Edit tour

Linux Analysis Report
hidakibest.arm6.elf

Overview

General Information

Sample name:	hidakibest.arm6.elf
Analysis ID:	1579493
MD5:	86e0ecb88b3a5880862e0be8e3ab0fc1
SHA1:	a1fae4ceab4241c5d7bd3c20c32a98d143ffdc24
SHA256:	223081fec38b805a88edf16c10d9dbc961af19af51edf96ae7fe4af15ff23671
Tags:	elfuser-abuse_ch
Infos:

Detection

Gafgyt, Mirai

Score:	92
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Yara detected Gafgyt

Yara detected Mirai

Opens /proc/net/* files useful for finding connected devices and routers

Detected TCP or UDP traffic on non-standard ports

Executes the "rm" command used to delete files or directories

Sample contains strings that are user agent strings indicative of HTTP manipulation

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1579493
Start date and time:	2024-12-22 16:02:46 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 40s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	hidakibest.arm6.elf
Detection:	MAL
Classification:	mal92.spre.troj.linELF@0/0@0/0

Warnings

VT rate limit hit for: 31.172.83.147:4258
VT rate limit hit for: http://fast.no/support/crawler.asp)
VT rate limit hit for: http://feedback.redkolibri.com/
VT rate limit hit for: http://www.billybobbot.com/crawler/)

Runtime Messages

Command:	/tmp/hidakibest.arm6.elf
PID:	6267
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:

Process Tree

system is lnxubuntu20

hidakibest.arm6.elf (PID: 6267, Parent: 6192, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/hidakibest.arm6.elf

hidakibest.arm6.elf New Fork (PID: 6269, Parent: 6267)

hidakibest.arm6.elf New Fork (PID: 6271, Parent: 6269)

dash New Fork (PID: 6282, Parent: 4334)

rm (PID: 6282, Parent: 4334, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.XKxJgvhRCG /tmp/tmp.ikWBHRzfne /tmp/tmp.I8yurdFHPW

dash New Fork (PID: 6283, Parent: 4334)

rm (PID: 6283, Parent: 4334, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.XKxJgvhRCG /tmp/tmp.ikWBHRzfne /tmp/tmp.I8yurdFHPW

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
hidakibest.arm6.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
hidakibest.arm6.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
hidakibest.arm6.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x111b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x111cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x111e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x111f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11208:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1121c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11230:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11244:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11258:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1126c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11280:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11294:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x112a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x112bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x112d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x112e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x112f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1130c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11320:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11334:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11348:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
hidakibest.arm6.elf	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x11168:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64

Memory Dumps

Source	Rule	Description	Author	Strings
6267.1.00007f0ce3f96000.00007f0ce3faa000.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
6267.1.00007f0ce3f96000.00007f0ce3faa000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6267.1.00007f0ce3f96000.00007f0ce3faa000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x111b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x111cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x111e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x111f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11208:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1121c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11230:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11244:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11258:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1126c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11280:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11294:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x112a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x112bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x112d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x112e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x112f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1130c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11320:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11334:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11348:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
6267.1.00007f0ce3f96000.00007f0ce3faa000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x11168:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
6269.1.00007f0ce3f96000.00007f0ce3faa000.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
6269.1.00007f0ce3f96000.00007f0ce3faa000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6269.1.00007f0ce3f96000.00007f0ce3faa000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x111b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x111cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x111e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x111f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11208:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1121c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11230:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11244:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11258:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1126c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11280:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11294:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x112a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x112bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x112d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x112e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x112f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1130c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11320:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11334:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11348:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
6269.1.00007f0ce3f96000.00007f0ce3faa000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x11168:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: hidakibest.arm6.elf PID: 6267	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: hidakibest.arm6.elf PID: 6267	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x14de5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14df9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14e0d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14e21:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14e35:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14e49:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14e5d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14e71:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14e85:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14e99:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14ead:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14ec1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14ed5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14ee9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14efd:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14f11:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14f25:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14f39:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14f4d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14f61:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14f75:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: hidakibest.arm6.elf PID: 6267	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x14d98:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64 0x1520a:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: hidakibest.arm6.elf PID: 6269	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: hidakibest.arm6.elf PID: 6269	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x2f7d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2f91:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2fa5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2fb9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2fcd:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2fe1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2ff5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3009:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x301d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3031:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3045:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3059:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x306d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3081:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3095:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x30a9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x30bd:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x30d1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x30e5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x30f9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x310d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: hidakibest.arm6.elf PID: 6269	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x2f30:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64 0x33a2:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Click to see the 9 entries

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: hidakibest.arm6.elf

Avira: detected

Found malware configuration

Source: hidakibest.arm6.elf

Malware Configuration Extractor: Gafgyt {"C2 url": "31.172.83.147:4258"}

Multi AV Scanner detection for submitted file

Source: hidakibest.arm6.elf	ReversingLabs: Detection: 68%
Source: hidakibest.arm6.elf	Virustotal: Detection: 60%			Perma Link

Spreading

Opens /proc/net/* files useful for finding connected devices and routers

Source: /tmp/hidakibest.arm6.elf (PID: 6267)

Opens: /proc/net/route

Jump to behavior

Source: global traffic

TCP traffic: 192.168.2.23:59428 -> 31.172.83.147:4258

Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147

Source: hidakibest.arm6.elf	String found in binary or memory: http://fast.no/support/crawler.asp)
Source: hidakibest.arm6.elf	String found in binary or memory: http://feedback.redkolibri.com/
Source: hidakibest.arm6.elf	String found in binary or memory: http://www.baidu.com/search/spider.htm)
Source: hidakibest.arm6.elf	String found in binary or memory: http://www.baidu.com/search/spider.html)
Source: hidakibest.arm6.elf	String found in binary or memory: http://www.billybobbot.com/crawler/)

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 39256
Source: unknown	Network traffic detected: HTTP traffic on port 39256 -> 443

System Summary

Malicious sample detected (through community Yara rule)

Source: hidakibest.arm6.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: hidakibest.arm6.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 6267.1.00007f0ce3f96000.00007f0ce3faa000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 6267.1.00007f0ce3f96000.00007f0ce3faa000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 6269.1.00007f0ce3f96000.00007f0ce3faa000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 6269.1.00007f0ce3f96000.00007f0ce3faa000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: hidakibest.arm6.elf PID: 6267, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: hidakibest.arm6.elf PID: 6267, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: hidakibest.arm6.elf PID: 6269, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: hidakibest.arm6.elf PID: 6269, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown

Source: hidakibest.arm6.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: hidakibest.arm6.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 6267.1.00007f0ce3f96000.00007f0ce3faa000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 6267.1.00007f0ce3f96000.00007f0ce3faa000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 6269.1.00007f0ce3f96000.00007f0ce3faa000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 6269.1.00007f0ce3f96000.00007f0ce3faa000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: hidakibest.arm6.elf PID: 6267, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: hidakibest.arm6.elf PID: 6267, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: hidakibest.arm6.elf PID: 6269, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: hidakibest.arm6.elf PID: 6269, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16

Source: classification engine

Classification label: mal92.spre.troj.linELF@0/0@0/0

Source: hidakibest.arm6.elf	ELF static info symbol of initial sample: /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: hidakibest.arm6.elf	ELF static info symbol of initial sample: /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: hidakibest.arm6.elf	ELF static info symbol of initial sample: /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: hidakibest.arm6.elf	ELF static info symbol of initial sample: /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: hidakibest.arm6.elf	ELF static info symbol of initial sample: /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: hidakibest.arm6.elf	ELF static info symbol of initial sample: /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: hidakibest.arm6.elf	ELF static info symbol of initial sample: /home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: hidakibest.arm6.elf	ELF static info symbol of initial sample: libc/string/arm/_memcpy.S
Source: hidakibest.arm6.elf	ELF static info symbol of initial sample: libc/string/arm/bcopy.S
Source: hidakibest.arm6.elf	ELF static info symbol of initial sample: libc/string/arm/bzero.S
Source: hidakibest.arm6.elf	ELF static info symbol of initial sample: libc/string/arm/memcpy.S
Source: hidakibest.arm6.elf	ELF static info symbol of initial sample: libc/string/arm/memmove.S
Source: hidakibest.arm6.elf	ELF static info symbol of initial sample: libc/string/arm/memset.S
Source: hidakibest.arm6.elf	ELF static info symbol of initial sample: libc/string/arm/strcmp.S
Source: hidakibest.arm6.elf	ELF static info symbol of initial sample: libc/string/arm/strlen.S
Source: hidakibest.arm6.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/arm/crt1.S
Source: hidakibest.arm6.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/arm/crti.S
Source: hidakibest.arm6.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/arm/crtn.S
Source: hidakibest.arm6.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/arm/sigrestorer.S

Source: /usr/bin/dash (PID: 6282)	Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.XKxJgvhRCG /tmp/tmp.ikWBHRzfne /tmp/tmp.I8yurdFHPW			Jump to behavior
Source: /usr/bin/dash (PID: 6283)	Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.XKxJgvhRCG /tmp/tmp.ikWBHRzfne /tmp/tmp.I8yurdFHPW			Jump to behavior

Source: /tmp/hidakibest.arm6.elf (PID: 6267)

Queries kernel information via 'uname':

Jump to behavior

Source: hidakibest.arm6.elf, 6267.1.000055c61c59b000.000055c61c6c9000.rw-.sdmp, hidakibest.arm6.elf, 6269.1.000055c61c59b000.000055c61c6c9000.rw-.sdmp	Binary or memory string: U!/etc/qemu-binfmt/arm
Source: hidakibest.arm6.elf, 6267.1.00007fff0f43b000.00007fff0f45c000.rw-.sdmp, hidakibest.arm6.elf, 6269.1.00007fff0f43b000.00007fff0f45c000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-arm/tmp/hidakibest.arm6.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/hidakibest.arm6.elf
Source: hidakibest.arm6.elf, 6267.1.000055c61c59b000.000055c61c6c9000.rw-.sdmp, hidakibest.arm6.elf, 6269.1.000055c61c59b000.000055c61c6c9000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/arm
Source: hidakibest.arm6.elf, 6267.1.00007fff0f43b000.00007fff0f45c000.rw-.sdmp, hidakibest.arm6.elf, 6269.1.00007fff0f43b000.00007fff0f45c000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-arm

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match	File source: hidakibest.arm6.elf, type: SAMPLE
Source: Yara match	File source: 6267.1.00007f0ce3f96000.00007f0ce3faa000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6269.1.00007f0ce3f96000.00007f0ce3faa000.r-x.sdmp, type: MEMORY

Yara detected Mirai

Source: Yara match	File source: hidakibest.arm6.elf, type: SAMPLE
Source: Yara match	File source: 6267.1.00007f0ce3f96000.00007f0ce3faa000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6269.1.00007f0ce3f96000.00007f0ce3faa000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: hidakibest.arm6.elf PID: 6267, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: hidakibest.arm6.elf PID: 6269, type: MEMORYSTR

Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36
Source: Initial sample	User agent string found: Opera/9.80 (X11; Linux i686; Ubuntu/14.10) Presto/2.12.388 Version/12.16
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows; U; Windows NT 6.1; rv:2.2) Gecko/20110201
Source: Initial sample	User agent string found: Opera/9.80 (Windows NT 5.2; U; ru) Presto/2.5.22 Version/10.51
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; AS; rv:11.0) like Gecko
Source: Initial sample	User agent string found: Mozilla/5.0 (Android; Linux armv7l; rv:9.0) Gecko/20111216 Firefox/9.0 Fennec/9.0
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/536.5 (KHTML, like Gecko) Chrome/19.0.1084.56 Safari/536.5
Source: Initial sample	User agent string found: Opera/9.80 (Windows NT 5.1; U; en) Presto/2.10.229 Version/11.60
Source: Initial sample	User agent string found: Mozilla/5.0 (iPad; U; CPU OS 5_1 like Mac OS X) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B367 Safari/531.21.10 UCBrowser/3.4.3.532
Source: Initial sample	User agent string found: Mozilla/5.0 (Nintendo WiiU) AppleWebKit/536.30 (KHTML, like Gecko) NX/3.0.4.2.12 NintendoBrowser/4.3.1.11264.US
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:25.0) Gecko/20100101 Firefox/25.0
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; pl) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; en) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; ja) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; cn) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; fr) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:12.0) Gecko/20100101 Firefox/12.0
Source: Initial sample	User agent string found: Mozilla/5.0 (X11; U; Linux x86_64; de; rv:1.9.2.8) Gecko/20100723 Ubuntu/10.04 (lucid) Firefox/3.6.8
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1; rv:13.0) Gecko/20100101 Firefox/13.0.1
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:11.0) Gecko/20100101 Firefox/11.0
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1
Source: Initial sample	User agent string found: Opera/9.80 (Windows NT 5.1; U; en) Presto/2.10.289 Version/12.01
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1; rv:5.0.1) Gecko/20100101 Firefox/5.0.1
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; rv:5.0) Gecko/20100101 Firefox/5.02
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.0) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.112 Safari/535.1
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36

Remote Access Functionality

Yara detected Gafgyt

Source: Yara match	File source: hidakibest.arm6.elf, type: SAMPLE
Source: Yara match	File source: 6267.1.00007f0ce3f96000.00007f0ce3faa000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6269.1.00007f0ce3f96000.00007f0ce3faa000.r-x.sdmp, type: MEMORY

Yara detected Mirai

Source: Yara match	File source: hidakibest.arm6.elf, type: SAMPLE
Source: Yara match	File source: 6267.1.00007f0ce3f96000.00007f0ce3faa000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6269.1.00007f0ce3f96000.00007f0ce3faa000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: hidakibest.arm6.elf PID: 6267, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: hidakibest.arm6.elf PID: 6269, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	1 File Deletion	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Data Obfuscation	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	1 Remote System Discovery	Remote Desktop Protocol	Data from Removable Media	1 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Standard Port	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Application Layer Protocol	Traffic Duplication	Data Destruction

Malware Configuration

Threatname: Gafgyt

{"C2 url": "31.172.83.147:4258"}

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
hidakibest.arm6.elf	68%	ReversingLabs	Linux.Trojan.Gafgyt
hidakibest.arm6.elf	60%	Virustotal		Browse
hidakibest.arm6.elf	100%	Avira	LINUX/Gafgyt.opnd

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

⊘No contacted domains info

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
31.172.83.147:4258	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://www.baidu.com/search/spider.html)	hidakibest.arm6.elf	false	high
http://www.billybobbot.com/crawler/)	hidakibest.arm6.elf	false	unknown
http://fast.no/support/crawler.asp)	hidakibest.arm6.elf	false	unknown
http://feedback.redkolibri.com/	hidakibest.arm6.elf	false	unknown
http://www.baidu.com/search/spider.htm)	hidakibest.arm6.elf	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
31.172.83.147	unknown	Germany	44066	DE-FIRSTCOLOwwwfirst-colonetDE	true
34.249.145.219	unknown	United States	16509	AMAZON-02US	false
109.202.202.202	unknown	Switzerland	13030	INIT7CH	false
91.189.91.42	unknown	United Kingdom	41231	CANONICAL-ASGB	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
31.172.83.147	boatnet.m68k.elf	Get hash	malicious	Mirai	Browse
	boatnet.ppc.elf	Get hash	malicious	Mirai	Browse
	boatnet.arm.elf	Get hash	malicious	Mirai	Browse
	boatnet.sh4.elf	Get hash	malicious	Mirai	Browse
	boatnet.mips.elf	Get hash	malicious	Mirai	Browse
	boatnet.mpsl.elf	Get hash	malicious	Mirai	Browse
	main_x86.elf	Get hash	malicious	Mirai	Browse
	boatnet.m68k.elf	Get hash	malicious	Mirai	Browse
	boatnet.sh4.elf	Get hash	malicious	Mirai	Browse
	boatnet.ppc.elf	Get hash	malicious	Mirai	Browse
34.249.145.219	main_mips.elf	Get hash	malicious	Mirai	Browse
	powerpc.elf	Get hash	malicious	Mirai	Browse
	main_arm6.elf	Get hash	malicious	Mirai	Browse
	main_x86.elf	Get hash	malicious	Mirai	Browse
	main_m68k.elf	Get hash	malicious	Mirai	Browse
	Space.mips.elf	Get hash	malicious	Mirai	Browse
	hmips.elf	Get hash	malicious	Unknown	Browse
	armv4l.elf	Get hash	malicious	Unknown	Browse
	arm6.nn.elf	Get hash	malicious	Mirai, Okiru	Browse
	x-8.6-.Logicnet.elf	Get hash	malicious	Gafgyt, Mirai	Browse
109.202.202.202	kpLwzBouH4.elf	Get hash	malicious	Unknown	Browse	ch.archive.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_92.0%2bbuild3-0ubuntu0.20.04.1_amd64.deb
91.189.91.42	hidakibest.arm4.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	Space.arm7.elf	Get hash	malicious	Mirai	Browse
	Space.arm.elf	Get hash	malicious	Mirai	Browse
	Space.sh4.elf	Get hash	malicious	Mirai	Browse
	Space.x86.elf	Get hash	malicious	Mirai	Browse
	byte.x86.elf	Get hash	malicious	Mirai, Okiru	Browse
	nn.elf	Get hash	malicious	Nanominer, Xmrig	Browse
	arm6.nn.elf	Get hash	malicious	Mirai, Okiru	Browse
	vlxx.m68k.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse
	vlxx.arm5.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CANONICAL-ASGB	hidakibest.arm4.elf	Get hash	malicious	Gafgyt, Mirai	Browse	91.189.91.42
	Space.arm7.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	Space.arm.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	Space.sh4.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	Space.x86.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	byte.x86.elf	Get hash	malicious	Mirai, Okiru	Browse	91.189.91.42
	nn.elf	Get hash	malicious	Nanominer, Xmrig	Browse	91.189.91.42
	arm6.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	91.189.91.42
	vlxx.m68k.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	91.189.91.42
	vlxx.arm5.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	91.189.91.42
DE-FIRSTCOLOwwwfirst-colonetDE	https://www.tblgroup.com/tbl2/certificados-digitales/	Get hash	malicious	CAPTCHA Scam ClickFix	Browse	185.26.98.68
	boatnet.m68k.elf	Get hash	malicious	Mirai	Browse	31.172.83.147
	boatnet.ppc.elf	Get hash	malicious	Mirai	Browse	31.172.83.147
	boatnet.arm.elf	Get hash	malicious	Mirai	Browse	31.172.83.147
	boatnet.sh4.elf	Get hash	malicious	Mirai	Browse	31.172.83.147
	boatnet.mips.elf	Get hash	malicious	Mirai	Browse	31.172.83.147
	boatnet.mpsl.elf	Get hash	malicious	Mirai	Browse	31.172.83.147
	236236236.elf	Get hash	malicious	Unknown	Browse	91.228.155.204
	main_x86.elf	Get hash	malicious	Mirai	Browse	31.172.83.147
	armv6l.elf	Get hash	malicious	Mirai	Browse	159.102.93.110
INIT7CH	hidakibest.arm4.elf	Get hash	malicious	Gafgyt, Mirai	Browse	109.202.202.202
	Space.arm7.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	Space.arm.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	Space.sh4.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	Space.x86.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	byte.x86.elf	Get hash	malicious	Mirai, Okiru	Browse	109.202.202.202
	nn.elf	Get hash	malicious	Nanominer, Xmrig	Browse	109.202.202.202
	arm6.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	109.202.202.202
	vlxx.m68k.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	109.202.202.202
	vlxx.arm5.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	109.202.202.202
AMAZON-02US	Space.x86.elf	Get hash	malicious	Mirai	Browse	54.171.230.55
	nn.elf	Get hash	malicious	Nanominer, Xmrig	Browse	54.171.230.55
	arm.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	34.252.132.197
	arm6.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	54.171.230.55
	arm5.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	13.236.254.247
	powerpc.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	54.154.131.169
	sparc.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	108.154.170.136
	3.elf	Get hash	malicious	Unknown	Browse	54.97.133.72
	mips.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	18.159.41.41
	x86_32.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	3.35.124.145

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 32-bit LSB executable, ARM, EABI4 version 1 (SYSV), statically linked, with debug_info, not stripped
Entropy (8bit):	6.068724182067988
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	hidakibest.arm6.elf
File size:	115'876 bytes
MD5:	86e0ecb88b3a5880862e0be8e3ab0fc1
SHA1:	a1fae4ceab4241c5d7bd3c20c32a98d143ffdc24
SHA256:	223081fec38b805a88edf16c10d9dbc961af19af51edf96ae7fe4af15ff23671
SHA512:	83747bf98fe12efc20839f419b35ba3c1f5c31d74597708cc8db313101e0d852b3222a538326c9872fc8f9d276a6a03e606c452876bdda30f91b17e214b3a9c5
SSDEEP:	3072:udGs8aNAHiNPHS7fSiq5hulKM7y1myjQUJ1UXpTn:2Gs8aNEiPiq5hulKN1myjQUJ1apTn
TLSH:	65B33B06F5508753C1C3177AB69F561937232BB997CB33126A24BFB42FC17AA0E3A950
File Content Preview:	.ELF..............(.........4....Q......4. ...(........pt4..t...t....................................4...4...............4...4...4......Tj..........Q.td..................................-...L..................G.F.G.F.G.F.G.F G.F(G.F0G.F8G.F@G.FHG.FPG.FXG.

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	ARM
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x81b0
Flags:	0x4000002
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	4
Section Header Offset:	86516
Section Header Size:	40
Number of Section Headers:	24
Header String Table Index:	21

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x80b4	0xb4	0x10	0x0	0x6	AX	0	0	4
.text	PROGBITS	0x80d0	0xd0	0xf468	0x0	0x6	AX	0	0	16
.fini	PROGBITS	0x17538	0xf538	0x10	0x0	0x6	AX	0	0	4
.rodata	PROGBITS	0x17548	0xf548	0x3f14	0x0	0x2	A	0	0	8
.ARM.extab	PROGBITS	0x1b45c	0x1345c	0x18	0x0	0x2	A	0	0	4
.ARM.exidx	ARM_EXIDX	0x1b474	0x13474	0x10	0x0	0x82	AL	2	0	4
.eh_frame	PROGBITS	0x23484	0x13484	0x4	0x0	0x3	WA	0	0	4
.init_array	INIT_ARRAY	0x23488	0x13488	0x4	0x0	0x3	WA	0	0	4
.fini_array	FINI_ARRAY	0x2348c	0x1348c	0x4	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x23490	0x13490	0x4	0x0	0x3	WA	0	0	4
.got	PROGBITS	0x23494	0x13494	0x78	0x4	0x3	WA	0	0	4
.data	PROGBITS	0x2350c	0x1350c	0x364	0x0	0x3	WA	0	0	4
.bss	NOBITS	0x23870	0x13870	0x6668	0x0	0x3	WA	0	0	8
.comment	PROGBITS	0x0	0x13870	0xbc2	0x0	0x0		0	0	1
.debug_aranges	PROGBITS	0x0	0x14438	0xe0	0x0	0x0		0	0	8
.debug_info	PROGBITS	0x0	0x14518	0x4b0	0x0	0x0		0	0	1
.debug_abbrev	PROGBITS	0x0	0x149c8	0x8c	0x0	0x0		0	0	1
.debug_line	PROGBITS	0x0	0x14a54	0x655	0x0	0x0		0	0	1
.debug_frame	PROGBITS	0x0	0x150ac	0x58	0x0	0x0		0	0	4
.ARM.attributes	ARM_ATTRIBUTES	0x0	0x15104	0x10	0x0	0x0		0	0	1
.shstrtab	STRTAB	0x0	0x15114	0xdd	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x155b4	0x47d0	0x10	0x0		23	623	4
.strtab	STRTAB	0x0	0x19d84	0x2720	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
EXIDX	0x13474	0x1b474	0x1b474	0x10	0x10	2.4056	0x4	R	0x4	.ARM.exidx
LOAD	0x0	0x8000	0x8000	0x13484	0x13484	6.2490	0x5	R E	0x8000	.init .text .fini .rodata .ARM.extab .ARM.exidx
LOAD	0x13484	0x23484	0x23484	0x3ec	0x6a54	4.1605	0x6	RW	0x8000	.eh_frame .init_array .fini_array .jcr .got .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x80b4	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x80d0	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x17538	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x17548	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x1b45c	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x1b474	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x23484	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x23488	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x2348c	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x23490	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x23494	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x2350c	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x23870	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	14
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	15
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	16
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	17
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	18
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	19
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	20
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	21
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	22
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	23
$a	.symtab	0x80b4	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x17538	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x80c0	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x17544	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x810c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8150	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x81b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x81ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x82c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8408	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x846c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8804	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9110	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x951c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9938	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9c24	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9d74	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9ec4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa09c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xae20	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xae44	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb7e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb970	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc1a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc2b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc2c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc328	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc33c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc36c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc3a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc3bc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc3fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc430	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc464	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc498	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc4cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc5a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc5d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc60c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc660	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc68c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc6c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc6e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc718	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc734	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc768	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc81c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc884	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc8b8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc98c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc9bc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd17c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd21c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd260	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd410	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd464	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd9d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xda0c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdac0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdb60	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdbc0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdbd0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdbf0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdc00	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdc10	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdd0c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xddd8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xddfc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdeec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdf04	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdf34	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdfa0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe0a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe0c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe140	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe1a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe248	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe270	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe28c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe2f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe32c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe364	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe3a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe3e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe418	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe45c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe494	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe4b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe568	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe5d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xef6c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf40c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf44c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf574	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf58c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf630	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf6e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf7a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf84c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf930	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf9c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfa98	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfb7c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfb9c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfbb8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfd78	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfe30	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfedc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10028	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10600	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x106c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10714	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10780	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10a54	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10abc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10b44	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10b50	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10b5c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10b90	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10bb8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10bcc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10c00	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10c14	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10c28	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10c94	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10ca8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10cd4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10d08	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10d3c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10d70	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10da8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10ea0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10f70	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1101c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x110b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x111a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x111bc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11560	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x115b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x115d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11688	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1183c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1185c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11910	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11c18	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11d58	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11e28	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11e98	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11ec4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12020	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12814	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x128f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x129ac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12b34	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12d40	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12e6c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12f10	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x133a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13490	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13508	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1354c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x135fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x136dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13728	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13778	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1379c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13888	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x138c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x139c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13c60	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13d94	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14148	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14180	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x141cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x141d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1420c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14264	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14494	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x144d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14618	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1463c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1478c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x147e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x148a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x148d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14970	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x149ac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14a68	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14d54	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1511c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15214	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x159fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15a50	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15aa8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15f04	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15f9c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15fe8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x162e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16314	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1638c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x163e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16450	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16460	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16494	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16580	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16634	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16694	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x166c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x168c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x168fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x169a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16aec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16f08	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x173a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x174e4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8144	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2348c	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x819c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x23488	0	NOTYPE	<unknown>	DEFAULT	8
$d	.symtab	0x23510	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x81e0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x23514	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x82bc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x83fc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8468	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x87f0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x910c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9518	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9930	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18c10	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x9c1c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9d70	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9ec0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xa094	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xaa18	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xae40	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb7b4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb964	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc180	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc6e0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc710	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x23614	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x2361c	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0xc72c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc87c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc8b0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc978	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x23658	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x23624	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x1a3b4	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0xd15c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xd40c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xd458	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xd9a4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x23760	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0xddd0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xdee4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xdf2c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xdf98	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe094	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe13c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe240	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe2e8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe328	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe360	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe3a4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe3dc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe414	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe458	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe490	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe560	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xef50	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x23764	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0xf3f0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf444	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf560	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2377c	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0xf614	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf6cc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf78c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf830	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x23794	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x2382c	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0xf928	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf9bc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xfa8c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xfb74	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1afe0	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0xfd70	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xfe10	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x23840	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0xfed8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10004	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x105dc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x106ac	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1070c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10770	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10a14	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x23858	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x10b38	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10bb0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10c8c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x23864	0	NOTYPE	<unknown>	DEFAULT	12
$d	.symtab	0x10e8c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10f68	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11018	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b35c	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x1118c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x29ab8	0	NOTYPE	<unknown>	DEFAULT	13
$d	.symtab	0x111b4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11558	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1181c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11be4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x127f4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1b390	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x128dc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12998	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12b08	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12d1c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12e64	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13488	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x135f4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x136d4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13880	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x139b8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13d7c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1412c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14174	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x141c4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14778	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14d48	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15110	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x159c0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15a48	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15aa0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15ebc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15f84	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x166bc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x168bc	0	NOTYPE	<unknown>	DEFAULT	2
$t	.symtab	0x80d0	0	NOTYPE	<unknown>	DEFAULT	2
/home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/landley/work/ab7/build/temp-armv6l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
C.1.3506	.symtab	0x1b35c	24	OBJECT	<unknown>	DEFAULT	4
C.70.5182	.symtab	0x18c10	104	OBJECT	<unknown>	DEFAULT	4
C.77.5281	.symtab	0x198a4	1128	OBJECT	<unknown>	DEFAULT	4
Laligned	.symtab	0xdb88	0	NOTYPE	<unknown>	DEFAULT	2
Llastword	.symtab	0xdba4	0	NOTYPE	<unknown>	DEFAULT	2
Q	.symtab	0x238a8	16384	OBJECT	<unknown>	DEFAULT	13
Randhex	.symtab	0x9ec4	472	FUNC	<unknown>	DEFAULT	2
SendSTD	.symtab	0x9a64	448	FUNC	<unknown>	DEFAULT	2
UDPRAW	.symtab	0x9d74	336	FUNC	<unknown>	DEFAULT	2
_Exit	.symtab	0xc660	44	FUNC	<unknown>	DEFAULT	2
_GLOBAL_OFFSET_TABLE_	.symtab	0x23494	0	OBJECT	<unknown>	HIDDEN	11
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b	.symtab	0x23614	4	OBJECT	<unknown>	DEFAULT	12
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x19db4	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_tolower	.symtab	0x23864	4	OBJECT	<unknown>	DEFAULT	12
__C_ctype_tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_tolower_data	.symtab	0x1b05a	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_toupper	.symtab	0x2361c	4	OBJECT	<unknown>	DEFAULT	12
__C_ctype_toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_toupper_data	.symtab	0x1a0b4	768	OBJECT	<unknown>	DEFAULT	4
__EH_FRAME_BEGIN__	.symtab	0x23484	0	OBJECT	<unknown>	DEFAULT	7
__FRAME_END__	.symtab	0x23484	0	OBJECT	<unknown>	DEFAULT	7
__GI___C_ctype_b	.symtab	0x23614	4	OBJECT	<unknown>	HIDDEN	12
__GI___C_ctype_tolower	.symtab	0x23864	4	OBJECT	<unknown>	HIDDEN	12
__GI___C_ctype_toupper	.symtab	0x2361c	4	OBJECT	<unknown>	HIDDEN	12
__GI___ctype_b	.symtab	0x23618	4	OBJECT	<unknown>	HIDDEN	12
__GI___ctype_tolower	.symtab	0x23868	4	OBJECT	<unknown>	HIDDEN	12
__GI___ctype_toupper	.symtab	0x23620	4	OBJECT	<unknown>	HIDDEN	12
__GI___errno_location	.symtab	0xc718	28	FUNC	<unknown>	HIDDEN	2
__GI___fcntl_nocancel	.symtab	0xc538	108	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked	.symtab	0x12d40	300	FUNC	<unknown>	HIDDEN	2
__GI___glibc_strerror_r	.symtab	0xdeec	24	FUNC	<unknown>	HIDDEN	2
__GI___h_errno_location	.symtab	0x111a0	28	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl	.symtab	0xc4cc	108	FUNC	<unknown>	HIDDEN	2
__GI___sigaddset	.symtab	0xe58c	36	FUNC	<unknown>	HIDDEN	2
__GI___sigdelset	.symtab	0xe5b0	36	FUNC	<unknown>	HIDDEN	2
__GI___sigismember	.symtab	0xe568	36	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini	.symtab	0x10644	124	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init	.symtab	0x10714	108	FUNC	<unknown>	HIDDEN	2
__GI___xpg_strerror_r	.symtab	0xdfa0	256	FUNC	<unknown>	HIDDEN	2
__GI__exit	.symtab	0xc660	44	FUNC	<unknown>	HIDDEN	2
__GI_abort	.symtab	0xf44c	296	FUNC	<unknown>	HIDDEN	2
__GI_atoi	.symtab	0xfb7c	32	FUNC	<unknown>	HIDDEN	2
__GI_brk	.symtab	0x14180	76	FUNC	<unknown>	HIDDEN	2
__GI_chdir	.symtab	0xc3fc	52	FUNC	<unknown>	HIDDEN	2
__GI_clock_getres	.symtab	0x10bcc	52	FUNC	<unknown>	HIDDEN	2
__GI_close	.symtab	0xc68c	52	FUNC	<unknown>	HIDDEN	2
__GI_closedir	.symtab	0x10da8	248	FUNC	<unknown>	HIDDEN	2
__GI_config_close	.symtab	0x114e4	52	FUNC	<unknown>	HIDDEN	2
__GI_config_open	.symtab	0x11518	72	FUNC	<unknown>	HIDDEN	2
__GI_config_read	.symtab	0x111bc	808	FUNC	<unknown>	HIDDEN	2
__GI_connect	.symtab	0xe2f4	56	FUNC	<unknown>	HIDDEN	2
__GI_errno	.symtab	0x29ab8	4	OBJECT	<unknown>	HIDDEN	13
__GI_exit	.symtab	0xfd78	184	FUNC	<unknown>	HIDDEN	2
__GI_fclose	.symtab	0x11688	436	FUNC	<unknown>	HIDDEN	2
__GI_fcntl	.symtab	0xc4cc	108	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked	.symtab	0x12b34	524	FUNC	<unknown>	HIDDEN	2
__GI_fgetc	.symtab	0x12814	220	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked	.symtab	0x12d40	300	FUNC	<unknown>	HIDDEN	2
__GI_fgets	.symtab	0x128f0	188	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked	.symtab	0x12e6c	160	FUNC	<unknown>	HIDDEN	2
__GI_fopen	.symtab	0x1183c	32	FUNC	<unknown>	HIDDEN	2
__GI_fork	.symtab	0xc36c	52	FUNC	<unknown>	HIDDEN	2
__GI_fputs_unlocked	.symtab	0xd9d4	56	FUNC	<unknown>	HIDDEN	2
__GI_fseek	.symtab	0x14618	36	FUNC	<unknown>	HIDDEN	2
__GI_fseeko64	.symtab	0x1463c	336	FUNC	<unknown>	HIDDEN	2
__GI_fstat	.symtab	0x1420c	88	FUNC	<unknown>	HIDDEN	2
__GI_fwrite_unlocked	.symtab	0xda0c	176	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked	.symtab	0x12d40	300	FUNC	<unknown>	HIDDEN	2
__GI_getdtablesize	.symtab	0x10ca8	44	FUNC	<unknown>	HIDDEN	2
__GI_getegid	.symtab	0x10c00	20	FUNC	<unknown>	HIDDEN	2
__GI_geteuid	.symtab	0x10c14	20	FUNC	<unknown>	HIDDEN	2
__GI_getgid	.symtab	0x10c94	20	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname	.symtab	0xe270	28	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname2	.symtab	0xe28c	104	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname2_r	.symtab	0x139c0	672	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname_r	.symtab	0x15fe8	760	FUNC	<unknown>	HIDDEN	2
__GI_gethostname	.symtab	0x16314	120	FUNC	<unknown>	HIDDEN	2
__GI_getpagesize	.symtab	0x10b90	40	FUNC	<unknown>	HIDDEN	2
__GI_getpid	.symtab	0xc328	20	FUNC	<unknown>	HIDDEN	2
__GI_getrlimit	.symtab	0x141d8	52	FUNC	<unknown>	HIDDEN	2
__GI_getsockname	.symtab	0xe32c	56	FUNC	<unknown>	HIDDEN	2
__GI_gettimeofday	.symtab	0xc498	52	FUNC	<unknown>	HIDDEN	2
__GI_getuid	.symtab	0x10bb8	20	FUNC	<unknown>	HIDDEN	2
__GI_h_errno	.symtab	0x29abc	4	OBJECT	<unknown>	HIDDEN	13
__GI_htonl	.symtab	0xe150	32	FUNC	<unknown>	HIDDEN	2
__GI_htons	.symtab	0xe140	16	FUNC	<unknown>	HIDDEN	2
__GI_inet_addr	.symtab	0xe248	40	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton	.symtab	0x138c8	248	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa	.symtab	0xe22c	28	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa_r	.symtab	0xe1a0	140	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntop	.symtab	0x14e98	644	FUNC	<unknown>	HIDDEN	2
__GI_inet_pton	.symtab	0x14b38	540	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r	.symtab	0xfa98	228	FUNC	<unknown>	HIDDEN	2
__GI_ioctl	.symtab	0xc60c	84	FUNC	<unknown>	HIDDEN	2
__GI_isatty	.symtab	0xe0a0	36	FUNC	<unknown>	HIDDEN	2
__GI_isspace	.symtab	0xc6c0	40	FUNC	<unknown>	HIDDEN	2
__GI_kill	.symtab	0xc464	52	FUNC	<unknown>	HIDDEN	2
__GI_lseek64	.symtab	0x163e4	100	FUNC	<unknown>	HIDDEN	2
__GI_memchr	.symtab	0x133a0	240	FUNC	<unknown>	HIDDEN	2
__GI_memcpy	.symtab	0xdbf0	4	FUNC	<unknown>	HIDDEN	2
__GI_memmove	.symtab	0x16450	4	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy	.symtab	0x13778	36	FUNC	<unknown>	HIDDEN	2
__GI_memrchr	.symtab	0x135fc	224	FUNC	<unknown>	HIDDEN	2
__GI_memset	.symtab	0xdac0	156	FUNC	<unknown>	HIDDEN	2
__GI_mmap	.symtab	0x10a54	104	FUNC	<unknown>	HIDDEN	2
__GI_mremap	.symtab	0x14494	64	FUNC	<unknown>	HIDDEN	2
__GI_munmap	.symtab	0x10cd4	52	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep	.symtab	0x10d08	52	FUNC	<unknown>	HIDDEN	2
__GI_ntohl	.symtab	0xe180	32	FUNC	<unknown>	HIDDEN	2
__GI_ntohs	.symtab	0xe170	16	FUNC	<unknown>	HIDDEN	2
__GI_open	.symtab	0xc2c8	96	FUNC	<unknown>	HIDDEN	2
__GI_opendir	.symtab	0x10f70	172	FUNC	<unknown>	HIDDEN	2
__GI_poll	.symtab	0x162e0	52	FUNC	<unknown>	HIDDEN	2
__GI_raise	.symtab	0xe494	28	FUNC	<unknown>	HIDDEN	2
__GI_random	.symtab	0xf58c	164	FUNC	<unknown>	HIDDEN	2
__GI_random_r	.symtab	0xf930	144	FUNC	<unknown>	HIDDEN	2
__GI_rawmemchr	.symtab	0x1354c	176	FUNC	<unknown>	HIDDEN	2
__GI_read	.symtab	0xc430	52	FUNC	<unknown>	HIDDEN	2
__GI_readdir64	.symtab	0x110b4	236	FUNC	<unknown>	HIDDEN	2
__GI_recv	.symtab	0xe3a8	56	FUNC	<unknown>	HIDDEN	2
__GI_sbrk	.symtab	0x10c28	108	FUNC	<unknown>	HIDDEN	2
__GI_select	.symtab	0xc3bc	64	FUNC	<unknown>	HIDDEN	2
__GI_send	.symtab	0xe3e0	56	FUNC	<unknown>	HIDDEN	2
__GI_setsid	.symtab	0xc5d8	52	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt	.symtab	0xe418	68	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r	.symtab	0xf84c	228	FUNC	<unknown>	HIDDEN	2
__GI_sigaction	.symtab	0x10abc	136	FUNC	<unknown>	HIDDEN	2
__GI_signal	.symtab	0xe4b0	184	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask	.symtab	0x10d70	56	FUNC	<unknown>	HIDDEN	2
__GI_sleep	.symtab	0xfe30	172	FUNC	<unknown>	HIDDEN	2
__GI_socket	.symtab	0xe45c	56	FUNC	<unknown>	HIDDEN	2
__GI_sprintf	.symtab	0xc734	52	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r	.symtab	0xf9c0	216	FUNC	<unknown>	HIDDEN	2
__GI_stat	.symtab	0x1638c	88	FUNC	<unknown>	HIDDEN	2
__GI_strcasecmp	.symtab	0xdf34	108	FUNC	<unknown>	HIDDEN	2
__GI_strchr	.symtab	0xddfc	240	FUNC	<unknown>	HIDDEN	2
__GI_strchrnul	.symtab	0x1379c	236	FUNC	<unknown>	HIDDEN	2
__GI_strcmp	.symtab	0xdbd0	28	FUNC	<unknown>	HIDDEN	2
__GI_strcoll	.symtab	0xdbd0	28	FUNC	<unknown>	HIDDEN	2
__GI_strcpy	.symtab	0xddd8	36	FUNC	<unknown>	HIDDEN	2
__GI_strcspn	.symtab	0x13508	68	FUNC	<unknown>	HIDDEN	2
__GI_strdup	.symtab	0x16460	52	FUNC	<unknown>	HIDDEN	2
__GI_strlen	.symtab	0xdb60	96	FUNC	<unknown>	HIDDEN	2
__GI_strncpy	.symtab	0x149ac	188	FUNC	<unknown>	HIDDEN	2
__GI_strnlen	.symtab	0xdd0c	204	FUNC	<unknown>	HIDDEN	2
__GI_strpbrk	.symtab	0x13888	64	FUNC	<unknown>	HIDDEN	2
__GI_strrchr	.symtab	0x13728	80	FUNC	<unknown>	HIDDEN	2
__GI_strspn	.symtab	0x136dc	76	FUNC	<unknown>	HIDDEN	2
__GI_strstr	.symtab	0xdc10	252	FUNC	<unknown>	HIDDEN	2
__GI_strtok	.symtab	0xdf04	48	FUNC	<unknown>	HIDDEN	2
__GI_strtok_r	.symtab	0x13490	120	FUNC	<unknown>	HIDDEN	2
__GI_strtol	.symtab	0xfb9c	28	FUNC	<unknown>	HIDDEN	2
__GI_sysconf	.symtab	0x10028	1496	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr	.symtab	0xe0c4	124	FUNC	<unknown>	HIDDEN	2
__GI_time	.symtab	0xc33c	48	FUNC	<unknown>	HIDDEN	2
__GI_toupper	.symtab	0xc6e8	48	FUNC	<unknown>	HIDDEN	2
__GI_uname	.symtab	0x168c8	52	FUNC	<unknown>	HIDDEN	2
__GI_vsnprintf	.symtab	0xc768	180	FUNC	<unknown>	HIDDEN	2
__GI_wait4	.symtab	0x10b5c	52	FUNC	<unknown>	HIDDEN	2
__GI_waitpid	.symtab	0xc3a0	28	FUNC	<unknown>	HIDDEN	2
__GI_wcrtomb	.symtab	0x11560	84	FUNC	<unknown>	HIDDEN	2
__GI_wcsnrtombs	.symtab	0x115d8	176	FUNC	<unknown>	HIDDEN	2
__GI_wcsrtombs	.symtab	0x115b4	36	FUNC	<unknown>	HIDDEN	2
__GI_write	.symtab	0xc5a4	52	FUNC	<unknown>	HIDDEN	2
__JCR_END__	.symtab	0x23490	0	OBJECT	<unknown>	DEFAULT	10
__JCR_LIST__	.symtab	0x23490	0	OBJECT	<unknown>	DEFAULT	10
__adddf3	.symtab	0x16af8	784	FUNC	<unknown>	HIDDEN	2
__aeabi_cdcmpeq	.symtab	0x17454	24	FUNC	<unknown>	HIDDEN	2
__aeabi_cdcmple	.symtab	0x17454	24	FUNC	<unknown>	HIDDEN	2
__aeabi_cdrcmple	.symtab	0x17438	52	FUNC	<unknown>	HIDDEN	2
__aeabi_d2uiz	.symtab	0x174e4	84	FUNC	<unknown>	HIDDEN	2
__aeabi_dadd	.symtab	0x16af8	784	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpeq	.symtab	0x1746c	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpge	.symtab	0x174b4	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmpgt	.symtab	0x174cc	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmple	.symtab	0x1749c	24	FUNC	<unknown>	HIDDEN	2
__aeabi_dcmplt	.symtab	0x17484	24	FUNC	<unknown>	HIDDEN	2
__aeabi_ddiv	.symtab	0x17198	524	FUNC	<unknown>	HIDDEN	2
__aeabi_dmul	.symtab	0x16f08	656	FUNC	<unknown>	HIDDEN	2
__aeabi_drsub	.symtab	0x16aec	0	FUNC	<unknown>	HIDDEN	2
__aeabi_dsub	.symtab	0x16af4	788	FUNC	<unknown>	HIDDEN	2
__aeabi_f2d	.symtab	0x16e54	64	FUNC	<unknown>	HIDDEN	2
__aeabi_i2d	.symtab	0x16e2c	40	FUNC	<unknown>	HIDDEN	2
__aeabi_idiv	.symtab	0x169a8	0	FUNC	<unknown>	HIDDEN	2
__aeabi_idivmod	.symtab	0x16ad4	24	FUNC	<unknown>	HIDDEN	2
__aeabi_l2d	.symtab	0x16ea8	96	FUNC	<unknown>	HIDDEN	2
__aeabi_ui2d	.symtab	0x16e08	36	FUNC	<unknown>	HIDDEN	2
__aeabi_uidiv	.symtab	0xc1a0	0	FUNC	<unknown>	HIDDEN	2
__aeabi_uidivmod	.symtab	0xc29c	24	FUNC	<unknown>	HIDDEN	2
__aeabi_ul2d	.symtab	0x16e94	116	FUNC	<unknown>	HIDDEN	2
__aeabi_unwind_cpp_pr0	.symtab	0x141cc	4	FUNC	<unknown>	DEFAULT	2
__aeabi_unwind_cpp_pr1	.symtab	0x141d0	4	FUNC	<unknown>	DEFAULT	2
__aeabi_unwind_cpp_pr2	.symtab	0x141d4	4	FUNC	<unknown>	DEFAULT	2
__app_fini	.symtab	0x29ab0	4	OBJECT	<unknown>	HIDDEN	13
__atexit_lock	.symtab	0x23840	24	OBJECT	<unknown>	DEFAULT	12
__bss_end__	.symtab	0x29ed8	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start	.symtab	0x23870	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start__	.symtab	0x23870	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x106c0	84	FUNC	<unknown>	DEFAULT	2
__close_nameservers	.symtab	0x15f04	152	FUNC	<unknown>	HIDDEN	2
__cmpdf2	.symtab	0x173b4	132	FUNC	<unknown>	HIDDEN	2
__ctype_b	.symtab	0x23618	4	OBJECT	<unknown>	DEFAULT	12
__ctype_tolower	.symtab	0x23868	4	OBJECT	<unknown>	DEFAULT	12
__ctype_toupper	.symtab	0x23620	4	OBJECT	<unknown>	DEFAULT	12
__curbrk	.symtab	0x29ac0	4	OBJECT	<unknown>	HIDDEN	13
__data_start	.symtab	0x2350c	0	NOTYPE	<unknown>	DEFAULT	12
__decode_dotted	.symtab	0x1511c	248	FUNC	<unknown>	HIDDEN	2
__decode_header	.symtab	0x16580	180	FUNC	<unknown>	HIDDEN	2
__default_rt_sa_restorer	.symtab	0x10b54	0	FUNC	<unknown>	DEFAULT	2
__default_sa_restorer	.symtab	0x10b48	0	FUNC	<unknown>	DEFAULT	2
__deregister_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__div0	.symtab	0xc2b4	20	FUNC	<unknown>	HIDDEN	2
__divdf3	.symtab	0x17198	524	FUNC	<unknown>	HIDDEN	2
__divsi3	.symtab	0x169a8	300	FUNC	<unknown>	HIDDEN	2
__dns_lookup	.symtab	0x15214	2024	FUNC	<unknown>	HIDDEN	2
__do_global_dtors_aux	.symtab	0x810c	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux_fini_array_entry	.symtab	0x2348c	0	OBJECT	<unknown>	DEFAULT	9
__dso_handle	.symtab	0x2350c	0	OBJECT	<unknown>	HIDDEN	12
__encode_dotted	.symtab	0x168fc	172	FUNC	<unknown>	HIDDEN	2
__encode_header	.symtab	0x16494	236	FUNC	<unknown>	HIDDEN	2
__encode_question	.symtab	0x16634	96	FUNC	<unknown>	HIDDEN	2
__end__	.symtab	0x29ed8	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__environ	.symtab	0x29aa8	4	OBJECT	<unknown>	DEFAULT	13
__eqdf2	.symtab	0x173b4	132	FUNC	<unknown>	HIDDEN	2
__errno_location	.symtab	0xc718	28	FUNC	<unknown>	DEFAULT	2
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exidx_end	.symtab	0x1b484	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__exidx_start	.symtab	0x1b474	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x29aa0	4	OBJECT	<unknown>	HIDDEN	13
__extendsfdf2	.symtab	0x16e54	64	FUNC	<unknown>	HIDDEN	2
__fcntl_nocancel	.symtab	0xc538	108	FUNC	<unknown>	DEFAULT	2
__fgetc_unlocked	.symtab	0x12d40	300	FUNC	<unknown>	DEFAULT	2
__fini_array_end	.symtab	0x23490	0	NOTYPE	<unknown>	HIDDEN	9
__fini_array_start	.symtab	0x2348c	0	NOTYPE	<unknown>	HIDDEN	9
__fixunsdfsi	.symtab	0x174e4	84	FUNC	<unknown>	HIDDEN	2
__floatdidf	.symtab	0x16ea8	96	FUNC	<unknown>	HIDDEN	2
__floatsidf	.symtab	0x16e2c	40	FUNC	<unknown>	HIDDEN	2
__floatundidf	.symtab	0x16e94	116	FUNC	<unknown>	HIDDEN	2
__floatunsidf	.symtab	0x16e08	36	FUNC	<unknown>	HIDDEN	2
__frame_dummy_init_array_entry	.symtab	0x23488	0	OBJECT	<unknown>	DEFAULT	8
__gedf2	.symtab	0x173a4	148	FUNC	<unknown>	HIDDEN	2
__get_hosts_byname_r	.symtab	0x15f9c	76	FUNC	<unknown>	HIDDEN	2
__getdents64	.symtab	0x144d4	324	FUNC	<unknown>	HIDDEN	2
__getpagesize	.symtab	0x10b90	40	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r	.symtab	0xdeec	24	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__gtdf2	.symtab	0x173a4	148	FUNC	<unknown>	HIDDEN	2
__h_errno_location	.symtab	0x111a0	28	FUNC	<unknown>	DEFAULT	2
__h_errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__init_array_end	.symtab	0x2348c	0	NOTYPE	<unknown>	HIDDEN	8
__init_array_start	.symtab	0x23488	0	NOTYPE	<unknown>	HIDDEN	8
__ledf2	.symtab	0x173ac	140	FUNC	<unknown>	HIDDEN	2
__libc_close	.symtab	0xc68c	52	FUNC	<unknown>	DEFAULT	2
__libc_connect	.symtab	0xe2f4	56	FUNC	<unknown>	DEFAULT	2
__libc_fcntl	.symtab	0xc4cc	108	FUNC	<unknown>	DEFAULT	2
__libc_fork	.symtab	0xc36c	52	FUNC	<unknown>	DEFAULT	2
__libc_lseek64	.symtab	0x163e4	100	FUNC	<unknown>	DEFAULT	2
__libc_nanosleep	.symtab	0x10d08	52	FUNC	<unknown>	DEFAULT	2
__libc_open	.symtab	0xc2c8	96	FUNC	<unknown>	DEFAULT	2
__libc_read	.symtab	0xc430	52	FUNC	<unknown>	DEFAULT	2
__libc_recv	.symtab	0xe3a8	56	FUNC	<unknown>	DEFAULT	2
__libc_select	.symtab	0xc3bc	64	FUNC	<unknown>	DEFAULT	2
__libc_send	.symtab	0xe3e0	56	FUNC	<unknown>	DEFAULT	2
__libc_sigaction	.symtab	0x10abc	136	FUNC	<unknown>	DEFAULT	2
__libc_stack_end	.symtab	0x29aa4	4	OBJECT	<unknown>	DEFAULT	13
__libc_waitpid	.symtab	0xc3a0	28	FUNC	<unknown>	DEFAULT	2
__libc_write	.symtab	0xc5a4	52	FUNC	<unknown>	DEFAULT	2
__local_nameserver	.symtab	0x1b43c	16	OBJECT	<unknown>	HIDDEN	4
__ltdf2	.symtab	0x173ac	140	FUNC	<unknown>	HIDDEN	2
__malloc_consolidate	.symtab	0xf01c	436	FUNC	<unknown>	HIDDEN	2
__malloc_largebin_index	.symtab	0xe5d4	120	FUNC	<unknown>	DEFAULT	2
__malloc_lock	.symtab	0x23764	24	OBJECT	<unknown>	DEFAULT	12
__malloc_state	.symtab	0x29b44	888	OBJECT	<unknown>	DEFAULT	13
__malloc_trim	.symtab	0xef6c	176	FUNC	<unknown>	DEFAULT	2
__muldf3	.symtab	0x16f08	656	FUNC	<unknown>	HIDDEN	2
__nameserver	.symtab	0x29ecc	4	OBJECT	<unknown>	HIDDEN	13
__nameservers	.symtab	0x29ed0	4	OBJECT	<unknown>	HIDDEN	13
__nedf2	.symtab	0x173b4	132	FUNC	<unknown>	HIDDEN	2
__open_etc_hosts	.symtab	0x16694	48	FUNC	<unknown>	HIDDEN	2
__open_nameservers	.symtab	0x15aa8	1116	FUNC	<unknown>	HIDDEN	2
__pagesize	.symtab	0x29aac	4	OBJECT	<unknown>	DEFAULT	13
__preinit_array_end	.symtab	0x23488	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__preinit_array_start	.symtab	0x23488	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__progname	.symtab	0x2385c	4	OBJECT	<unknown>	DEFAULT	12
__progname_full	.symtab	0x23860	4	OBJECT	<unknown>	DEFAULT	12
__pthread_initialize_minimal	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__pthread_mutex_init	.symtab	0x10608	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock	.symtab	0x10600	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock	.symtab	0x10600	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock	.symtab	0x10600	8	FUNC	<unknown>	DEFAULT	2
__pthread_return_0	.symtab	0x10600	8	FUNC	<unknown>	DEFAULT	2
__read_etc_hosts_r	.symtab	0x166c4	516	FUNC	<unknown>	HIDDEN	2
__register_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__res_sync	.symtab	0x29ec4	4	OBJECT	<unknown>	HIDDEN	13
__resolv_attempts	.symtab	0x2386f	1	OBJECT	<unknown>	HIDDEN	12
__resolv_lock	.symtab	0x29ac8	24	OBJECT	<unknown>	DEFAULT	13
__resolv_timeout	.symtab	0x2386e	1	OBJECT	<unknown>	HIDDEN	12
__rtld_fini	.symtab	0x29ab4	4	OBJECT	<unknown>	HIDDEN	13
__searchdomain	.symtab	0x29ec8	4	OBJECT	<unknown>	HIDDEN	13
__searchdomains	.symtab	0x29ed4	4	OBJECT	<unknown>	HIDDEN	13
__sigaddset	.symtab	0xe58c	36	FUNC	<unknown>	DEFAULT	2
__sigdelset	.symtab	0xe5b0	36	FUNC	<unknown>	DEFAULT	2
__sigismember	.symtab	0xe568	36	FUNC	<unknown>	DEFAULT	2
__stdin	.symtab	0x23664	4	OBJECT	<unknown>	DEFAULT	12
__stdio_READ	.symtab	0x1478c	88	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE	.symtab	0x1185c	180	FUNC	<unknown>	HIDDEN	2
__stdio_adjust_position	.symtab	0x147e4	196	FUNC	<unknown>	HIDDEN	2
__stdio_fwrite	.symtab	0x11c18	320	FUNC	<unknown>	HIDDEN	2
__stdio_init_mutex	.symtab	0xc884	52	FUNC	<unknown>	HIDDEN	2
__stdio_mutex_initializer.4636	.symtab	0x1a3b4	24	OBJECT	<unknown>	DEFAULT	4
__stdio_rfill	.symtab	0x148a8	48	FUNC	<unknown>	HIDDEN	2
__stdio_seek	.symtab	0x14970	60	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o	.symtab	0x148d8	152	FUNC	<unknown>	HIDDEN	2
__stdio_trans2w_o	.symtab	0x11d58	208	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit	.symtab	0xc98c	48	FUNC	<unknown>	HIDDEN	2
__stdout	.symtab	0x23668	4	OBJECT	<unknown>	DEFAULT	12
__subdf3	.symtab	0x16af4	788	FUNC	<unknown>	HIDDEN	2
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_rt_sigaction	.symtab	0x10d3c	52	FUNC	<unknown>	DEFAULT	2
__syscall_rt_sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uClibc_fini	.symtab	0x10644	124	FUNC	<unknown>	DEFAULT	2
__uClibc_init	.symtab	0x10714	108	FUNC	<unknown>	DEFAULT	2
__uClibc_main	.symtab	0x10780	724	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x23858	4	OBJECT	<unknown>	HIDDEN	12
__udivsi3	.symtab	0xc1a0	252	FUNC	<unknown>	HIDDEN	2
__xpg_strerror_r	.symtab	0xdfa0	256	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__xstat32_conv	.symtab	0x14330	172	FUNC	<unknown>	HIDDEN	2
__xstat64_conv	.symtab	0x14264	204	FUNC	<unknown>	HIDDEN	2
__xstat_conv	.symtab	0x143dc	184	FUNC	<unknown>	HIDDEN	2
_adjust_pos.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_bss_custom_printf_spec	.symtab	0x298b0	10	OBJECT	<unknown>	DEFAULT	13
_bss_end__	.symtab	0x29ed8	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_call_via_fp	.symtab	0x80fd	4	FUNC	<unknown>	HIDDEN	2
_call_via_ip	.symtab	0x8101	4	FUNC	<unknown>	HIDDEN	2
_call_via_lr	.symtab	0x8109	4	FUNC	<unknown>	HIDDEN	2
_call_via_r0	.symtab	0x80d1	4	FUNC	<unknown>	HIDDEN	2
_call_via_r1	.symtab	0x80d5	4	FUNC	<unknown>	HIDDEN	2
_call_via_r2	.symtab	0x80d9	4	FUNC	<unknown>	HIDDEN	2
_call_via_r3	.symtab	0x80dd	4	FUNC	<unknown>	HIDDEN	2
_call_via_r4	.symtab	0x80e1	4	FUNC	<unknown>	HIDDEN	2
_call_via_r5	.symtab	0x80e5	4	FUNC	<unknown>	HIDDEN	2
_call_via_r6	.symtab	0x80e9	4	FUNC	<unknown>	HIDDEN	2
_call_via_r7	.symtab	0x80ed	4	FUNC	<unknown>	HIDDEN	2
_call_via_r8	.symtab	0x80f1	4	FUNC	<unknown>	HIDDEN	2
_call_via_r9	.symtab	0x80f5	4	FUNC	<unknown>	HIDDEN	2
_call_via_sl	.symtab	0x80f9	4	FUNC	<unknown>	HIDDEN	2
_call_via_sp	.symtab	0x8105	4	FUNC	<unknown>	HIDDEN	2
_charpad	.symtab	0xc9bc	84	FUNC	<unknown>	DEFAULT	2
_cs_funcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_custom_printf_arginfo	.symtab	0x29aec	40	OBJECT	<unknown>	HIDDEN	13
_custom_printf_handler	.symtab	0x29b14	40	OBJECT	<unknown>	HIDDEN	13
_custom_printf_spec	.symtab	0x23760	4	OBJECT	<unknown>	HIDDEN	12
_dl_aux_init	.symtab	0x14148	56	FUNC	<unknown>	DEFAULT	2
_dl_phdr	.symtab	0x29ebc	4	OBJECT	<unknown>	DEFAULT	13
_dl_phnum	.symtab	0x29ec0	4	OBJECT	<unknown>	DEFAULT	13
_edata	.symtab	0x23870	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x29ed8	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_errno	.symtab	0x29ab8	4	OBJECT	<unknown>	DEFAULT	13
_exit	.symtab	0xc660	44	FUNC	<unknown>	DEFAULT	2
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fini	.symtab	0x17538	0	FUNC	<unknown>	DEFAULT	3
_fixed_buffers	.symtab	0x278b0	8192	OBJECT	<unknown>	DEFAULT	13
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow	.symtab	0xca10	132	FUNC	<unknown>	DEFAULT	2
_fpmaxtostr	.symtab	0x12020	2036	FUNC	<unknown>	HIDDEN	2
_fpmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_h_errno	.symtab	0x29abc	4	OBJECT	<unknown>	DEFAULT	13
_init	.symtab	0x80b4	0	FUNC	<unknown>	DEFAULT	1
_load_inttype	.symtab	0x11e28	112	FUNC	<unknown>	HIDDEN	2
_load_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_memcpy	.symtab	0x12f10	0	FUNC	<unknown>	HIDDEN	2
_ppfs_init	.symtab	0xd17c	160	FUNC	<unknown>	HIDDEN	2
_ppfs_init.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec	.symtab	0xd464	1392	FUNC	<unknown>	HIDDEN	2
_ppfs_parsespec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs	.symtab	0xd21c	68	FUNC	<unknown>	HIDDEN	2
_ppfs_prepargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs	.symtab	0xd260	432	FUNC	<unknown>	HIDDEN	2
_ppfs_setargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size	.symtab	0xd410	84	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_pop_restore	.symtab	0x10618	44	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_push_defer	.symtab	0x10610	8	FUNC	<unknown>	DEFAULT	2
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_sigintr	.symtab	0x29b3c	8	OBJECT	<unknown>	HIDDEN	13
_start	.symtab	0x81b0	0	FUNC	<unknown>	DEFAULT	2
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x11910	776	FUNC	<unknown>	HIDDEN	2
_stdio_init	.symtab	0xc81c	104	FUNC	<unknown>	HIDDEN	2
_stdio_openlist	.symtab	0x2366c	4	OBJECT	<unknown>	DEFAULT	12
_stdio_openlist_add_lock	.symtab	0x23624	24	OBJECT	<unknown>	DEFAULT	12
_stdio_openlist_dec_use	.symtab	0x129ac	392	FUNC	<unknown>	HIDDEN	2
_stdio_openlist_del_count	.symtab	0x278ac	4	OBJECT	<unknown>	DEFAULT	13
_stdio_openlist_del_lock	.symtab	0x2363c	24	OBJECT	<unknown>	DEFAULT	12
_stdio_openlist_use_count	.symtab	0x278a8	4	OBJECT	<unknown>	DEFAULT	13
_stdio_streams	.symtab	0x23670	240	OBJECT	<unknown>	DEFAULT	12
_stdio_term	.symtab	0xc8b8	212	FUNC	<unknown>	HIDDEN	2
_stdio_user_locking	.symtab	0x23654	4	OBJECT	<unknown>	DEFAULT	12
_stdlib_strto_l	.symtab	0xfbb8	448	FUNC	<unknown>	HIDDEN	2
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_store_inttype	.symtab	0x11e98	44	FUNC	<unknown>	HIDDEN	2
_store_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_string_syserrmsgs	.symtab	0x1a484	2906	OBJECT	<unknown>	HIDDEN	4
_string_syserrmsgs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr	.symtab	0x11ec4	348	FUNC	<unknown>	HIDDEN	2
_uintmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal	.symtab	0xca94	1768	FUNC	<unknown>	HIDDEN	2
_vfprintf_internal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0xf44c	296	FUNC	<unknown>	DEFAULT	2
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
aeabi_unwind_cpp_pr1.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
atoi	.symtab	0xfb7c	32	FUNC	<unknown>	DEFAULT	2
atol	.symtab	0xfb7c	32	FUNC	<unknown>	DEFAULT	2
atol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bcopy	.symtab	0xdbc0	16	FUNC	<unknown>	DEFAULT	2
been_there_done_that	.symtab	0x29a9c	4	OBJECT	<unknown>	DEFAULT	13
bot.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
brk	.symtab	0x14180	76	FUNC	<unknown>	DEFAULT	2
brk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bsd_signal	.symtab	0xe4b0	184	FUNC	<unknown>	DEFAULT	2
buf.2975	.symtab	0x298c0	16	OBJECT	<unknown>	DEFAULT	13
buf.5444	.symtab	0x298d0	440	OBJECT	<unknown>	DEFAULT	13
bzero	.symtab	0xdc00	12	FUNC	<unknown>	DEFAULT	2
c	.symtab	0x2360c	4	OBJECT	<unknown>	DEFAULT	12
calloc	.symtab	0x13c60	308	FUNC	<unknown>	DEFAULT	2
calloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
chdir	.symtab	0xc3fc	52	FUNC	<unknown>	DEFAULT	2
chdir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
clock_getres	.symtab	0x10bcc	52	FUNC	<unknown>	DEFAULT	2
clock_getres.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0xc68c	52	FUNC	<unknown>	DEFAULT	2
close.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
closedir	.symtab	0x10da8	248	FUNC	<unknown>	DEFAULT	2
closedir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
closenameservers.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
commServer	.symtab	0x23514	4	OBJECT	<unknown>	DEFAULT	12
completed.4959	.symtab	0x23870	1	OBJECT	<unknown>	DEFAULT	13
connect	.symtab	0xe2f4	56	FUNC	<unknown>	DEFAULT	2
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
connectTimeout	.symtab	0x951c	628	FUNC	<unknown>	DEFAULT	2
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
currentServer	.symtab	0x23608	4	OBJECT	<unknown>	DEFAULT	12
data_start	.symtab	0x23510	0	NOTYPE	<unknown>	DEFAULT	12
decoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dns	.symtab	0x23518	4	OBJECT	<unknown>	DEFAULT	12
dnslookup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
environ	.symtab	0x29aa8	4	OBJECT	<unknown>	DEFAULT	13
errno	.symtab	0x29ab8	4	OBJECT	<unknown>	DEFAULT	13
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exit	.symtab	0xfd78	184	FUNC	<unknown>	DEFAULT	2
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exp10_table	.symtab	0x1b390	72	OBJECT	<unknown>	DEFAULT	4
fclose	.symtab	0x11688	436	FUNC	<unknown>	DEFAULT	2
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0xc4cc	108	FUNC	<unknown>	DEFAULT	2
fd_to_DIR	.symtab	0x10ea0	208	FUNC	<unknown>	DEFAULT	2
fdgets	.symtab	0x846c	212	FUNC	<unknown>	DEFAULT	2
fdopendir	.symtab	0x1101c	152	FUNC	<unknown>	DEFAULT	2
fflush_unlocked	.symtab	0x12b34	524	FUNC	<unknown>	DEFAULT	2
fflush_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc	.symtab	0x12814	220	FUNC	<unknown>	DEFAULT	2
fgetc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked	.symtab	0x12d40	300	FUNC	<unknown>	DEFAULT	2
fgetc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets	.symtab	0x128f0	188	FUNC	<unknown>	DEFAULT	2
fgets.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked	.symtab	0x12e6c	160	FUNC	<unknown>	DEFAULT	2
fgets_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fmt	.symtab	0x1b378	20	OBJECT	<unknown>	DEFAULT	4
fopen	.symtab	0x1183c	32	FUNC	<unknown>	DEFAULT	2
fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork	.symtab	0xc36c	52	FUNC	<unknown>	DEFAULT	2
fork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fputs_unlocked	.symtab	0xd9d4	56	FUNC	<unknown>	DEFAULT	2
fputs_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
frame_dummy	.symtab	0x8150	0	FUNC	<unknown>	DEFAULT	2
free	.symtab	0xf1d0	572	FUNC	<unknown>	DEFAULT	2
free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseek	.symtab	0x14618	36	FUNC	<unknown>	DEFAULT	2
fseeko	.symtab	0x14618	36	FUNC	<unknown>	DEFAULT	2
fseeko.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseeko64	.symtab	0x1463c	336	FUNC	<unknown>	DEFAULT	2
fseeko64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fstat	.symtab	0x1420c	88	FUNC	<unknown>	DEFAULT	2
fstat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fwrite_unlocked	.symtab	0xda0c	176	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getArch	.symtab	0xae20	36	FUNC	<unknown>	DEFAULT	2
getHost	.symtab	0x91dc	104	FUNC	<unknown>	DEFAULT	2
getOurIP	.symtab	0x8540	708	FUNC	<unknown>	DEFAULT	2
getRandomIP	.symtab	0x8408	100	FUNC	<unknown>	DEFAULT	2
get_hosts_byname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getc	.symtab	0x12814	220	FUNC	<unknown>	DEFAULT	2
getc_unlocked	.symtab	0x12d40	300	FUNC	<unknown>	DEFAULT	2
getdents64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getdtablesize	.symtab	0x10ca8	44	FUNC	<unknown>	DEFAULT	2
getdtablesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getegid	.symtab	0x10c00	20	FUNC	<unknown>	DEFAULT	2
getegid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid	.symtab	0x10c14	20	FUNC	<unknown>	DEFAULT	2
geteuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid	.symtab	0x10c94	20	FUNC	<unknown>	DEFAULT	2
getgid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname	.symtab	0xe270	28	FUNC	<unknown>	DEFAULT	2
gethostbyname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname2	.symtab	0xe28c	104	FUNC	<unknown>	DEFAULT	2
gethostbyname2.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname2_r	.symtab	0x139c0	672	FUNC	<unknown>	DEFAULT	2
gethostbyname2_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname_r	.symtab	0x15fe8	760	FUNC	<unknown>	DEFAULT	2
gethostbyname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostname	.symtab	0x16314	120	FUNC	<unknown>	DEFAULT	2
gethostname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpagesize	.symtab	0x10b90	40	FUNC	<unknown>	DEFAULT	2
getpagesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid	.symtab	0xc328	20	FUNC	<unknown>	DEFAULT	2
getpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getrlimit	.symtab	0x141d8	52	FUNC	<unknown>	DEFAULT	2
getrlimit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockname	.symtab	0xe32c	56	FUNC	<unknown>	DEFAULT	2
getsockname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt	.symtab	0xe364	68	FUNC	<unknown>	DEFAULT	2
getsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gettimeofday	.symtab	0xc498	52	FUNC	<unknown>	DEFAULT	2
gettimeofday.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid	.symtab	0x10bb8	20	FUNC	<unknown>	DEFAULT	2
getuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
h_errno	.symtab	0x29abc	4	OBJECT	<unknown>	DEFAULT	13
hoste.5443	.symtab	0x29a88	20	OBJECT	<unknown>	DEFAULT	13
htonl	.symtab	0xe150	32	FUNC	<unknown>	DEFAULT	2
htons	.symtab	0xe140	16	FUNC	<unknown>	DEFAULT	2
i.4585	.symtab	0x23610	4	OBJECT	<unknown>	DEFAULT	12
index	.symtab	0xddfc	240	FUNC	<unknown>	DEFAULT	2
inet_addr	.symtab	0xe248	40	FUNC	<unknown>	DEFAULT	2
inet_aton	.symtab	0x138c8	248	FUNC	<unknown>	DEFAULT	2
inet_aton.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa	.symtab	0xe22c	28	FUNC	<unknown>	DEFAULT	2
inet_ntoa.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa_r	.symtab	0xe1a0	140	FUNC	<unknown>	DEFAULT	2
inet_ntop	.symtab	0x14e98	644	FUNC	<unknown>	DEFAULT	2
inet_ntop4	.symtab	0x14d54	324	FUNC	<unknown>	DEFAULT	2
inet_pton	.symtab	0x14b38	540	FUNC	<unknown>	DEFAULT	2
inet_pton4	.symtab	0x14a68	208	FUNC	<unknown>	DEFAULT	2
initConnection	.symtab	0xb7e0	400	FUNC	<unknown>	DEFAULT	2
init_rand	.symtab	0x81ec	216	FUNC	<unknown>	DEFAULT	2
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initstate	.symtab	0xf6e8	192	FUNC	<unknown>	DEFAULT	2
initstate_r	.symtab	0xfa98	228	FUNC	<unknown>	DEFAULT	2
ioctl	.symtab	0xc60c	84	FUNC	<unknown>	DEFAULT	2
ioctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isatty	.symtab	0xe0a0	36	FUNC	<unknown>	DEFAULT	2
isatty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isspace	.symtab	0xc6c0	40	FUNC	<unknown>	DEFAULT	2
isspace.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill	.symtab	0xc464	52	FUNC	<unknown>	DEFAULT	2
kill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
last_id.5501	.symtab	0x2386c	2	OBJECT	<unknown>	DEFAULT	12
last_ns_num.5500	.symtab	0x29ac4	4	OBJECT	<unknown>	DEFAULT	13
libc/string/arm/_memcpy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/bcopy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/bzero.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/memcpy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/memmove.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/memset.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/strcmp.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/strlen.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/arm/crt1.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/arm/crti.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/arm/crtn.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/arm/sigrestorer.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
listFork	.symtab	0x9790	424	FUNC	<unknown>	DEFAULT	2
llseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lseek64	.symtab	0x163e4	100	FUNC	<unknown>	DEFAULT	2
macAddress	.symtab	0x238a0	6	OBJECT	<unknown>	DEFAULT	13
main	.symtab	0xb970	2096	FUNC	<unknown>	DEFAULT	2
mainCommSock	.symtab	0x23890	4	OBJECT	<unknown>	DEFAULT	13
malloc	.symtab	0xe64c	2336	FUNC	<unknown>	DEFAULT	2
malloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
malloc_trim	.symtab	0xf40c	64	FUNC	<unknown>	DEFAULT	2
memchr	.symtab	0x133a0	240	FUNC	<unknown>	DEFAULT	2
memchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memcpy	.symtab	0xdbf0	4	FUNC	<unknown>	DEFAULT	2
memmove	.symtab	0x16450	4	FUNC	<unknown>	DEFAULT	2
mempcpy	.symtab	0x13778	36	FUNC	<unknown>	DEFAULT	2
mempcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memrchr	.symtab	0x135fc	224	FUNC	<unknown>	DEFAULT	2
memrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset	.symtab	0xdac0	156	FUNC	<unknown>	DEFAULT	2
mmap	.symtab	0x10a54	104	FUNC	<unknown>	DEFAULT	2
mmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mremap	.symtab	0x14494	64	FUNC	<unknown>	DEFAULT	2
mremap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
munmap	.symtab	0x10cd4	52	FUNC	<unknown>	DEFAULT	2
munmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mylock	.symtab	0x2377c	24	OBJECT	<unknown>	DEFAULT	12
mylock	.symtab	0x23794	24	OBJECT	<unknown>	DEFAULT	12
nanosleep	.symtab	0x10d08	52	FUNC	<unknown>	DEFAULT	2
nanosleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
next_start.1358	.symtab	0x298bc	4	OBJECT	<unknown>	DEFAULT	13
nprocessors_onln	.symtab	0xfedc	332	FUNC	<unknown>	DEFAULT	2
ntohl	.symtab	0xe180	32	FUNC	<unknown>	DEFAULT	2
ntohl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ntohs	.symtab	0xe170	16	FUNC	<unknown>	DEFAULT	2
ntop.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
numpids	.symtab	0x23898	8	OBJECT	<unknown>	DEFAULT	13
object.4967	.symtab	0x23874	24	OBJECT	<unknown>	DEFAULT	13
open	.symtab	0xc2c8	96	FUNC	<unknown>	DEFAULT	2
open.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
opendir	.symtab	0x10f70	172	FUNC	<unknown>	DEFAULT	2
opendir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
opennameservers.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ourIP	.symtab	0x29ae4	4	OBJECT	<unknown>	DEFAULT	13
ovhl7	.symtab	0xa09c	3460	FUNC	<unknown>	DEFAULT	2
parse_config.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
pids	.symtab	0x29ae8	4	OBJECT	<unknown>	DEFAULT	13
poll	.symtab	0x162e0	52	FUNC	<unknown>	DEFAULT	2
poll.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prefix.4856	.symtab	0x1a3dc	12	OBJECT	<unknown>	DEFAULT	4
print	.symtab	0x8d1c	1012	FUNC	<unknown>	DEFAULT	2
printchar	.symtab	0x8938	112	FUNC	<unknown>	DEFAULT	2
printi	.symtab	0x8b30	492	FUNC	<unknown>	DEFAULT	2
prints	.symtab	0x89a8	392	FUNC	<unknown>	DEFAULT	2
processCmd	.symtab	0xae44	2460	FUNC	<unknown>	DEFAULT	2
program_invocation_name	.symtab	0x23860	4	OBJECT	<unknown>	DEFAULT	12
program_invocation_short_name	.symtab	0x2385c	4	OBJECT	<unknown>	DEFAULT	12
qual_chars.4865	.symtab	0x1a3f0	20	OBJECT	<unknown>	DEFAULT	4
raise	.symtab	0xe494	28	FUNC	<unknown>	DEFAULT	2
raise.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand	.symtab	0xf574	24	FUNC	<unknown>	DEFAULT	2
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand_cmwc	.symtab	0x82c4	324	FUNC	<unknown>	DEFAULT	2
random	.symtab	0xf58c	164	FUNC	<unknown>	DEFAULT	2
random.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
random_poly_info	.symtab	0x1afe0	40	OBJECT	<unknown>	DEFAULT	4
random_r	.symtab	0xf930	144	FUNC	<unknown>	DEFAULT	2
random_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 22, 2024 16:04:04.705696106 CET	59428	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:04.825649977 CET	4258	59428	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:04.825737953 CET	59428	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:04.826590061 CET	59428	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:04.946167946 CET	4258	59428	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:05.429264069 CET	43928	443	192.168.2.23	91.189.91.42
Dec 22, 2024 16:04:05.891776085 CET	4258	59428	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:05.891884089 CET	4258	59428	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:05.891935110 CET	59428	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:05.892918110 CET	59428	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:05.893471003 CET	59430	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:06.013557911 CET	4258	59428	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:06.013896942 CET	4258	59430	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:06.013973951 CET	59430	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:06.014130116 CET	59430	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:06.134488106 CET	4258	59430	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:07.112081051 CET	4258	59430	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:07.112104893 CET	4258	59430	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:07.112243891 CET	59430	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:07.112354994 CET	59430	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:07.112896919 CET	59432	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:07.231961966 CET	4258	59430	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:07.232536077 CET	4258	59432	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:07.232686043 CET	59432	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:07.232753992 CET	59432	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:07.352334023 CET	4258	59432	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:08.299578905 CET	4258	59432	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:08.299633980 CET	4258	59432	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:08.299829006 CET	59432	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:08.299829006 CET	59432	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:08.300312996 CET	59434	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:08.419639111 CET	4258	59432	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:08.419960022 CET	4258	59434	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:08.420108080 CET	59434	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:08.420130014 CET	59434	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:08.539830923 CET	4258	59434	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:09.486830950 CET	4258	59434	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:09.486996889 CET	4258	59434	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:09.487103939 CET	59434	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:09.487104893 CET	59434	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:09.487644911 CET	59436	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:09.606782913 CET	4258	59434	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:09.607235909 CET	4258	59436	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:09.607367039 CET	59436	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:09.607399940 CET	59436	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:09.727030993 CET	4258	59436	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:10.674143076 CET	4258	59436	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:10.674282074 CET	4258	59436	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:10.674473047 CET	59436	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:10.674473047 CET	59436	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:10.675067902 CET	59438	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:10.794720888 CET	4258	59436	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:10.795366049 CET	4258	59438	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:10.795460939 CET	59438	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:10.795589924 CET	59438	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:10.920145035 CET	4258	59438	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:11.866615057 CET	4258	59438	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:11.866724014 CET	4258	59438	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:11.866852045 CET	59438	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:11.866892099 CET	59438	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:11.867485046 CET	59440	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:11.988249063 CET	4258	59438	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:11.988620996 CET	4258	59440	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:11.988734961 CET	59440	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:11.988838911 CET	59440	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:12.108570099 CET	4258	59440	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:13.141289949 CET	4258	59440	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:13.141391039 CET	4258	59440	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:13.141474009 CET	59440	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:13.141556978 CET	59440	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:13.142016888 CET	59442	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:13.261203051 CET	4258	59440	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:13.261609077 CET	4258	59442	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:13.261703968 CET	59442	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:13.261785030 CET	59442	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:13.381659985 CET	4258	59442	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:14.366369009 CET	4258	59442	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:14.366473913 CET	59442	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:14.366552114 CET	4258	59442	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:14.366619110 CET	59442	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:14.367091894 CET	59444	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:14.486212969 CET	4258	59442	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:14.486665010 CET	4258	59444	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:14.486757040 CET	59444	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:14.486804008 CET	59444	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:14.606549025 CET	4258	59444	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:15.562520027 CET	4258	59444	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:15.562578917 CET	4258	59444	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:15.562751055 CET	59444	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:15.562823057 CET	59444	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:15.563309908 CET	59446	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:15.682643890 CET	4258	59444	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:15.684171915 CET	4258	59446	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:15.684241056 CET	59446	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:15.684287071 CET	59446	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:15.804466009 CET	4258	59446	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:16.765470982 CET	4258	59446	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:16.765700102 CET	4258	59446	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:16.765727043 CET	59446	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:16.765816927 CET	59446	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:16.766433954 CET	59448	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:16.888036966 CET	4258	59446	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:16.889847040 CET	4258	59448	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:16.890049934 CET	59448	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:16.890100002 CET	59448	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:17.009957075 CET	4258	59448	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:17.958132029 CET	4258	59448	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:17.958188057 CET	4258	59448	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:17.958282948 CET	59448	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:17.958360910 CET	59448	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:17.958914042 CET	59450	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:18.078048944 CET	4258	59448	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:18.078484058 CET	4258	59450	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:18.078584909 CET	59450	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:18.078686953 CET	59450	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:18.199193954 CET	4258	59450	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:18.314841986 CET	443	39256	34.249.145.219	192.168.2.23
Dec 22, 2024 16:04:18.315098047 CET	39256	443	192.168.2.23	34.249.145.219
Dec 22, 2024 16:04:18.434982061 CET	443	39256	34.249.145.219	192.168.2.23
Dec 22, 2024 16:04:19.146454096 CET	4258	59450	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:19.146505117 CET	4258	59450	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:19.146648884 CET	59450	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:19.146739960 CET	59450	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:19.147278070 CET	59452	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:19.266467094 CET	4258	59450	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:19.266891956 CET	4258	59452	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:19.266997099 CET	59452	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:19.267087936 CET	59452	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:19.386850119 CET	4258	59452	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:20.333743095 CET	4258	59452	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:20.333832026 CET	4258	59452	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:20.333872080 CET	59452	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:20.333973885 CET	59452	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:20.334486961 CET	59454	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:20.453747988 CET	4258	59452	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:20.454082966 CET	4258	59454	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:20.454169989 CET	59454	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:20.454251051 CET	59454	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:20.573863029 CET	4258	59454	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:21.299024105 CET	42516	80	192.168.2.23	109.202.202.202
Dec 22, 2024 16:04:21.519937038 CET	4258	59454	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:21.519975901 CET	4258	59454	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:21.520100117 CET	59454	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:21.520155907 CET	59454	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:21.520638943 CET	59456	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:21.639975071 CET	4258	59454	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:21.640297890 CET	4258	59456	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:21.640433073 CET	59456	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:21.640471935 CET	59456	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:21.760195017 CET	4258	59456	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:22.707305908 CET	4258	59456	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:22.707375050 CET	4258	59456	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:22.707607031 CET	59456	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:22.707701921 CET	59456	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:22.708606958 CET	59458	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:22.827399015 CET	4258	59456	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:22.828193903 CET	4258	59458	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:22.828347921 CET	59458	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:22.828378916 CET	59458	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:22.948127031 CET	4258	59458	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:23.904570103 CET	4258	59458	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:23.904603958 CET	4258	59458	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:23.904795885 CET	59458	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:23.904967070 CET	59458	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:23.905570030 CET	59460	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:24.024656057 CET	4258	59458	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:24.025265932 CET	4258	59460	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:24.025362015 CET	59460	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:24.025425911 CET	59460	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:24.145451069 CET	4258	59460	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:25.091305971 CET	4258	59460	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:25.091378927 CET	4258	59460	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:25.091474056 CET	59460	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:25.091542959 CET	59460	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:25.092060089 CET	59462	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:25.211091042 CET	4258	59460	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:25.211711884 CET	4258	59462	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:25.211846113 CET	59462	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:25.211901903 CET	59462	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:25.331491947 CET	4258	59462	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:25.394433975 CET	43928	443	192.168.2.23	91.189.91.42
Dec 22, 2024 16:04:26.278372049 CET	4258	59462	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:26.278453112 CET	4258	59462	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:26.278629065 CET	59462	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:26.278686047 CET	59462	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:26.279498100 CET	59464	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:26.399013042 CET	4258	59462	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:26.399738073 CET	4258	59464	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:26.399846077 CET	59464	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:26.399903059 CET	59464	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:26.520246029 CET	4258	59464	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:30.755043983 CET	4258	59464	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:30.755459070 CET	59464	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:30.756345034 CET	59466	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:30.875067949 CET	4258	59464	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:30.875853062 CET	4258	59466	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:30.875977039 CET	59466	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:30.876074076 CET	59466	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:30.998168945 CET	4258	59466	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:31.947988987 CET	4258	59466	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:31.948206902 CET	59466	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:31.948340893 CET	4258	59466	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:31.948458910 CET	59466	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:31.949246883 CET	59468	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:32.068178892 CET	4258	59466	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:32.068824053 CET	4258	59468	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:32.068929911 CET	59468	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:32.068975925 CET	59468	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:32.189533949 CET	4258	59468	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:33.168011904 CET	4258	59468	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:33.168103933 CET	4258	59468	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:33.168204069 CET	59468	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:33.168348074 CET	59468	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:33.169437885 CET	59470	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:33.288803101 CET	4258	59468	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:33.290297985 CET	4258	59470	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:33.290414095 CET	59470	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:33.290493011 CET	59470	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:33.413549900 CET	4258	59470	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:34.369923115 CET	4258	59470	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:34.370045900 CET	4258	59470	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:34.370121956 CET	59470	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:34.370230913 CET	59470	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:34.371063948 CET	59472	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:34.489761114 CET	4258	59470	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:34.490628958 CET	4258	59472	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:34.490782976 CET	59472	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:34.490916967 CET	59472	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:34.610537052 CET	4258	59472	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:35.562258959 CET	4258	59472	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:35.562283993 CET	4258	59472	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:35.562376022 CET	59472	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:35.562467098 CET	59472	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:35.563148022 CET	59474	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:35.682287931 CET	4258	59472	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:35.682823896 CET	4258	59474	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:35.682979107 CET	59474	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:35.683141947 CET	59474	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:35.802712917 CET	4258	59474	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:36.755623102 CET	4258	59474	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:36.755709887 CET	4258	59474	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:36.755783081 CET	59474	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:36.755872011 CET	59474	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:36.756424904 CET	59476	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:36.877177954 CET	4258	59474	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:36.877763987 CET	4258	59476	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:36.877862930 CET	59476	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:36.878000021 CET	59476	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:36.998430967 CET	4258	59476	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:37.948055029 CET	4258	59476	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:37.948276997 CET	4258	59476	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:37.948436975 CET	59476	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:37.948436975 CET	59476	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:37.949265957 CET	59478	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:38.068377972 CET	4258	59476	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:38.068900108 CET	4258	59478	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:38.069072008 CET	59478	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:38.069072008 CET	59478	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:38.188967943 CET	4258	59478	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:39.136909008 CET	4258	59478	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:39.137058020 CET	4258	59478	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:39.137192011 CET	59478	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:39.137192965 CET	59478	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:39.137685061 CET	59480	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:39.257071972 CET	4258	59478	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:39.257374048 CET	4258	59480	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:39.257553101 CET	59480	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:39.257553101 CET	59480	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:39.377315998 CET	4258	59480	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:40.324364901 CET	4258	59480	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:40.324419022 CET	4258	59480	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:40.324678898 CET	59480	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:40.324678898 CET	59480	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:40.325551987 CET	59482	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:40.444556952 CET	4258	59480	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:40.445255995 CET	4258	59482	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:40.445393085 CET	59482	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:40.445441008 CET	59482	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:40.565191984 CET	4258	59482	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:41.512123108 CET	4258	59482	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:41.512167931 CET	4258	59482	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:41.512398005 CET	59482	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:41.512398958 CET	59482	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:41.513197899 CET	59484	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:41.632224083 CET	4258	59482	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:41.632843971 CET	4258	59484	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:41.633049011 CET	59484	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:41.633049965 CET	59484	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:41.752995968 CET	4258	59484	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:42.700238943 CET	4258	59484	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:42.700304031 CET	4258	59484	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:42.700548887 CET	59484	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:42.700548887 CET	59484	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:42.701260090 CET	59486	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:42.820467949 CET	4258	59484	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:42.820830107 CET	4258	59486	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:42.821029902 CET	59486	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:42.821031094 CET	59486	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:42.940738916 CET	4258	59486	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:43.887784958 CET	4258	59486	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:43.887860060 CET	4258	59486	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:43.887996912 CET	59486	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:43.887998104 CET	59486	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:43.888870001 CET	59488	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:44.009376049 CET	4258	59486	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:44.010085106 CET	4258	59488	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:44.010298014 CET	59488	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:44.010298967 CET	59488	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:44.130027056 CET	4258	59488	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:45.078814030 CET	4258	59488	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:45.078881025 CET	4258	59488	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:45.079103947 CET	59488	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:45.079103947 CET	59488	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:45.079930067 CET	59490	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:45.198852062 CET	4258	59488	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:45.199512005 CET	4258	59490	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:45.199628115 CET	59490	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:45.199786901 CET	59490	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:45.319327116 CET	4258	59490	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:46.266896009 CET	4258	59490	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:46.267021894 CET	4258	59490	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:46.267281055 CET	59490	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:46.267395973 CET	59490	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:46.268595934 CET	59492	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:46.387123108 CET	4258	59490	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:46.388252974 CET	4258	59492	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:46.388478994 CET	59492	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:46.388545990 CET	59492	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:46.508194923 CET	4258	59492	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:47.455427885 CET	4258	59492	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:47.455564976 CET	4258	59492	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:47.455760956 CET	59492	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:47.455988884 CET	59492	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:47.457102060 CET	59494	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:47.575509071 CET	4258	59492	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:47.576684952 CET	4258	59494	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:47.576792955 CET	59494	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:47.577193022 CET	59494	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:47.696861029 CET	4258	59494	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:48.644504070 CET	4258	59494	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:48.644545078 CET	4258	59494	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:48.644737959 CET	59494	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:48.644737959 CET	59494	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:48.645642996 CET	59496	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:48.764451027 CET	4258	59494	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:48.765266895 CET	4258	59496	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:48.765525103 CET	59496	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:48.765865088 CET	59496	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:48.885443926 CET	4258	59496	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:49.852222919 CET	4258	59496	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:49.852274895 CET	4258	59496	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:49.852453947 CET	59496	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:49.852693081 CET	59496	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:49.854238987 CET	59498	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:49.972507954 CET	4258	59496	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:49.974193096 CET	4258	59498	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:49.974436998 CET	59498	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:49.974805117 CET	59498	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:50.094826937 CET	4258	59498	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:51.042026997 CET	4258	59498	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:51.042121887 CET	4258	59498	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:51.042344093 CET	59498	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:51.042423010 CET	59498	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:51.043456078 CET	59500	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:51.162465096 CET	4258	59498	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:51.163170099 CET	4258	59500	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:51.163343906 CET	59500	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:51.163598061 CET	59500	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:51.283281088 CET	4258	59500	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:52.661166906 CET	4258	59500	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:52.661261082 CET	4258	59500	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:52.661365032 CET	59500	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:52.661420107 CET	59500	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:52.662549973 CET	59502	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:52.781321049 CET	4258	59500	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:52.782550097 CET	4258	59502	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:52.782624960 CET	59502	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:52.782974005 CET	59502	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:52.903762102 CET	4258	59502	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:53.861119032 CET	4258	59502	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:53.861155987 CET	4258	59502	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:53.861367941 CET	59502	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:53.861368895 CET	59502	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:53.862428904 CET	59504	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:53.980989933 CET	4258	59502	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:53.982145071 CET	4258	59504	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:53.982224941 CET	59504	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:53.982367039 CET	59504	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:54.102817059 CET	4258	59504	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:55.050657034 CET	4258	59504	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:55.050844908 CET	4258	59504	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:55.050843954 CET	59504	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:55.050925016 CET	59504	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:55.051616907 CET	59506	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:55.171070099 CET	4258	59504	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:55.171972990 CET	4258	59506	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:55.172050953 CET	59506	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:55.172188044 CET	59506	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:55.291770935 CET	4258	59506	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:56.249377966 CET	4258	59506	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:56.249526978 CET	4258	59506	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:56.249743938 CET	59506	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:56.249866009 CET	59506	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:56.250819921 CET	59508	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:56.369637966 CET	4258	59506	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:56.370523930 CET	4258	59508	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:56.370651007 CET	59508	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:56.370799065 CET	59508	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:56.490637064 CET	4258	59508	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:57.446882963 CET	4258	59508	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:57.447068930 CET	59508	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:57.447102070 CET	4258	59508	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:57.447173119 CET	59508	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:57.447891951 CET	59510	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:57.566685915 CET	4258	59508	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:57.567368984 CET	4258	59510	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:57.567459106 CET	59510	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:57.567672014 CET	59510	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:57.687247992 CET	4258	59510	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:58.635056973 CET	4258	59510	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:58.635261059 CET	59510	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:58.635629892 CET	4258	59510	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:58.635703087 CET	59510	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:58.636409998 CET	59512	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:58.755388021 CET	4258	59510	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:58.756680965 CET	4258	59512	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:58.756818056 CET	59512	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:58.756973028 CET	59512	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:58.876475096 CET	4258	59512	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:59.827014923 CET	4258	59512	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:59.827076912 CET	4258	59512	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:59.827434063 CET	59512	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:59.827522993 CET	59512	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:59.828552008 CET	59514	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:59.947177887 CET	4258	59512	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:59.948158026 CET	4258	59514	31.172.83.147	192.168.2.23
Dec 22, 2024 16:04:59.948293924 CET	59514	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:04:59.948468924 CET	59514	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:00.067954063 CET	4258	59514	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:01.015006065 CET	4258	59514	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:01.015069962 CET	4258	59514	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:01.015192986 CET	59514	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:01.015266895 CET	59514	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:01.016401052 CET	59516	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:01.135133982 CET	4258	59514	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:01.136296034 CET	4258	59516	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:01.136425018 CET	59516	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:01.136595011 CET	59516	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:01.258425951 CET	4258	59516	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:02.206330061 CET	4258	59516	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:02.206439972 CET	4258	59516	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:02.206571102 CET	59516	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:02.206660986 CET	59516	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:02.207271099 CET	59518	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:02.326491117 CET	4258	59516	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:02.326865911 CET	4258	59518	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:02.326946020 CET	59518	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:02.327027082 CET	59518	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:02.446547985 CET	4258	59518	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:03.394072056 CET	4258	59518	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:03.394128084 CET	4258	59518	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:03.394259930 CET	59518	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:03.394365072 CET	59518	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:03.395230055 CET	59520	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:03.513998985 CET	4258	59518	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:03.514853954 CET	4258	59520	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:03.515088081 CET	59520	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:03.515135050 CET	59520	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:03.634743929 CET	4258	59520	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:04.582312107 CET	4258	59520	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:04.582425117 CET	4258	59520	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:04.582573891 CET	59520	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:04.582627058 CET	59520	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:04.583488941 CET	59522	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:04.702687979 CET	4258	59520	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:04.703398943 CET	4258	59522	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:04.703605890 CET	59522	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:04.703658104 CET	59522	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:04.823311090 CET	4258	59522	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:05.771006107 CET	4258	59522	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:05.771064043 CET	4258	59522	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:05.771401882 CET	59522	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:05.771497011 CET	59522	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:05.772362947 CET	59524	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:05.891449928 CET	4258	59522	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:05.892144918 CET	4258	59524	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:05.892364979 CET	59524	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:05.892442942 CET	59524	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:06.012300968 CET	4258	59524	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:06.348946095 CET	43928	443	192.168.2.23	91.189.91.42
Dec 22, 2024 16:05:06.959922075 CET	4258	59524	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:06.960014105 CET	4258	59524	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:06.960197926 CET	59524	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:06.960382938 CET	59524	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:06.961355925 CET	59526	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:07.079972029 CET	4258	59524	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:07.080894947 CET	4258	59526	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:07.081007957 CET	59526	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:07.081155062 CET	59526	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:07.201112032 CET	4258	59526	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:08.147833109 CET	4258	59526	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:08.147871017 CET	4258	59526	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:08.148230076 CET	59526	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:08.148313046 CET	59526	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:08.149568081 CET	59528	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:08.267949104 CET	4258	59526	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:08.269248009 CET	4258	59528	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:08.269687891 CET	59528	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:08.269781113 CET	59528	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:08.390338898 CET	4258	59528	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:09.352421999 CET	4258	59528	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:09.352462053 CET	4258	59528	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:09.352638960 CET	59528	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:09.352760077 CET	59528	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:09.353631020 CET	59530	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:09.472527027 CET	4258	59528	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:09.473381996 CET	4258	59530	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:09.473623037 CET	59530	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:09.473623037 CET	59530	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:09.593688965 CET	4258	59530	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:10.540513992 CET	4258	59530	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:10.540575027 CET	4258	59530	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:10.540788889 CET	59530	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:10.540883064 CET	59530	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:10.541661978 CET	59532	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:10.660712957 CET	4258	59530	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:10.661259890 CET	4258	59532	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:10.661458969 CET	59532	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:10.661520004 CET	59532	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:10.781424999 CET	4258	59532	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:11.737592936 CET	4258	59532	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:11.737711906 CET	4258	59532	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:11.737806082 CET	59532	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:11.737907887 CET	59532	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:11.738933086 CET	59534	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:11.858396053 CET	4258	59532	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:11.859116077 CET	4258	59534	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:11.859349012 CET	59534	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:11.859390974 CET	59534	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:11.979173899 CET	4258	59534	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:12.979979992 CET	4258	59534	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:12.980068922 CET	4258	59534	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:12.980381966 CET	59534	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:12.980436087 CET	59534	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:12.981290102 CET	59536	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:13.100636005 CET	4258	59534	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:13.101248026 CET	4258	59536	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:13.101470947 CET	59536	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:13.101572990 CET	59536	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:13.221292973 CET	4258	59536	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:14.173917055 CET	4258	59536	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:14.174103022 CET	4258	59536	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:14.174159050 CET	59536	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:14.174509048 CET	59536	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:14.175266027 CET	59538	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:14.294012070 CET	4258	59536	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:14.294897079 CET	4258	59538	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:14.295061111 CET	59538	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:14.295170069 CET	59538	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:14.414766073 CET	4258	59538	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:15.362658024 CET	4258	59538	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:15.362844944 CET	4258	59538	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:15.363008022 CET	59538	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:15.363008022 CET	59538	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:15.364171028 CET	59540	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:15.483223915 CET	4258	59538	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:15.484081030 CET	4258	59540	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:15.484544992 CET	59540	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:15.484544992 CET	59540	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:15.604193926 CET	4258	59540	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:16.552685976 CET	4258	59540	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:16.552722931 CET	4258	59540	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:16.552804947 CET	59540	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:16.552956104 CET	59540	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:16.553648949 CET	59542	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:16.673320055 CET	4258	59540	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:16.675561905 CET	4258	59542	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:16.675795078 CET	59542	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:16.675795078 CET	59542	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:16.795779943 CET	4258	59542	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:17.744369030 CET	4258	59542	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:17.744401932 CET	4258	59542	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:17.744554996 CET	59542	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:17.744844913 CET	59542	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:17.746409893 CET	59544	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:17.865382910 CET	4258	59542	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:17.866074085 CET	4258	59544	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:17.866163015 CET	59544	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:17.866461039 CET	59544	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:17.986361027 CET	4258	59544	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:18.967075109 CET	4258	59544	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:18.967261076 CET	4258	59544	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:18.967283964 CET	59544	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:18.967364073 CET	59544	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:18.968038082 CET	59546	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:19.086935997 CET	4258	59544	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:19.087538004 CET	4258	59546	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:19.087678909 CET	59546	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:19.087707996 CET	59546	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:19.207422972 CET	4258	59546	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:20.153923035 CET	4258	59546	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:20.153973103 CET	4258	59546	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:20.154159069 CET	59546	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:20.154231071 CET	59546	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:20.155354977 CET	59548	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:20.273850918 CET	4258	59546	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:20.275022984 CET	4258	59548	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:20.275171995 CET	59548	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:20.275331974 CET	59548	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:20.394889116 CET	4258	59548	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:21.380311966 CET	4258	59548	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:21.380342007 CET	4258	59548	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:21.380527020 CET	59548	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:21.380625010 CET	59548	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:21.381479979 CET	59550	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:21.500514984 CET	4258	59548	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:21.501228094 CET	4258	59550	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:21.501368046 CET	59550	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:21.501492977 CET	59550	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:21.621227980 CET	4258	59550	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:22.710045099 CET	4258	59550	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:22.710108995 CET	4258	59550	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:22.710231066 CET	59550	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:22.710320950 CET	59550	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:22.711054087 CET	59552	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:22.830080986 CET	4258	59550	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:22.830892086 CET	4258	59552	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:22.831060886 CET	59552	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:22.831181049 CET	59552	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:22.950758934 CET	4258	59552	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:23.949467897 CET	4258	59552	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:23.949528933 CET	4258	59552	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:23.949687958 CET	59552	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:23.949745893 CET	59552	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:23.950671911 CET	59554	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:24.069467068 CET	4258	59552	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:24.070209980 CET	4258	59554	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:24.070292950 CET	59554	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:24.070353031 CET	59554	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:24.190073967 CET	4258	59554	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:25.153270960 CET	4258	59554	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:25.153301001 CET	4258	59554	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:25.153484106 CET	59554	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:25.153616905 CET	59554	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:25.154624939 CET	59556	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:25.273477077 CET	4258	59554	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:25.274282932 CET	4258	59556	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:25.274427891 CET	59556	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:25.274481058 CET	59556	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:25.394402027 CET	4258	59556	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:26.352895975 CET	4258	59556	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:26.352929115 CET	4258	59556	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:26.353148937 CET	59556	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:26.353302002 CET	59556	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:26.354388952 CET	59558	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:26.473077059 CET	4258	59556	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:26.473936081 CET	4258	59558	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:26.474277020 CET	59558	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:26.474313974 CET	59558	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:26.594109058 CET	4258	59558	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:27.542601109 CET	4258	59558	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:27.542624950 CET	4258	59558	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:27.542927027 CET	59558	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:27.543072939 CET	59558	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:27.544882059 CET	59560	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:27.663798094 CET	4258	59558	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:27.665400982 CET	4258	59560	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:27.665478945 CET	59560	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:27.665539026 CET	59560	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:27.785156965 CET	4258	59560	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:28.731903076 CET	4258	59560	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:28.731936932 CET	4258	59560	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:28.732100964 CET	59560	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:28.732258081 CET	59560	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:28.733565092 CET	59562	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:29.005620956 CET	4258	59560	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:29.005944014 CET	59560	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:29.015180111 CET	4258	59560	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:29.015202045 CET	4258	59562	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:29.015317917 CET	59562	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:29.015463114 CET	59562	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:29.135132074 CET	4258	59562	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:30.082462072 CET	4258	59562	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:30.082510948 CET	4258	59562	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:30.082667112 CET	59562	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:30.082828045 CET	59562	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:30.083686113 CET	59564	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:30.202677965 CET	4258	59562	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:30.203279018 CET	4258	59564	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:30.203531981 CET	59564	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:30.203531981 CET	59564	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:30.323640108 CET	4258	59564	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:31.270956039 CET	4258	59564	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:31.271035910 CET	4258	59564	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:31.271147013 CET	59564	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:31.271260023 CET	59564	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:31.271821976 CET	59566	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:31.390963078 CET	4258	59564	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:31.391406059 CET	4258	59566	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:31.391514063 CET	59566	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:31.391571045 CET	59566	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:31.511233091 CET	4258	59566	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:32.468472004 CET	4258	59566	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:32.468564034 CET	4258	59566	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:32.468853951 CET	59566	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:32.468952894 CET	59566	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:32.469710112 CET	59568	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:32.588675976 CET	4258	59566	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:32.589335918 CET	4258	59568	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:32.589483023 CET	59568	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:32.589595079 CET	59568	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:32.709467888 CET	4258	59568	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:33.690809965 CET	4258	59568	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:33.690856934 CET	4258	59568	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:33.691018105 CET	59568	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:33.691121101 CET	59568	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:33.691921949 CET	59570	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:33.810936928 CET	4258	59568	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:33.811499119 CET	4258	59570	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:33.811669111 CET	59570	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:33.811886072 CET	59570	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:33.931438923 CET	4258	59570	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:34.930212975 CET	4258	59570	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:34.930301905 CET	4258	59570	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:34.930543900 CET	59570	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:34.930623055 CET	59570	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:34.931580067 CET	59572	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:35.050487041 CET	4258	59570	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:35.051208019 CET	4258	59572	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:35.051331997 CET	59572	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:35.051465034 CET	59572	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:35.171539068 CET	4258	59572	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:36.119129896 CET	4258	59572	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:36.119184971 CET	4258	59572	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:36.119389057 CET	59572	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:36.119453907 CET	59572	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:36.120115042 CET	59574	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:36.239309072 CET	4258	59572	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:36.239686966 CET	4258	59574	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:36.239811897 CET	59574	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:36.239940882 CET	59574	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:36.359653950 CET	4258	59574	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:37.306740999 CET	4258	59574	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:37.306811094 CET	4258	59574	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:37.306968927 CET	59574	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:37.307126999 CET	59574	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:37.308334112 CET	59576	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:37.426945925 CET	4258	59574	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:37.428208113 CET	4258	59576	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:37.428376913 CET	59576	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:37.428426981 CET	59576	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:37.548223972 CET	4258	59576	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:38.497822046 CET	4258	59576	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:38.497880936 CET	4258	59576	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:38.498065948 CET	59576	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:38.498179913 CET	59576	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:38.499140024 CET	59578	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:38.617970943 CET	4258	59576	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:38.618804932 CET	4258	59578	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:38.618951082 CET	59578	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:38.619050980 CET	59578	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:38.738842010 CET	4258	59578	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:39.685950041 CET	4258	59578	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:39.686001062 CET	4258	59578	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:39.686235905 CET	59578	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:39.686356068 CET	59578	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:39.687432051 CET	59580	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:39.806242943 CET	4258	59578	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:39.807284117 CET	4258	59580	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:39.807425022 CET	59580	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:39.807533979 CET	59580	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:39.927536964 CET	4258	59580	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:40.882452011 CET	4258	59580	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:40.882481098 CET	4258	59580	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:40.882592916 CET	59580	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:40.882875919 CET	59580	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:40.884301901 CET	59582	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:41.003071070 CET	4258	59580	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:41.004508972 CET	4258	59582	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:41.004580975 CET	59582	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:41.004838943 CET	59582	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:41.125196934 CET	4258	59582	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:42.074316978 CET	4258	59582	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:42.074408054 CET	4258	59582	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:42.074599028 CET	59582	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:42.074865103 CET	59582	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:42.076051950 CET	59584	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:42.194843054 CET	4258	59582	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:42.195838928 CET	4258	59584	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:42.196253061 CET	59584	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:42.196365118 CET	59584	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:42.316164017 CET	4258	59584	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:43.316164017 CET	4258	59584	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:43.316257954 CET	4258	59584	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:43.316750050 CET	59584	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:43.316750050 CET	59584	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:43.317831039 CET	59586	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:43.436963081 CET	4258	59584	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:43.437731028 CET	4258	59586	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:43.438258886 CET	59586	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:43.438258886 CET	59586	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:43.911863089 CET	59586	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:44.009730101 CET	4258	59586	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:44.031846046 CET	4258	59586	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:44.964940071 CET	4258	59586	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:44.965053082 CET	4258	59586	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:44.965359926 CET	59586	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:44.965581894 CET	59586	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:44.966749907 CET	59588	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:45.086241007 CET	4258	59586	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:45.087347984 CET	4258	59588	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:45.087685108 CET	59588	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:45.087809086 CET	59588	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:45.207633972 CET	4258	59588	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:46.155211926 CET	4258	59588	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:46.155246973 CET	4258	59588	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:46.155391932 CET	59588	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:46.155463934 CET	59588	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:46.156030893 CET	59590	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:46.275538921 CET	4258	59588	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:46.276046038 CET	4258	59590	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:46.276436090 CET	59590	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:46.276480913 CET	59590	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:46.396768093 CET	4258	59590	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:47.343800068 CET	4258	59590	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:47.343915939 CET	4258	59590	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:47.344011068 CET	59590	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:47.344162941 CET	59590	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:47.344965935 CET	59592	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:47.463946104 CET	4258	59590	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:47.464726925 CET	4258	59592	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:47.464850903 CET	59592	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:47.464971066 CET	59592	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:47.584798098 CET	4258	59592	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:48.552498102 CET	4258	59592	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:48.552618980 CET	4258	59592	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:48.552750111 CET	59592	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:48.552849054 CET	59592	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:48.553611994 CET	59594	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:48.673016071 CET	4258	59592	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:48.673542023 CET	4258	59594	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:48.673643112 CET	59594	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:48.673702002 CET	59594	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:48.793984890 CET	4258	59594	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:49.740016937 CET	4258	59594	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:49.740062952 CET	4258	59594	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:49.740360022 CET	59594	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:49.740485907 CET	59594	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:49.741549015 CET	59596	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:50.031615973 CET	4258	59594	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:50.031651020 CET	4258	59594	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:50.031683922 CET	4258	59596	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:50.031974077 CET	59596	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:50.032131910 CET	59596	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:50.032154083 CET	59594	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:50.152014017 CET	4258	59596	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:51.217112064 CET	4258	59596	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:51.217431068 CET	59596	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:51.217535973 CET	4258	59596	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:51.217633963 CET	59596	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:51.218776941 CET	59598	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:51.337934971 CET	4258	59596	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:51.338962078 CET	4258	59598	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:51.339262962 CET	59598	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:51.339433908 CET	59598	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:51.459445000 CET	4258	59598	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:52.407140970 CET	4258	59598	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:52.407161951 CET	4258	59598	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:52.407565117 CET	59598	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:52.407740116 CET	59598	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:52.408799887 CET	59600	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:52.527453899 CET	4258	59598	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:52.528297901 CET	4258	59600	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:52.528525114 CET	59600	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:52.528647900 CET	59600	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:52.648591042 CET	4258	59600	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:53.595562935 CET	4258	59600	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:53.595613003 CET	4258	59600	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:53.595906973 CET	59600	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:53.596060038 CET	59600	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:53.596924067 CET	59602	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:53.715831995 CET	4258	59600	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:53.716494083 CET	4258	59602	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:53.716629982 CET	59602	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:53.716757059 CET	59602	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:53.836663008 CET	4258	59602	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:54.815202951 CET	4258	59602	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:54.815406084 CET	59602	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:54.815423012 CET	4258	59602	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:54.815596104 CET	59602	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:54.816430092 CET	59604	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:54.935736895 CET	4258	59602	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:54.936079979 CET	4258	59604	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:54.936281919 CET	59604	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:54.936433077 CET	59604	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:55.398227930 CET	59604	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:55.489382982 CET	4258	59604	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:55.518254042 CET	4258	59604	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:56.492538929 CET	4258	59604	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:56.492671967 CET	4258	59604	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:56.492722988 CET	59604	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:56.492813110 CET	59604	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:56.493427038 CET	59606	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:56.649204016 CET	4258	59604	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:56.649262905 CET	4258	59606	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:56.649468899 CET	59606	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:56.649554014 CET	59606	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:56.781342983 CET	4258	59606	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:57.735124111 CET	4258	59606	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:57.735169888 CET	4258	59606	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:57.735594988 CET	59606	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:57.735770941 CET	59606	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:57.736790895 CET	59608	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:57.855815887 CET	4258	59606	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:57.856882095 CET	4258	59608	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:57.857145071 CET	59608	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:57.857332945 CET	59608	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:57.994829893 CET	4258	59608	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:58.924025059 CET	4258	59608	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:58.924206972 CET	59608	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:58.924324036 CET	4258	59608	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:58.924418926 CET	59608	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:58.925250053 CET	59610	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:59.044054985 CET	4258	59608	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:59.044857979 CET	4258	59610	31.172.83.147	192.168.2.23
Dec 22, 2024 16:05:59.044995070 CET	59610	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:59.045154095 CET	59610	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:05:59.167618990 CET	4258	59610	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:00.114737034 CET	4258	59610	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:00.114785910 CET	4258	59610	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:00.114967108 CET	59610	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:00.115180969 CET	59610	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:00.116045952 CET	59612	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:00.234749079 CET	4258	59610	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:00.235703945 CET	4258	59612	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:00.235846996 CET	59612	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:00.236001968 CET	59612	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:00.355626106 CET	4258	59612	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:01.316745043 CET	4258	59612	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:01.316804886 CET	4258	59612	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:01.317293882 CET	59612	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:01.317507029 CET	59612	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:01.318377972 CET	59614	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:01.437172890 CET	4258	59612	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:01.437994003 CET	4258	59614	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:01.438186884 CET	59614	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:01.438359976 CET	59614	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:01.558196068 CET	4258	59614	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:02.504887104 CET	4258	59614	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:02.504940033 CET	4258	59614	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:02.505255938 CET	59614	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:02.505491972 CET	59614	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:02.506297112 CET	59616	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:02.625570059 CET	4258	59614	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:02.626475096 CET	4258	59616	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:02.626666069 CET	59616	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:02.626810074 CET	59616	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:02.746453047 CET	4258	59616	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:03.703013897 CET	4258	59616	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:03.703069925 CET	4258	59616	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:03.703186989 CET	59616	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:03.703306913 CET	59616	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:03.704299927 CET	59618	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:03.822921038 CET	4258	59616	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:03.823807955 CET	4258	59618	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:03.824100971 CET	59618	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:03.824239016 CET	59618	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:03.944394112 CET	4258	59618	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:04.907304049 CET	4258	59618	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:04.907385111 CET	4258	59618	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:04.907686949 CET	59618	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:04.907866955 CET	59618	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:04.908806086 CET	59620	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:05.028309107 CET	4258	59618	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:05.029292107 CET	4258	59620	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:05.029541969 CET	59620	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:05.029675007 CET	59620	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:05.150559902 CET	4258	59620	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:06.124078989 CET	4258	59620	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:06.124144077 CET	4258	59620	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:06.124414921 CET	59620	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:06.124538898 CET	59620	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:06.125605106 CET	59622	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:06.244455099 CET	4258	59620	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:06.245733023 CET	4258	59622	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:06.246063948 CET	59622	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:06.246165037 CET	59622	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:06.367825031 CET	4258	59622	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:07.314996004 CET	4258	59622	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:07.315078020 CET	4258	59622	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:07.315244913 CET	59622	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:07.315244913 CET	59622	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:07.315932989 CET	59624	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:07.436295033 CET	4258	59622	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:07.437441111 CET	4258	59624	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:07.437705994 CET	59624	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:07.437855005 CET	59624	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:07.557760954 CET	4258	59624	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:08.512785912 CET	4258	59624	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:08.512814999 CET	4258	59624	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:08.512945890 CET	59624	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:08.513019085 CET	59624	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:08.513576031 CET	59626	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:08.632648945 CET	4258	59624	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:08.633089066 CET	4258	59626	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:08.633176088 CET	59626	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:08.633213997 CET	59626	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:08.753164053 CET	4258	59626	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:09.708101988 CET	4258	59626	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:09.708267927 CET	4258	59626	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:09.708302975 CET	59626	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:09.708437920 CET	59626	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:09.709338903 CET	59628	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:09.828080893 CET	4258	59626	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:09.829010963 CET	4258	59628	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:09.829149961 CET	59628	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:09.829232931 CET	59628	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:09.948836088 CET	4258	59628	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:10.896773100 CET	4258	59628	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:10.896918058 CET	4258	59628	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:10.896944046 CET	59628	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:10.897002935 CET	59628	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:10.897654057 CET	59630	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:11.020334005 CET	4258	59628	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:11.020621061 CET	4258	59630	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:11.020720959 CET	59630	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:11.020767927 CET	59630	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:11.140970945 CET	4258	59630	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:12.130409956 CET	4258	59630	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:12.130513906 CET	4258	59630	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:12.130534887 CET	59630	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:12.130678892 CET	59630	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:12.131280899 CET	59632	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:12.250314951 CET	4258	59630	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:12.250871897 CET	4258	59632	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:12.251032114 CET	59632	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:12.251102924 CET	59632	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:12.370584011 CET	4258	59632	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:13.354491949 CET	4258	59632	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:13.354516983 CET	4258	59632	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:13.354659081 CET	59632	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:13.354764938 CET	59632	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:13.355735064 CET	59634	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:13.477205038 CET	4258	59632	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:13.477899075 CET	4258	59634	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:13.477988005 CET	59634	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:13.478246927 CET	59634	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:13.597910881 CET	4258	59634	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:14.544785976 CET	4258	59634	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:14.544920921 CET	59634	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:14.544972897 CET	4258	59634	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:14.545094967 CET	59634	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:14.545866966 CET	59636	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:14.664722919 CET	4258	59634	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:14.665620089 CET	4258	59636	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:14.665687084 CET	59636	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:14.665837049 CET	59636	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:14.785419941 CET	4258	59636	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:15.777740002 CET	4258	59636	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:15.777759075 CET	4258	59636	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:15.777853966 CET	59636	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:15.777936935 CET	59636	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:15.778647900 CET	59638	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:15.897741079 CET	4258	59636	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:15.898289919 CET	4258	59638	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:15.898400068 CET	59638	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:15.898430109 CET	59638	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:16.018129110 CET	4258	59638	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:16.972187042 CET	4258	59638	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:16.972270966 CET	4258	59638	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:16.972325087 CET	59638	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:16.972490072 CET	59638	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:16.973357916 CET	59640	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:17.093136072 CET	4258	59638	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:17.093148947 CET	4258	59640	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:17.093240023 CET	59640	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:17.093369961 CET	59640	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:17.212970972 CET	4258	59640	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:18.173260927 CET	4258	59640	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:18.173367977 CET	4258	59640	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:18.173589945 CET	59640	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:18.173712969 CET	59640	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:18.174535990 CET	59642	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:18.293596983 CET	4258	59640	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:18.294445038 CET	4258	59642	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:18.294562101 CET	59642	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:18.294615984 CET	59642	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:18.414515018 CET	4258	59642	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:19.518311977 CET	4258	59642	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:19.518415928 CET	4258	59642	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:19.518467903 CET	59642	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:19.518713951 CET	59642	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:19.519634008 CET	59644	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:19.638217926 CET	4258	59642	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:19.639159918 CET	4258	59644	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:19.639272928 CET	59644	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:19.639415026 CET	59644	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:19.758964062 CET	4258	59644	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:20.706346989 CET	4258	59644	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:20.706368923 CET	4258	59644	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:20.706613064 CET	59644	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:20.706803083 CET	59644	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:20.707655907 CET	59646	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:20.826375008 CET	4258	59644	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:20.827233076 CET	4258	59646	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:20.827353001 CET	59646	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:20.827581882 CET	59646	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:20.948946953 CET	4258	59646	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:21.896450043 CET	4258	59646	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:21.896503925 CET	4258	59646	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:21.896680117 CET	59646	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:21.897031069 CET	59646	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:21.897917986 CET	59648	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:22.016613007 CET	4258	59646	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:22.017417908 CET	4258	59648	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:22.017704010 CET	59648	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:22.017914057 CET	59648	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:22.137556076 CET	4258	59648	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:23.101267099 CET	4258	59648	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:23.101461887 CET	59648	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:23.101541042 CET	4258	59648	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:23.101625919 CET	59648	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:23.102396965 CET	59650	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:23.221252918 CET	4258	59648	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:23.221966982 CET	4258	59650	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:23.222129107 CET	59650	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:23.222239017 CET	59650	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:23.341764927 CET	4258	59650	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:24.288599014 CET	4258	59650	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:24.288659096 CET	4258	59650	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:24.288894892 CET	59650	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:24.289046049 CET	59650	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:24.289875031 CET	59652	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:24.408574104 CET	4258	59650	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:24.409477949 CET	4258	59652	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:24.409578085 CET	59652	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:24.409693956 CET	59652	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:24.529956102 CET	4258	59652	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:25.484101057 CET	4258	59652	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:25.484121084 CET	4258	59652	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:25.484338999 CET	59652	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:25.484529018 CET	59652	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:25.485395908 CET	59654	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:25.604124069 CET	4258	59652	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:25.605027914 CET	4258	59654	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:25.605127096 CET	59654	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:25.605247021 CET	59654	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:25.724692106 CET	4258	59654	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:26.689757109 CET	4258	59654	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:26.689927101 CET	4258	59654	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:26.689980030 CET	59654	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:26.690175056 CET	59654	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:26.690963984 CET	59656	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:26.810142040 CET	4258	59654	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:26.811100006 CET	4258	59656	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:26.811243057 CET	59656	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:26.811363935 CET	59656	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:26.931139946 CET	4258	59656	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:27.906709909 CET	4258	59656	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:27.906786919 CET	4258	59656	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:27.906874895 CET	59656	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:27.906945944 CET	59656	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:27.907552004 CET	59658	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:28.029766083 CET	4258	59656	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:28.030225039 CET	4258	59658	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:28.030318022 CET	59658	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:28.030405998 CET	59658	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:28.150903940 CET	4258	59658	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:29.109374046 CET	4258	59658	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:29.109405041 CET	4258	59658	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:29.109632015 CET	59658	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:29.109776020 CET	59658	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:29.110831976 CET	59660	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:29.229312897 CET	4258	59658	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:29.230386972 CET	4258	59660	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:29.230463982 CET	59660	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:29.230518103 CET	59660	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:29.350035906 CET	4258	59660	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:30.297892094 CET	4258	59660	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:30.297995090 CET	4258	59660	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:30.298150063 CET	59660	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:30.298317909 CET	59660	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:30.299042940 CET	59662	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:30.417881012 CET	4258	59660	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:30.418637991 CET	4258	59662	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:30.418735981 CET	59662	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:30.418847084 CET	59662	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:30.538290024 CET	4258	59662	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:31.485466003 CET	4258	59662	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:31.485516071 CET	4258	59662	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:31.485727072 CET	59662	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:31.485728025 CET	59662	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:31.486502886 CET	59664	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:31.605911016 CET	4258	59662	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:31.606551886 CET	4258	59664	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:31.606718063 CET	59664	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:31.606767893 CET	59664	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:31.726388931 CET	4258	59664	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:32.679953098 CET	4258	59664	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:32.680006027 CET	4258	59664	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:32.680094957 CET	59664	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:32.680372953 CET	59664	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:32.681303978 CET	59666	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:32.800023079 CET	4258	59664	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:32.800913095 CET	4258	59666	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:32.801029921 CET	59666	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:32.801285982 CET	59666	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:32.920802116 CET	4258	59666	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:33.878134012 CET	4258	59666	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:33.878182888 CET	4258	59666	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:33.878443956 CET	59666	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:33.878746033 CET	59666	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:33.879797935 CET	59668	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:33.998523951 CET	4258	59666	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:33.999381065 CET	4258	59668	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:33.999491930 CET	59668	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:33.999672890 CET	59668	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:34.119364977 CET	4258	59668	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:35.066955090 CET	4258	59668	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:35.067105055 CET	59668	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:35.067161083 CET	4258	59668	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:35.067373991 CET	59668	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:35.068509102 CET	59670	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:35.187062979 CET	4258	59668	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:35.188004017 CET	4258	59670	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:35.188133955 CET	59670	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:35.188405991 CET	59670	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:35.309499979 CET	4258	59670	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:36.256295919 CET	4258	59670	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:36.256349087 CET	4258	59670	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:36.256489992 CET	59670	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:36.256773949 CET	59670	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:36.257917881 CET	59672	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:36.376491070 CET	4258	59670	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:36.377758026 CET	4258	59672	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:36.377847910 CET	59672	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:36.377981901 CET	59672	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:36.497651100 CET	4258	59672	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:37.444998980 CET	4258	59672	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:37.445215940 CET	59672	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:37.445291042 CET	4258	59672	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:37.445416927 CET	59672	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:37.446238995 CET	59674	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:37.565241098 CET	4258	59672	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:37.565947056 CET	4258	59674	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:37.566060066 CET	59674	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:37.566168070 CET	59674	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:37.686718941 CET	4258	59674	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:38.700156927 CET	4258	59674	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:38.700170994 CET	4258	59674	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:38.700352907 CET	59674	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:38.700490952 CET	59674	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:38.701406956 CET	59676	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:38.820024014 CET	4258	59674	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:38.821013927 CET	4258	59676	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:38.821160078 CET	59676	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:38.821310997 CET	59676	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:38.940768003 CET	4258	59676	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:39.887773991 CET	4258	59676	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:39.887891054 CET	4258	59676	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:39.887917995 CET	59676	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:39.888154030 CET	59676	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:39.889179945 CET	59678	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:40.007663012 CET	4258	59676	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:40.008706093 CET	4258	59678	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:40.008819103 CET	59678	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:40.008900881 CET	59678	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:40.129539013 CET	4258	59678	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:41.078346968 CET	4258	59678	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:41.078452110 CET	4258	59678	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:41.078542948 CET	59678	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:41.078622103 CET	59678	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:41.079159021 CET	59680	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:41.199389935 CET	4258	59678	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:41.199718952 CET	4258	59680	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:41.199799061 CET	59680	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:41.199867964 CET	59680	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:41.319732904 CET	4258	59680	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:42.267297983 CET	4258	59680	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:42.267374992 CET	4258	59680	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:42.267436028 CET	59680	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:42.267537117 CET	59680	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:42.268246889 CET	59682	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:42.387227058 CET	4258	59680	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:42.387756109 CET	4258	59682	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:42.387819052 CET	59682	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:42.387876034 CET	59682	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:42.507536888 CET	4258	59682	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:43.464787006 CET	4258	59682	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:43.464937925 CET	4258	59682	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:43.465081930 CET	59682	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:43.465234041 CET	59682	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:43.466309071 CET	59684	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:43.585494995 CET	4258	59682	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:43.586227894 CET	4258	59684	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:43.586312056 CET	59684	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:43.586411953 CET	59684	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:43.705996037 CET	4258	59684	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:44.653122902 CET	4258	59684	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:44.653152943 CET	4258	59684	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:44.653289080 CET	59684	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:44.653336048 CET	59684	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:44.654279947 CET	59686	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:44.773082018 CET	4258	59684	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:44.773864985 CET	4258	59686	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:44.774080992 CET	59686	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:44.774159908 CET	59686	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:44.893835068 CET	4258	59686	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:45.842250109 CET	4258	59686	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:45.842274904 CET	4258	59686	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:45.842398882 CET	59686	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:45.842468023 CET	59686	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:45.843575954 CET	59688	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:45.964174032 CET	4258	59686	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:45.965559959 CET	4258	59688	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:45.965689898 CET	59688	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:45.965768099 CET	59688	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:46.085311890 CET	4258	59688	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:47.042500973 CET	4258	59688	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:47.042635918 CET	4258	59688	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:47.042826891 CET	59688	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:47.042913914 CET	59688	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:47.043900013 CET	59690	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:47.163142920 CET	4258	59688	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:47.164107084 CET	4258	59690	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:47.164268970 CET	59690	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:47.164268970 CET	59690	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:47.283884048 CET	4258	59690	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:48.252125978 CET	4258	59690	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:48.252329111 CET	4258	59690	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:48.252434015 CET	59690	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:48.252537012 CET	59690	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:48.253515005 CET	59692	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:48.372196913 CET	4258	59690	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:48.372999907 CET	4258	59692	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:48.373159885 CET	59692	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:48.373204947 CET	59692	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:48.492845058 CET	4258	59692	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:49.479667902 CET	4258	59692	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:49.479727983 CET	4258	59692	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:49.479744911 CET	59692	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:49.479867935 CET	59692	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:49.480541945 CET	59694	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:49.601711988 CET	4258	59692	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:49.601752043 CET	4258	59694	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:49.601877928 CET	59694	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:49.601907015 CET	59694	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:49.721502066 CET	4258	59694	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:50.668809891 CET	4258	59694	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:50.668865919 CET	4258	59694	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:50.668888092 CET	59694	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:50.669002056 CET	59694	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:50.669663906 CET	59696	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:50.789366961 CET	4258	59694	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:50.790005922 CET	4258	59696	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:50.790150881 CET	59696	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:50.790150881 CET	59696	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:50.911056995 CET	4258	59696	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:51.858422041 CET	4258	59696	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:51.858572960 CET	4258	59696	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:51.858704090 CET	59696	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:51.858741999 CET	59696	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:51.859334946 CET	59698	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:51.978939056 CET	4258	59696	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:51.979337931 CET	4258	59698	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:51.979505062 CET	59698	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:51.979506016 CET	59698	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:52.099214077 CET	4258	59698	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:53.059262037 CET	4258	59698	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:53.059290886 CET	4258	59698	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:53.059521914 CET	59698	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:53.059601068 CET	59698	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:53.060353041 CET	59700	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:53.179780006 CET	4258	59698	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:53.180418015 CET	4258	59700	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:53.180515051 CET	59700	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:53.180574894 CET	59700	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:53.300637007 CET	4258	59700	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:55.260664940 CET	4258	59700	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:55.260701895 CET	4258	59700	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:55.260860920 CET	59700	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:55.260956049 CET	59700	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:55.261609077 CET	59702	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:55.380747080 CET	4258	59700	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:55.381146908 CET	4258	59702	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:55.381241083 CET	59702	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:55.381321907 CET	59702	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:55.500761986 CET	4258	59702	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:56.448889971 CET	4258	59702	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:56.448966980 CET	4258	59702	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:56.449362993 CET	59702	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:56.449599028 CET	59702	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:56.450342894 CET	59704	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:56.569655895 CET	4258	59702	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:56.570257902 CET	4258	59704	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:56.570355892 CET	59704	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:56.570420027 CET	59704	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:56.690562010 CET	4258	59704	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:57.637070894 CET	4258	59704	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:57.637226105 CET	59704	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:57.637487888 CET	4258	59704	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:57.637557983 CET	59704	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:57.638144016 CET	59706	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:57.757170916 CET	4258	59704	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:57.757713079 CET	4258	59706	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:57.757806063 CET	59706	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:57.757855892 CET	59706	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:57.879887104 CET	4258	59706	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:58.828177929 CET	4258	59706	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:58.828356981 CET	59706	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:58.828372002 CET	4258	59706	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:58.828519106 CET	59706	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:58.829380989 CET	59708	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:58.948035002 CET	4258	59706	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:58.949026108 CET	4258	59708	31.172.83.147	192.168.2.23
Dec 22, 2024 16:06:58.949202061 CET	59708	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:58.949301004 CET	59708	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:06:59.068741083 CET	4258	59708	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:00.016043901 CET	4258	59708	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:00.016119003 CET	4258	59708	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:00.016359091 CET	59708	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:00.016421080 CET	59708	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:00.017023087 CET	59710	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:00.136205912 CET	4258	59708	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:00.136496067 CET	4258	59710	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:00.136600018 CET	59710	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:00.136614084 CET	59710	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:00.256225109 CET	4258	59710	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:01.213932037 CET	4258	59710	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:01.213983059 CET	4258	59710	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:01.214137077 CET	59710	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:01.214202881 CET	59710	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:01.214797974 CET	59712	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:01.333846092 CET	4258	59710	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:01.334430933 CET	4258	59712	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:01.334608078 CET	59712	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:01.334608078 CET	59712	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:01.454143047 CET	4258	59712	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:02.402101040 CET	4258	59712	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:02.402321100 CET	4258	59712	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:02.402412891 CET	59712	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:02.402690887 CET	59712	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:02.403601885 CET	59714	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:02.522773981 CET	4258	59712	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:02.523664951 CET	4258	59714	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:02.523821115 CET	59714	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:02.523989916 CET	59714	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:02.643563986 CET	4258	59714	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:03.590343952 CET	4258	59714	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:03.590398073 CET	4258	59714	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:03.590574980 CET	59714	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:03.590753078 CET	59714	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:03.591736078 CET	59716	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:03.710879087 CET	4258	59714	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:03.711510897 CET	4258	59716	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:03.711621046 CET	59716	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:03.711839914 CET	59716	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:03.832529068 CET	4258	59716	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:04.780858040 CET	4258	59716	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:04.780947924 CET	4258	59716	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:04.781141043 CET	59716	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:04.781194925 CET	59716	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:04.781995058 CET	59718	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:04.900968075 CET	4258	59716	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:04.901680946 CET	4258	59718	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:04.901915073 CET	59718	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:04.901915073 CET	59718	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:05.021473885 CET	4258	59718	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:05.986448050 CET	4258	59718	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:05.986484051 CET	4258	59718	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:05.986640930 CET	59718	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:05.986913919 CET	59718	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:05.987684965 CET	59720	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:06.106604099 CET	4258	59718	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:06.107405901 CET	4258	59720	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:06.107495070 CET	59720	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:06.107574940 CET	59720	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:06.227113008 CET	4258	59720	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:07.271110058 CET	4258	59720	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:07.271217108 CET	4258	59720	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:07.271294117 CET	59720	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:07.271580935 CET	59720	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:07.272464991 CET	59722	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:07.391325951 CET	4258	59720	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:07.392401934 CET	4258	59722	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:07.392508984 CET	59722	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:07.392661095 CET	59722	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:07.512187004 CET	4258	59722	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:08.459830046 CET	4258	59722	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:08.460033894 CET	59722	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:08.460079908 CET	4258	59722	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:08.460268974 CET	59722	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:08.460884094 CET	59724	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:08.579997063 CET	4258	59722	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:08.580786943 CET	4258	59724	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:08.580903053 CET	59724	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:08.581058025 CET	59724	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:08.701577902 CET	4258	59724	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:09.649524927 CET	4258	59724	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:09.649600983 CET	4258	59724	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:09.649759054 CET	59724	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:09.649869919 CET	59724	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:09.650716066 CET	59726	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:09.769526958 CET	4258	59724	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:09.770338058 CET	4258	59726	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:09.770488977 CET	59726	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:09.770742893 CET	59726	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:09.890427113 CET	4258	59726	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:10.865885973 CET	4258	59726	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:10.865966082 CET	4258	59726	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:10.866113901 CET	59726	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:10.866177082 CET	59726	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:10.866956949 CET	59728	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:10.986031055 CET	4258	59726	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:10.986543894 CET	4258	59728	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:10.986700058 CET	59728	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:10.986757040 CET	59728	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:11.106502056 CET	4258	59728	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:12.054757118 CET	4258	59728	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:12.054850101 CET	4258	59728	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:12.055104971 CET	59728	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:12.055216074 CET	59728	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:12.056055069 CET	59730	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:12.175075054 CET	4258	59728	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:12.175579071 CET	4258	59730	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:12.175707102 CET	59730	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:12.175818920 CET	59730	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:12.295304060 CET	4258	59730	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:13.254708052 CET	4258	59730	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:13.254724979 CET	4258	59730	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:13.254955053 CET	59730	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:13.255012035 CET	59730	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:13.255578995 CET	59732	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:13.374804020 CET	4258	59730	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:13.375355959 CET	4258	59732	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:13.375509024 CET	59732	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:13.375607967 CET	59732	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:13.495242119 CET	4258	59732	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:14.445241928 CET	4258	59732	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:14.445266008 CET	4258	59732	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:14.445439100 CET	59732	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:14.445516109 CET	59732	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:14.445955992 CET	59734	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:14.565629005 CET	4258	59732	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:14.565934896 CET	4258	59734	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:14.566239119 CET	59734	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:14.566334009 CET	59734	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:14.686101913 CET	4258	59734	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:15.633865118 CET	4258	59734	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:15.634078979 CET	4258	59734	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:15.634139061 CET	59734	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:15.634253025 CET	59734	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:15.634969950 CET	59736	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:15.753909111 CET	4258	59734	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:15.754492044 CET	4258	59736	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:15.754585028 CET	59736	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:15.754751921 CET	59736	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:15.874380112 CET	4258	59736	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:16.822201967 CET	4258	59736	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:16.822263956 CET	4258	59736	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:16.822508097 CET	59736	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:16.822596073 CET	59736	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:16.823369026 CET	59738	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:16.942482948 CET	4258	59736	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:16.943423033 CET	4258	59738	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:16.943519115 CET	59738	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:16.943629980 CET	59738	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:17.063101053 CET	4258	59738	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:18.015325069 CET	4258	59738	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:18.015444994 CET	4258	59738	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:18.015480995 CET	59738	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:18.015547037 CET	59738	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:18.016127110 CET	59740	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:18.135057926 CET	4258	59738	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:18.135689020 CET	4258	59740	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:18.135796070 CET	59740	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:18.135900021 CET	59740	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:18.257210970 CET	4258	59740	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:19.203365088 CET	4258	59740	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:19.203386068 CET	4258	59740	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:19.203511000 CET	59740	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:19.203630924 CET	59740	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:19.204261065 CET	59742	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:19.324013948 CET	4258	59740	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:19.324697971 CET	4258	59742	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:19.324800014 CET	59742	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:19.324893951 CET	59742	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:19.444624901 CET	4258	59742	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:20.423527002 CET	4258	59742	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:20.423630953 CET	4258	59742	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:20.423655033 CET	59742	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:20.423818111 CET	59742	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:20.424541950 CET	59744	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:20.543239117 CET	4258	59742	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:20.544020891 CET	4258	59744	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:20.544167995 CET	59744	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:20.544313908 CET	59744	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:20.663872957 CET	4258	59744	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:21.620243073 CET	4258	59744	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:21.620376110 CET	4258	59744	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:21.620524883 CET	59744	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:21.620572090 CET	59744	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:21.621121883 CET	59746	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:21.740696907 CET	4258	59744	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:21.741013050 CET	4258	59746	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:21.741117954 CET	59746	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:21.741348028 CET	59746	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:21.861547947 CET	4258	59746	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:22.812617064 CET	4258	59746	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:22.812639952 CET	4258	59746	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:22.812798977 CET	59746	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:22.812963009 CET	59746	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:22.813683033 CET	59748	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:22.932475090 CET	4258	59746	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:22.933370113 CET	4258	59748	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:22.933454037 CET	59748	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:22.933541059 CET	59748	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:23.053245068 CET	4258	59748	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:24.000236034 CET	4258	59748	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:24.000314951 CET	4258	59748	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:24.000375986 CET	59748	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:24.000471115 CET	59748	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:24.000965118 CET	59750	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:24.120295048 CET	4258	59748	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:24.120556116 CET	4258	59750	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:24.120640039 CET	59750	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:24.120680094 CET	59750	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:24.244172096 CET	4258	59750	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:25.191102028 CET	4258	59750	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:25.191212893 CET	4258	59750	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:25.191257000 CET	59750	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:25.191358089 CET	59750	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:25.191853046 CET	59752	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:25.311830997 CET	4258	59750	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:25.312268972 CET	4258	59752	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:25.312355042 CET	59752	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:25.312458992 CET	59752	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:25.431946039 CET	4258	59752	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:26.402961016 CET	4258	59752	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:26.403068066 CET	4258	59752	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:26.403203964 CET	59752	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:26.403532028 CET	59752	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:26.404119015 CET	59754	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:26.524566889 CET	4258	59752	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:26.525289059 CET	4258	59754	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:26.525392056 CET	59754	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:26.525516033 CET	59754	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:26.647962093 CET	4258	59754	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:27.619841099 CET	4258	59754	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:27.619879007 CET	4258	59754	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:27.620034933 CET	59754	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:27.620167971 CET	59754	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:27.620942116 CET	59756	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:27.740314007 CET	4258	59754	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:27.740858078 CET	4258	59756	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:27.740956068 CET	59756	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:27.741044998 CET	59756	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:27.862292051 CET	4258	59756	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:28.809254885 CET	4258	59756	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:28.809407949 CET	4258	59756	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:28.809417009 CET	59756	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:28.809523106 CET	59756	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:28.809983015 CET	59758	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:28.930654049 CET	4258	59756	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:28.931056976 CET	4258	59758	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:28.931143999 CET	59758	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:28.931246042 CET	59758	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:29.053442955 CET	4258	59758	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:30.001162052 CET	4258	59758	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:30.001266956 CET	4258	59758	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:30.001297951 CET	59758	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:30.001375914 CET	59758	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:30.001902103 CET	59760	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:30.124947071 CET	4258	59758	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:30.125585079 CET	4258	59760	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:30.125838995 CET	59760	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:30.125979900 CET	59760	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:30.245511055 CET	4258	59760	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:31.222352028 CET	4258	59760	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:31.222373962 CET	4258	59760	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:31.222592115 CET	59760	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:31.222724915 CET	59760	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:31.223486900 CET	59762	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:31.342978954 CET	4258	59760	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:31.344006062 CET	4258	59762	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:31.344126940 CET	59762	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:31.344305038 CET	59762	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:31.465536118 CET	4258	59762	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:32.426712990 CET	4258	59762	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:32.426775932 CET	4258	59762	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:32.427030087 CET	59762	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:32.427107096 CET	59762	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:32.427833080 CET	59764	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:32.546865940 CET	4258	59762	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:32.547369003 CET	4258	59764	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:32.547472000 CET	59764	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:32.547671080 CET	59764	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:32.667188883 CET	4258	59764	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:33.616022110 CET	4258	59764	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:33.616077900 CET	4258	59764	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:33.616349936 CET	59764	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:33.616466045 CET	59764	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:33.617194891 CET	59766	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:33.736409903 CET	4258	59764	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:33.736958981 CET	4258	59766	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:33.737051964 CET	59766	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:33.737416029 CET	59766	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:33.862641096 CET	4258	59766	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:34.812253952 CET	4258	59766	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:34.812304974 CET	4258	59766	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:34.812469006 CET	59766	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:34.812741041 CET	59766	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:34.813419104 CET	59768	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:34.932701111 CET	4258	59766	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:34.933195114 CET	4258	59768	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:34.933255911 CET	59768	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:34.933557034 CET	59768	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:35.053062916 CET	4258	59768	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:36.232825994 CET	4258	59768	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:36.232916117 CET	4258	59768	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:36.233007908 CET	59768	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:36.233230114 CET	59768	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:36.234020948 CET	59770	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:36.352806091 CET	4258	59768	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:36.353446960 CET	4258	59770	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:36.353696108 CET	59770	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:36.354010105 CET	59770	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:36.473439932 CET	4258	59770	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:37.420708895 CET	4258	59770	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:37.420793056 CET	59770	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:37.420908928 CET	4258	59770	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:37.421055079 CET	59770	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:37.421827078 CET	59772	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:37.540555000 CET	4258	59770	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:37.541461945 CET	4258	59772	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:37.541565895 CET	59772	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:37.541666031 CET	59772	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:37.661655903 CET	4258	59772	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:38.608778000 CET	4258	59772	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:38.608901978 CET	59772	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:38.608995914 CET	4258	59772	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:38.609119892 CET	59772	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:38.609821081 CET	59774	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:38.728614092 CET	4258	59772	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:38.729259014 CET	4258	59774	31.172.83.147	192.168.2.23
Dec 22, 2024 16:07:38.729340076 CET	59774	4258	192.168.2.23	31.172.83.147
Dec 22, 2024 16:07:38.729479074 CET	59774	4258	192.168.2.23	31.172.83.147

System Behavior

Analysis Process: hidakibest.arm6.elf PID: 6267, Parent PID: 6192

General

Start time (UTC):	15:04:03
Start date (UTC):	22/12/2024
Path:	/tmp/hidakibest.arm6.elf
Arguments:	/tmp/hidakibest.arm6.elf
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: hidakibest.arm6.elf PID: 6269, Parent PID: 6267

General

Start time (UTC):	15:04:03
Start date (UTC):	22/12/2024
Path:	/tmp/hidakibest.arm6.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: hidakibest.arm6.elf PID: 6271, Parent PID: 6269

General

Start time (UTC):	15:04:03
Start date (UTC):	22/12/2024
Path:	/tmp/hidakibest.arm6.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: dash PID: 6282, Parent PID: 4334

General

Start time (UTC):	15:04:17
Start date (UTC):	22/12/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: rm PID: 6282, Parent PID: 4334

General

Start time (UTC):	15:04:17
Start date (UTC):	22/12/2024
Path:	/usr/bin/rm
Arguments:	rm -f /tmp/tmp.XKxJgvhRCG /tmp/tmp.ikWBHRzfne /tmp/tmp.I8yurdFHPW
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Chronological Activities

Analysis Process: dash PID: 6283, Parent PID: 4334

General

Start time (UTC):	15:04:17
Start date (UTC):	22/12/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: rm PID: 6283, Parent PID: 4334

General

Start time (UTC):	15:04:17
Start date (UTC):	22/12/2024
Path:	/usr/bin/rm
Arguments:	rm -f /tmp/tmp.XKxJgvhRCG /tmp/tmp.ikWBHRzfne /tmp/tmp.I8yurdFHPW
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system. Functionality could exist within remote access tools to enable this, but utilities available on the operating system could also be used such as Ping or `net view` using Net .
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Network Traffic: Network Connection Creation, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may obfuscate command and control traffic to make it more difficult to detect. Command and control (C2) communications are hidden (but not necessarily encrypted) in an attempt to make the content more difficult to discover or decipher and to make the communication less conspicuous and hide commands from being seen. This encompasses many methods, such as adding junk data to protocol traffic, using steganography, or impersonating legitimate protocols.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report hidakibest.arm6.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Persistence and Installation Behavior

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Threatname: Gafgyt

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Network Port Distribution

TCP Packets

System Behavior

Analysis Process: hidakibest.arm6.elf PID: 6267, Parent PID: 6192

General

Chronological Activities

Analysis Process: hidakibest.arm6.elf PID: 6269, Parent PID: 6267

General

Chronological Activities

Analysis Process: hidakibest.arm6.elf PID: 6271, Parent PID: 6269

General

Chronological Activities

Analysis Process: dash PID: 6282, Parent PID: 4334

General

Chronological Activities

Analysis Process: rm PID: 6282, Parent PID: 4334

General

Linux Analysis Report
hidakibest.arm6.elf