....<.(.'!......'...

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	MIPS R3000
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x4002d0
Flags:	0x1007
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	5
Section Header Offset:	121096
Section Header Size:	40
Number of Section Headers:	23
Header String Table Index:	20

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.reginfo	MIPS_REGINFO	0x4000d4	0xd4	0x18	0x18	0x2	A	0	0	4
.init	PROGBITS	0x4000ec	0xec	0x8c	0x0	0x6	AX	0	0	4
.text	PROGBITS	0x400180	0x180	0x15050	0x0	0x6	AX	0	0	16
.fini	PROGBITS	0x4151d0	0x151d0	0x5c	0x0	0x6	AX	0	0	4
.rodata	PROGBITS	0x415230	0x15230	0x3fc0	0x0	0x2	A	0	0	16
.eh_frame	PROGBITS	0x42a000	0x1a000	0x44	0x0	0x3	WA	0	0	4
.tbss	NOBITS	0x42a044	0x1a044	0x8	0x0	0x403	WAT	0	0	4
.ctors	PROGBITS	0x42a044	0x1a044	0x8	0x0	0x3	WA	0	0	4
.dtors	PROGBITS	0x42a04c	0x1a04c	0x8	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x42a054	0x1a054	0x4	0x0	0x3	WA	0	0	4
.data.rel.ro	PROGBITS	0x42a058	0x1a058	0x4d0	0x0	0x3	WA	0	0	4
.data	PROGBITS	0x42a530	0x1a530	0x3d0	0x0	0x3	WA	0	0	16
.got	PROGBITS	0x42a900	0x1a900	0x4e0	0x4	0x10000003	WAp	0	0	16
.sdata	PROGBITS	0x42ade0	0x1ade0	0x4	0x0	0x10000003	WAp	0	0	4
.sbss	NOBITS	0x42ade4	0x1ade4	0x4c	0x0	0x10000003	WAp	0	0	4
.bss	NOBITS	0x42ae30	0x1ade4	0x7148	0x0	0x3	WA	0	0	16
.comment	PROGBITS	0x0	0x1ade4	0xb9a	0x0	0x0		0	0	1
.mdebug.abi32	PROGBITS	0xb9a	0x1b97e	0x0	0x0	0x0		0	0	1
.pdr	PROGBITS	0x0	0x1b980	0x1ee0	0x0	0x0		0	0	4
.shstrtab	STRTAB	0x0	0x1d860	0xa7	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x1dca0	0x3180	0x10	0x0		22	322	4
.strtab	STRTAB	0x0	0x20e20	0x261a	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
<unknown>	0xd4	0x4000d4	0x4000d4	0x18	0x18	0.9834	0x4	R	0x4	.reginfo
LOAD	0x0	0x400000	0x400000	0x191f0	0x191f0	5.5445	0x5	R E	0x10000	.reginfo .init .text .fini .rodata
LOAD	0x1a000	0x42a000	0x42a000	0xde4	0x7f78	4.7814	0x6	RW	0x10000	.eh_frame .tbss .ctors .dtors .jcr .data.rel.ro .data .got .sdata .sbss .bss
TLS	0x1a044	0x42a044	0x42a044	0x0	0x8	0.0000	0x4	R	0x4	.tbss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x4000d4	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x4000ec	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x400180	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x4151d0	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x415230	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x42a000	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x42a044	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x42a044	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x42a04c	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x42a054	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x42a058	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x42a530	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x42a900	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x42ade0	0	SECTION	<unknown>	DEFAULT	14
	.symtab	0x42ade4	0	SECTION	<unknown>	DEFAULT	15
	.symtab	0x42ae30	0	SECTION	<unknown>	DEFAULT	16
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	17
	.symtab	0xb9a	0	SECTION	<unknown>	DEFAULT	18
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	19
C.1.5091	.symtab	0x419030	24	OBJECT	<unknown>	DEFAULT	5
C.3.5380	.symtab	0x418d0c	12	OBJECT	<unknown>	DEFAULT	5
C.3.6092	.symtab	0x417bd0	12	OBJECT	<unknown>	DEFAULT	5
C.3.6114	.symtab	0x419078	12	OBJECT	<unknown>	DEFAULT	5
C.3.6172	.symtab	0x419050	12	OBJECT	<unknown>	DEFAULT	5
C.4.6115	.symtab	0x41906c	12	OBJECT	<unknown>	DEFAULT	5
C.5.6123	.symtab	0x419060	12	OBJECT	<unknown>	DEFAULT	5
C.6.5518	.symtab	0x418d00	12	OBJECT	<unknown>	DEFAULT	5
C.70.5296	.symtab	0x42a058	104	OBJECT	<unknown>	DEFAULT	11
C.77.5395	.symtab	0x42a0c0	1128	OBJECT	<unknown>	DEFAULT	11
FRAMESZ	.symtab	0x20	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
GPOFF	.symtab	0x18	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
LOCALSZ	.symtab	0x3	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
Q	.symtab	0x42ae68	16384	OBJECT	<unknown>	DEFAULT	16
RAOFF	.symtab	0x1c	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
Randhex	.symtab	0x402c80	696	FUNC	<unknown>	DEFAULT	3
SendSTD	.symtab	0x4025a0	688	FUNC	<unknown>	DEFAULT	3
UDPRAW	.symtab	0x402a68	536	FUNC	<unknown>	DEFAULT	3
V0OFF	.symtab	0x14	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_Exit	.symtab	0x406290	76	FUNC	<unknown>	DEFAULT	3
_GLOBAL_OFFSET_TABLE_	.symtab	0x42a900	0	OBJECT	<unknown>	DEFAULT	13
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__CTOR_END__	.symtab	0x42a048	0	OBJECT	<unknown>	DEFAULT	8
__CTOR_LIST__	.symtab	0x42a044	0	OBJECT	<unknown>	DEFAULT	8
__C_ctype_b	.symtab	0x42a660	4	OBJECT	<unknown>	DEFAULT	12
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x4175d0	768	OBJECT	<unknown>	DEFAULT	5
__C_ctype_tolower	.symtab	0x42a7c0	4	OBJECT	<unknown>	DEFAULT	12
__C_ctype_tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_tolower_data	.symtab	0x418d30	768	OBJECT	<unknown>	DEFAULT	5
__C_ctype_toupper	.symtab	0x42a670	4	OBJECT	<unknown>	DEFAULT	12
__C_ctype_toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_toupper_data	.symtab	0x4178d0	768	OBJECT	<unknown>	DEFAULT	5
__DTOR_END__	.symtab	0x42a050	0	OBJECT	<unknown>	DEFAULT	9
__DTOR_LIST__	.symtab	0x42a04c	0	OBJECT	<unknown>	DEFAULT	9
__EH_FRAME_BEGIN__	.symtab	0x42a000	0	OBJECT	<unknown>	DEFAULT	6
__FRAME_END__	.symtab	0x42a040	0	OBJECT	<unknown>	DEFAULT	6
__GI___C_ctype_b	.symtab	0x42a660	4	OBJECT	<unknown>	HIDDEN	12
__GI___C_ctype_tolower	.symtab	0x42a7c0	4	OBJECT	<unknown>	HIDDEN	12
__GI___C_ctype_toupper	.symtab	0x42a670	4	OBJECT	<unknown>	HIDDEN	12
__GI___close	.symtab	0x40bc1c	176	FUNC	<unknown>	HIDDEN	3
__GI___close_nocancel	.symtab	0x40bbf4	40	FUNC	<unknown>	HIDDEN	3
__GI___ctype_b	.symtab	0x42a664	4	OBJECT	<unknown>	HIDDEN	12
__GI___ctype_tolower	.symtab	0x42a7c4	4	OBJECT	<unknown>	HIDDEN	12
__GI___ctype_toupper	.symtab	0x42a674	4	OBJECT	<unknown>	HIDDEN	12
__GI___errno_location	.symtab	0x406690	28	FUNC	<unknown>	HIDDEN	3
__GI___fcntl_nocancel	.symtab	0x406110	108	FUNC	<unknown>	HIDDEN	3
__GI___fgetc_unlocked	.symtab	0x40fbb0	388	FUNC	<unknown>	HIDDEN	3
__GI___glibc_strerror_r	.symtab	0x408440	68	FUNC	<unknown>	HIDDEN	3
__GI___libc_close	.symtab	0x40bc1c	176	FUNC	<unknown>	HIDDEN	3
__GI___libc_fcntl	.symtab	0x40617c	268	FUNC	<unknown>	HIDDEN	3
__GI___libc_open	.symtab	0x40bd0c	192	FUNC	<unknown>	HIDDEN	3
__GI___libc_read	.symtab	0x40bf0c	192	FUNC	<unknown>	HIDDEN	3
__GI___libc_waitpid	.symtab	0x40c00c	192	FUNC	<unknown>	HIDDEN	3
__GI___libc_write	.symtab	0x40be0c	192	FUNC	<unknown>	HIDDEN	3
__GI___open	.symtab	0x40bd0c	192	FUNC	<unknown>	HIDDEN	3
__GI___open_nocancel	.symtab	0x40bce4	40	FUNC	<unknown>	HIDDEN	3
__GI___read	.symtab	0x40bf0c	192	FUNC	<unknown>	HIDDEN	3
__GI___read_nocancel	.symtab	0x40bee4	40	FUNC	<unknown>	HIDDEN	3
__GI___register_atfork	.symtab	0x40b680	452	FUNC	<unknown>	HIDDEN	3
__GI___sigaddset	.symtab	0x408f08	44	FUNC	<unknown>	HIDDEN	3
__GI___sigdelset	.symtab	0x408f34	48	FUNC	<unknown>	HIDDEN	3
__GI___sigismember	.symtab	0x408ee0	40	FUNC	<unknown>	HIDDEN	3
__GI___uClibc_fini	.symtab	0x40c280	204	FUNC	<unknown>	HIDDEN	3
__GI___uClibc_init	.symtab	0x40c3d4	120	FUNC	<unknown>	HIDDEN	3
__GI___waitpid	.symtab	0x40c00c	192	FUNC	<unknown>	HIDDEN	3
__GI___write	.symtab	0x40be0c	192	FUNC	<unknown>	HIDDEN	3
__GI___write_nocancel	.symtab	0x40bde4	40	FUNC	<unknown>	HIDDEN	3
__GI___xpg_strerror_r	.symtab	0x408490	380	FUNC	<unknown>	HIDDEN	3
__GI__exit	.symtab	0x406290	76	FUNC	<unknown>	HIDDEN	3
__GI_abort	.symtab	0x40a0f0	408	FUNC	<unknown>	HIDDEN	3
__GI_atoi	.symtab	0x40aa10	28	FUNC	<unknown>	HIDDEN	3
__GI_brk	.symtab	0x411750	80	FUNC	<unknown>	HIDDEN	3
__GI_chdir	.symtab	0x4062e0	56	FUNC	<unknown>	HIDDEN	3
__GI_close	.symtab	0x40bc1c	176	FUNC	<unknown>	HIDDEN	3
__GI_closedir	.symtab	0x40cdf0	292	FUNC	<unknown>	HIDDEN	3
__GI_config_close	.symtab	0x40d7e4	132	FUNC	<unknown>	HIDDEN	3
__GI_config_open	.symtab	0x40d868	116	FUNC	<unknown>	HIDDEN	3
__GI_config_read	.symtab	0x40d320	1220	FUNC	<unknown>	HIDDEN	3
__GI_connect	.symtab	0x40896c	220	FUNC	<unknown>	HIDDEN	3
__GI_exit	.symtab	0x40ac40	240	FUNC	<unknown>	HIDDEN	3
__GI_fclose	.symtab	0x40da50	804	FUNC	<unknown>	HIDDEN	3
__GI_fcntl	.symtab	0x40617c	268	FUNC	<unknown>	HIDDEN	3
__GI_fflush_unlocked	.symtab	0x40f7f8	940	FUNC	<unknown>	HIDDEN	3
__GI_fgetc	.symtab	0x40f2b0	372	FUNC	<unknown>	HIDDEN	3
__GI_fgetc_unlocked	.symtab	0x40fbb0	388	FUNC	<unknown>	HIDDEN	3
__GI_fgets	.symtab	0x40f430	320	FUNC	<unknown>	HIDDEN	3
__GI_fgets_unlocked	.symtab	0x40fd40	276	FUNC	<unknown>	HIDDEN	3
__GI_fopen	.symtab	0x40dd80	28	FUNC	<unknown>	HIDDEN	3
__GI_fork	.symtab	0x40b250	988	FUNC	<unknown>	HIDDEN	3
__GI_fputs_unlocked	.symtab	0x407cc0	124	FUNC	<unknown>	HIDDEN	3
__GI_fseek	.symtab	0x411cb0	68	FUNC	<unknown>	HIDDEN	3
__GI_fseeko64	.symtab	0x411d00	500	FUNC	<unknown>	HIDDEN	3
__GI_fstat	.symtab	0x411820	136	FUNC	<unknown>	HIDDEN	3
__GI_fwrite_unlocked	.symtab	0x407d40	268	FUNC	<unknown>	HIDDEN	3
__GI_getc_unlocked	.symtab	0x40fbb0	388	FUNC	<unknown>	HIDDEN	3
__GI_getdtablesize	.symtab	0x40ca40	72	FUNC	<unknown>	HIDDEN	3
__GI_getegid	.symtab	0x40ca90	16	FUNC	<unknown>	HIDDEN	3
__GI_geteuid	.symtab	0x40caa0	16	FUNC	<unknown>	HIDDEN	3
__GI_getgid	.symtab	0x40cab0	16	FUNC	<unknown>	HIDDEN	3
__GI_gethostbyname	.symtab	0x4088a0	28	FUNC	<unknown>	HIDDEN	3
__GI_gethostbyname2	.symtab	0x4088c0	104	FUNC	<unknown>	HIDDEN	3
__GI_gethostbyname2_r	.symtab	0x410960	948	FUNC	<unknown>	HIDDEN	3
__GI_gethostbyname_r	.symtab	0x414270	968	FUNC	<unknown>	HIDDEN	3
__GI_gethostname	.symtab	0x4146a0	192	FUNC	<unknown>	HIDDEN	3
__GI_getpagesize	.symtab	0x40cac0	48	FUNC	<unknown>	HIDDEN	3
__GI_getpid	.symtab	0x40b850	84	FUNC	<unknown>	HIDDEN	3
__GI_getrlimit	.symtab	0x40caf0	60	FUNC	<unknown>	HIDDEN	3
__GI_getsockname	.symtab	0x408a50	60	FUNC	<unknown>	HIDDEN	3
__GI_getuid	.symtab	0x40cb30	16	FUNC	<unknown>	HIDDEN	3
__GI_htonl	.symtab	0x4086f8	40	FUNC	<unknown>	HIDDEN	3
__GI_htons	.symtab	0x4086e0	24	FUNC	<unknown>	HIDDEN	3
__GI_inet_addr	.symtab	0x408850	72	FUNC	<unknown>	HIDDEN	3
__GI_inet_aton	.symtab	0x410840	284	FUNC	<unknown>	HIDDEN	3
__GI_inet_ntoa	.symtab	0x40882c	32	FUNC	<unknown>	HIDDEN	3
__GI_inet_ntoa_r	.symtab	0x408760	204	FUNC	<unknown>	HIDDEN	3
__GI_inet_ntop	.symtab	0x412acc	852	FUNC	<unknown>	HIDDEN	3
__GI_inet_pton	.symtab	0x412658	696	FUNC	<unknown>	HIDDEN	3
__GI_initstate_r	.symtab	0x40a7cc	300	FUNC	<unknown>	HIDDEN	3
__GI_ioctl	.symtab	0x406320	248	FUNC	<unknown>	HIDDEN	3
__GI_isatty	.symtab	0x410750	60	FUNC	<unknown>	HIDDEN	3
__GI_isspace	.symtab	0x406620	44	FUNC	<unknown>	HIDDEN	3
__GI_kill	.symtab	0x406420	56	FUNC	<unknown>	HIDDEN	3
__GI_lseek64	.symtab	0x414950	136	FUNC	<unknown>	HIDDEN	3
__GI_memchr	.symtab	0x40fe60	260	FUNC	<unknown>	HIDDEN	3
__GI_memcpy	.symtab	0x407e50	308	FUNC	<unknown>	HIDDEN	3
__GI_memmove	.symtab	0x40ff70	824	FUNC	<unknown>	HIDDEN	3
__GI_mempcpy	.symtab	0x4123a0	76	FUNC	<unknown>	HIDDEN	3
__GI_memrchr	.symtab	0x4102b0	260	FUNC	<unknown>	HIDDEN	3
__GI_memset	.symtab	0x407f90	144	FUNC	<unknown>	HIDDEN	3
__GI_mmap	.symtab	0x40c8c0	112	FUNC	<unknown>	HIDDEN	3
__GI_mremap	.symtab	0x4118b0	96	FUNC	<unknown>	HIDDEN	3
__GI_munmap	.symtab	0x40cb40	60	FUNC	<unknown>	HIDDEN	3
__GI_nanosleep	.symtab	0x40cbbc	200	FUNC	<unknown>	HIDDEN	3
__GI_ntohl	.symtab	0x408738	40	FUNC	<unknown>	HIDDEN	3
__GI_ntohs	.symtab	0x408720	24	FUNC	<unknown>	HIDDEN	3
__GI_open	.symtab	0x40bd0c	192	FUNC	<unknown>	HIDDEN	3
__GI_opendir	.symtab	0x40d034	240	FUNC	<unknown>	HIDDEN	3
__GI_poll	.symtab	0x41479c	220	FUNC	<unknown>	HIDDEN	3
__GI_raise	.symtab	0x40b8b0	264	FUNC	<unknown>	HIDDEN	3
__GI_random	.symtab	0x40a2b0	164	FUNC	<unknown>	HIDDEN	3
__GI_random_r	.symtab	0x40a590	172	FUNC	<unknown>	HIDDEN	3
__GI_rawmemchr	.symtab	0x4123f0	192	FUNC	<unknown>	HIDDEN	3
__GI_read	.symtab	0x40bf0c	192	FUNC	<unknown>	HIDDEN	3
__GI_readdir64	.symtab	0x40d210	272	FUNC	<unknown>	HIDDEN	3
__GI_recv	.symtab	0x408b2c	240	FUNC	<unknown>	HIDDEN	3
__GI_sbrk	.symtab	0x40cc90	164	FUNC	<unknown>	HIDDEN	3
__GI_select	.symtab	0x4064c0	260	FUNC	<unknown>	HIDDEN	3
__GI_send	.symtab	0x408c5c	240	FUNC	<unknown>	HIDDEN	3
__GI_setsid	.symtab	0x4065d0	60	FUNC	<unknown>	HIDDEN	3
__GI_setsockopt	.symtab	0x408d50	96	FUNC	<unknown>	HIDDEN	3
__GI_setstate_r	.symtab	0x40a8f8	272	FUNC	<unknown>	HIDDEN	3
__GI_sigaction	.symtab	0x40c930	28	FUNC	<unknown>	HIDDEN	3
__GI_signal	.symtab	0x408df0	228	FUNC	<unknown>	HIDDEN	3
__GI_sigprocmask	.symtab	0x40cd40	176	FUNC	<unknown>	HIDDEN	3
__GI_sleep	.symtab	0x40b9c0	404	FUNC	<unknown>	HIDDEN	3
__GI_socket	.symtab	0x408db0	60	FUNC	<unknown>	HIDDEN	3
__GI_sprintf	.symtab	0x4066b0	80	FUNC	<unknown>	HIDDEN	3
__GI_srandom_r	.symtab	0x40a63c	400	FUNC	<unknown>	HIDDEN	3
__GI_stat	.symtab	0x414880	136	FUNC	<unknown>	HIDDEN	3
__GI_strcasecmp	.symtab	0x408650	108	FUNC	<unknown>	HIDDEN	3
__GI_strchr	.symtab	0x408020	248	FUNC	<unknown>	HIDDEN	3
__GI_strchrnul	.symtab	0x4103c0	248	FUNC	<unknown>	HIDDEN	3
__GI_strcmp	.symtab	0x408120	44	FUNC	<unknown>	HIDDEN	3
__GI_strcoll	.symtab	0x408120	44	FUNC	<unknown>	HIDDEN	3
__GI_strcpy	.symtab	0x408150	36	FUNC	<unknown>	HIDDEN	3
__GI_strcspn	.symtab	0x4104c0	144	FUNC	<unknown>	HIDDEN	3
__GI_strdup	.symtab	0x4149e0	140	FUNC	<unknown>	HIDDEN	3
__GI_strlen	.symtab	0x408180	184	FUNC	<unknown>	HIDDEN	3
__GI_strncpy	.symtab	0x4124b0	188	FUNC	<unknown>	HIDDEN	3
__GI_strnlen	.symtab	0x408240	248	FUNC	<unknown>	HIDDEN	3
__GI_strpbrk	.symtab	0x410710	64	FUNC	<unknown>	HIDDEN	3
__GI_strrchr	.symtab	0x410550	160	FUNC	<unknown>	HIDDEN	3
__GI_strspn	.symtab	0x4105f0	72	FUNC	<unknown>	HIDDEN	3
__GI_strstr	.symtab	0x408340	256	FUNC	<unknown>	HIDDEN	3
__GI_strtok	.symtab	0x4086c0	32	FUNC	<unknown>	HIDDEN	3
__GI_strtok_r	.symtab	0x410640	208	FUNC	<unknown>	HIDDEN	3
__GI_strtol	.symtab	0x40aa30	28	FUNC	<unknown>	HIDDEN	3
__GI_sysconf	.symtab	0x40af2c	792	FUNC	<unknown>	HIDDEN	3
__GI_tcgetattr	.symtab	0x410790	176	FUNC	<unknown>	HIDDEN	3
__GI_time	.symtab	0x406610	16	FUNC	<unknown>	HIDDEN	3
__GI_toupper	.symtab	0x406650	60	FUNC	<unknown>	HIDDEN	3
__GI_uname	.symtab	0x414910	60	FUNC	<unknown>	HIDDEN	3
__GI_vsnprintf	.symtab	0x406700	248	FUNC	<unknown>	HIDDEN	3
__GI_waitpid	.symtab	0x40c00c	192	FUNC	<unknown>	HIDDEN	3
__GI_wcrtomb	.symtab	0x40d8e0	108	FUNC	<unknown>	HIDDEN	3
__GI_wcsnrtombs	.symtab	0x40d990	192	FUNC	<unknown>	HIDDEN	3
__GI_wcsrtombs	.symtab	0x40d950	64	FUNC	<unknown>	HIDDEN	3
__GI_write	.symtab	0x40be0c	192	FUNC	<unknown>	HIDDEN	3
__JCR_END__	.symtab	0x42a054	0	OBJECT	<unknown>	DEFAULT	10
__JCR_LIST__	.symtab	0x42a054	0	OBJECT	<unknown>	DEFAULT	10
__app_fini	.symtab	0x42f5ec	4	OBJECT	<unknown>	HIDDEN	16
__atexit_lock	.symtab	0x42a790	24	OBJECT	<unknown>	DEFAULT	12
__bss_start	.symtab	0x42ade4	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x40c34c	136	FUNC	<unknown>	DEFAULT	3
__close	.symtab	0x40bc1c	176	FUNC	<unknown>	DEFAULT	3
__close_nameservers	.symtab	0x414120	220	FUNC	<unknown>	HIDDEN	3
__close_nocancel	.symtab	0x40bbf4	40	FUNC	<unknown>	DEFAULT	3
__ctype_b	.symtab	0x42a664	4	OBJECT	<unknown>	DEFAULT	12
__ctype_tolower	.symtab	0x42a7c4	4	OBJECT	<unknown>	DEFAULT	12
__ctype_toupper	.symtab	0x42a674	4	OBJECT	<unknown>	DEFAULT	12
__curbrk	.symtab	0x431b60	4	OBJECT	<unknown>	HIDDEN	16
__data_start	.symtab	0x42a540	0	OBJECT	<unknown>	DEFAULT	12
__decode_dotted	.symtab	0x412e20	400	FUNC	<unknown>	HIDDEN	3
__decode_header	.symtab	0x414b90	228	FUNC	<unknown>	HIDDEN	3
__deregister_frame_info	.symtab	0x0	0	FUNC	<unknown>	DEFAULT	SHN_UNDEF
__dns_lookup	.symtab	0x412fb0	2608	FUNC	<unknown>	HIDDEN	3
__do_global_ctors_aux	.symtab	0x415160	0	FUNC	<unknown>	DEFAULT	3
__do_global_dtors_aux	.symtab	0x400180	0	FUNC	<unknown>	DEFAULT	3
__dso_handle	.symtab	0x42ade0	0	OBJECT	<unknown>	HIDDEN	14
__encode_dotted	.symtab	0x415020	316	FUNC	<unknown>	HIDDEN	3
__encode_header	.symtab	0x414a70	276	FUNC	<unknown>	HIDDEN	3
__encode_question	.symtab	0x414c80	172	FUNC	<unknown>	HIDDEN	3
__environ	.symtab	0x42f5e4	4	OBJECT	<unknown>	DEFAULT	16
__errno_location	.symtab	0x406690	28	FUNC	<unknown>	DEFAULT	3
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x42f080	4	OBJECT	<unknown>	HIDDEN	16
__fcntl_nocancel	.symtab	0x406110	108	FUNC	<unknown>	DEFAULT	3
__fgetc_unlocked	.symtab	0x40fbb0	388	FUNC	<unknown>	DEFAULT	3
__fini_array_end	.symtab	0x42a044	0	NOTYPE	<unknown>	HIDDEN	7
__fini_array_start	.symtab	0x42a044	0	NOTYPE	<unknown>	HIDDEN	7
__fork	.symtab	0x40b250	988	FUNC	<unknown>	DEFAULT	3
__fork_generation_pointer	.symtab	0x42adec	4	OBJECT	<unknown>	HIDDEN	15
__fork_handlers	.symtab	0x42adf0	4	OBJECT	<unknown>	HIDDEN	15
__fork_lock	.symtab	0x42f090	4	OBJECT	<unknown>	HIDDEN	16
__get_hosts_byname_r	.symtab	0x414200	104	FUNC	<unknown>	HIDDEN	3
__getdents64	.symtab	0x411af0	436	FUNC	<unknown>	HIDDEN	3
__getpagesize	.symtab	0x40cac0	48	FUNC	<unknown>	DEFAULT	3
__getpid	.symtab	0x40b850	84	FUNC	<unknown>	DEFAULT	3
__glibc_strerror_r	.symtab	0x408440	68	FUNC	<unknown>	DEFAULT	3
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__h_errno_location	.symtab	0x0	0	FUNC	<unknown>	DEFAULT	SHN_UNDEF
__init_array_end	.symtab	0x42a044	0	NOTYPE	<unknown>	HIDDEN	7
__init_array_start	.symtab	0x42a044	0	NOTYPE	<unknown>	HIDDEN	7
__libc_close	.symtab	0x40bc1c	176	FUNC	<unknown>	DEFAULT	3
__libc_connect	.symtab	0x40896c	220	FUNC	<unknown>	DEFAULT	3
__libc_disable_asynccancel	.symtab	0x40c0d0	136	FUNC	<unknown>	HIDDEN	3
__libc_enable_asynccancel	.symtab	0x40c158	220	FUNC	<unknown>	HIDDEN	3
__libc_errno	.symtab	0x0	4	TLS	<unknown>	HIDDEN	7
__libc_fcntl	.symtab	0x40617c	268	FUNC	<unknown>	DEFAULT	3
__libc_fork	.symtab	0x40b250	988	FUNC	<unknown>	DEFAULT	3
__libc_h_errno	.symtab	0x4	4	TLS	<unknown>	HIDDEN	7
__libc_nanosleep	.symtab	0x40cbbc	200	FUNC	<unknown>	DEFAULT	3
__libc_open	.symtab	0x40bd0c	192	FUNC	<unknown>	DEFAULT	3
__libc_read	.symtab	0x40bf0c	192	FUNC	<unknown>	DEFAULT	3
__libc_recv	.symtab	0x408b2c	240	FUNC	<unknown>	DEFAULT	3
__libc_select	.symtab	0x4064c0	260	FUNC	<unknown>	DEFAULT	3
__libc_send	.symtab	0x408c5c	240	FUNC	<unknown>	DEFAULT	3
__libc_setup_tls	.symtab	0x4113d8	660	FUNC	<unknown>	DEFAULT	3
__libc_sigaction	.symtab	0x40c930	28	FUNC	<unknown>	DEFAULT	3
__libc_stack_end	.symtab	0x42f5e0	4	OBJECT	<unknown>	DEFAULT	16
__libc_waitpid	.symtab	0x40c00c	192	FUNC	<unknown>	DEFAULT	3
__libc_write	.symtab	0x40be0c	192	FUNC	<unknown>	DEFAULT	3
__linkin_atfork	.symtab	0x40b630	80	FUNC	<unknown>	HIDDEN	3
__lll_lock_wait_private	.symtab	0x40bb60	120	FUNC	<unknown>	HIDDEN	3
__local_nameserver	.symtab	0x4191d0	16	OBJECT	<unknown>	HIDDEN	5
__malloc_consolidate	.symtab	0x409bf4	520	FUNC	<unknown>	HIDDEN	3
__malloc_largebin_index	.symtab	0x408f70	140	FUNC	<unknown>	DEFAULT	3
__malloc_lock	.symtab	0x42a690	24	OBJECT	<unknown>	DEFAULT	12
__malloc_state	.symtab	0x431c00	888	OBJECT	<unknown>	DEFAULT	16
__malloc_trim	.symtab	0x409ad0	292	FUNC	<unknown>	DEFAULT	3
__nameserver	.symtab	0x42ae24	4	OBJECT	<unknown>	HIDDEN	15
__nameservers	.symtab	0x42ae28	4	OBJECT	<unknown>	HIDDEN	15
__nptl_deallocate_tsd	.symtab	0x0	0	FUNC	<unknown>	DEFAULT	SHN_UNDEF
__nptl_nthreads	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__open	.symtab	0x40bd0c	192	FUNC	<unknown>	DEFAULT	3
__open_etc_hosts	.symtab	0x414d30	32	FUNC	<unknown>	HIDDEN	3
__open_nameservers	.symtab	0x413ab0	1636	FUNC	<unknown>	HIDDEN	3
__open_nocancel	.symtab	0x40bce4	40	FUNC	<unknown>	DEFAULT	3
__pagesize	.symtab	0x42f5e8	4	OBJECT	<unknown>	DEFAULT	16
__preinit_array_end	.symtab	0x42a044	0	NOTYPE	<unknown>	HIDDEN	7
__preinit_array_start	.symtab	0x42a044	0	NOTYPE	<unknown>	HIDDEN	7
__progname	.symtab	0x42a7b4	4	OBJECT	<unknown>	DEFAULT	12
__progname_full	.symtab	0x42a7b8	4	OBJECT	<unknown>	DEFAULT	12
__pthread_initialize_minimal	.symtab	0x41166c	28	FUNC	<unknown>	DEFAULT	3
__pthread_mutex_init	.symtab	0x40c248	8	FUNC	<unknown>	DEFAULT	3
__pthread_mutex_lock	.symtab	0x40c240	8	FUNC	<unknown>	DEFAULT	3
__pthread_mutex_trylock	.symtab	0x40c240	8	FUNC	<unknown>	DEFAULT	3
__pthread_mutex_unlock	.symtab	0x40c240	8	FUNC	<unknown>	DEFAULT	3
__pthread_return_0	.symtab	0x40c240	8	FUNC	<unknown>	DEFAULT	3
__pthread_unwind	.symtab	0x0	0	FUNC	<unknown>	DEFAULT	SHN_UNDEF
__read	.symtab	0x40bf0c	192	FUNC	<unknown>	DEFAULT	3
__read_etc_hosts_r	.symtab	0x414d50	720	FUNC	<unknown>	HIDDEN	3
__read_nocancel	.symtab	0x40bee4	40	FUNC	<unknown>	DEFAULT	3
__register_atfork	.symtab	0x40b680	452	FUNC	<unknown>	DEFAULT	3
__register_frame_info	.symtab	0x0	0	FUNC	<unknown>	DEFAULT	SHN_UNDEF
__res_sync	.symtab	0x42ae1c	4	OBJECT	<unknown>	HIDDEN	15
__resolv_attempts	.symtab	0x42a8f1	1	OBJECT	<unknown>	HIDDEN	12
__resolv_lock	.symtab	0x431b80	24	OBJECT	<unknown>	DEFAULT	16
__resolv_timeout	.symtab	0x42a8f0	1	OBJECT	<unknown>	HIDDEN	12
__rtld_fini	.symtab	0x42f5f0	4	OBJECT	<unknown>	HIDDEN	16
__searchdomain	.symtab	0x42ae20	4	OBJECT	<unknown>	HIDDEN	15
__searchdomains	.symtab	0x42ae2c	4	OBJECT	<unknown>	HIDDEN	15
__sigaddset	.symtab	0x408f08	44	FUNC	<unknown>	DEFAULT	3
__sigdelset	.symtab	0x408f34	48	FUNC	<unknown>	DEFAULT	3
__sigismember	.symtab	0x408ee0	40	FUNC	<unknown>	DEFAULT	3
__sigjmp_save	.symtab	0x414640	96	FUNC	<unknown>	HIDDEN	3
__sigsetjmp	.symtab	0x40c970	36	FUNC	<unknown>	DEFAULT	3
__sigsetjmp_aux	.symtab	0x4117a0	128	FUNC	<unknown>	DEFAULT	3
__start	.symtab	0x4002d0	100	FUNC	<unknown>	DEFAULT	3
__stdin	.symtab	0x42a7ec	4	OBJECT	<unknown>	DEFAULT	12
__stdio_READ	.symtab	0x411f00	144	FUNC	<unknown>	HIDDEN	3
__stdio_WRITE	.symtab	0x411f90	344	FUNC	<unknown>	HIDDEN	3
__stdio_adjust_position	.symtab	0x4120f0	256	FUNC	<unknown>	HIDDEN	3
__stdio_fwrite	.symtab	0x40e230	472	FUNC	<unknown>	HIDDEN	3
__stdio_rfill	.symtab	0x4121f0	88	FUNC	<unknown>	HIDDEN	3
__stdio_seek	.symtab	0x412330	112	FUNC	<unknown>	HIDDEN	3
__stdio_trans2r_o	.symtab	0x412250	220	FUNC	<unknown>	HIDDEN	3
__stdio_trans2w_o	.symtab	0x40e670	304	FUNC	<unknown>	HIDDEN	3
__stdio_wcommit	.symtab	0x40e7a0	100	FUNC	<unknown>	HIDDEN	3
__stdout	.symtab	0x42a7f0	4	OBJECT	<unknown>	DEFAULT	12
__sys_connect	.symtab	0x408930	60	FUNC	<unknown>	DEFAULT	3
__sys_recv	.symtab	0x408af0	60	FUNC	<unknown>	DEFAULT	3
__sys_send	.symtab	0x408c20	60	FUNC	<unknown>	DEFAULT	3
__syscall_error	.symtab	0x40c9a0	92	FUNC	<unknown>	DEFAULT	3
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_nanosleep	.symtab	0x40cb80	60	FUNC	<unknown>	DEFAULT	3
__syscall_poll	.symtab	0x414760	60	FUNC	<unknown>	DEFAULT	3
__syscall_rt_sigaction	.symtab	0x40ca00	60	FUNC	<unknown>	DEFAULT	3
__syscall_rt_sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_select	.symtab	0x406460	96	FUNC	<unknown>	DEFAULT	3
__tls_get_addr	.symtab	0x4113b8	32	FUNC	<unknown>	DEFAULT	3
__uClibc_fini	.symtab	0x40c280	204	FUNC	<unknown>	DEFAULT	3
__uClibc_init	.symtab	0x40c3d4	120	FUNC	<unknown>	DEFAULT	3
__uClibc_main	.symtab	0x40c44c	1132	FUNC	<unknown>	DEFAULT	3
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x42a7b0	4	OBJECT	<unknown>	HIDDEN	12
__waitpid	.symtab	0x40c00c	192	FUNC	<unknown>	DEFAULT	3
__waitpid_nocancel	.symtab	0x40bfe4	40	FUNC	<unknown>	DEFAULT	3
__write	.symtab	0x40be0c	192	FUNC	<unknown>	DEFAULT	3
__write_nocancel	.symtab	0x40bde4	40	FUNC	<unknown>	DEFAULT	3
__xpg_strerror_r	.symtab	0x408490	380	FUNC	<unknown>	DEFAULT	3
__xpg_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__xstat32_conv	.symtab	0x411a08	220	FUNC	<unknown>	HIDDEN	3
__xstat64_conv	.symtab	0x411910	248	FUNC	<unknown>	HIDDEN	3
_adjust_pos.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_bss_custom_printf_spec	.symtab	0x42ee70	10	OBJECT	<unknown>	DEFAULT	16
_charpad	.symtab	0x406800	156	FUNC	<unknown>	DEFAULT	3
_cs_funcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_custom_printf_arginfo	.symtab	0x431ba0	40	OBJECT	<unknown>	HIDDEN	16
_custom_printf_handler	.symtab	0x431bc8	40	OBJECT	<unknown>	HIDDEN	16
_custom_printf_spec	.symtab	0x42a680	4	OBJECT	<unknown>	HIDDEN	12
_dl_aux_init	.symtab	0x411690	40	FUNC	<unknown>	DEFAULT	3
_dl_init_static_tls	.symtab	0x42a8d0	4	OBJECT	<unknown>	DEFAULT	12
_dl_nothread_init_static_tls	.symtab	0x4116b8	148	FUNC	<unknown>	HIDDEN	3
_dl_phdr	.symtab	0x42ae14	4	OBJECT	<unknown>	DEFAULT	15
_dl_phnum	.symtab	0x42ae18	4	OBJECT	<unknown>	DEFAULT	15
_dl_tls_dtv_gaps	.symtab	0x42ae08	1	OBJECT	<unknown>	DEFAULT	15
_dl_tls_dtv_slotinfo_list	.symtab	0x42ae04	4	OBJECT	<unknown>	DEFAULT	15
_dl_tls_generation	.symtab	0x42ae0c	4	OBJECT	<unknown>	DEFAULT	15
_dl_tls_max_dtv_idx	.symtab	0x42adfc	4	OBJECT	<unknown>	DEFAULT	15
_dl_tls_setup	.symtab	0x411354	100	FUNC	<unknown>	DEFAULT	3
_dl_tls_static_align	.symtab	0x42adf8	4	OBJECT	<unknown>	DEFAULT	15
_dl_tls_static_nelem	.symtab	0x42ae10	4	OBJECT	<unknown>	DEFAULT	15
_dl_tls_static_size	.symtab	0x42ae00	4	OBJECT	<unknown>	DEFAULT	15
_dl_tls_static_used	.symtab	0x42adf4	4	OBJECT	<unknown>	DEFAULT	15
_edata	.symtab	0x42ade4	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x431f78	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_exit	.symtab	0x406290	76	FUNC	<unknown>	DEFAULT	3
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fbss	.symtab	0x42ade4	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_fdata	.symtab	0x42a530	0	NOTYPE	<unknown>	DEFAULT	12
_fini	.symtab	0x4151d0	28	FUNC	<unknown>	DEFAULT	4
_fixed_buffers	.symtab	0x42f620	8192	OBJECT	<unknown>	DEFAULT	16
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow	.symtab	0x40689c	232	FUNC	<unknown>	DEFAULT	3
_fpmaxtostr	.symtab	0x40ea40	2156	FUNC	<unknown>	HIDDEN	3
_fpmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ftext	.symtab	0x400180	0	NOTYPE	<unknown>	DEFAULT	3
_fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_gp	.symtab	0x4328f0	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_gp_disp	.symtab	0x0	0	OBJECT	<unknown>	DEFAULT	SHN_UNDEF
_init	.symtab	0x4000ec	28	FUNC	<unknown>	DEFAULT	2
_load_inttype	.symtab	0x40e810	136	FUNC	<unknown>	HIDDEN	3
_load_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_init	.symtab	0x407220	248	FUNC	<unknown>	HIDDEN	3
_ppfs_init.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec	.symtab	0x40762c	1684	FUNC	<unknown>	HIDDEN	3
_ppfs_parsespec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs	.symtab	0x407320	100	FUNC	<unknown>	HIDDEN	3
_ppfs_prepargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs	.symtab	0x407390	548	FUNC	<unknown>	HIDDEN	3
_ppfs_setargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size	.symtab	0x4075c0	108	FUNC	<unknown>	DEFAULT	3
_pthread_cleanup_pop_restore	.symtab	0x40c25c	36	FUNC	<unknown>	DEFAULT	3
_pthread_cleanup_push_defer	.symtab	0x40c250	12	FUNC	<unknown>	DEFAULT	3
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_setjmp	.symtab	0x40c950	28	FUNC	<unknown>	DEFAULT	3
_sigintr	.symtab	0x431bf0	16	OBJECT	<unknown>	HIDDEN	16
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x40dda0	1168	FUNC	<unknown>	HIDDEN	3
_stdio_init	.symtab	0x40e410	184	FUNC	<unknown>	HIDDEN	3
_stdio_openlist	.symtab	0x42a7f4	4	OBJECT	<unknown>	DEFAULT	12
_stdio_openlist_add_lock	.symtab	0x42f600	12	OBJECT	<unknown>	DEFAULT	16
_stdio_openlist_dec_use	.symtab	0x40f570	648	FUNC	<unknown>	HIDDEN	3
_stdio_openlist_del_count	.symtab	0x42f61c	4	OBJECT	<unknown>	DEFAULT	16
_stdio_openlist_del_lock	.symtab	0x42f60c	12	OBJECT	<unknown>	DEFAULT	16
_stdio_openlist_use_count	.symtab	0x42f618	4	OBJECT	<unknown>	DEFAULT	16
_stdio_streams	.symtab	0x42a7f8	204	OBJECT	<unknown>	DEFAULT	12
_stdio_term	.symtab	0x40e4c8	416	FUNC	<unknown>	HIDDEN	3
_stdio_user_locking	.symtab	0x42a7d0	4	OBJECT	<unknown>	DEFAULT	12
_stdlib_strto_l	.symtab	0x40aa50	488	FUNC	<unknown>	HIDDEN	3
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_store_inttype	.symtab	0x40e8a0	68	FUNC	<unknown>	HIDDEN	3
_store_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_string_syserrmsgs	.symtab	0x417d30	2934	OBJECT	<unknown>	HIDDEN	5
_string_syserrmsgs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr	.symtab	0x40e8f0	332	FUNC	<unknown>	HIDDEN	3
_uintmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal	.symtab	0x406984	2204	FUNC	<unknown>	HIDDEN	3
_vfprintf_internal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0x40a0f0	408	FUNC	<unknown>	DEFAULT	3
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
atoi	.symtab	0x40aa10	28	FUNC	<unknown>	DEFAULT	3
atol	.symtab	0x40aa10	28	FUNC	<unknown>	DEFAULT	3
atol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bcopy	.symtab	0x408610	32	FUNC	<unknown>	DEFAULT	3
bcopy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
been_there_done_that	.symtab	0x42f070	4	OBJECT	<unknown>	DEFAULT	16
bot.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
brk	.symtab	0x411750	80	FUNC	<unknown>	DEFAULT	3
brk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bsd_signal	.symtab	0x408df0	228	FUNC	<unknown>	DEFAULT	3
buf.4511	.symtab	0x42ee90	16	OBJECT	<unknown>	DEFAULT	16
buf.6560	.symtab	0x42eea0	440	OBJECT	<unknown>	DEFAULT	16
bzero	.symtab	0x408630	28	FUNC	<unknown>	DEFAULT	3
bzero.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
c	.symtab	0x42a554	4	OBJECT	<unknown>	DEFAULT	12
calloc	.symtab	0x410d20	344	FUNC	<unknown>	DEFAULT	3
calloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
chdir	.symtab	0x4062e0	56	FUNC	<unknown>	DEFAULT	3
chdir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0x40bc1c	176	FUNC	<unknown>	DEFAULT	3
closedir	.symtab	0x40cdf0	292	FUNC	<unknown>	DEFAULT	3
closedir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
closenameservers.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
commServer	.symtab	0x42a560	4	OBJECT	<unknown>	DEFAULT	12
completed.4786	.symtab	0x42ae30	1	OBJECT	<unknown>	DEFAULT	16
connect	.symtab	0x40896c	220	FUNC	<unknown>	DEFAULT	3
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
connectTimeout	.symtab	0x401e10	828	FUNC	<unknown>	DEFAULT	3
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
currentServer	.symtab	0x42a550	4	OBJECT	<unknown>	DEFAULT	12
data_start	.symtab	0x42a540	0	OBJECT	<unknown>	DEFAULT	12
decoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dns	.symtab	0x42a564	4	OBJECT	<unknown>	DEFAULT	12
dnslookup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
environ	.symtab	0x42f5e4	4	OBJECT	<unknown>	DEFAULT	16
errno	.symtab	0x0	4	TLS	<unknown>	DEFAULT	7
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
estridx	.symtab	0x417ca0	126	OBJECT	<unknown>	DEFAULT	5
exit	.symtab	0x40ac40	240	FUNC	<unknown>	DEFAULT	3
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exp10_table	.symtab	0x4190a8	72	OBJECT	<unknown>	DEFAULT	5
fclose	.symtab	0x40da50	804	FUNC	<unknown>	DEFAULT	3
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0x40617c	268	FUNC	<unknown>	DEFAULT	3
fd_to_DIR	.symtab	0x40cf20	276	FUNC	<unknown>	DEFAULT	3
fdgets	.symtab	0x4006f0	292	FUNC	<unknown>	DEFAULT	3
fdopendir	.symtab	0x40d124	228	FUNC	<unknown>	DEFAULT	3
fflush_unlocked	.symtab	0x40f7f8	940	FUNC	<unknown>	DEFAULT	3
fflush_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc	.symtab	0x40f2b0	372	FUNC	<unknown>	DEFAULT	3
fgetc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked	.symtab	0x40fbb0	388	FUNC	<unknown>	DEFAULT	3
fgetc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets	.symtab	0x40f430	320	FUNC	<unknown>	DEFAULT	3
fgets.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked	.symtab	0x40fd40	276	FUNC	<unknown>	DEFAULT	3
fgets_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fmt	.symtab	0x419090	20	OBJECT	<unknown>	DEFAULT	5
fopen	.symtab	0x40dd80	28	FUNC	<unknown>	DEFAULT	3
fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork	.symtab	0x40b250	988	FUNC	<unknown>	DEFAULT	3
fork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork_handler_pool	.symtab	0x42f094	1348	OBJECT	<unknown>	DEFAULT	16
fputs_unlocked	.symtab	0x407cc0	124	FUNC	<unknown>	DEFAULT	3
fputs_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
frame_dummy	.symtab	0x40023c	0	FUNC	<unknown>	DEFAULT	3
free	.symtab	0x409dfc	660	FUNC	<unknown>	DEFAULT	3
free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseek	.symtab	0x411cb0	68	FUNC	<unknown>	DEFAULT	3
fseeko	.symtab	0x411cb0	68	FUNC	<unknown>	DEFAULT	3
fseeko.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseeko64	.symtab	0x411d00	500	FUNC	<unknown>	DEFAULT	3
fseeko64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fstat	.symtab	0x411820	136	FUNC	<unknown>	DEFAULT	3
fstat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fwrite_unlocked	.symtab	0x407d40	268	FUNC	<unknown>	DEFAULT	3
fwrite_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getArch	.symtab	0x4041cc	56	FUNC	<unknown>	DEFAULT	3
getHost	.symtab	0x401a04	160	FUNC	<unknown>	DEFAULT	3
getOurIP	.symtab	0x400814	904	FUNC	<unknown>	DEFAULT	3
getRandomIP	.symtab	0x400644	172	FUNC	<unknown>	DEFAULT	3
get_hosts_byname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getc	.symtab	0x40f2b0	372	FUNC	<unknown>	DEFAULT	3
getc_unlocked	.symtab	0x40fbb0	388	FUNC	<unknown>	DEFAULT	3
getdents64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getdtablesize	.symtab	0x40ca40	72	FUNC	<unknown>	DEFAULT	3
getdtablesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getegid	.symtab	0x40ca90	16	FUNC	<unknown>	DEFAULT	3
getegid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid	.symtab	0x40caa0	16	FUNC	<unknown>	DEFAULT	3
geteuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid	.symtab	0x40cab0	16	FUNC	<unknown>	DEFAULT	3
getgid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname	.symtab	0x4088a0	28	FUNC	<unknown>	DEFAULT	3
gethostbyname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname2	.symtab	0x4088c0	104	FUNC	<unknown>	DEFAULT	3
gethostbyname2.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname2_r	.symtab	0x410960	948	FUNC	<unknown>	DEFAULT	3
gethostbyname2_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname_r	.symtab	0x414270	968	FUNC	<unknown>	DEFAULT	3
gethostbyname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostname	.symtab	0x4146a0	192	FUNC	<unknown>	DEFAULT	3
gethostname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpagesize	.symtab	0x40cac0	48	FUNC	<unknown>	DEFAULT	3
getpagesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid	.symtab	0x40b850	84	FUNC	<unknown>	DEFAULT	3
getpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getrlimit	.symtab	0x40caf0	60	FUNC	<unknown>	DEFAULT	3
getrlimit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockname	.symtab	0x408a50	60	FUNC	<unknown>	DEFAULT	3
getsockname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt	.symtab	0x408a90	96	FUNC	<unknown>	DEFAULT	3
getsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid	.symtab	0x40cb30	16	FUNC	<unknown>	DEFAULT	3
getuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
h_errno	.symtab	0x4	4	TLS	<unknown>	DEFAULT	7
hlt	.symtab	0x40032c	0	NOTYPE	<unknown>	DEFAULT	3
hoste.6559	.symtab	0x42f058	20	OBJECT	<unknown>	DEFAULT	16
htonl	.symtab	0x4086f8	40	FUNC	<unknown>	DEFAULT	3
htons	.symtab	0x4086e0	24	FUNC	<unknown>	DEFAULT	3
i.4697	.symtab	0x42a558	4	OBJECT	<unknown>	DEFAULT	12
index	.symtab	0x408020	248	FUNC	<unknown>	DEFAULT	3
inet_addr	.symtab	0x408850	72	FUNC	<unknown>	DEFAULT	3
inet_aton	.symtab	0x410840	284	FUNC	<unknown>	DEFAULT	3
inet_aton.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa	.symtab	0x40882c	32	FUNC	<unknown>	DEFAULT	3
inet_ntoa.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa_r	.symtab	0x408760	204	FUNC	<unknown>	DEFAULT	3
inet_ntop	.symtab	0x412acc	852	FUNC	<unknown>	DEFAULT	3
inet_ntop4	.symtab	0x412910	444	FUNC	<unknown>	DEFAULT	3
inet_pton	.symtab	0x412658	696	FUNC	<unknown>	DEFAULT	3
inet_pton4	.symtab	0x412570	232	FUNC	<unknown>	DEFAULT	3
initConnection	.symtab	0x4052ac	592	FUNC	<unknown>	DEFAULT	3
init_rand	.symtab	0x400340	300	FUNC	<unknown>	DEFAULT	3
init_static_tls	.symtab	0x411300	84	FUNC	<unknown>	DEFAULT	3
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initstate	.symtab	0x40a40c	208	FUNC	<unknown>	DEFAULT	3
initstate_r	.symtab	0x40a7cc	300	FUNC	<unknown>	DEFAULT	3
ioctl	.symtab	0x406320	248	FUNC	<unknown>	DEFAULT	3
ioctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isatty	.symtab	0x410750	60	FUNC	<unknown>	DEFAULT	3
isatty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isspace	.symtab	0x406620	44	FUNC	<unknown>	DEFAULT	3
isspace.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill	.symtab	0x406420	56	FUNC	<unknown>	DEFAULT	3
kill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
last_id.6617	.symtab	0x42a8e0	2	OBJECT	<unknown>	DEFAULT	12
last_ns_num.6616	.symtab	0x431b70	4	OBJECT	<unknown>	DEFAULT	16
libc-cancellation.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc-lowlevellock.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc-tls.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
listFork	.symtab	0x40214c	664	FUNC	<unknown>	DEFAULT	3
llseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lseek64	.symtab	0x414950	136	FUNC	<unknown>	DEFAULT	3
macAddress	.symtab	0x42ae60	6	OBJECT	<unknown>	DEFAULT	16
main	.symtab	0x4054fc	3080	FUNC	<unknown>	DEFAULT	3
mainCommSock	.symtab	0x42ae50	4	OBJECT	<unknown>	DEFAULT	16
malloc	.symtab	0x408ffc	2764	FUNC	<unknown>	DEFAULT	3
malloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
malloc_trim	.symtab	0x40a090	84	FUNC	<unknown>	DEFAULT	3
memchr	.symtab	0x40fe60	260	FUNC	<unknown>	DEFAULT	3
memchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memcpy	.symtab	0x407e50	308	FUNC	<unknown>	DEFAULT	3
memmove	.symtab	0x40ff70	824	FUNC	<unknown>	DEFAULT	3
memmove.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mempcpy	.symtab	0x4123a0	76	FUNC	<unknown>	DEFAULT	3
mempcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memrchr	.symtab	0x4102b0	260	FUNC	<unknown>	DEFAULT	3
memrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset	.symtab	0x407f90	144	FUNC	<unknown>	DEFAULT	3
mmap	.symtab	0x40c8c0	112	FUNC	<unknown>	DEFAULT	3
mmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mremap	.symtab	0x4118b0	96	FUNC	<unknown>	DEFAULT	3
mremap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
munmap	.symtab	0x40cb40	60	FUNC	<unknown>	DEFAULT	3
munmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mylock	.symtab	0x42a6b0	24	OBJECT	<unknown>	DEFAULT	12
mylock	.symtab	0x42a6d0	24	OBJECT	<unknown>	DEFAULT	12
nanosleep	.symtab	0x40cbbc	200	FUNC	<unknown>	DEFAULT	3
nanosleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
next_start.1303	.symtab	0x42ee80	4	OBJECT	<unknown>	DEFAULT	16
nprocessors_onln	.symtab	0x40ad30	508	FUNC	<unknown>	DEFAULT	3
ntohl	.symtab	0x408738	40	FUNC	<unknown>	DEFAULT	3
ntohl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ntohs	.symtab	0x408720	24	FUNC	<unknown>	DEFAULT	3
ntop.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
numpids	.symtab	0x42ae58	8	OBJECT	<unknown>	DEFAULT	16
object.4798	.symtab	0x42ae34	24	OBJECT	<unknown>	DEFAULT	16
open	.symtab	0x40bd0c	192	FUNC	<unknown>	DEFAULT	3
opendir	.symtab	0x40d034	240	FUNC	<unknown>	DEFAULT	3
opendir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
opennameservers.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ourIP	.symtab	0x42ade4	4	OBJECT	<unknown>	DEFAULT	15
ovhl7	.symtab	0x402f38	4756	FUNC	<unknown>	DEFAULT	3
p.4784	.symtab	0x42a530	0	OBJECT	<unknown>	DEFAULT	12
parse_config.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
pids	.symtab	0x42ade8	4	OBJECT	<unknown>	DEFAULT	15
poll	.symtab	0x41479c	220	FUNC	<unknown>	DEFAULT	3
poll.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prefix.6318	.symtab	0x417bf0	12	OBJECT	<unknown>	DEFAULT	5
print	.symtab	0x4012f8	1460	FUNC	<unknown>	DEFAULT	3
printchar	.symtab	0x400d68	184	FUNC	<unknown>	DEFAULT	3
printi	.symtab	0x40105c	668	FUNC	<unknown>	DEFAULT	3
prints	.symtab	0x400e20	572	FUNC	<unknown>	DEFAULT	3
processCmd	.symtab	0x404204	4264	FUNC	<unknown>	DEFAULT	3
program_invocation_name	.symtab	0x42a7b8	4	OBJECT	<unknown>	DEFAULT	12
program_invocation_short_name	.symtab	0x42a7b4	4	OBJECT	<unknown>	DEFAULT	12
qual_chars.6326	.symtab	0x417c10	20	OBJECT	<unknown>	DEFAULT	5
raise	.symtab	0x40b8b0	264	FUNC	<unknown>	DEFAULT	3
raise.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand	.symtab	0x40a290	28	FUNC	<unknown>	DEFAULT	3
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand_cmwc	.symtab	0x40046c	472	FUNC	<unknown>	DEFAULT	3
random	.symtab	0x40a2b0	164	FUNC	<unknown>	DEFAULT	3
random.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
random_poly_info	.symtab	0x4188b0	40	OBJECT	<unknown>	DEFAULT	5
random_r	.symtab	0x40a590	172	FUNC	<unknown>	DEFAULT	3
random_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
randtbl	.symtab	0x42a6e8	128	OBJECT	<unknown>	DEFAULT	12
rawmemchr	.symtab	0x4123f0	192	FUNC	<unknown>	DEFAULT	3
rawmemchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read	.symtab	0x40bf0c	192	FUNC	<unknown>	DEFAULT	3
read_etc_hosts_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
readdir64	.symtab	0x40d210	272	FUNC	<unknown>	DEFAULT	3
readdir64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
realloc	.symtab	0x410e80	1152	FUNC	<unknown>	DEFAULT	3
realloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recv	.symtab	0x408b2c	240	FUNC	<unknown>	DEFAULT	3
recv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recvLine	.symtab	0x401aa4	876	FUNC	<unknown>	DEFAULT	3
register-atfork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
resolv_conf_mtime.6599	.symtab	0x431b98	4	OBJECT	<unknown>	DEFAULT	16
rindex	.symtab	0x410550	160	FUNC	<unknown>	DEFAULT	3
sbrk	.symtab	0x40cc90	164	FUNC	<unknown>	DEFAULT	3
sbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
select	.symtab	0x4064c0	260	FUNC	<unknown>	DEFAULT	3
select.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
send	.symtab	0x408c5c	240	FUNC	<unknown>	DEFAULT	3
send.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setjmp_aux.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsid	.symtab	0x4065d0	60	FUNC	<unknown>	DEFAULT	3
setsid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsockopt	.symtab	0x408d50	96	FUNC	<unknown>	DEFAULT	3
setsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setstate	.symtab	0x40a354	184	FUNC	<unknown>	DEFAULT	3
setstate_r	.symtab	0x40a8f8	272	FUNC	<unknown>	DEFAULT	3
sigaction	.symtab	0x40c930	28	FUNC	<unknown>	DEFAULT	3
sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigjmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
signal	.symtab	0x408df0	228	FUNC	<unknown>	DEFAULT	3
signal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigprocmask	.symtab	0x40cd40	176	FUNC	<unknown>	DEFAULT	3
sigprocmask.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigsetops.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
skip_and_NUL_space	.symtab	0x413a48	104	FUNC	<unknown>	DEFAULT	3
skip_nospace	.symtab	0x4139e0	104	FUNC	<unknown>	DEFAULT	3
sleep	.symtab	0x40b9c0	404	FUNC	<unknown>	DEFAULT	3
sleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket	.symtab	0x408db0	60	FUNC	<unknown>	DEFAULT	3
socket.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket_connect	.symtab	0x4023e4	444	FUNC	<unknown>	DEFAULT	3
sockprintf	.symtab	0x4018ac	344	FUNC	<unknown>	DEFAULT	3
spec_and_mask.6325	.symtab	0x417c24	16	OBJECT	<unknown>	DEFAULT	5
spec_base.6317	.symtab	0x417bfc	7	OBJECT	<unknown>	DEFAULT	5
spec_chars.6322	.symtab	0x417c80	21	OBJECT	<unknown>	DEFAULT	5
spec_flags.6321	.symtab	0x417c98	8	OBJECT	<unknown>	DEFAULT	5
spec_or_mask.6324	.symtab	0x417c34	16	OBJECT	<unknown>	DEFAULT	5
spec_ranges.6323	.symtab	0x417c44	9	OBJECT	<unknown>	DEFAULT	5
sprintf	.symtab	0x4066b0	80	FUNC	<unknown>	DEFAULT	3
sprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
srand	.symtab	0x40a4dc	172	FUNC	<unknown>	DEFAULT	3
srandom	.symtab	0x40a4dc	172	FUNC	<unknown>	DEFAULT	3
srandom_r	.symtab	0x40a63c	400	FUNC	<unknown>	DEFAULT	3
stat	.symtab	0x414880	136	FUNC	<unknown>	DEFAULT	3
stat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
static_dtv	.symtab	0x431620	512	OBJECT	<unknown>	DEFAULT	16
static_map	.symtab	0x431b28	52	OBJECT	<unknown>	DEFAULT	16
static_slotinfo	.symtab	0x431820	776	OBJECT	<unknown>	DEFAULT	16
stderr	.symtab	0x42a7e8	4	OBJECT	<unknown>	DEFAULT	12
stdin	.symtab	0x42a7e0	4	OBJECT	<unknown>	DEFAULT	12
stdout	.symtab	0x42a7e4	4	OBJECT	<unknown>	DEFAULT	12
strcasecmp	.symtab	0x408650	108	FUNC	<unknown>	DEFAULT	3
strcasecmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchr	.symtab	0x408020	248	FUNC	<unknown>	DEFAULT	3
strchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchrnul	.symtab	0x4103c0	248	FUNC	<unknown>	DEFAULT	3
strchrnul.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcmp	.symtab	0x408120	44	FUNC	<unknown>	DEFAULT	3
strcmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcoll	.symtab	0x408120	44	FUNC	<unknown>	DEFAULT	3
strcpy	.symtab	0x408150	36	FUNC	<unknown>	DEFAULT	3
strcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcspn	.symtab	0x4104c0	144	FUNC	<unknown>	DEFAULT	3
strcspn.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strdup	.symtab	0x4149e0	140	FUNC	<unknown>	DEFAULT	3
strdup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strerror_r	.symtab	0x408490	380	FUNC	<unknown>	DEFAULT	3
strlen	.symtab	0x408180	184	FUNC	<unknown>	DEFAULT	3
strlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strncpy	.symtab	0x4124b0	188	FUNC	<unknown>	DEFAULT	3
strncpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strnlen	.symtab	0x408240	248	FUNC	<unknown>	DEFAULT	3
strnlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strpbrk	.symtab	0x410710	64	FUNC	<unknown>	DEFAULT	3
strpbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strrchr	.symtab	0x410550	160	FUNC	<unknown>	DEFAULT	3
strrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strspn	.symtab	0x4105f0	72	FUNC	<unknown>	DEFAULT	3
strspn.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strstr	.symtab	0x408340	256	FUNC	<unknown>	DEFAULT	3
strstr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok	.symtab	0x4086c0	32	FUNC	<unknown>	DEFAULT	3
strtok.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok_r	.symtab	0x410640	208	FUNC	<unknown>	DEFAULT	3
strtok_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtol	.symtab	0x40aa30	28	FUNC	<unknown>	DEFAULT	3
strtol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sysconf	.symtab	0x40af2c	792	FUNC	<unknown>	DEFAULT	3
sysconf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcgetattr	.symtab	0x410790	176	FUNC	<unknown>	DEFAULT	3
tcgetattr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
time	.symtab	0x406610	16	FUNC	<unknown>	DEFAULT	3
time.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
toupper	.symtab	0x406650	60	FUNC	<unknown>	DEFAULT	3
toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
trim	.symtab	0x400b9c	460	FUNC	<unknown>	DEFAULT	3
type_codes	.symtab	0x417c50	24	OBJECT	<unknown>	DEFAULT	5
type_sizes	.symtab	0x417c68	12	OBJECT	<unknown>	DEFAULT	5
uname	.symtab	0x414910	60	FUNC	<unknown>	DEFAULT	3
uname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
unknown.1327	.symtab	0x417d20	14	OBJECT	<unknown>	DEFAULT	5
unsafe_state	.symtab	0x42a770	20	OBJECT	<unknown>	DEFAULT	12
useragents	.symtab	0x42a568	236	OBJECT	<unknown>	DEFAULT	12
vsnprintf	.symtab	0x406700	248	FUNC	<unknown>	DEFAULT	3
vsnprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
waitpid	.symtab	0x40c00c	192	FUNC	<unknown>	DEFAULT	3
wcrtomb	.symtab	0x40d8e0	108	FUNC	<unknown>	DEFAULT	3
wcrtomb.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsnrtombs	.symtab	0x40d990	192	FUNC	<unknown>	DEFAULT	3
wcsnrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsrtombs	.symtab	0x40d950	64	FUNC	<unknown>	DEFAULT	3
wcsrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
write	.symtab	0x40be0c	192	FUNC	<unknown>	DEFAULT	3
xdigits.4935	.symtab	0x419164	17	OBJECT	<unknown>	DEFAULT	5
xstatconv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
xtdcustom	.symtab	0x402850	536	FUNC	<unknown>	DEFAULT	3

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 22, 2024 15:59:05.024132967 CET	42818	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:05.143815994 CET	4258	42818	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:05.143878937 CET	42818	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:05.145291090 CET	42818	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:05.265671968 CET	4258	42818	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:06.310127020 CET	4258	42818	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:06.310190916 CET	4258	42818	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:06.310286999 CET	42818	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:06.311088085 CET	42818	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:06.311547995 CET	42820	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:06.430649042 CET	4258	42818	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:06.431164026 CET	4258	42820	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:06.431305885 CET	42820	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:06.431385994 CET	42820	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:06.550967932 CET	4258	42820	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:07.601275921 CET	4258	42820	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:07.601322889 CET	4258	42820	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:07.601666927 CET	42820	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:07.601666927 CET	42820	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:07.602127075 CET	42822	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:07.725018978 CET	4258	42820	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:07.725140095 CET	4258	42822	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:07.725236893 CET	42822	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:07.725488901 CET	42822	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:07.844996929 CET	4258	42822	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:08.873251915 CET	4258	42822	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:08.873356104 CET	4258	42822	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:08.873488903 CET	42822	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:08.873488903 CET	42822	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:08.873986959 CET	42824	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:08.994298935 CET	4258	42822	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:08.994777918 CET	4258	42824	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:08.994868040 CET	42824	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:08.995021105 CET	42824	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:09.114613056 CET	4258	42824	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:10.148600101 CET	4258	42824	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:10.148633003 CET	4258	42824	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:10.148907900 CET	42824	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:10.148909092 CET	42824	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:10.149374008 CET	42826	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:10.268923998 CET	4258	42824	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:10.269098997 CET	4258	42826	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:10.269306898 CET	42826	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:10.269306898 CET	42826	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:10.388962984 CET	4258	42826	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:11.424514055 CET	4258	42826	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:11.424611092 CET	4258	42826	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:11.424781084 CET	42826	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:11.424781084 CET	42826	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:11.425256014 CET	42828	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:11.544482946 CET	4258	42826	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:11.544859886 CET	4258	42828	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:11.544950008 CET	42828	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:11.545101881 CET	42828	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:11.667264938 CET	4258	42828	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:12.708368063 CET	4258	42828	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:12.708487034 CET	4258	42828	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:12.708626032 CET	42828	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:12.708626986 CET	42828	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:12.709156036 CET	42830	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:12.828320026 CET	4258	42828	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:12.828684092 CET	4258	42830	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:12.828874111 CET	42830	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:12.828874111 CET	42830	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:12.948575020 CET	4258	42830	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:13.983330965 CET	4258	42830	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:13.983545065 CET	42830	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:13.983556032 CET	4258	42830	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:13.983660936 CET	42830	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:13.984152079 CET	42832	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:14.103722095 CET	4258	42830	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:14.103956938 CET	4258	42832	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:14.104218006 CET	42832	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:14.104218006 CET	42832	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:14.224441051 CET	4258	42832	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:15.251091957 CET	4258	42832	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:15.251173973 CET	4258	42832	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:15.251436949 CET	42832	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:15.251436949 CET	42832	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:15.251905918 CET	42834	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:15.371037960 CET	4258	42832	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:15.371421099 CET	4258	42834	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:15.371495008 CET	42834	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:15.371649981 CET	42834	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:15.492584944 CET	4258	42834	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:16.565906048 CET	4258	42834	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:16.565946102 CET	4258	42834	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:16.566179037 CET	42834	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:16.566241026 CET	42834	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:16.566943884 CET	42836	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:16.685837984 CET	4258	42834	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:16.686507940 CET	4258	42836	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:16.686588049 CET	42836	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:16.686626911 CET	42836	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:16.806348085 CET	4258	42836	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:17.843720913 CET	4258	42836	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:17.843779087 CET	4258	42836	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:17.843933105 CET	42836	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:17.843933105 CET	42836	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:17.844444036 CET	42838	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:17.964406013 CET	4258	42836	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:17.964752913 CET	4258	42838	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:17.964824915 CET	42838	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:17.965012074 CET	42838	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:18.084788084 CET	4258	42838	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:19.111783028 CET	4258	42838	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:19.111875057 CET	4258	42838	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:19.112127066 CET	42838	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:19.112204075 CET	42838	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:19.112970114 CET	42840	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:19.231812954 CET	4258	42838	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:19.232578039 CET	4258	42840	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:19.232990026 CET	42840	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:19.232990026 CET	42840	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:19.352660894 CET	4258	42840	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:20.397547960 CET	4258	42840	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:20.397764921 CET	4258	42840	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:20.397835016 CET	42840	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:20.397902012 CET	42840	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:20.398736000 CET	42842	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:20.517633915 CET	4258	42840	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:20.518640995 CET	4258	42842	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:20.518709898 CET	42842	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:20.518848896 CET	42842	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:20.638468981 CET	4258	42842	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:21.696882010 CET	4258	42842	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:21.697040081 CET	4258	42842	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:21.697113037 CET	42842	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:21.697113037 CET	42842	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:21.697587013 CET	42844	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:21.816809893 CET	4258	42842	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:21.817061901 CET	4258	42844	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:21.817219019 CET	42844	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:21.817219019 CET	42844	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:21.936857939 CET	4258	42844	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:22.971122980 CET	4258	42844	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:22.971221924 CET	4258	42844	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:22.971396923 CET	42844	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:22.971502066 CET	42844	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:22.972489119 CET	42846	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:23.091757059 CET	4258	42844	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:23.092622995 CET	4258	42846	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:23.092811108 CET	42846	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:23.092811108 CET	42846	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:23.212604046 CET	4258	42846	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:24.263093948 CET	4258	42846	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:24.263147116 CET	4258	42846	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:24.263325930 CET	42846	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:24.263325930 CET	42846	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:24.263948917 CET	42848	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:24.383373022 CET	4258	42846	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:24.383469105 CET	4258	42848	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:24.383533955 CET	42848	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:24.383688927 CET	42848	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:24.504261017 CET	4258	42848	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:25.536915064 CET	4258	42848	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:25.537137032 CET	42848	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:25.537225008 CET	4258	42848	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:25.537312031 CET	42848	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:25.538120985 CET	42850	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:25.657088995 CET	4258	42848	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:25.657794952 CET	4258	42850	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:25.657882929 CET	42850	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:25.657907963 CET	42850	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:25.777961969 CET	4258	42850	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:26.811404943 CET	4258	42850	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:26.811585903 CET	4258	42850	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:26.811621904 CET	42850	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:26.811707020 CET	42850	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:26.812262058 CET	42852	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:26.931499004 CET	4258	42850	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:26.931814909 CET	4258	42852	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:26.931927919 CET	42852	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:26.932087898 CET	42852	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:27.051636934 CET	4258	42852	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:28.078727007 CET	4258	42852	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:28.078830957 CET	42852	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:28.078869104 CET	4258	42852	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:28.079040051 CET	42852	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:28.079732895 CET	42854	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:28.198853970 CET	4258	42852	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:28.199429035 CET	4258	42854	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:28.199562073 CET	42854	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:28.199791908 CET	42854	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:28.319309950 CET	4258	42854	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:29.380336046 CET	4258	42854	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:29.380403042 CET	4258	42854	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:29.380455017 CET	42854	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:29.380506039 CET	42854	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:29.381006956 CET	42856	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:29.500056028 CET	4258	42854	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:29.500576973 CET	4258	42856	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:29.500677109 CET	42856	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:29.500729084 CET	42856	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:29.620429993 CET	4258	42856	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:30.647042036 CET	4258	42856	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:30.647106886 CET	4258	42856	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:30.647187948 CET	42856	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:30.647270918 CET	42856	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:30.647815943 CET	42858	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:30.767024994 CET	4258	42856	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:30.767337084 CET	4258	42858	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:30.767422915 CET	42858	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:30.767518044 CET	42858	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:30.887089968 CET	4258	42858	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:31.999922037 CET	4258	42858	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:31.999970913 CET	4258	42858	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:32.000056028 CET	42858	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:32.000138044 CET	42858	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:32.000564098 CET	42860	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:32.120249987 CET	4258	42858	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:32.120286942 CET	4258	42860	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:32.120378971 CET	42860	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:32.120409966 CET	42860	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:32.240183115 CET	4258	42860	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:33.346446991 CET	4258	42860	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:33.346565008 CET	42860	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:33.346642971 CET	4258	42860	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:33.346781969 CET	42860	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:33.347369909 CET	42862	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:33.466325045 CET	4258	42860	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:33.467020035 CET	4258	42862	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:33.467104912 CET	42862	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:33.467159986 CET	42862	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:33.586931944 CET	4258	42862	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:34.722249031 CET	4258	42862	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:34.722397089 CET	42862	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:34.722851038 CET	4258	42862	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:34.722939014 CET	42862	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:34.723408937 CET	42864	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:34.842720985 CET	4258	42862	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:34.842928886 CET	4258	42864	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:34.843103886 CET	42864	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:34.843149900 CET	42864	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:34.962958097 CET	4258	42864	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:36.188266039 CET	4258	42864	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:36.188313007 CET	4258	42864	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:36.188595057 CET	42864	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:36.188751936 CET	42864	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:36.189409018 CET	42866	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:36.308599949 CET	4258	42864	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:36.309005976 CET	4258	42866	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:36.309117079 CET	42866	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:36.309238911 CET	42866	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:36.428802967 CET	4258	42866	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:40.593164921 CET	4258	42866	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:40.593224049 CET	4258	42866	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:40.593334913 CET	42866	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:40.593410015 CET	42866	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:40.594017029 CET	42868	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:40.713965893 CET	4258	42866	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:40.714353085 CET	4258	42868	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:40.714484930 CET	42868	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:40.714529037 CET	42868	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:40.834095955 CET	4258	42868	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:41.892430067 CET	4258	42868	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:41.892477036 CET	4258	42868	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:41.892790079 CET	42868	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:41.893029928 CET	42868	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:41.893867970 CET	42870	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:42.012603045 CET	4258	42868	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:42.013444901 CET	4258	42870	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:42.013550997 CET	42870	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:42.013824940 CET	42870	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:42.133460999 CET	4258	42870	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:43.261151075 CET	4258	42870	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:43.261308908 CET	4258	42870	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:43.261359930 CET	42870	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:43.261420012 CET	42870	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:43.262027025 CET	42872	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:43.380942106 CET	4258	42870	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:43.381613970 CET	4258	42872	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:43.381788015 CET	42872	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:43.381855011 CET	42872	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:43.501441002 CET	4258	42872	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:44.604365110 CET	4258	42872	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:44.604444027 CET	4258	42872	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:44.604587078 CET	42872	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:44.604691029 CET	42872	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:44.605159998 CET	42874	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:44.724351883 CET	4258	42872	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:44.724798918 CET	4258	42874	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:44.724895000 CET	42874	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:44.724977016 CET	42874	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:44.844578028 CET	4258	42874	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:46.033468962 CET	4258	42874	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:46.033539057 CET	4258	42874	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:46.033725977 CET	42874	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:46.033797979 CET	42874	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:46.034512997 CET	42876	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:46.154299974 CET	4258	42874	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:46.154556036 CET	4258	42876	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:46.154752016 CET	42876	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:46.154886007 CET	42876	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:46.275346041 CET	4258	42876	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:47.470410109 CET	4258	42876	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:47.470460892 CET	4258	42876	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:47.470534086 CET	42876	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:47.470623016 CET	42876	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:47.471235991 CET	42878	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:47.590202093 CET	4258	42876	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:47.590785980 CET	4258	42878	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:47.590993881 CET	42878	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:47.590995073 CET	42878	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:47.710766077 CET	4258	42878	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:57.835922956 CET	4258	42878	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:57.835988045 CET	4258	42878	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:57.836065054 CET	42878	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:57.836214066 CET	42878	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:57.836890936 CET	42880	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:57.955765009 CET	4258	42878	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:57.956490993 CET	4258	42880	185.216.71.152	192.168.2.15
Dec 22, 2024 15:59:57.956552029 CET	42880	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:57.956806898 CET	42880	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 15:59:58.076452017 CET	4258	42880	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:02.138648033 CET	4258	42880	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:02.139064074 CET	42880	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:02.139209986 CET	4258	42880	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:02.139374971 CET	42880	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:02.139975071 CET	42882	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:02.259102106 CET	4258	42880	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:02.259799004 CET	4258	42882	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:02.259860992 CET	42882	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:02.259903908 CET	42882	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:02.380192041 CET	4258	42882	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:03.484004021 CET	4258	42882	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:03.484105110 CET	4258	42882	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:03.484198093 CET	42882	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:03.484397888 CET	42882	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:03.485054970 CET	42884	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:03.604192019 CET	4258	42882	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:03.604676008 CET	4258	42884	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:03.604883909 CET	42884	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:03.604928970 CET	42884	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:03.725298882 CET	4258	42884	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:04.770023108 CET	4258	42884	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:04.770071030 CET	4258	42884	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:04.770265102 CET	42884	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:04.770265102 CET	42884	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:04.770895958 CET	42886	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:04.890645981 CET	4258	42884	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:04.890813112 CET	4258	42886	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:04.891001940 CET	42886	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:04.891002893 CET	42886	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:05.011729956 CET	4258	42886	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:06.132195950 CET	4258	42886	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:06.132250071 CET	4258	42886	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:06.132549047 CET	42886	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:06.132549047 CET	42886	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:06.133172989 CET	42888	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:06.252849102 CET	4258	42886	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:06.253288984 CET	4258	42888	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:06.253411055 CET	42888	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:06.253473043 CET	42888	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:06.374020100 CET	4258	42888	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:07.488948107 CET	4258	42888	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:07.489082098 CET	42888	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:07.489146948 CET	4258	42888	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:07.489217997 CET	42888	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:07.489767075 CET	42890	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:07.608948946 CET	4258	42888	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:07.609476089 CET	4258	42890	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:07.609540939 CET	42890	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:07.609586954 CET	42890	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:07.729362965 CET	4258	42890	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:08.786293983 CET	4258	42890	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:08.786417007 CET	42890	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:08.786602974 CET	4258	42890	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:08.786676884 CET	42890	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:08.787385941 CET	42892	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:08.906307936 CET	4258	42890	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:08.906961918 CET	4258	42892	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:08.907119036 CET	42892	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:08.907119989 CET	42892	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:09.026987076 CET	4258	42892	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:10.064690113 CET	4258	42892	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:10.064748049 CET	4258	42892	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:10.064865112 CET	42892	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:10.064946890 CET	42892	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:10.065500021 CET	42894	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:10.184669971 CET	4258	42892	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:10.185108900 CET	4258	42894	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:10.185215950 CET	42894	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:10.185288906 CET	42894	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:10.305048943 CET	4258	42894	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:11.341862917 CET	4258	42894	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:11.341892004 CET	4258	42894	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:11.341991901 CET	42894	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:11.342052937 CET	42894	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:11.342698097 CET	42896	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:11.461905956 CET	4258	42894	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:11.462348938 CET	4258	42896	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:11.462538958 CET	42896	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:11.462539911 CET	42896	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:11.582510948 CET	4258	42896	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:12.633343935 CET	4258	42896	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:12.633569956 CET	42896	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:12.633599043 CET	4258	42896	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:12.633709908 CET	42896	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:12.634196997 CET	42898	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:12.754324913 CET	4258	42896	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:12.754532099 CET	4258	42898	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:12.754710913 CET	42898	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:12.754712105 CET	42898	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:12.874424934 CET	4258	42898	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:13.933501005 CET	4258	42898	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:13.933645964 CET	4258	42898	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:13.933854103 CET	42898	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:13.933854103 CET	42898	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:13.934163094 CET	42900	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:14.053841114 CET	4258	42898	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:14.053864002 CET	4258	42900	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:14.053934097 CET	42900	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:14.053968906 CET	42900	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:14.174235106 CET	4258	42900	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:15.231550932 CET	4258	42900	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:15.231662035 CET	4258	42900	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:15.231738091 CET	42900	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:15.231868029 CET	42900	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:15.232611895 CET	42902	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:15.352346897 CET	4258	42900	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:15.352493048 CET	4258	42902	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:15.352576017 CET	42902	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:15.352669001 CET	42902	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:15.472395897 CET	4258	42902	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:16.500099897 CET	4258	42902	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:16.500147104 CET	4258	42902	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:16.500250101 CET	42902	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:16.500292063 CET	42902	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:16.500893116 CET	42904	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:16.623097897 CET	4258	42902	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:16.623240948 CET	4258	42904	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:16.623434067 CET	42904	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:16.623435020 CET	42904	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:16.743571997 CET	4258	42904	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:17.788675070 CET	4258	42904	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:17.788723946 CET	4258	42904	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:17.789117098 CET	42904	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:17.789118052 CET	42904	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:17.789783955 CET	42906	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:17.909091949 CET	4258	42904	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:17.909673929 CET	4258	42906	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:17.909779072 CET	42906	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:17.909869909 CET	42906	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:18.029723883 CET	4258	42906	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:19.064855099 CET	4258	42906	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:19.064954996 CET	4258	42906	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:19.065025091 CET	42906	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:19.065133095 CET	42906	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:19.065537930 CET	42908	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:19.185425997 CET	4258	42906	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:19.185476065 CET	4258	42908	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:19.185606003 CET	42908	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:19.185664892 CET	42908	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:19.305793047 CET	4258	42908	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:20.332967043 CET	4258	42908	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:20.333024025 CET	4258	42908	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:20.333117962 CET	42908	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:20.333429098 CET	42908	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:20.334214926 CET	42910	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:20.453449011 CET	4258	42908	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:20.454493046 CET	4258	42910	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:20.454732895 CET	42910	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:20.454828978 CET	42910	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:20.574673891 CET	4258	42910	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:21.621344090 CET	4258	42910	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:21.621375084 CET	4258	42910	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:21.621489048 CET	42910	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:21.621764898 CET	42910	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:21.622680902 CET	42912	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:21.741553068 CET	4258	42910	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:21.742505074 CET	4258	42912	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:21.742584944 CET	42912	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:21.742717981 CET	42912	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:21.862487078 CET	4258	42912	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:22.889108896 CET	4258	42912	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:22.889302969 CET	42912	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:22.889415979 CET	4258	42912	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:22.889648914 CET	42912	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:22.890223026 CET	42914	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:23.009342909 CET	4258	42912	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:23.009747982 CET	4258	42914	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:23.009927034 CET	42914	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:23.009927034 CET	42914	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:23.129836082 CET	4258	42914	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:24.168118000 CET	4258	42914	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:24.168139935 CET	4258	42914	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:24.168392897 CET	42914	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:24.168730021 CET	42914	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:24.169171095 CET	42916	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:24.288477898 CET	4258	42914	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:24.288711071 CET	4258	42916	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:24.288825035 CET	42916	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:24.288949966 CET	42916	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:24.408564091 CET	4258	42916	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:25.437329054 CET	4258	42916	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:25.437386036 CET	4258	42916	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:25.437614918 CET	42916	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:25.437743902 CET	42916	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:25.438358068 CET	42918	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:25.557596922 CET	4258	42916	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:25.557851076 CET	4258	42918	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:25.558063984 CET	42918	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:25.558187962 CET	42918	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:25.677823067 CET	4258	42918	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:26.704579115 CET	4258	42918	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:26.704658985 CET	4258	42918	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:26.704853058 CET	42918	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:26.705038071 CET	42918	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:26.705754042 CET	42920	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:26.824745893 CET	4258	42918	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:26.825469971 CET	4258	42920	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:26.825890064 CET	42920	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:26.825891018 CET	42920	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:26.945988894 CET	4258	42920	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:27.979902029 CET	4258	42920	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:27.980046034 CET	4258	42920	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:27.980447054 CET	42920	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:27.980448008 CET	42920	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:27.980981112 CET	42922	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:28.100836992 CET	4258	42920	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:28.100891113 CET	4258	42922	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:28.101294994 CET	42922	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:28.101351976 CET	42922	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:28.222064972 CET	4258	42922	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:29.266335011 CET	4258	42922	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:29.266473055 CET	42922	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:29.266575098 CET	4258	42922	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:29.266768932 CET	42922	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:29.267137051 CET	42924	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:29.386729956 CET	4258	42922	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:29.386780024 CET	4258	42924	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:29.386857033 CET	42924	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:29.386904955 CET	42924	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:29.506835938 CET	4258	42924	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:30.563482046 CET	4258	42924	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:30.563534021 CET	4258	42924	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:30.563782930 CET	42924	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:30.563782930 CET	42924	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:30.564238071 CET	42926	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:30.683991909 CET	4258	42924	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:30.684072971 CET	4258	42926	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:30.684303045 CET	42926	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:30.684303045 CET	42926	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:30.804034948 CET	4258	42926	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:31.854788065 CET	4258	42926	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:31.854835987 CET	4258	42926	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:31.855006933 CET	42926	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:31.855195045 CET	42926	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:31.855967045 CET	42928	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:31.976174116 CET	4258	42926	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:31.976854086 CET	4258	42928	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:31.976972103 CET	42928	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:31.977021933 CET	42928	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:32.096757889 CET	4258	42928	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:33.227052927 CET	4258	42928	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:33.227150917 CET	4258	42928	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:33.227220058 CET	42928	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:33.227360964 CET	42928	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:33.228112936 CET	42930	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:33.350629091 CET	4258	42928	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:33.350651979 CET	4258	42930	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:33.350749969 CET	42930	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:33.350903988 CET	42930	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:33.470777988 CET	4258	42930	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:34.589777946 CET	4258	42930	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:34.589829922 CET	4258	42930	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:34.589957952 CET	42930	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:34.590027094 CET	42930	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:34.590873957 CET	42932	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:34.709865093 CET	4258	42930	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:34.710750103 CET	4258	42932	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:34.711024046 CET	42932	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:34.711024046 CET	42932	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:34.831089973 CET	4258	42932	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:35.904090881 CET	4258	42932	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:35.904146910 CET	4258	42932	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:35.904216051 CET	42932	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:35.904288054 CET	42932	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:35.904877901 CET	42934	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:36.024732113 CET	4258	42932	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:36.024938107 CET	4258	42934	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:36.025096893 CET	42934	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:36.025254965 CET	42934	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:36.145351887 CET	4258	42934	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:37.207230091 CET	4258	42934	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:37.207258940 CET	4258	42934	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:37.207540989 CET	42934	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:37.207705975 CET	42934	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:37.208354950 CET	42936	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:37.327462912 CET	4258	42934	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:37.328187943 CET	4258	42936	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:37.328325987 CET	42936	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:37.328376055 CET	42936	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:37.449187994 CET	4258	42936	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:38.490015984 CET	4258	42936	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:38.490065098 CET	4258	42936	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:38.490339041 CET	42936	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:38.490479946 CET	42936	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:38.491225958 CET	42938	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:38.610290051 CET	4258	42936	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:38.610943079 CET	4258	42938	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:38.611320019 CET	42938	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:38.611521006 CET	42938	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:38.731430054 CET	4258	42938	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:39.774719000 CET	4258	42938	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:39.774746895 CET	4258	42938	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:39.774849892 CET	42938	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:39.775046110 CET	42938	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:39.775732040 CET	42940	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:39.894968987 CET	4258	42938	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:39.895275116 CET	4258	42940	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:39.895545006 CET	42940	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:39.895545006 CET	42940	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:40.015496016 CET	4258	42940	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:41.077837944 CET	4258	42940	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:41.078006029 CET	42940	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:41.078113079 CET	4258	42940	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:41.078176022 CET	42940	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:41.078707933 CET	42942	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:41.198281050 CET	4258	42940	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:41.198529005 CET	4258	42942	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:41.198647022 CET	42942	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:41.198693991 CET	42942	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:41.318661928 CET	4258	42942	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:42.395898104 CET	4258	42942	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:42.395931959 CET	4258	42942	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:42.396023035 CET	42942	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:42.396080017 CET	42942	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:42.396547079 CET	42944	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:42.515636921 CET	4258	42942	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:42.516128063 CET	4258	42944	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:42.516282082 CET	42944	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:42.516325951 CET	42944	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:42.637847900 CET	4258	42944	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:43.715806007 CET	4258	42944	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:43.715826988 CET	4258	42944	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:43.715961933 CET	42944	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:43.716192961 CET	42944	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:43.717401028 CET	42946	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:43.836123943 CET	4258	42944	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:43.837245941 CET	4258	42946	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:43.837416887 CET	42946	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:43.837634087 CET	42946	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:43.957740068 CET	4258	42946	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:45.103388071 CET	4258	42946	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:45.103513002 CET	4258	42946	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:45.103590965 CET	42946	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:45.103701115 CET	42946	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:45.104353905 CET	42948	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:45.223390102 CET	4258	42946	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:45.223984003 CET	4258	42948	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:45.224107981 CET	42948	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:45.224188089 CET	42948	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:45.344170094 CET	4258	42948	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:46.614058018 CET	4258	42948	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:46.614537954 CET	42948	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:46.615423918 CET	42950	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:46.734683037 CET	4258	42948	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:46.735369921 CET	4258	42950	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:46.735627890 CET	42950	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:46.735627890 CET	42950	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:46.855982065 CET	4258	42950	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:47.906090975 CET	4258	42950	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:47.906121969 CET	4258	42950	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:47.906626940 CET	42950	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:47.906627893 CET	42950	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:47.907430887 CET	42952	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:48.026484013 CET	4258	42950	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:48.027101040 CET	4258	42952	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:48.027411938 CET	42952	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:48.027471066 CET	42952	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:48.148049116 CET	4258	42952	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:49.277596951 CET	4258	42952	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:49.277651072 CET	4258	42952	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:49.277780056 CET	42952	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:49.277920008 CET	42952	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:49.278651953 CET	42954	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:49.397480965 CET	4258	42952	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:49.398531914 CET	4258	42954	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:49.398663044 CET	42954	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:49.398710966 CET	42954	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:49.519591093 CET	4258	42954	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:50.637875080 CET	4258	42954	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:50.637928009 CET	4258	42954	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:50.638164043 CET	42954	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:50.638164043 CET	42954	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:50.638638973 CET	42956	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:50.762670994 CET	4258	42954	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:50.762718916 CET	4258	42956	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:50.763201952 CET	42956	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:50.763201952 CET	42956	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:50.884941101 CET	4258	42956	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:51.961771011 CET	4258	42956	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:51.961800098 CET	4258	42956	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:51.962165117 CET	42956	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:51.962165117 CET	42956	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:51.962593079 CET	42958	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:52.083065987 CET	4258	42956	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:52.083367109 CET	4258	42958	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:52.083481073 CET	42958	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:52.083481073 CET	42958	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:52.204525948 CET	4258	42958	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:53.261837006 CET	4258	42958	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:53.261861086 CET	4258	42958	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:53.261979103 CET	42958	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:53.262042046 CET	42958	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:53.262605906 CET	42960	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:53.381736994 CET	4258	42958	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:53.382198095 CET	4258	42960	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:53.382488966 CET	42960	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:53.382538080 CET	42960	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:53.502417088 CET	4258	42960	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:57.551598072 CET	4258	42960	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:57.551625967 CET	4258	42960	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:57.551841974 CET	42960	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:57.551841974 CET	42960	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:57.552314043 CET	42962	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:57.671896935 CET	4258	42960	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:57.672244072 CET	4258	42962	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:57.672441006 CET	42962	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:57.672441006 CET	42962	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:57.792130947 CET	4258	42962	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:59.051688910 CET	4258	42962	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:59.052263021 CET	42962	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:59.052922964 CET	42964	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:59.172353983 CET	4258	42962	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:59.172646046 CET	4258	42964	185.216.71.152	192.168.2.15
Dec 22, 2024 16:00:59.172980070 CET	42964	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:59.173111916 CET	42964	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:00:59.293060064 CET	4258	42964	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:00.329325914 CET	4258	42964	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:00.329432011 CET	42964	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:00.329510927 CET	4258	42964	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:00.329612970 CET	42964	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:00.330338955 CET	42966	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:00.451169968 CET	4258	42964	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:00.451980114 CET	4258	42966	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:00.452095985 CET	42966	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:00.452219009 CET	42966	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:00.571877003 CET	4258	42966	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:04.980446100 CET	4258	42966	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:04.980741024 CET	42966	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:04.981496096 CET	42968	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:05.101492882 CET	4258	42966	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:05.101591110 CET	4258	42968	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:05.101900101 CET	42968	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:05.101900101 CET	42968	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:05.224647045 CET	4258	42968	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:06.316122055 CET	4258	42968	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:06.316181898 CET	4258	42968	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:06.316385984 CET	42968	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:06.316509008 CET	42968	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:06.317316055 CET	42970	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:06.438201904 CET	4258	42968	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:06.438813925 CET	4258	42970	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:06.438908100 CET	42970	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:06.439013958 CET	42970	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:06.559005976 CET	4258	42970	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:07.661000967 CET	4258	42970	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:07.661051035 CET	4258	42970	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:07.661206007 CET	42970	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:07.661310911 CET	42970	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:07.662079096 CET	42972	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:07.780997038 CET	4258	42970	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:07.781781912 CET	4258	42972	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:07.781982899 CET	42972	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:07.782046080 CET	42972	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:07.901725054 CET	4258	42972	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:09.038722992 CET	4258	42972	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:09.038738012 CET	4258	42972	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:09.038974047 CET	42972	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:09.039069891 CET	42972	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:09.039828062 CET	42974	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:09.159163952 CET	4258	42972	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:09.160167933 CET	4258	42974	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:09.160260916 CET	42974	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:09.160326004 CET	42974	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:09.280030012 CET	4258	42974	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:10.406735897 CET	4258	42974	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:10.406827927 CET	4258	42974	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:10.406864882 CET	42974	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:10.406949997 CET	42974	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:10.407804966 CET	42976	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:10.571139097 CET	4258	42974	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:10.571162939 CET	4258	42976	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:10.571255922 CET	42976	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:10.571352959 CET	42976	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:10.691193104 CET	4258	42976	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:11.850039005 CET	4258	42976	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:11.850220919 CET	4258	42976	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:11.850332975 CET	42976	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:11.850333929 CET	42976	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:11.851056099 CET	42978	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:11.974452972 CET	4258	42976	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:11.975163937 CET	4258	42978	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:11.975409031 CET	42978	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:11.975409985 CET	42978	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:12.096463919 CET	4258	42978	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:13.204464912 CET	4258	42978	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:13.204550982 CET	4258	42978	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:13.204632998 CET	42978	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:13.204751015 CET	42978	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:13.205358028 CET	42980	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:13.324486971 CET	4258	42978	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:13.325141907 CET	4258	42980	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:13.325273037 CET	42980	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:13.325387001 CET	42980	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:13.445255995 CET	4258	42980	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:14.518706083 CET	4258	42980	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:14.518768072 CET	4258	42980	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:14.518790960 CET	42980	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:14.518879890 CET	42980	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:14.519334078 CET	42982	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:14.638884068 CET	4258	42980	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:14.639163017 CET	4258	42982	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:14.639251947 CET	42982	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:14.639338970 CET	42982	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:14.758984089 CET	4258	42982	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:15.989304066 CET	4258	42982	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:15.989738941 CET	42982	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:15.990622997 CET	42984	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:16.109462976 CET	4258	42982	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:16.110666990 CET	4258	42984	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:16.111124992 CET	42984	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:16.111124992 CET	42984	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:16.231869936 CET	4258	42984	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:17.258500099 CET	4258	42984	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:17.258610964 CET	42984	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:17.258618116 CET	4258	42984	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:17.258677006 CET	42984	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:17.259450912 CET	42986	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:17.378405094 CET	4258	42984	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:17.379157066 CET	4258	42986	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:17.379379988 CET	42986	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:17.379451990 CET	42986	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:17.499051094 CET	4258	42986	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:18.536803007 CET	4258	42986	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:18.536946058 CET	4258	42986	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:18.537106037 CET	42986	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:18.537106037 CET	42986	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:18.537687063 CET	42988	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:18.657426119 CET	4258	42986	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:18.657499075 CET	4258	42988	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:18.657676935 CET	42988	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:18.657855034 CET	42988	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:18.778254032 CET	4258	42988	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:19.845664978 CET	4258	42988	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:19.845793962 CET	4258	42988	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:19.845819950 CET	42988	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:19.845932007 CET	42988	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:19.846719980 CET	42990	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:19.965475082 CET	4258	42988	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:19.966259003 CET	4258	42990	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:19.966420889 CET	42990	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:19.966595888 CET	42990	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:20.086497068 CET	4258	42990	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:21.117584944 CET	4258	42990	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:21.117805958 CET	42990	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:21.117913961 CET	4258	42990	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:21.118006945 CET	42990	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:21.118617058 CET	42992	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:21.237773895 CET	4258	42990	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:21.238401890 CET	4258	42992	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:21.238500118 CET	42992	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:21.238583088 CET	42992	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:21.358100891 CET	4258	42992	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:22.415594101 CET	4258	42992	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:22.415694952 CET	4258	42992	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:22.415712118 CET	42992	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:22.415857077 CET	42992	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:22.416737080 CET	42994	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:22.535753965 CET	4258	42992	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:22.536367893 CET	4258	42994	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:22.536443949 CET	42994	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:22.536573887 CET	42994	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:22.656472921 CET	4258	42994	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:23.682218075 CET	4258	42994	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:23.682292938 CET	4258	42994	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:23.682356119 CET	42994	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:23.682435036 CET	42994	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:23.682959080 CET	42996	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:23.803164005 CET	4258	42994	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:23.803262949 CET	4258	42996	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:23.803481102 CET	42996	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:23.803481102 CET	42996	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:23.927587032 CET	4258	42996	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:24.986916065 CET	4258	42996	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:24.986932993 CET	4258	42996	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:24.987358093 CET	42996	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:24.987406015 CET	42996	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:24.988156080 CET	42998	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:25.107377052 CET	4258	42996	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:25.107868910 CET	4258	42998	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:25.107975006 CET	42998	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:25.108081102 CET	42998	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:25.227902889 CET	4258	42998	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:26.284929037 CET	4258	42998	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:26.284951925 CET	4258	42998	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:26.285219908 CET	42998	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:26.285377979 CET	42998	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:26.286093950 CET	43000	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:26.405456066 CET	4258	42998	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:26.406228065 CET	4258	43000	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:26.406321049 CET	43000	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:26.406459093 CET	43000	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:26.526218891 CET	4258	43000	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:27.585629940 CET	4258	43000	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:27.585654020 CET	4258	43000	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:27.585726023 CET	43000	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:27.585877895 CET	43000	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:27.586287022 CET	43002	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:27.707163095 CET	4258	43000	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:27.707633018 CET	4258	43002	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:27.707724094 CET	43002	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:27.707724094 CET	43002	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:27.829262018 CET	4258	43002	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:28.863168001 CET	4258	43002	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:28.863202095 CET	4258	43002	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:28.863334894 CET	43002	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:28.863451958 CET	43002	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:28.864320993 CET	43004	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:28.983208895 CET	4258	43002	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:28.984005928 CET	4258	43004	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:28.984188080 CET	43004	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:28.984189034 CET	43004	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:29.104228020 CET	4258	43004	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:30.132102966 CET	4258	43004	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:30.132153034 CET	4258	43004	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:30.132241011 CET	43004	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:30.132316113 CET	43004	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:30.133066893 CET	43006	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:30.252370119 CET	4258	43004	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:30.253010035 CET	4258	43006	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:30.253185987 CET	43006	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:30.253186941 CET	43006	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:30.373461008 CET	4258	43006	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:31.414084911 CET	4258	43006	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:31.414247036 CET	4258	43006	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:31.414407015 CET	43006	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:31.414407015 CET	43006	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:31.415575981 CET	43008	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:31.534564018 CET	4258	43006	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:31.535496950 CET	4258	43008	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:31.535640001 CET	43008	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:31.535676003 CET	43008	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:31.655433893 CET	4258	43008	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:32.751032114 CET	4258	43008	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:32.751121044 CET	4258	43008	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:32.751208067 CET	43008	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:32.751374960 CET	43008	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:32.752330065 CET	43010	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:32.870955944 CET	4258	43008	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:32.871932030 CET	4258	43010	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:32.872034073 CET	43010	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:32.872147083 CET	43010	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:32.994972944 CET	4258	43010	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:34.021205902 CET	4258	43010	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:34.021224976 CET	4258	43010	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:34.021413088 CET	43010	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:34.021564007 CET	43010	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:34.022488117 CET	43012	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:34.141408920 CET	4258	43010	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:34.142220974 CET	4258	43012	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:34.142474890 CET	43012	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:34.142595053 CET	43012	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:34.262567043 CET	4258	43012	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:35.302803993 CET	4258	43012	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:35.302903891 CET	43012	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:35.303356886 CET	4258	43012	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:35.303414106 CET	43012	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:35.303879023 CET	43014	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:35.422892094 CET	4258	43012	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:35.423701048 CET	4258	43014	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:35.423810959 CET	43014	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:35.423949003 CET	43014	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:35.543720007 CET	4258	43014	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:36.582546949 CET	4258	43014	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:36.582688093 CET	43014	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:36.582935095 CET	4258	43014	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:36.583271980 CET	43014	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:36.583688974 CET	43016	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:36.703263998 CET	4258	43014	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:36.703283072 CET	4258	43016	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:36.703504086 CET	43016	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:36.703541040 CET	43016	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:36.823184013 CET	4258	43016	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:37.856631041 CET	4258	43016	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:37.856652021 CET	4258	43016	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:37.856796026 CET	43016	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:37.856944084 CET	43016	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:37.857877016 CET	43018	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:37.978131056 CET	4258	43016	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:37.978182077 CET	4258	43018	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:37.978413105 CET	43018	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:37.978528976 CET	43018	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:38.098655939 CET	4258	43018	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:39.159647942 CET	4258	43018	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:39.159671068 CET	4258	43018	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:39.159750938 CET	43018	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:39.159833908 CET	43018	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:39.160640955 CET	43020	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:39.279603004 CET	4258	43018	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:39.280239105 CET	4258	43020	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:39.280381918 CET	43020	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:39.280564070 CET	43020	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:39.402858019 CET	4258	43020	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:40.466850042 CET	4258	43020	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:40.466878891 CET	4258	43020	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:40.467130899 CET	43020	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:40.467289925 CET	43020	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:40.468283892 CET	43022	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:40.586915970 CET	4258	43020	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:40.587853909 CET	4258	43022	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:40.587960958 CET	43022	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:40.588089943 CET	43022	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:40.707746983 CET	4258	43022	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:50.875979900 CET	4258	43022	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:50.876004934 CET	4258	43022	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:50.876048088 CET	43022	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:50.876137018 CET	43022	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:50.876976967 CET	43024	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:50.996032953 CET	4258	43022	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:50.997028112 CET	4258	43024	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:50.997108936 CET	43024	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:50.997154951 CET	43024	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:51.116816044 CET	4258	43024	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:52.194025040 CET	4258	43024	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:52.194117069 CET	43024	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:52.194190979 CET	4258	43024	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:52.194314957 CET	43024	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:52.194866896 CET	43026	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:52.313801050 CET	4258	43024	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:52.314347029 CET	4258	43026	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:52.314409971 CET	43026	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:52.314630032 CET	43026	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:52.434297085 CET	4258	43026	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:53.595086098 CET	4258	43026	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:53.595109940 CET	4258	43026	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:53.595216990 CET	43026	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:53.595398903 CET	43026	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:53.595928907 CET	43028	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:53.715758085 CET	4258	43026	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:53.716310024 CET	4258	43028	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:53.716527939 CET	43028	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:53.716592073 CET	43028	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:53.836445093 CET	4258	43028	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:54.917006016 CET	4258	43028	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:54.917043924 CET	4258	43028	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:54.917123079 CET	43028	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:54.917205095 CET	43028	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:54.917634964 CET	43030	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:55.037122011 CET	4258	43028	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:55.037296057 CET	4258	43030	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:55.037484884 CET	43030	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:55.037484884 CET	43030	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:55.157232046 CET	4258	43030	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:56.275041103 CET	4258	43030	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:56.275070906 CET	4258	43030	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:56.275320053 CET	43030	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:56.275320053 CET	43030	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:56.275744915 CET	43032	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:56.395087957 CET	4258	43030	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:56.395333052 CET	4258	43032	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:56.395457029 CET	43032	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:56.395515919 CET	43032	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:56.515288115 CET	4258	43032	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:57.561249018 CET	4258	43032	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:57.561278105 CET	4258	43032	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:57.561470032 CET	43032	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:57.561650991 CET	43032	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:57.562182903 CET	43034	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:57.681696892 CET	4258	43032	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:57.682137966 CET	4258	43034	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:57.682189941 CET	43034	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:57.682394981 CET	43034	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:57.802145004 CET	4258	43034	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:58.841527939 CET	4258	43034	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:58.841581106 CET	4258	43034	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:58.841691017 CET	43034	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:58.841768980 CET	43034	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:58.842385054 CET	43036	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:58.961540937 CET	4258	43034	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:58.962023973 CET	4258	43036	185.216.71.152	192.168.2.15
Dec 22, 2024 16:01:58.962126970 CET	43036	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:58.962176085 CET	43036	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:01:59.081995964 CET	4258	43036	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:00.109734058 CET	4258	43036	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:00.109791040 CET	4258	43036	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:00.109957933 CET	43036	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:00.109957933 CET	43036	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:00.110359907 CET	43038	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:00.230135918 CET	4258	43036	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:00.230159044 CET	4258	43038	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:00.230365038 CET	43038	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:00.230365038 CET	43038	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:00.350435019 CET	4258	43038	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:01.423898935 CET	4258	43038	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:01.423958063 CET	4258	43038	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:01.424145937 CET	43038	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:01.424228907 CET	43038	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:01.424835920 CET	43040	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:01.544279099 CET	4258	43038	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:01.544622898 CET	4258	43040	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:01.544759989 CET	43040	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:01.544802904 CET	43040	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:01.664936066 CET	4258	43040	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:02.832549095 CET	4258	43040	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:02.832578897 CET	4258	43040	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:02.832782030 CET	43040	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:02.832854986 CET	43040	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:02.833348036 CET	43042	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:02.953072071 CET	4258	43040	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:02.953351021 CET	4258	43042	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:02.953521013 CET	43042	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:02.953521013 CET	43042	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:03.073709965 CET	4258	43042	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:04.157376051 CET	4258	43042	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:04.157434940 CET	4258	43042	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:04.157610893 CET	43042	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:04.157675982 CET	43042	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:04.158113003 CET	43044	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:04.279114962 CET	4258	43042	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:04.279247046 CET	4258	43044	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:04.279525995 CET	43044	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:04.279525995 CET	43044	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:04.400429964 CET	4258	43044	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:05.467509985 CET	4258	43044	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:05.467641115 CET	4258	43044	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:05.467966080 CET	43044	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:05.468055964 CET	43044	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:05.468806982 CET	43046	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:05.588262081 CET	4258	43044	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:05.589030027 CET	4258	43046	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:05.589507103 CET	43046	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:05.589508057 CET	43046	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:05.709605932 CET	4258	43046	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:06.735743999 CET	4258	43046	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:06.735794067 CET	4258	43046	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:06.736038923 CET	43046	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:06.736078978 CET	43046	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:06.736651897 CET	43048	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:06.856479883 CET	4258	43046	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:06.856530905 CET	4258	43048	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:06.856720924 CET	43048	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:06.856817961 CET	43048	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:06.976947069 CET	4258	43048	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:08.032754898 CET	4258	43048	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:08.032813072 CET	4258	43048	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:08.032978058 CET	43048	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:08.033154964 CET	43048	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:08.033894062 CET	43050	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:08.153235912 CET	4258	43048	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:08.153672934 CET	4258	43050	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:08.153762102 CET	43050	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:08.153882027 CET	43050	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:08.273746014 CET	4258	43050	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:09.374327898 CET	4258	43050	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:09.374382019 CET	4258	43050	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:09.374444962 CET	43050	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:09.374506950 CET	43050	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:09.375000000 CET	43052	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:09.494523048 CET	4258	43050	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:09.494654894 CET	4258	43052	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:09.494867086 CET	43052	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:09.494867086 CET	43052	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:09.614738941 CET	4258	43052	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:10.693772078 CET	4258	43052	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:10.693820953 CET	4258	43052	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:10.693952084 CET	43052	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:10.693953037 CET	43052	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:10.694456100 CET	43054	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:10.813851118 CET	4258	43052	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:10.814366102 CET	4258	43054	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:10.814696074 CET	43054	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:10.814696074 CET	43054	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:10.934731007 CET	4258	43054	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:11.985430002 CET	4258	43054	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:11.985774994 CET	43054	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:11.986376047 CET	4258	43054	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:11.986562014 CET	43054	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:11.987107038 CET	43056	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:12.108053923 CET	4258	43054	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:12.108289003 CET	4258	43056	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:12.108613968 CET	43056	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:12.108613968 CET	43056	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:12.228257895 CET	4258	43056	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:13.532650948 CET	4258	43056	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:13.533062935 CET	43056	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:13.533698082 CET	43058	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:13.652683020 CET	4258	43056	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:13.653184891 CET	4258	43058	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:13.653331995 CET	43058	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:13.653477907 CET	43058	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:13.774091005 CET	4258	43058	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:15.172590017 CET	4258	43058	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:15.172991037 CET	43058	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:15.173557997 CET	43060	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:15.292711973 CET	4258	43058	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:15.293107033 CET	4258	43060	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:15.293206930 CET	43060	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:15.293258905 CET	43060	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:15.412941933 CET	4258	43060	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:16.440017939 CET	4258	43060	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:16.440090895 CET	4258	43060	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:16.440121889 CET	43060	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:16.440193892 CET	43060	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:16.440584898 CET	43062	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:16.560066938 CET	4258	43060	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:16.560689926 CET	4258	43062	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:16.560751915 CET	43062	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:16.560874939 CET	43062	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:16.680752039 CET	4258	43062	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:17.713196039 CET	4258	43062	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:17.713246107 CET	4258	43062	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:17.713298082 CET	43062	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:17.713452101 CET	43062	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:17.713996887 CET	43064	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:17.834711075 CET	4258	43062	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:17.835076094 CET	4258	43064	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:17.835401058 CET	43064	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:17.835402012 CET	43064	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:17.955297947 CET	4258	43064	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:19.001130104 CET	4258	43064	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:19.001179934 CET	4258	43064	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:19.001413107 CET	43064	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:19.001501083 CET	43064	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:19.002073050 CET	43066	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:19.122364998 CET	4258	43064	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:19.122442007 CET	4258	43066	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:19.122806072 CET	43066	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:19.122806072 CET	43066	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:19.242867947 CET	4258	43066	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:20.359023094 CET	4258	43066	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:20.359085083 CET	4258	43066	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:20.359272957 CET	43066	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:20.359272957 CET	43066	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:20.359642029 CET	43068	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:20.479370117 CET	4258	43066	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:20.479423046 CET	4258	43068	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:20.479522943 CET	43068	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:20.479665041 CET	43068	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:20.599462032 CET	4258	43068	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:21.667325020 CET	4258	43068	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:21.667351961 CET	4258	43068	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:21.667452097 CET	43068	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:21.667761087 CET	43068	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:21.668454885 CET	43070	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:21.787456036 CET	4258	43068	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:21.788238049 CET	4258	43070	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:21.788300991 CET	43070	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:21.788547039 CET	43070	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:21.908936024 CET	4258	43070	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:22.943284988 CET	4258	43070	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:22.943367004 CET	4258	43070	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:22.943402052 CET	43070	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:22.943464994 CET	43070	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:22.944137096 CET	43072	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:23.063401937 CET	4258	43070	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:23.064001083 CET	4258	43072	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:23.064106941 CET	43072	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:23.064193964 CET	43072	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:23.184022903 CET	4258	43072	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:24.240672112 CET	4258	43072	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:24.240742922 CET	4258	43072	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:24.241043091 CET	43072	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:24.241132021 CET	43072	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:24.241859913 CET	43074	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:24.361478090 CET	4258	43072	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:24.362282991 CET	4258	43074	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:24.362426043 CET	43074	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:24.362546921 CET	43074	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:24.482378960 CET	4258	43074	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:25.517015934 CET	4258	43074	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:25.517064095 CET	4258	43074	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:25.517266035 CET	43074	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:25.517266035 CET	43074	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:25.517663002 CET	43076	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:25.637540102 CET	4258	43074	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:25.637588978 CET	4258	43076	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:25.637676954 CET	43076	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:25.637713909 CET	43076	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:25.757570028 CET	4258	43076	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:26.801362038 CET	4258	43076	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:26.801418066 CET	4258	43076	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:26.801476002 CET	43076	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:26.801554918 CET	43076	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:26.802372932 CET	43078	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:26.921452045 CET	4258	43076	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:26.922133923 CET	4258	43078	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:26.922256947 CET	43078	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:26.922401905 CET	43078	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:27.042172909 CET	4258	43078	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:28.100687981 CET	4258	43078	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:28.100801945 CET	43078	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:28.101027012 CET	4258	43078	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:28.101087093 CET	43078	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:28.101844072 CET	43080	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:28.220632076 CET	4258	43078	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:28.221327066 CET	4258	43080	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:28.221482992 CET	43080	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:28.221580982 CET	43080	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:28.341370106 CET	4258	43080	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:29.387778997 CET	4258	43080	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:29.387938976 CET	4258	43080	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:29.388051033 CET	43080	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:29.388150930 CET	43080	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:29.388622999 CET	43082	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:29.507765055 CET	4258	43080	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:29.508440018 CET	4258	43082	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:29.508697987 CET	43082	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:29.508788109 CET	43082	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:29.629769087 CET	4258	43082	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:30.662580013 CET	4258	43082	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:30.662688971 CET	4258	43082	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:30.662906885 CET	43082	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:30.662906885 CET	43082	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:30.663328886 CET	43084	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:30.783708096 CET	4258	43082	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:30.783730984 CET	4258	43084	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:30.783885002 CET	43084	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:30.784048080 CET	43084	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:30.903733969 CET	4258	43084	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:31.960907936 CET	4258	43084	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:31.960963011 CET	4258	43084	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:31.961011887 CET	43084	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:31.961092949 CET	43084	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:31.961740017 CET	43086	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:32.081551075 CET	4258	43084	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:32.081944942 CET	4258	43086	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:32.082003117 CET	43086	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:32.082036018 CET	43086	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:32.201982021 CET	4258	43086	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:33.231739998 CET	4258	43086	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:33.231784105 CET	4258	43086	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:33.231841087 CET	43086	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:33.231913090 CET	43086	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:33.232371092 CET	43088	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:33.351924896 CET	4258	43086	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:33.352085114 CET	4258	43088	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:33.352231979 CET	43088	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:33.352293968 CET	43088	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:33.472220898 CET	4258	43088	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:34.522414923 CET	4258	43088	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:34.522495985 CET	4258	43088	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:34.522525072 CET	43088	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:34.522692919 CET	43088	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:34.523216009 CET	43090	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:34.643234968 CET	4258	43088	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:34.643455029 CET	4258	43090	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:34.643575907 CET	43090	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:34.643690109 CET	43090	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:34.763434887 CET	4258	43090	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:35.798479080 CET	4258	43090	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:35.798502922 CET	4258	43090	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:35.798599958 CET	43090	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:35.798681974 CET	43090	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:35.799237967 CET	43092	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:35.918664932 CET	4258	43090	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:35.919075012 CET	4258	43092	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:35.919346094 CET	43092	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:35.919347048 CET	43092	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:36.039212942 CET	4258	43092	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:37.073273897 CET	4258	43092	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:37.073326111 CET	4258	43092	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:37.073417902 CET	43092	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:37.073504925 CET	43092	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:37.074055910 CET	43094	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:37.193556070 CET	4258	43092	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:37.193869114 CET	4258	43094	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:37.194058895 CET	43094	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:37.194058895 CET	43094	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:37.313872099 CET	4258	43094	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:38.376342058 CET	4258	43094	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:38.376410961 CET	4258	43094	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:38.376692057 CET	43094	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:38.376692057 CET	43094	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:38.377028942 CET	43096	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:38.497116089 CET	4258	43094	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:38.497164965 CET	4258	43096	185.216.71.152	192.168.2.15
Dec 22, 2024 16:02:38.497306108 CET	43096	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:38.497478962 CET	43096	4258	192.168.2.15	185.216.71.152
Dec 22, 2024 16:02:38.617497921 CET	4258	43096	185.216.71.152	192.168.2.15

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 22, 2024 16:01:49.915107965 CET	43026	53	192.168.2.15	8.8.8.8
Dec 22, 2024 16:01:49.915163040 CET	44061	53	192.168.2.15	8.8.8.8
Dec 22, 2024 16:01:50.037817955 CET	53	44061	8.8.8.8	192.168.2.15
Dec 22, 2024 16:01:50.040383101 CET	53	43026	8.8.8.8	192.168.2.15

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 22, 2024 16:01:49.915107965 CET	192.168.2.15	8.8.8.8	0xc7d9	Standard query (0)	daisy.ubuntu.com	A (IP address)	IN (0x0001)	false
Dec 22, 2024 16:01:49.915163040 CET	192.168.2.15	8.8.8.8	0x300b	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 22, 2024 16:01:50.040383101 CET	8.8.8.8	192.168.2.15	0xc7d9	No error (0)	daisy.ubuntu.com		162.213.35.24	A (IP address)	IN (0x0001)	false
Dec 22, 2024 16:01:50.040383101 CET	8.8.8.8	192.168.2.15	0xc7d9	No error (0)	daisy.ubuntu.com		162.213.35.25	A (IP address)	IN (0x0001)	false

System Behavior

Analysis Process: hidakibest.mpsl.elf PID: 5525, Parent PID: 5445

General

Start time (UTC):	14:59:03
Start date (UTC):	22/12/2024
Path:	/tmp/hidakibest.mpsl.elf
Arguments:	/tmp/hidakibest.mpsl.elf
File size:	5773336 bytes
MD5 hash:	0d6f61f82cf2f781c6eb0661071d42d9

Chronological Activities

Analysis Process: hidakibest.mpsl.elf PID: 5527, Parent PID: 5525

General

Start time (UTC):	14:59:03
Start date (UTC):	22/12/2024
Path:	/tmp/hidakibest.mpsl.elf
Arguments:	-
File size:	5773336 bytes
MD5 hash:	0d6f61f82cf2f781c6eb0661071d42d9

Chronological Activities

Analysis Process: hidakibest.mpsl.elf PID: 5529, Parent PID: 5527

General

Start time (UTC):	14:59:03
Start date (UTC):	22/12/2024
Path:	/tmp/hidakibest.mpsl.elf
Arguments:	-
File size:	5773336 bytes
MD5 hash:	0d6f61f82cf2f781c6eb0661071d42d9

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system. Functionality could exist within remote access tools to enable this, but utilities available on the operating system could also be used such as Ping or `net view` using Net .
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Network Traffic: Network Connection Creation, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may obfuscate command and control traffic to make it more difficult to detect. Command and control (C2) communications are hidden (but not necessarily encrypted) in an attempt to make the content more difficult to discover or decipher and to make the communication less conspicuous and hide commands from being seen. This encompasses many methods, such as adding junk data to protocol traffic, using steganography, or impersonating legitimate protocols.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report hidakibest.mpsl.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Threatname: Gafgyt

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

System Behavior

Analysis Process: hidakibest.mpsl.elf PID: 5525, Parent PID: 5445

General

Chronological Activities

Analysis Process: hidakibest.mpsl.elf PID: 5527, Parent PID: 5525

General

Chronological Activities

Analysis Process: hidakibest.mpsl.elf PID: 5529, Parent PID: 5527

General

Chronological Activities

Linux Analysis Report
hidakibest.mpsl.elf