Edit tour

Linux Analysis Report
hidakibest.mips.elf

Overview

General Information

Sample name:	hidakibest.mips.elf
Analysis ID:	1579494
MD5:	0faba175f8b037661975056bed631c15
SHA1:	668150ff8d38aeb805394a1169607facc7c79d4e
SHA256:	3c8123a8a0ec8b8282782106dd5bc2279367732377813fa93d383dbedd5fc9f1
Tags:	elfuser-abuse_ch
Infos:

Detection

Gafgyt, Mirai

Score:	92
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Yara detected Gafgyt

Yara detected Mirai

Opens /proc/net/* files useful for finding connected devices and routers

Detected TCP or UDP traffic on non-standard ports

Sample contains strings that are user agent strings indicative of HTTP manipulation

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1579494
Start date and time:	2024-12-22 16:05:18 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 15s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	hidakibest.mips.elf
Detection:	MAL
Classification:	mal92.spre.troj.linELF@0/1@2/0

Warnings

VT rate limit hit for: 31.172.83.147:4258
VT rate limit hit for: http://fast.no/support/crawler.asp)
VT rate limit hit for: http://feedback.redkolibri.com/
VT rate limit hit for: http://www.billybobbot.com/crawler/)

Runtime Messages

Command:	/tmp/hidakibest.mips.elf
PID:	5554
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:

Process Tree

system is lnxubuntu20

hidakibest.mips.elf (PID: 5554, Parent: 5471, MD5: 0083f1f0e77be34ad27f849842bbb00c) Arguments: /tmp/hidakibest.mips.elf

hidakibest.mips.elf New Fork (PID: 5556, Parent: 5554)

hidakibest.mips.elf New Fork (PID: 5558, Parent: 5556)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
hidakibest.mips.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
hidakibest.mips.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
hidakibest.mips.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x12358:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1236c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12380:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12394:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x123a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x123bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x123d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x123e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x123f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1240c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12420:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12434:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12448:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1245c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12470:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12484:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12498:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x124ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x124c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x124d4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x124e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
hidakibest.mips.elf	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x12308:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64

Memory Dumps

Source	Rule	Description	Author	Strings
5556.1.00007f0984400000.00007f0984415000.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
5556.1.00007f0984400000.00007f0984415000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5556.1.00007f0984400000.00007f0984415000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x12358:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1236c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12380:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12394:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x123a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x123bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x123d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x123e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x123f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1240c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12420:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12434:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12448:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1245c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12470:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12484:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12498:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x124ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x124c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x124d4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x124e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5556.1.00007f0984400000.00007f0984415000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x12308:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
5554.1.00007f0984400000.00007f0984415000.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
5554.1.00007f0984400000.00007f0984415000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5554.1.00007f0984400000.00007f0984415000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x12358:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1236c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12380:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12394:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x123a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x123bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x123d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x123e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x123f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1240c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12420:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12434:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12448:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1245c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12470:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12484:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12498:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x124ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x124c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x124d4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x124e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5554.1.00007f0984400000.00007f0984415000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x12308:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: hidakibest.mips.elf PID: 5554	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: hidakibest.mips.elf PID: 5554	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x376d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3781:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3795:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x37a9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x37bd:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x37d1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x37e5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x37f9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x380d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3821:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3835:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3849:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x385d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3871:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3885:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3899:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x38ad:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x38c1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x38d5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x38e9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x38fd:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: hidakibest.mips.elf PID: 5554	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x3720:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64 0x3b92:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: hidakibest.mips.elf PID: 5556	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: hidakibest.mips.elf PID: 5556	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x6ec3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6ed7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6eeb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6eff:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6f13:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6f27:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6f3b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6f4f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6f63:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6f77:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6f8b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6f9f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6fb3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6fc7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6fdb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6fef:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7003:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7017:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x702b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x703f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7053:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: hidakibest.mips.elf PID: 5556	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x6e76:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64 0x72e8:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Click to see the 9 entries

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: hidakibest.mips.elf

Avira: detected

Found malware configuration

Source: hidakibest.mips.elf

Malware Configuration Extractor: Gafgyt {"C2 url": "31.172.83.147:4258"}

Multi AV Scanner detection for submitted file

Source: hidakibest.mips.elf	Virustotal: Detection: 60%			Perma Link
Source: hidakibest.mips.elf	ReversingLabs: Detection: 63%

Spreading

Opens /proc/net/* files useful for finding connected devices and routers

Source: /tmp/hidakibest.mips.elf (PID: 5554)

Opens: /proc/net/route

Jump to behavior

Source: global traffic

TCP traffic: 192.168.2.14:56890 -> 31.172.83.147:4258

Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147

Source: global traffic

DNS traffic detected: DNS query: daisy.ubuntu.com

Source: hidakibest.mips.elf	String found in binary or memory: http://fast.no/support/crawler.asp)
Source: hidakibest.mips.elf	String found in binary or memory: http://feedback.redkolibri.com/
Source: hidakibest.mips.elf	String found in binary or memory: http://www.baidu.com/search/spider.htm)
Source: hidakibest.mips.elf	String found in binary or memory: http://www.baidu.com/search/spider.html)
Source: hidakibest.mips.elf	String found in binary or memory: http://www.billybobbot.com/crawler/)

System Summary

Malicious sample detected (through community Yara rule)

Source: hidakibest.mips.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: hidakibest.mips.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5556.1.00007f0984400000.00007f0984415000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5556.1.00007f0984400000.00007f0984415000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5554.1.00007f0984400000.00007f0984415000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5554.1.00007f0984400000.00007f0984415000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: hidakibest.mips.elf PID: 5554, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: hidakibest.mips.elf PID: 5554, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: hidakibest.mips.elf PID: 5556, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: hidakibest.mips.elf PID: 5556, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown

Source: hidakibest.mips.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: hidakibest.mips.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5556.1.00007f0984400000.00007f0984415000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5556.1.00007f0984400000.00007f0984415000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5554.1.00007f0984400000.00007f0984415000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5554.1.00007f0984400000.00007f0984415000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: hidakibest.mips.elf PID: 5554, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: hidakibest.mips.elf PID: 5554, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: hidakibest.mips.elf PID: 5556, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: hidakibest.mips.elf PID: 5556, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16

Source: classification engine

Classification label: mal92.spre.troj.linELF@0/1@2/0

Source: hidakibest.mips.elf	ELF static info symbol of initial sample: libc/string/mips/memcpy.S
Source: hidakibest.mips.elf	ELF static info symbol of initial sample: libc/string/mips/memset.S
Source: hidakibest.mips.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/mips/crt1.S
Source: hidakibest.mips.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/mips/crti.S
Source: hidakibest.mips.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/mips/crtn.S

Source: /tmp/hidakibest.mips.elf (PID: 5554)

Queries kernel information via 'uname':

Jump to behavior

Source: hidakibest.mips.elf, 5554.1.00007ffe694f2000.00007ffe69513000.rw-.sdmp	Binary or memory string: /tmp/qemu-open.ykIPqa
Source: hidakibest.mips.elf, 5554.1.000055bbaeb30000.000055bbaebb7000.rw-.sdmp, hidakibest.mips.elf, 5556.1.000055bbaeb30000.000055bbaebb7000.rw-.sdmp	Binary or memory string: U!/etc/qemu-binfmt/mips
Source: hidakibest.mips.elf, 5554.1.000055bbaeb30000.000055bbaebb7000.rw-.sdmp, hidakibest.mips.elf, 5556.1.000055bbaeb30000.000055bbaebb7000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/mips
Source: hidakibest.mips.elf, 5554.1.00007ffe694f2000.00007ffe69513000.rw-.sdmp, hidakibest.mips.elf, 5556.1.00007ffe694f2000.00007ffe69513000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-mips
Source: hidakibest.mips.elf, 5554.1.00007ffe694f2000.00007ffe69513000.rw-.sdmp, hidakibest.mips.elf, 5556.1.00007ffe694f2000.00007ffe69513000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-mips/tmp/hidakibest.mips.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/hidakibest.mips.elf
Source: hidakibest.mips.elf, 5554.1.00007ffe694f2000.00007ffe69513000.rw-.sdmp	Binary or memory string: U/tmp/qemu-open.ykIPqa\4<

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match	File source: hidakibest.mips.elf, type: SAMPLE
Source: Yara match	File source: 5556.1.00007f0984400000.00007f0984415000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5554.1.00007f0984400000.00007f0984415000.r-x.sdmp, type: MEMORY

Yara detected Mirai

Source: Yara match	File source: hidakibest.mips.elf, type: SAMPLE
Source: Yara match	File source: 5556.1.00007f0984400000.00007f0984415000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5554.1.00007f0984400000.00007f0984415000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: hidakibest.mips.elf PID: 5554, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: hidakibest.mips.elf PID: 5556, type: MEMORYSTR

Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36
Source: Initial sample	User agent string found: Opera/9.80 (X11; Linux i686; Ubuntu/14.10) Presto/2.12.388 Version/12.16
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows; U; Windows NT 6.1; rv:2.2) Gecko/20110201
Source: Initial sample	User agent string found: Opera/9.80 (Windows NT 5.2; U; ru) Presto/2.5.22 Version/10.51
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; AS; rv:11.0) like Gecko
Source: Initial sample	User agent string found: Mozilla/5.0 (Android; Linux armv7l; rv:9.0) Gecko/20111216 Firefox/9.0 Fennec/9.0
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/536.5 (KHTML, like Gecko) Chrome/19.0.1084.56 Safari/536.5
Source: Initial sample	User agent string found: Opera/9.80 (Windows NT 5.1; U; en) Presto/2.10.229 Version/11.60
Source: Initial sample	User agent string found: Mozilla/5.0 (iPad; U; CPU OS 5_1 like Mac OS X) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B367 Safari/531.21.10 UCBrowser/3.4.3.532
Source: Initial sample	User agent string found: Mozilla/5.0 (Nintendo WiiU) AppleWebKit/536.30 (KHTML, like Gecko) NX/3.0.4.2.12 NintendoBrowser/4.3.1.11264.US
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:25.0) Gecko/20100101 Firefox/25.0
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; pl) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; en) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; ja) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; cn) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; fr) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:12.0) Gecko/20100101 Firefox/12.0
Source: Initial sample	User agent string found: Mozilla/5.0 (X11; U; Linux x86_64; de; rv:1.9.2.8) Gecko/20100723 Ubuntu/10.04 (lucid) Firefox/3.6.8
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1; rv:13.0) Gecko/20100101 Firefox/13.0.1
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:11.0) Gecko/20100101 Firefox/11.0
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1
Source: Initial sample	User agent string found: Opera/9.80 (Windows NT 5.1; U; en) Presto/2.10.289 Version/12.01
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1; rv:5.0.1) Gecko/20100101 Firefox/5.0.1
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; rv:5.0) Gecko/20100101 Firefox/5.02
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.0) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.112 Safari/535.1
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36

Remote Access Functionality

Yara detected Gafgyt

Source: Yara match	File source: hidakibest.mips.elf, type: SAMPLE
Source: Yara match	File source: 5556.1.00007f0984400000.00007f0984415000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5554.1.00007f0984400000.00007f0984415000.r-x.sdmp, type: MEMORY

Yara detected Mirai

Source: Yara match	File source: hidakibest.mips.elf, type: SAMPLE
Source: Yara match	File source: 5556.1.00007f0984400000.00007f0984415000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5554.1.00007f0984400000.00007f0984415000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: hidakibest.mips.elf PID: 5554, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: hidakibest.mips.elf PID: 5556, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Data Obfuscation	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	1 Remote System Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Application Layer Protocol	Traffic Duplication	Data Destruction

Malware Configuration

Threatname: Gafgyt

{"C2 url": "31.172.83.147:4258"}

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
hidakibest.mips.elf	61%	Virustotal		Browse
hidakibest.mips.elf	63%	ReversingLabs	Linux.Trojan.Mirai
hidakibest.mips.elf	100%	Avira	EXP/ELF.Mirai.Z.A

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
daisy.ubuntu.com	162.213.35.24	true	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
31.172.83.147:4258	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://www.baidu.com/search/spider.html)	hidakibest.mips.elf	false	high
http://www.billybobbot.com/crawler/)	hidakibest.mips.elf	false	unknown
http://fast.no/support/crawler.asp)	hidakibest.mips.elf	false	unknown
http://feedback.redkolibri.com/	hidakibest.mips.elf	false	unknown
http://www.baidu.com/search/spider.htm)	hidakibest.mips.elf	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
31.172.83.147	unknown	Germany		44066	DE-FIRSTCOLOwwwfirst-colonetDE	true

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
31.172.83.147	hidakibest.arm6.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	hidakibest.arm4.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	boatnet.m68k.elf	Get hash	malicious	Mirai	Browse
	boatnet.ppc.elf	Get hash	malicious	Mirai	Browse
	boatnet.arm.elf	Get hash	malicious	Mirai	Browse
	boatnet.sh4.elf	Get hash	malicious	Mirai	Browse
	boatnet.mips.elf	Get hash	malicious	Mirai	Browse
	boatnet.mpsl.elf	Get hash	malicious	Mirai	Browse
	main_x86.elf	Get hash	malicious	Mirai	Browse
	boatnet.m68k.elf	Get hash	malicious	Mirai	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
daisy.ubuntu.com	hidakibest.arm4.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	hidakibest.x86.elf	Get hash	malicious	Mirai, Gafgyt	Browse	162.213.35.25
	hidakibest.arm5.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.24
	hidakibest.mpsl.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.24
	hidakibest.arm7.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.24
	hidakibest.sparc.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	Space.arm6.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	most-mpsl.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	arm.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	byte.x86.elf	Get hash	malicious	Mirai, Okiru	Browse	162.213.35.25

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
DE-FIRSTCOLOwwwfirst-colonetDE	hidakibest.arm6.elf	Get hash	malicious	Gafgyt, Mirai	Browse	31.172.83.147
	hidakibest.arm4.elf	Get hash	malicious	Gafgyt, Mirai	Browse	31.172.83.147
	https://www.tblgroup.com/tbl2/certificados-digitales/	Get hash	malicious	CAPTCHA Scam ClickFix	Browse	185.26.98.68
	boatnet.m68k.elf	Get hash	malicious	Mirai	Browse	31.172.83.147
	boatnet.ppc.elf	Get hash	malicious	Mirai	Browse	31.172.83.147
	boatnet.arm.elf	Get hash	malicious	Mirai	Browse	31.172.83.147
	boatnet.sh4.elf	Get hash	malicious	Mirai	Browse	31.172.83.147
	boatnet.mips.elf	Get hash	malicious	Mirai	Browse	31.172.83.147
	boatnet.mpsl.elf	Get hash	malicious	Mirai	Browse	31.172.83.147
	236236236.elf	Get hash	malicious	Unknown	Browse	91.228.155.204

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

/tmp/qemu-open.ykIPqa (deleted)

Download File

Process:	/tmp/hidakibest.mips.elf
File Type:	ASCII text
Category:	dropped
Size (bytes):	230
Entropy (8bit):	3.709552666863289
Encrypted:	false
SSDEEP:	6:iekrEcvwAsE5KlwSd4pzKaV6Lpms/a/1VCxGF:ur+m5MwSdIKaV6L1adVRF
MD5:	2E667F43AE18CD1FE3C108641708A82C
SHA1:	12B90DE2DA0FBCFE66F3D6130905E56C8D6A68D3
SHA-256:	6F721492E7A337C5B498A8F55F5EB7AC745AFF716D0B5B08EFF2C1B6B250F983
SHA-512:	D2A0EE2509154EC1098994F38BE172F98F4150399C534A04D5C675D7C05630802225019F19344CC9070C576BC465A4FEB382AC7712DE6BF25E9244B54A9DB830
Malicious:	false
Reputation:	high, very likely benign file
Preview:	Iface.Destination.Gateway .Flags.RefCnt.Use.Metric.Mask..MTU.Window.IRTT .ens160.00000000.c0a80201.0003.0.0.0.00000000.0.0.0.ens160.c0a80200.00000000.0001.0.0.0.ffffff00.0.0.0.

Static File Info

General

File type:	ELF 32-bit MSB executable, MIPS, MIPS-I version 1 (SYSV), statically linked, not stripped
Entropy (8bit):	5.452356590451363
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	hidakibest.mips.elf
File size:	114'575 bytes
MD5:	0faba175f8b037661975056bed631c15
SHA1:	668150ff8d38aeb805394a1169607facc7c79d4e
SHA256:	3c8123a8a0ec8b8282782106dd5bc2279367732377813fa93d383dbedd5fc9f1
SHA512:	a6657212b3fc60d8ae90cb37b4530a11be86e2f2910d404583f50c0433b66a9209e258536a2ec8f7dbc69fbcd6d05e18618b19c3b51fe3d705e1292c6bbce4c8
SSDEEP:	3072:DWmzrbF74jl5hU8tRreU4gQKdwwzF9GhsRiAe:DLzrJ8l5hU8t2KdwwzF9GhsRiAe
TLSH:	BCB3C96B3A21AFFBE06983310BF79F2087D522D626915342F15CE7585E3128D2C5FBA4
File Content Preview:	.ELF.....................@.....4..t......4. ...(....p........@...@...........................@...@....B...B...............B..EB..EB....8..q.........dt.Q.................................................E..<...'......!'.......................<...'......!...

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, big endian
Version:	1 (current)
Machine:	MIPS R3000
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x4002a0
Flags:	0x1007
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	4
Section Header Offset:	95396
Section Header Size:	40
Number of Section Headers:	21
Header String Table Index:	18

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.reginfo	MIPS_REGINFO	0x4000b4	0xb4	0x18	0x18	0x2	A	0	0	4
.init	PROGBITS	0x4000cc	0xcc	0x8c	0x0	0x6	AX	0	0	4
.text	PROGBITS	0x400160	0x160	0x10590	0x0	0x6	AX	0	0	16
.fini	PROGBITS	0x4106f0	0x106f0	0x5c	0x0	0x6	AX	0	0	4
.rodata	PROGBITS	0x410750	0x10750	0x3b34	0x0	0x2	A	0	0	16
.eh_frame	PROGBITS	0x414284	0x14284	0x4	0x0	0x2	A	0	0	4
.ctors	PROGBITS	0x454288	0x14288	0x8	0x0	0x3	WA	0	0	4
.dtors	PROGBITS	0x454290	0x14290	0x8	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x454298	0x14298	0x4	0x0	0x3	WA	0	0	4
.data.rel.ro	PROGBITS	0x45429c	0x1429c	0x4d0	0x0	0x3	WA	0	0	4
.data	PROGBITS	0x454770	0x14770	0x520	0x0	0x3	WA	0	0	16
.got	PROGBITS	0x454c90	0x14c90	0x430	0x4	0x10000003	WAp	0	0	16
.sbss	NOBITS	0x4550c0	0x150c0	0x18	0x0	0x10000003	WAp	0	0	4
.bss	NOBITS	0x4550e0	0x150c0	0x63a4	0x0	0x3	WA	0	0	16
.comment	PROGBITS	0x0	0x150c0	0xa68	0x0	0x0		0	0	1
.mdebug.abi32	PROGBITS	0xa68	0x15b28	0x0	0x0	0x0		0	0	1
.pdr	PROGBITS	0x0	0x15b28	0x18e0	0x0	0x0		0	0	4
.shstrtab	STRTAB	0x0	0x17408	0x9a	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x177ec	0x28f0	0x10	0x0		20	283	4
.strtab	STRTAB	0x0	0x1a0dc	0x1eb3	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
<unknown>	0xb4	0x4000b4	0x4000b4	0x18	0x18	0.9834	0x4	R	0x4	.reginfo
LOAD	0x0	0x400000	0x400000	0x14288	0x14288	5.5002	0x5	R E	0x10000	.reginfo .init .text .fini .rodata .eh_frame
LOAD	0x14288	0x454288	0x454288	0xe38	0x71fc	4.3665	0x6	RW	0x10000	.ctors .dtors .jcr .data.rel.ro .data .got .sbss .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x4000b4	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x4000cc	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x400160	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x4106f0	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x410750	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x414284	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x454288	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x454290	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x454298	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x45429c	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x454770	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x454c90	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x4550c0	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x4550e0	0	SECTION	<unknown>	DEFAULT	14
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	15
	.symtab	0xa68	0	SECTION	<unknown>	DEFAULT	16
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	17
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	18
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	19
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	20
C.72.4725	.symtab	0x45429c	104	OBJECT	<unknown>	DEFAULT	10
C.82.4830	.symtab	0x454304	1128	OBJECT	<unknown>	DEFAULT	10
Q	.symtab	0x455118	16384	OBJECT	<unknown>	DEFAULT	14
Randhex	.symtab	0x402c10	688	FUNC	<unknown>	DEFAULT	3
SendSTD	.symtab	0x402548	680	FUNC	<unknown>	DEFAULT	3
UDPRAW	.symtab	0x402a00	528	FUNC	<unknown>	DEFAULT	3
_GLOBAL_OFFSET_TABLE_	.symtab	0x454c90	0	OBJECT	<unknown>	DEFAULT	12
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__CTOR_END__	.symtab	0x45428c	0	OBJECT	<unknown>	DEFAULT	7
__CTOR_LIST__	.symtab	0x454288	0	OBJECT	<unknown>	DEFAULT	7
__C_ctype_b	.symtab	0x4548b0	4	OBJECT	<unknown>	DEFAULT	11
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x412af0	768	OBJECT	<unknown>	DEFAULT	5
__C_ctype_tolower	.symtab	0x454c30	4	OBJECT	<unknown>	DEFAULT	11
__C_ctype_tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_tolower_data	.symtab	0x413e20	768	OBJECT	<unknown>	DEFAULT	5
__C_ctype_toupper	.symtab	0x4548c0	4	OBJECT	<unknown>	DEFAULT	11
__C_ctype_toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_toupper_data	.symtab	0x412df0	768	OBJECT	<unknown>	DEFAULT	5
__DTOR_END__	.symtab	0x454294	0	OBJECT	<unknown>	DEFAULT	8
__DTOR_LIST__	.symtab	0x454290	0	OBJECT	<unknown>	DEFAULT	8
__EH_FRAME_BEGIN__	.symtab	0x414284	0	OBJECT	<unknown>	DEFAULT	6
__FRAME_END__	.symtab	0x414284	0	OBJECT	<unknown>	DEFAULT	6
__GI___C_ctype_b	.symtab	0x4548b0	4	OBJECT	<unknown>	HIDDEN	11
__GI___C_ctype_b_data	.symtab	0x412af0	768	OBJECT	<unknown>	HIDDEN	5
__GI___C_ctype_tolower	.symtab	0x454c30	4	OBJECT	<unknown>	HIDDEN	11
__GI___C_ctype_tolower_data	.symtab	0x413e20	768	OBJECT	<unknown>	HIDDEN	5
__GI___C_ctype_toupper	.symtab	0x4548c0	4	OBJECT	<unknown>	HIDDEN	11
__GI___C_ctype_toupper_data	.symtab	0x412df0	768	OBJECT	<unknown>	HIDDEN	5
__GI___ctype_b	.symtab	0x4548b4	4	OBJECT	<unknown>	HIDDEN	11
__GI___ctype_tolower	.symtab	0x454c34	4	OBJECT	<unknown>	HIDDEN	11
__GI___ctype_toupper	.symtab	0x4548c4	4	OBJECT	<unknown>	HIDDEN	11
__GI___errno_location	.symtab	0x406760	24	FUNC	<unknown>	HIDDEN	3
__GI___fgetc_unlocked	.symtab	0x410040	388	FUNC	<unknown>	HIDDEN	3
__GI___glibc_strerror_r	.symtab	0x4085c0	68	FUNC	<unknown>	HIDDEN	3
__GI___h_errno_location	.symtab	0x40b150	24	FUNC	<unknown>	HIDDEN	3
__GI___libc_fcntl	.symtab	0x406090	136	FUNC	<unknown>	HIDDEN	3
__GI___libc_fcntl64	.symtab	0x406120	104	FUNC	<unknown>	HIDDEN	3
__GI___libc_open	.symtab	0x406430	124	FUNC	<unknown>	HIDDEN	3
__GI___uClibc_fini	.symtab	0x40a740	196	FUNC	<unknown>	HIDDEN	3
__GI___uClibc_init	.symtab	0x40a89c	140	FUNC	<unknown>	HIDDEN	3
__GI___xpg_strerror_r	.symtab	0x408610	392	FUNC	<unknown>	HIDDEN	3
__GI__exit	.symtab	0x406190	80	FUNC	<unknown>	HIDDEN	3
__GI_abort	.symtab	0x40d8b0	428	FUNC	<unknown>	HIDDEN	3
__GI_atoi	.symtab	0x40a180	28	FUNC	<unknown>	HIDDEN	3
__GI_atol	.symtab	0x40a180	28	FUNC	<unknown>	HIDDEN	3
__GI_brk	.symtab	0x40da90	112	FUNC	<unknown>	HIDDEN	3
__GI_chdir	.symtab	0x4061e0	88	FUNC	<unknown>	HIDDEN	3
__GI_close	.symtab	0x406240	84	FUNC	<unknown>	HIDDEN	3
__GI_connect	.symtab	0x408f70	84	FUNC	<unknown>	HIDDEN	3
__GI_errno	.symtab	0x45b380	4	OBJECT	<unknown>	HIDDEN	14
__GI_exit	.symtab	0x40a410	236	FUNC	<unknown>	HIDDEN	3
__GI_fclose	.symtab	0x40db60	512	FUNC	<unknown>	HIDDEN	3
__GI_fcntl	.symtab	0x406090	136	FUNC	<unknown>	HIDDEN	3
__GI_fcntl64	.symtab	0x406120	104	FUNC	<unknown>	HIDDEN	3
__GI_fflush_unlocked	.symtab	0x40e700	628	FUNC	<unknown>	HIDDEN	3
__GI_fgetc_unlocked	.symtab	0x410040	388	FUNC	<unknown>	HIDDEN	3
__GI_fgets	.symtab	0x40e490	216	FUNC	<unknown>	HIDDEN	3
__GI_fgets_unlocked	.symtab	0x40e980	268	FUNC	<unknown>	HIDDEN	3
__GI_fopen	.symtab	0x40dd60	28	FUNC	<unknown>	HIDDEN	3
__GI_fork	.symtab	0x4062a0	84	FUNC	<unknown>	HIDDEN	3
__GI_fputs_unlocked	.symtab	0x407e30	128	FUNC	<unknown>	HIDDEN	3
__GI_fseek	.symtab	0x40dd80	68	FUNC	<unknown>	HIDDEN	3
__GI_fseeko64	.symtab	0x40ddd0	388	FUNC	<unknown>	HIDDEN	3
__GI_fwrite_unlocked	.symtab	0x407eb0	280	FUNC	<unknown>	HIDDEN	3
__GI_getc_unlocked	.symtab	0x410040	388	FUNC	<unknown>	HIDDEN	3
__GI_getegid	.symtab	0x40ade0	88	FUNC	<unknown>	HIDDEN	3
__GI_geteuid	.symtab	0x40ae40	88	FUNC	<unknown>	HIDDEN	3
__GI_getgid	.symtab	0x40aea0	84	FUNC	<unknown>	HIDDEN	3
__GI_gethostbyname	.symtab	0x408a90	116	FUNC	<unknown>	HIDDEN	3
__GI_gethostbyname_r	.symtab	0x408b10	1108	FUNC	<unknown>	HIDDEN	3
__GI_getpid	.symtab	0x406300	84	FUNC	<unknown>	HIDDEN	3
__GI_getsockname	.symtab	0x408fd0	84	FUNC	<unknown>	HIDDEN	3
__GI_getuid	.symtab	0x40af00	84	FUNC	<unknown>	HIDDEN	3
__GI_h_errno	.symtab	0x45b384	4	OBJECT	<unknown>	HIDDEN	14
__GI_inet_addr	.symtab	0x408a40	72	FUNC	<unknown>	HIDDEN	3
__GI_inet_aton	.symtab	0x40c950	244	FUNC	<unknown>	HIDDEN	3
__GI_inet_ntoa	.symtab	0x408a1c	32	FUNC	<unknown>	HIDDEN	3
__GI_inet_ntoa_r	.symtab	0x408980	156	FUNC	<unknown>	HIDDEN	3
__GI_inet_ntop	.symtab	0x40f2a0	852	FUNC	<unknown>	HIDDEN	3
__GI_inet_pton	.symtab	0x40edf0	700	FUNC	<unknown>	HIDDEN	3
__GI_initstate_r	.symtab	0x40a030	328	FUNC	<unknown>	HIDDEN	3
__GI_ioctl	.symtab	0x406360	104	FUNC	<unknown>	HIDDEN	3
__GI_isatty	.symtab	0x408870	60	FUNC	<unknown>	HIDDEN	3
__GI_kill	.symtab	0x4063d0	88	FUNC	<unknown>	HIDDEN	3
__GI_lseek64	.symtab	0x40ff50	168	FUNC	<unknown>	HIDDEN	3
__GI_memchr	.symtab	0x40c1e0	264	FUNC	<unknown>	HIDDEN	3
__GI_memcpy	.symtab	0x407fd0	308	FUNC	<unknown>	HIDDEN	3
__GI_memmove	.symtab	0x40c2f0	816	FUNC	<unknown>	HIDDEN	3
__GI_mempcpy	.symtab	0x40c620	76	FUNC	<unknown>	HIDDEN	3
__GI_memrchr	.symtab	0x40c670	272	FUNC	<unknown>	HIDDEN	3
__GI_memset	.symtab	0x408110	144	FUNC	<unknown>	HIDDEN	3
__GI_nanosleep	.symtab	0x40af60	84	FUNC	<unknown>	HIDDEN	3
__GI_open	.symtab	0x406430	124	FUNC	<unknown>	HIDDEN	3
__GI_poll	.symtab	0x40db00	84	FUNC	<unknown>	HIDDEN	3
__GI_raise	.symtab	0x40ff00	76	FUNC	<unknown>	HIDDEN	3
__GI_random	.symtab	0x409a00	164	FUNC	<unknown>	HIDDEN	3
__GI_random_r	.symtab	0x409e0c	176	FUNC	<unknown>	HIDDEN	3
__GI_rawmemchr	.symtab	0x40ea90	200	FUNC	<unknown>	HIDDEN	3
__GI_read	.symtab	0x4064d0	84	FUNC	<unknown>	HIDDEN	3
__GI_recv	.symtab	0x4090b0	84	FUNC	<unknown>	HIDDEN	3
__GI_sbrk	.symtab	0x40afc0	144	FUNC	<unknown>	HIDDEN	3
__GI_select	.symtab	0x406530	120	FUNC	<unknown>	HIDDEN	3
__GI_send	.symtab	0x409110	84	FUNC	<unknown>	HIDDEN	3
__GI_setsid	.symtab	0x4065b0	84	FUNC	<unknown>	HIDDEN	3
__GI_setsockopt	.symtab	0x409170	120	FUNC	<unknown>	HIDDEN	3
__GI_setstate_r	.symtab	0x409cd0	316	FUNC	<unknown>	HIDDEN	3
__GI_sigaction	.symtab	0x40ac90	232	FUNC	<unknown>	HIDDEN	3
__GI_signal	.symtab	0x409250	252	FUNC	<unknown>	HIDDEN	3
__GI_sigprocmask	.symtab	0x40b050	148	FUNC	<unknown>	HIDDEN	3
__GI_sleep	.symtab	0x40a500	564	FUNC	<unknown>	HIDDEN	3
__GI_socket	.symtab	0x4091f0	84	FUNC	<unknown>	HIDDEN	3
__GI_sprintf	.symtab	0x406780	80	FUNC	<unknown>	HIDDEN	3
__GI_srandom_r	.symtab	0x409ebc	372	FUNC	<unknown>	HIDDEN	3
__GI_strcasecmp	.symtab	0x4087e0	108	FUNC	<unknown>	HIDDEN	3
__GI_strchr	.symtab	0x4081a0	256	FUNC	<unknown>	HIDDEN	3
__GI_strcmp	.symtab	0x4082a0	44	FUNC	<unknown>	HIDDEN	3
__GI_strcoll	.symtab	0x4082a0	44	FUNC	<unknown>	HIDDEN	3
__GI_strcpy	.symtab	0x4082d0	36	FUNC	<unknown>	HIDDEN	3
__GI_strdup	.symtab	0x40ec70	144	FUNC	<unknown>	HIDDEN	3
__GI_strlen	.symtab	0x408300	184	FUNC	<unknown>	HIDDEN	3
__GI_strncat	.symtab	0x40eb60	180	FUNC	<unknown>	HIDDEN	3
__GI_strncpy	.symtab	0x40c780	188	FUNC	<unknown>	HIDDEN	3
__GI_strnlen	.symtab	0x4083c0	256	FUNC	<unknown>	HIDDEN	3
__GI_strpbrk	.symtab	0x40c910	64	FUNC	<unknown>	HIDDEN	3
__GI_strspn	.symtab	0x40ec20	76	FUNC	<unknown>	HIDDEN	3
__GI_strstr	.symtab	0x4084c0	256	FUNC	<unknown>	HIDDEN	3
__GI_strtok	.symtab	0x408850	32	FUNC	<unknown>	HIDDEN	3
__GI_strtok_r	.symtab	0x40c840	204	FUNC	<unknown>	HIDDEN	3
__GI_strtol	.symtab	0x40a1a0	28	FUNC	<unknown>	HIDDEN	3
__GI_tcgetattr	.symtab	0x4088b0	176	FUNC	<unknown>	HIDDEN	3
__GI_time	.symtab	0x406610	84	FUNC	<unknown>	HIDDEN	3
__GI_tolower	.symtab	0x410000	60	FUNC	<unknown>	HIDDEN	3
__GI_toupper	.symtab	0x406720	60	FUNC	<unknown>	HIDDEN	3
__GI_vsnprintf	.symtab	0x4067d0	260	FUNC	<unknown>	HIDDEN	3
__GI_wait4	.symtab	0x40b0f0	88	FUNC	<unknown>	HIDDEN	3
__GI_waitpid	.symtab	0x406670	28	FUNC	<unknown>	HIDDEN	3
__GI_wcrtomb	.symtab	0x40b170	112	FUNC	<unknown>	HIDDEN	3
__GI_wcsnrtombs	.symtab	0x40b220	228	FUNC	<unknown>	HIDDEN	3
__GI_wcsrtombs	.symtab	0x40b1e0	64	FUNC	<unknown>	HIDDEN	3
__GI_write	.symtab	0x406690	84	FUNC	<unknown>	HIDDEN	3
__JCR_END__	.symtab	0x454298	0	OBJECT	<unknown>	DEFAULT	9
__JCR_LIST__	.symtab	0x454298	0	OBJECT	<unknown>	DEFAULT	9
__app_fini	.symtab	0x45b36c	4	OBJECT	<unknown>	HIDDEN	14
__atexit_lock	.symtab	0x454c00	24	OBJECT	<unknown>	DEFAULT	11
__bsd_signal	.symtab	0x409250	252	FUNC	<unknown>	HIDDEN	3
__bss_start	.symtab	0x4550c0	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x40a814	136	FUNC	<unknown>	DEFAULT	3
__ctype_b	.symtab	0x4548b4	4	OBJECT	<unknown>	DEFAULT	11
__ctype_tolower	.symtab	0x454c34	4	OBJECT	<unknown>	DEFAULT	11
__ctype_toupper	.symtab	0x4548c4	4	OBJECT	<unknown>	DEFAULT	11
__curbrk	.symtab	0x45b3c0	4	OBJECT	<unknown>	HIDDEN	14
__data_start	.symtab	0x454790	0	OBJECT	<unknown>	DEFAULT	11
__decode_answer	.symtab	0x40f900	340	FUNC	<unknown>	HIDDEN	3
__decode_dotted	.symtab	0x4102f0	340	FUNC	<unknown>	HIDDEN	3
__decode_header	.symtab	0x40f710	228	FUNC	<unknown>	HIDDEN	3
__deregister_frame_info	.symtab	0x0	0	FUNC	<unknown>	DEFAULT	SHN_UNDEF
__dns_lookup	.symtab	0x40ca50	2568	FUNC	<unknown>	HIDDEN	3
__do_global_ctors_aux	.symtab	0x410680	0	FUNC	<unknown>	DEFAULT	3
__do_global_dtors_aux	.symtab	0x400160	0	FUNC	<unknown>	DEFAULT	3
__dso_handle	.symtab	0x454770	0	OBJECT	<unknown>	HIDDEN	11
__encode_dotted	.symtab	0x4101d0	280	FUNC	<unknown>	HIDDEN	3
__encode_header	.symtab	0x40f600	272	FUNC	<unknown>	HIDDEN	3
__encode_question	.symtab	0x40f800	172	FUNC	<unknown>	HIDDEN	3
__environ	.symtab	0x45b364	4	OBJECT	<unknown>	DEFAULT	14
__errno_location	.symtab	0x406760	24	FUNC	<unknown>	DEFAULT	3
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x45b350	4	OBJECT	<unknown>	HIDDEN	14
__fgetc_unlocked	.symtab	0x410040	388	FUNC	<unknown>	DEFAULT	3
__fini_array_end	.symtab	0x454288	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__fini_array_start	.symtab	0x454288	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__get_hosts_byname_r	.symtab	0x40d840	104	FUNC	<unknown>	HIDDEN	3
__glibc_strerror_r	.symtab	0x4085c0	68	FUNC	<unknown>	DEFAULT	3
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__h_errno_location	.symtab	0x40b150	24	FUNC	<unknown>	DEFAULT	3
__h_errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__heap_alloc	.symtab	0x409760	188	FUNC	<unknown>	DEFAULT	3
__heap_free	.symtab	0x409868	364	FUNC	<unknown>	DEFAULT	3
__heap_link_free_area	.symtab	0x409820	44	FUNC	<unknown>	DEFAULT	3
__heap_link_free_area_after	.symtab	0x40984c	28	FUNC	<unknown>	DEFAULT	3
__init_array_end	.symtab	0x454288	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__init_array_start	.symtab	0x454288	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__length_dotted	.symtab	0x410450	72	FUNC	<unknown>	HIDDEN	3
__length_question	.symtab	0x40f8b0	72	FUNC	<unknown>	HIDDEN	3
__libc_close	.symtab	0x406240	84	FUNC	<unknown>	DEFAULT	3
__libc_connect	.symtab	0x408f70	84	FUNC	<unknown>	DEFAULT	3
__libc_creat	.symtab	0x4064ac	28	FUNC	<unknown>	DEFAULT	3
__libc_fcntl	.symtab	0x406090	136	FUNC	<unknown>	DEFAULT	3
__libc_fcntl64	.symtab	0x406120	104	FUNC	<unknown>	DEFAULT	3
__libc_fork	.symtab	0x4062a0	84	FUNC	<unknown>	DEFAULT	3
__libc_getpid	.symtab	0x406300	84	FUNC	<unknown>	DEFAULT	3
__libc_lseek64	.symtab	0x40ff50	168	FUNC	<unknown>	DEFAULT	3
__libc_nanosleep	.symtab	0x40af60	84	FUNC	<unknown>	DEFAULT	3
__libc_open	.symtab	0x406430	124	FUNC	<unknown>	DEFAULT	3
__libc_poll	.symtab	0x40db00	84	FUNC	<unknown>	DEFAULT	3
__libc_read	.symtab	0x4064d0	84	FUNC	<unknown>	DEFAULT	3
__libc_recv	.symtab	0x4090b0	84	FUNC	<unknown>	DEFAULT	3
__libc_select	.symtab	0x406530	120	FUNC	<unknown>	DEFAULT	3
__libc_send	.symtab	0x409110	84	FUNC	<unknown>	DEFAULT	3
__libc_sigaction	.symtab	0x40ac90	232	FUNC	<unknown>	DEFAULT	3
__libc_stack_end	.symtab	0x45b360	4	OBJECT	<unknown>	DEFAULT	14
__libc_waitpid	.symtab	0x406670	28	FUNC	<unknown>	DEFAULT	3
__libc_write	.symtab	0x406690	84	FUNC	<unknown>	DEFAULT	3
__malloc_heap	.symtab	0x454b30	4	OBJECT	<unknown>	DEFAULT	11
__malloc_heap_lock	.symtab	0x45b330	24	OBJECT	<unknown>	DEFAULT	14
__malloc_sbrk_lock	.symtab	0x45b450	24	OBJECT	<unknown>	DEFAULT	14
__nameserver	.symtab	0x45b478	12	OBJECT	<unknown>	HIDDEN	14
__nameservers	.symtab	0x4550c8	4	OBJECT	<unknown>	HIDDEN	13
__open_etc_hosts	.symtab	0x40fa60	108	FUNC	<unknown>	HIDDEN	3
__open_nameservers	.symtab	0x40d460	984	FUNC	<unknown>	HIDDEN	3
__pagesize	.symtab	0x45b368	4	OBJECT	<unknown>	DEFAULT	14
__preinit_array_end	.symtab	0x454288	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__preinit_array_start	.symtab	0x454288	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__pthread_initialize_minimal	.symtab	0x0	0	FUNC	<unknown>	DEFAULT	SHN_UNDEF
__pthread_mutex_init	.symtab	0x40a804	8	FUNC	<unknown>	DEFAULT	3
__pthread_mutex_lock	.symtab	0x40a804	8	FUNC	<unknown>	DEFAULT	3
__pthread_mutex_trylock	.symtab	0x40a804	8	FUNC	<unknown>	DEFAULT	3
__pthread_mutex_unlock	.symtab	0x40a804	8	FUNC	<unknown>	DEFAULT	3
__pthread_return_0	.symtab	0x40a804	8	FUNC	<unknown>	DEFAULT	3
__pthread_return_void	.symtab	0x40a80c	8	FUNC	<unknown>	DEFAULT	3
__raise	.symtab	0x40ff00	76	FUNC	<unknown>	HIDDEN	3
__read_etc_hosts_r	.symtab	0x40facc	1076	FUNC	<unknown>	HIDDEN	3
__register_frame_info	.symtab	0x0	0	FUNC	<unknown>	DEFAULT	SHN_UNDEF
__resolv_lock	.symtab	0x454c50	24	OBJECT	<unknown>	DEFAULT	11
__rtld_fini	.symtab	0x45b370	4	OBJECT	<unknown>	HIDDEN	14
__searchdomain	.symtab	0x45b468	16	OBJECT	<unknown>	HIDDEN	14
__searchdomains	.symtab	0x4550cc	4	OBJECT	<unknown>	HIDDEN	13
__sigaddset	.symtab	0x409378	44	FUNC	<unknown>	DEFAULT	3
__sigdelset	.symtab	0x4093a4	48	FUNC	<unknown>	DEFAULT	3
__sigismember	.symtab	0x409350	40	FUNC	<unknown>	DEFAULT	3
__start	.symtab	0x4002a0	100	FUNC	<unknown>	DEFAULT	3
__stdin	.symtab	0x45491c	4	OBJECT	<unknown>	DEFAULT	11
__stdio_READ	.symtab	0x4104a0	140	FUNC	<unknown>	HIDDEN	3
__stdio_WRITE	.symtab	0x40b310	280	FUNC	<unknown>	HIDDEN	3
__stdio_adjust_position	.symtab	0x40df60	324	FUNC	<unknown>	HIDDEN	3
__stdio_fwrite	.symtab	0x40b430	472	FUNC	<unknown>	HIDDEN	3
__stdio_init_mutex	.symtab	0x406998	32	FUNC	<unknown>	HIDDEN	3
__stdio_mutex_initializer.3833	.symtab	0x4130f0	24	OBJECT	<unknown>	DEFAULT	5
__stdio_rfill	.symtab	0x410530	88	FUNC	<unknown>	HIDDEN	3
__stdio_seek	.symtab	0x40e420	112	FUNC	<unknown>	HIDDEN	3
__stdio_trans2r_o	.symtab	0x410590	228	FUNC	<unknown>	HIDDEN	3
__stdio_trans2w_o	.symtab	0x40b610	308	FUNC	<unknown>	HIDDEN	3
__stdio_wcommit	.symtab	0x406ae0	100	FUNC	<unknown>	HIDDEN	3
__stdout	.symtab	0x454920	4	OBJECT	<unknown>	DEFAULT	11
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fcntl64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_rt_sigaction	.symtab	0x40ad80	84	FUNC	<unknown>	HIDDEN	3
__syscall_rt_sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uClibc_fini	.symtab	0x40a740	196	FUNC	<unknown>	DEFAULT	3
__uClibc_init	.symtab	0x40a89c	140	FUNC	<unknown>	DEFAULT	3
__uClibc_main	.symtab	0x40a928	864	FUNC	<unknown>	DEFAULT	3
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x454c20	4	OBJECT	<unknown>	HIDDEN	11
__xpg_strerror_r	.symtab	0x408610	392	FUNC	<unknown>	DEFAULT	3
__xpg_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_adjust_pos.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_charpad	.symtab	0x406b50	128	FUNC	<unknown>	DEFAULT	3
_cs_funcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_dl_aux_init	.symtab	0x40da60	44	FUNC	<unknown>	DEFAULT	3
_dl_phdr	.symtab	0x4550d0	4	OBJECT	<unknown>	DEFAULT	13
_dl_phnum	.symtab	0x4550d4	4	OBJECT	<unknown>	DEFAULT	13
_edata	.symtab	0x4550c0	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x45b484	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_errno	.symtab	0x45b380	4	OBJECT	<unknown>	DEFAULT	14
_exit	.symtab	0x406190	80	FUNC	<unknown>	DEFAULT	3
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fbss	.symtab	0x4550c0	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_fdata	.symtab	0x454770	0	NOTYPE	<unknown>	DEFAULT	11
_fini	.symtab	0x4106f0	28	FUNC	<unknown>	DEFAULT	4
_fixed_buffers	.symtab	0x459128	8192	OBJECT	<unknown>	DEFAULT	14
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow	.symtab	0x406bd0	228	FUNC	<unknown>	DEFAULT	3
_fpmaxtostr	.symtab	0x40b990	2120	FUNC	<unknown>	HIDDEN	3
_fpmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ftext	.symtab	0x400160	0	NOTYPE	<unknown>	DEFAULT	3
_fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_gp	.symtab	0x45cc80	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_gp_disp	.symtab	0x0	0	OBJECT	<unknown>	DEFAULT	SHN_UNDEF
_h_errno	.symtab	0x45b384	4	OBJECT	<unknown>	DEFAULT	14
_init	.symtab	0x4000cc	28	FUNC	<unknown>	DEFAULT	2
_load_inttype	.symtab	0x40b750	136	FUNC	<unknown>	HIDDEN	3
_load_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_init	.symtab	0x407460	220	FUNC	<unknown>	HIDDEN	3
_ppfs_init.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec	.symtab	0x40783c	1512	FUNC	<unknown>	HIDDEN	3
_ppfs_parsespec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs	.symtab	0x407540	100	FUNC	<unknown>	HIDDEN	3
_ppfs_prepargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs	.symtab	0x4075b0	540	FUNC	<unknown>	HIDDEN	3
_ppfs_setargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size	.symtab	0x4077d0	108	FUNC	<unknown>	DEFAULT	3
_pthread_cleanup_pop_restore	.symtab	0x40a80c	8	FUNC	<unknown>	DEFAULT	3
_pthread_cleanup_push_defer	.symtab	0x40a80c	8	FUNC	<unknown>	DEFAULT	3
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_sigintr	.symtab	0x45b3d0	128	OBJECT	<unknown>	HIDDEN	14
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x40e0b0	880	FUNC	<unknown>	HIDDEN	3
_stdio_init	.symtab	0x4068e0	184	FUNC	<unknown>	HIDDEN	3
_stdio_openlist	.symtab	0x454924	4	OBJECT	<unknown>	DEFAULT	11
_stdio_openlist_add_lock	.symtab	0x4548d0	24	OBJECT	<unknown>	DEFAULT	11
_stdio_openlist_dec_use	.symtab	0x40e570	400	FUNC	<unknown>	DEFAULT	3
_stdio_openlist_del_count	.symtab	0x459124	4	OBJECT	<unknown>	DEFAULT	14
_stdio_openlist_del_lock	.symtab	0x4548e8	24	OBJECT	<unknown>	DEFAULT	11
_stdio_openlist_use_count	.symtab	0x459120	4	OBJECT	<unknown>	DEFAULT	14
_stdio_streams	.symtab	0x454928	240	OBJECT	<unknown>	DEFAULT	11
_stdio_term	.symtab	0x4069b8	284	FUNC	<unknown>	HIDDEN	3
_stdio_user_locking	.symtab	0x454900	4	OBJECT	<unknown>	DEFAULT	11
_stdlib_strto_l	.symtab	0x40a1c0	592	FUNC	<unknown>	HIDDEN	3
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_store_inttype	.symtab	0x40b7e0	68	FUNC	<unknown>	HIDDEN	3
_store_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_string_syserrmsgs	.symtab	0x413260	2934	OBJECT	<unknown>	HIDDEN	5
_string_syserrmsgs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr	.symtab	0x40b830	340	FUNC	<unknown>	HIDDEN	3
_uintmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal	.symtab	0x406cb4	1960	FUNC	<unknown>	HIDDEN	3
_vfprintf_internal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0x40d8b0	428	FUNC	<unknown>	DEFAULT	3
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
atoi	.symtab	0x40a180	28	FUNC	<unknown>	DEFAULT	3
atol	.symtab	0x40a180	28	FUNC	<unknown>	DEFAULT	3
atol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bcopy	.symtab	0x4087a0	32	FUNC	<unknown>	DEFAULT	3
bcopy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
been_there_done_that	.symtab	0x45b3b0	4	OBJECT	<unknown>	DEFAULT	14
been_there_done_that.2792	.symtab	0x45b374	4	OBJECT	<unknown>	DEFAULT	14
bot.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
brk	.symtab	0x40da90	112	FUNC	<unknown>	DEFAULT	3
brk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bsd_signal	.symtab	0x409250	252	FUNC	<unknown>	DEFAULT	3
buf.2601	.symtab	0x45b140	16	OBJECT	<unknown>	DEFAULT	14
buf.4833	.symtab	0x45b150	460	OBJECT	<unknown>	DEFAULT	14
bzero	.symtab	0x4087c0	28	FUNC	<unknown>	DEFAULT	3
bzero.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
c	.symtab	0x4547a4	4	OBJECT	<unknown>	DEFAULT	11
chdir	.symtab	0x4061e0	88	FUNC	<unknown>	DEFAULT	3
chdir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0x406240	84	FUNC	<unknown>	DEFAULT	3
close.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
commServer	.symtab	0x4547b0	4	OBJECT	<unknown>	DEFAULT	11
completed.2296	.symtab	0x4550e0	1	OBJECT	<unknown>	DEFAULT	14
connect	.symtab	0x408f70	84	FUNC	<unknown>	DEFAULT	3
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
connectTimeout	.symtab	0x401dd4	828	FUNC	<unknown>	DEFAULT	3
creat	.symtab	0x4064ac	28	FUNC	<unknown>	DEFAULT	3
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
currentServer	.symtab	0x4547a0	4	OBJECT	<unknown>	DEFAULT	11
data_start	.symtab	0x454790	0	OBJECT	<unknown>	DEFAULT	11
decodea.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dns	.symtab	0x4547b4	4	OBJECT	<unknown>	DEFAULT	11
dnslookup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
environ	.symtab	0x45b364	4	OBJECT	<unknown>	DEFAULT	14
errno	.symtab	0x45b380	4	OBJECT	<unknown>	DEFAULT	14
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
estridx	.symtab	0x4131d0	126	OBJECT	<unknown>	DEFAULT	5
exit	.symtab	0x40a410	236	FUNC	<unknown>	DEFAULT	3
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exp10_table	.symtab	0x414178	72	OBJECT	<unknown>	DEFAULT	5
fclose	.symtab	0x40db60	512	FUNC	<unknown>	DEFAULT	3
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0x406090	136	FUNC	<unknown>	DEFAULT	3
fcntl64	.symtab	0x406120	104	FUNC	<unknown>	DEFAULT	3
fdgets	.symtab	0x4006bc	292	FUNC	<unknown>	DEFAULT	3
fflush_unlocked	.symtab	0x40e700	628	FUNC	<unknown>	DEFAULT	3
fflush_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked	.symtab	0x410040	388	FUNC	<unknown>	DEFAULT	3
fgetc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets	.symtab	0x40e490	216	FUNC	<unknown>	DEFAULT	3
fgets.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked	.symtab	0x40e980	268	FUNC	<unknown>	DEFAULT	3
fgets_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fmt	.symtab	0x414160	20	OBJECT	<unknown>	DEFAULT	5
fopen	.symtab	0x40dd60	28	FUNC	<unknown>	DEFAULT	3
fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork	.symtab	0x4062a0	84	FUNC	<unknown>	DEFAULT	3
fork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fputs_unlocked	.symtab	0x407e30	128	FUNC	<unknown>	DEFAULT	3
fputs_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
frame_dummy	.symtab	0x40021c	0	FUNC	<unknown>	DEFAULT	3
free	.symtab	0x4095d0	396	FUNC	<unknown>	DEFAULT	3
free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseek	.symtab	0x40dd80	68	FUNC	<unknown>	DEFAULT	3
fseeko	.symtab	0x40dd80	68	FUNC	<unknown>	DEFAULT	3
fseeko.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseeko64	.symtab	0x40ddd0	388	FUNC	<unknown>	DEFAULT	3
fseeko64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fwrite_unlocked	.symtab	0x407eb0	280	FUNC	<unknown>	DEFAULT	3
fwrite_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getArch	.symtab	0x404154	56	FUNC	<unknown>	DEFAULT	3
getHost	.symtab	0x4019c8	160	FUNC	<unknown>	DEFAULT	3
getOurIP	.symtab	0x4007e0	904	FUNC	<unknown>	DEFAULT	3
getRandomIP	.symtab	0x400610	172	FUNC	<unknown>	DEFAULT	3
get_hosts_byname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getc_unlocked	.symtab	0x410040	388	FUNC	<unknown>	DEFAULT	3
getegid	.symtab	0x40ade0	88	FUNC	<unknown>	DEFAULT	3
getegid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid	.symtab	0x40ae40	88	FUNC	<unknown>	DEFAULT	3
geteuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid	.symtab	0x40aea0	84	FUNC	<unknown>	DEFAULT	3
getgid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname	.symtab	0x408a90	116	FUNC	<unknown>	DEFAULT	3
gethostbyname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname_r	.symtab	0x408b10	1108	FUNC	<unknown>	DEFAULT	3
gethostbyname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid	.symtab	0x406300	84	FUNC	<unknown>	DEFAULT	3
getpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockname	.symtab	0x408fd0	84	FUNC	<unknown>	DEFAULT	3
getsockname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt	.symtab	0x409030	120	FUNC	<unknown>	DEFAULT	3
getsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid	.symtab	0x40af00	84	FUNC	<unknown>	DEFAULT	3
getuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
h.4832	.symtab	0x45b31c	20	OBJECT	<unknown>	DEFAULT	14
h_errno	.symtab	0x45b384	4	OBJECT	<unknown>	DEFAULT	14
heap_alloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
heap_free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
hlt	.symtab	0x4002fc	0	NOTYPE	<unknown>	DEFAULT	3
htonl	.symtab	0x408970	8	FUNC	<unknown>	DEFAULT	3
htons	.symtab	0x408978	8	FUNC	<unknown>	DEFAULT	3
i.4123	.symtab	0x4547a8	4	OBJECT	<unknown>	DEFAULT	11
index	.symtab	0x4081a0	256	FUNC	<unknown>	DEFAULT	3
inet_addr	.symtab	0x408a40	72	FUNC	<unknown>	DEFAULT	3
inet_aton	.symtab	0x40c950	244	FUNC	<unknown>	DEFAULT	3
inet_aton.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa	.symtab	0x408a1c	32	FUNC	<unknown>	DEFAULT	3
inet_ntoa.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa_r	.symtab	0x408980	156	FUNC	<unknown>	DEFAULT	3
inet_ntop	.symtab	0x40f2a0	852	FUNC	<unknown>	DEFAULT	3
inet_ntop4	.symtab	0x40f0ac	500	FUNC	<unknown>	DEFAULT	3
inet_pton	.symtab	0x40edf0	700	FUNC	<unknown>	DEFAULT	3
inet_pton4	.symtab	0x40ed00	240	FUNC	<unknown>	DEFAULT	3
initConnection	.symtab	0x405234	592	FUNC	<unknown>	DEFAULT	3
init_rand	.symtab	0x400310	300	FUNC	<unknown>	DEFAULT	3
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initial_fa	.symtab	0x454a20	264	OBJECT	<unknown>	DEFAULT	11
initstate	.symtab	0x409b54	208	FUNC	<unknown>	DEFAULT	3
initstate_r	.symtab	0x40a030	328	FUNC	<unknown>	DEFAULT	3
ioctl	.symtab	0x406360	104	FUNC	<unknown>	DEFAULT	3
ioctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isatty	.symtab	0x408870	60	FUNC	<unknown>	DEFAULT	3
isatty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isspace	.symtab	0x4066f0	44	FUNC	<unknown>	DEFAULT	3
isspace.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill	.symtab	0x4063d0	88	FUNC	<unknown>	DEFAULT	3
kill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lengthd.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lengthq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/mips/memcpy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/mips/memset.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/mips/crt1.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/mips/crti.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/mips/crtn.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
listFork	.symtab	0x402110	636	FUNC	<unknown>	DEFAULT	3
llseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lseek64	.symtab	0x40ff50	168	FUNC	<unknown>	DEFAULT	3
macAddress	.symtab	0x455110	6	OBJECT	<unknown>	DEFAULT	14
main	.symtab	0x405484	3076	FUNC	<unknown>	DEFAULT	3
mainCommSock	.symtab	0x455100	4	OBJECT	<unknown>	DEFAULT	14
malloc	.symtab	0x4093e0	492	FUNC	<unknown>	DEFAULT	3
malloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memchr	.symtab	0x40c1e0	264	FUNC	<unknown>	DEFAULT	3
memchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memcpy	.symtab	0x407fd0	308	FUNC	<unknown>	DEFAULT	3
memmove	.symtab	0x40c2f0	816	FUNC	<unknown>	DEFAULT	3
memmove.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mempcpy	.symtab	0x40c620	76	FUNC	<unknown>	DEFAULT	3
mempcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memrchr	.symtab	0x40c670	272	FUNC	<unknown>	DEFAULT	3
memrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset	.symtab	0x408110	144	FUNC	<unknown>	DEFAULT	3
mylock	.symtab	0x454b40	24	OBJECT	<unknown>	DEFAULT	11
mylock	.symtab	0x45b390	24	OBJECT	<unknown>	DEFAULT	14
mylock	.symtab	0x454c70	24	OBJECT	<unknown>	DEFAULT	11
nanosleep	.symtab	0x40af60	84	FUNC	<unknown>	DEFAULT	3
nanosleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
next_start.1065	.symtab	0x45b130	4	OBJECT	<unknown>	DEFAULT	14
ntohl	.symtab	0x408960	8	FUNC	<unknown>	DEFAULT	3
ntohl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ntohs	.symtab	0x408968	8	FUNC	<unknown>	DEFAULT	3
ntop.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
numpids	.symtab	0x455108	8	OBJECT	<unknown>	DEFAULT	14
object.2349	.symtab	0x4550e4	24	OBJECT	<unknown>	DEFAULT	14
open	.symtab	0x406430	124	FUNC	<unknown>	DEFAULT	3
open.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
opennameservers.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ourIP	.symtab	0x4550c0	4	OBJECT	<unknown>	DEFAULT	13
ovhl7	.symtab	0x402ec0	4756	FUNC	<unknown>	DEFAULT	3
p.2294	.symtab	0x454780	0	OBJECT	<unknown>	DEFAULT	11
pids	.symtab	0x4550c4	4	OBJECT	<unknown>	DEFAULT	13
poll	.symtab	0x40db00	84	FUNC	<unknown>	DEFAULT	3
poll.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prefix.4045	.symtab	0x413120	12	OBJECT	<unknown>	DEFAULT	5
print	.symtab	0x4012c0	1456	FUNC	<unknown>	DEFAULT	3
printchar	.symtab	0x400d34	184	FUNC	<unknown>	DEFAULT	3
printi	.symtab	0x401028	664	FUNC	<unknown>	DEFAULT	3
prints	.symtab	0x400dec	572	FUNC	<unknown>	DEFAULT	3
processCmd	.symtab	0x40418c	4264	FUNC	<unknown>	DEFAULT	3
qual_chars.4050	.symtab	0x413140	20	OBJECT	<unknown>	DEFAULT	5
raise	.symtab	0x40ff00	76	FUNC	<unknown>	DEFAULT	3
raise.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand	.symtab	0x4099e0	28	FUNC	<unknown>	DEFAULT	3
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand_cmwc	.symtab	0x40043c	468	FUNC	<unknown>	DEFAULT	3
random	.symtab	0x409a00	164	FUNC	<unknown>	DEFAULT	3
random.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
random_poly_info	.symtab	0x413de0	40	OBJECT	<unknown>	DEFAULT	5
random_r	.symtab	0x409e0c	176	FUNC	<unknown>	DEFAULT	3
random_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
randtbl	.symtab	0x454b58	128	OBJECT	<unknown>	DEFAULT	11
rawmemchr	.symtab	0x40ea90	200	FUNC	<unknown>	DEFAULT	3
rawmemchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read	.symtab	0x4064d0	84	FUNC	<unknown>	DEFAULT	3
read.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read_etc_hosts_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recv	.symtab	0x4090b0	84	FUNC	<unknown>	DEFAULT	3
recv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recvLine	.symtab	0x401a68	876	FUNC	<unknown>	DEFAULT	3
sbrk	.symtab	0x40afc0	144	FUNC	<unknown>	DEFAULT	3
sbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
select	.symtab	0x406530	120	FUNC	<unknown>	DEFAULT	3
select.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
send	.symtab	0x409110	84	FUNC	<unknown>	DEFAULT	3
send.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsid	.symtab	0x4065b0	84	FUNC	<unknown>	DEFAULT	3
setsid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsockopt	.symtab	0x409170	120	FUNC	<unknown>	DEFAULT	3
setsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setstate	.symtab	0x409aa4	176	FUNC	<unknown>	DEFAULT	3
setstate_r	.symtab	0x409cd0	316	FUNC	<unknown>	DEFAULT	3
sigaction	.symtab	0x40ac90	232	FUNC	<unknown>	DEFAULT	3
sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
signal	.symtab	0x409250	252	FUNC	<unknown>	DEFAULT	3
signal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigprocmask	.symtab	0x40b050	148	FUNC	<unknown>	DEFAULT	3
sigprocmask.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigsetops.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sleep	.symtab	0x40a500	564	FUNC	<unknown>	DEFAULT	3
sleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket	.symtab	0x4091f0	84	FUNC	<unknown>	DEFAULT	3
socket.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket_connect	.symtab	0x40238c	444	FUNC	<unknown>	DEFAULT	3
sockprintf	.symtab	0x401870	344	FUNC	<unknown>	DEFAULT	3
spec_and_mask.4049	.symtab	0x413154	16	OBJECT	<unknown>	DEFAULT	5
spec_base.4044	.symtab	0x41312c	7	OBJECT	<unknown>	DEFAULT	5
spec_chars.4046	.symtab	0x413180	21	OBJECT	<unknown>	DEFAULT	5
spec_flags.4045	.symtab	0x413198	8	OBJECT	<unknown>	DEFAULT	5
spec_or_mask.4048	.symtab	0x413164	16	OBJECT	<unknown>	DEFAULT	5
spec_ranges.4047	.symtab	0x413174	9	OBJECT	<unknown>	DEFAULT	5
sprintf	.symtab	0x406780	80	FUNC	<unknown>	DEFAULT	3
sprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
srand	.symtab	0x409c24	172	FUNC	<unknown>	DEFAULT	3
srandom	.symtab	0x409c24	172	FUNC	<unknown>	DEFAULT	3
srandom_r	.symtab	0x409ebc	372	FUNC	<unknown>	DEFAULT	3
static_id	.symtab	0x454c40	2	OBJECT	<unknown>	DEFAULT	11
static_ns	.symtab	0x45b3a8	4	OBJECT	<unknown>	DEFAULT	14
stderr	.symtab	0x454918	4	OBJECT	<unknown>	DEFAULT	11
stdin	.symtab	0x454910	4	OBJECT	<unknown>	DEFAULT	11
stdout	.symtab	0x454914	4	OBJECT	<unknown>	DEFAULT	11
strcasecmp	.symtab	0x4087e0	108	FUNC	<unknown>	DEFAULT	3
strcasecmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchr	.symtab	0x4081a0	256	FUNC	<unknown>	DEFAULT	3
strchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcmp	.symtab	0x4082a0	44	FUNC	<unknown>	DEFAULT	3
strcmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcoll	.symtab	0x4082a0	44	FUNC	<unknown>	DEFAULT	3
strcpy	.symtab	0x4082d0	36	FUNC	<unknown>	DEFAULT	3
strcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strdup	.symtab	0x40ec70	144	FUNC	<unknown>	DEFAULT	3
strdup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strerror_r	.symtab	0x408610	392	FUNC	<unknown>	DEFAULT	3
strlen	.symtab	0x408300	184	FUNC	<unknown>	DEFAULT	3
strlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strncat	.symtab	0x40eb60	180	FUNC	<unknown>	DEFAULT	3
strncat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strncpy	.symtab	0x40c780	188	FUNC	<unknown>	DEFAULT	3
strncpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strnlen	.symtab	0x4083c0	256	FUNC	<unknown>	DEFAULT	3
strnlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strpbrk	.symtab	0x40c910	64	FUNC	<unknown>	DEFAULT	3
strpbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strspn	.symtab	0x40ec20	76	FUNC	<unknown>	DEFAULT	3
strspn.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strstr	.symtab	0x4084c0	256	FUNC	<unknown>	DEFAULT	3
strstr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok	.symtab	0x408850	32	FUNC	<unknown>	DEFAULT	3
strtok.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok_r	.symtab	0x40c840	204	FUNC	<unknown>	DEFAULT	3
strtok_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtol	.symtab	0x40a1a0	28	FUNC	<unknown>	DEFAULT	3
strtol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcgetattr	.symtab	0x4088b0	176	FUNC	<unknown>	DEFAULT	3
tcgetattr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
time	.symtab	0x406610	84	FUNC	<unknown>	DEFAULT	3
time.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tolower	.symtab	0x410000	60	FUNC	<unknown>	DEFAULT	3
tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
toupper	.symtab	0x406720	60	FUNC	<unknown>	DEFAULT	3
toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
trim	.symtab	0x400b68	460	FUNC	<unknown>	DEFAULT	3
type_codes	.symtab	0x4131a0	24	OBJECT	<unknown>	DEFAULT	5
type_sizes	.symtab	0x4131b8	12	OBJECT	<unknown>	DEFAULT	5
unknown.1088	.symtab	0x413250	14	OBJECT	<unknown>	DEFAULT	5
unsafe_state	.symtab	0x454be0	28	OBJECT	<unknown>	DEFAULT	11
useragents	.symtab	0x4547b8	236	OBJECT	<unknown>	DEFAULT	11
vsnprintf	.symtab	0x4067d0	260	FUNC	<unknown>	DEFAULT	3
vsnprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wait4	.symtab	0x40b0f0	88	FUNC	<unknown>	DEFAULT	3
wait4.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
waitpid	.symtab	0x406670	28	FUNC	<unknown>	DEFAULT	3
waitpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcrtomb	.symtab	0x40b170	112	FUNC	<unknown>	DEFAULT	3
wcrtomb.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsnrtombs	.symtab	0x40b220	228	FUNC	<unknown>	DEFAULT	3
wcsnrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsrtombs	.symtab	0x40b1e0	64	FUNC	<unknown>	DEFAULT	3
wcsrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
write	.symtab	0x406690	84	FUNC	<unknown>	DEFAULT	3
write.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
xdigits.3043	.symtab	0x414244	17	OBJECT	<unknown>	DEFAULT	5
xtdcustom	.symtab	0x4027f0	528	FUNC	<unknown>	DEFAULT	3

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 22, 2024 16:06:17.201023102 CET	56890	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:17.320810080 CET	4258	56890	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:17.320907116 CET	56890	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:17.322038889 CET	56890	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:17.441704988 CET	4258	56890	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:18.439371109 CET	4258	56890	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:18.439456940 CET	4258	56890	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:18.439472914 CET	56890	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:18.440119982 CET	56890	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:18.440984964 CET	56892	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:18.559638023 CET	4258	56890	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:18.560518026 CET	4258	56892	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:18.560605049 CET	56892	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:18.560661077 CET	56892	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:18.680284023 CET	4258	56892	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:19.627116919 CET	4258	56892	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:19.627197981 CET	4258	56892	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:19.627345085 CET	56892	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:19.627563953 CET	56892	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:19.628324032 CET	56894	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:19.747065067 CET	4258	56892	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:19.747811079 CET	4258	56894	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:19.748011112 CET	56894	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:19.748012066 CET	56894	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:19.867613077 CET	4258	56894	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:20.836530924 CET	4258	56894	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:20.836636066 CET	56894	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:20.836659908 CET	4258	56894	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:20.836879015 CET	56894	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:20.837640047 CET	56896	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:20.958103895 CET	4258	56894	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:20.958791971 CET	4258	56896	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:20.958878040 CET	56896	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:20.958901882 CET	56896	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:21.081954002 CET	4258	56896	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:22.046847105 CET	4258	56896	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:22.046892881 CET	4258	56896	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:22.047079086 CET	56896	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:22.047283888 CET	56896	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:22.047928095 CET	56898	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:22.166865110 CET	4258	56896	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:22.167403936 CET	4258	56898	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:22.167685986 CET	56898	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:22.167685986 CET	56898	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:22.287457943 CET	4258	56898	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:23.249733925 CET	4258	56898	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:23.249839067 CET	4258	56898	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:23.250092983 CET	56898	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:23.250092983 CET	56898	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:23.251044989 CET	56900	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:23.370392084 CET	4258	56898	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:23.371292114 CET	4258	56900	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:23.371437073 CET	56900	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:23.371517897 CET	56900	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:23.491544962 CET	4258	56900	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:24.452007055 CET	4258	56900	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:24.452035904 CET	4258	56900	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:24.452161074 CET	56900	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:24.452229023 CET	56900	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:24.453033924 CET	56902	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:24.572093010 CET	4258	56900	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:24.572635889 CET	4258	56902	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:24.572710037 CET	56902	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:24.572772980 CET	56902	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:24.692681074 CET	4258	56902	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:25.646828890 CET	4258	56902	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:25.646923065 CET	4258	56902	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:25.647008896 CET	56902	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:25.647356033 CET	56902	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:25.647958994 CET	56904	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:25.766988039 CET	4258	56902	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:25.767621040 CET	4258	56904	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:25.767782927 CET	56904	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:25.767854929 CET	56904	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:25.887649059 CET	4258	56904	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:26.834712982 CET	4258	56904	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:26.834814072 CET	4258	56904	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:26.835095882 CET	56904	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:26.835372925 CET	56904	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:26.836422920 CET	56906	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:26.954840899 CET	4258	56904	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:26.955899000 CET	4258	56906	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:26.956140995 CET	56906	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:26.956140995 CET	56906	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:27.077651024 CET	4258	56906	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:28.023556948 CET	4258	56906	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:28.023629904 CET	4258	56906	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:28.023730040 CET	56906	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:28.023812056 CET	56906	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:28.024596930 CET	56908	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:28.144407988 CET	4258	56906	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:28.145248890 CET	4258	56908	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:28.145380974 CET	56908	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:28.145426035 CET	56908	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:28.265139103 CET	4258	56908	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:29.213927031 CET	4258	56908	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:29.213962078 CET	4258	56908	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:29.214176893 CET	56908	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:29.214345932 CET	56908	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:29.215403080 CET	56910	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:29.333985090 CET	4258	56908	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:29.334903002 CET	4258	56910	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:29.335144997 CET	56910	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:29.335258961 CET	56910	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:29.454718113 CET	4258	56910	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:30.401074886 CET	4258	56910	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:30.401199102 CET	56910	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:30.401246071 CET	4258	56910	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:30.401300907 CET	56910	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:30.402005911 CET	56912	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:30.520787001 CET	4258	56910	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:30.521454096 CET	4258	56912	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:30.521506071 CET	56912	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:30.521539927 CET	56912	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:30.641123056 CET	4258	56912	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:31.589004993 CET	4258	56912	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:31.589133024 CET	4258	56912	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:31.589265108 CET	56912	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:31.589374065 CET	56912	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:31.590298891 CET	56914	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:31.709115028 CET	4258	56912	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:31.709829092 CET	4258	56914	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:31.710113049 CET	56914	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:31.710222960 CET	56914	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:31.829952955 CET	4258	56914	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:32.780427933 CET	4258	56914	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:32.780564070 CET	4258	56914	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:32.780630112 CET	56914	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:32.780802011 CET	56914	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:32.781846046 CET	56916	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:32.900238991 CET	4258	56914	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:32.901434898 CET	4258	56916	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:32.901731968 CET	56916	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:32.901854992 CET	56916	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:33.021338940 CET	4258	56916	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:33.967775106 CET	4258	56916	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:33.967827082 CET	4258	56916	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:33.967925072 CET	56916	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:33.968019009 CET	56916	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:33.968576908 CET	56918	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:34.087625980 CET	4258	56916	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:34.088040113 CET	4258	56918	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:34.088172913 CET	56918	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:34.088233948 CET	56918	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:34.207840919 CET	4258	56918	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:35.155615091 CET	4258	56918	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:35.155637980 CET	4258	56918	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:35.155783892 CET	56918	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:35.155888081 CET	56918	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:35.156495094 CET	56920	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:35.275633097 CET	4258	56918	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:35.276216030 CET	4258	56920	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:35.276376963 CET	56920	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:35.276459932 CET	56920	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:35.396097898 CET	4258	56920	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:36.344027042 CET	4258	56920	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:36.344161987 CET	4258	56920	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:36.344234943 CET	56920	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:36.344357014 CET	56920	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:36.345164061 CET	56922	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:36.464169025 CET	4258	56920	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:36.464740992 CET	4258	56922	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:36.464899063 CET	56922	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:36.464989901 CET	56922	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:36.584989071 CET	4258	56922	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:37.532444000 CET	4258	56922	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:37.532548904 CET	4258	56922	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:37.532716036 CET	56922	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:37.532835960 CET	56922	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:37.533731937 CET	56924	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:37.652728081 CET	4258	56922	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:37.653352976 CET	4258	56924	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:37.653508902 CET	56924	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:37.653573036 CET	56924	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:37.773746967 CET	4258	56924	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:38.723093987 CET	4258	56924	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:38.723216057 CET	4258	56924	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:38.723247051 CET	56924	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:38.723354101 CET	56924	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:38.724329948 CET	56926	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:38.844080925 CET	4258	56924	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:38.845175028 CET	4258	56926	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:38.845340967 CET	56926	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:38.845504045 CET	56926	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:38.965040922 CET	4258	56926	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:39.911880016 CET	4258	56926	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:39.911891937 CET	4258	56926	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:39.911990881 CET	56926	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:39.912149906 CET	56926	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:39.912662983 CET	56928	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:40.031624079 CET	4258	56926	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:40.032180071 CET	4258	56928	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:40.032260895 CET	56928	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:40.032346964 CET	56928	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:40.153831959 CET	4258	56928	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:41.101003885 CET	4258	56928	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:41.101229906 CET	56928	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:41.101412058 CET	4258	56928	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:41.101566076 CET	56928	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:41.102670908 CET	56930	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:41.224515915 CET	4258	56928	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:41.224536896 CET	4258	56930	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:41.224720955 CET	56930	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:41.224903107 CET	56930	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:41.344443083 CET	4258	56930	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:42.291728020 CET	4258	56930	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:42.291810036 CET	4258	56930	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:42.291913033 CET	56930	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:42.292088985 CET	56930	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:42.293076038 CET	56932	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:42.411546946 CET	4258	56930	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:42.412601948 CET	4258	56932	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:42.412776947 CET	56932	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:42.412863016 CET	56932	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:42.534347057 CET	4258	56932	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:43.482564926 CET	4258	56932	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:43.482748985 CET	4258	56932	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:43.482856035 CET	56932	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:43.482969046 CET	56932	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:43.484807014 CET	56934	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:43.602585077 CET	4258	56932	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:43.604444981 CET	4258	56934	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:43.604543924 CET	56934	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:43.604593992 CET	56934	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:43.724452972 CET	4258	56934	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:44.671462059 CET	4258	56934	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:44.671603918 CET	56934	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:44.671648979 CET	4258	56934	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:44.671720028 CET	56934	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:44.672935963 CET	56936	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:44.792989969 CET	4258	56934	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:44.793842077 CET	4258	56936	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:44.793992996 CET	56936	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:44.794063091 CET	56936	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:44.913938046 CET	4258	56936	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:45.864236116 CET	4258	56936	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:45.864361048 CET	56936	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:45.865478039 CET	4258	56936	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:45.865575075 CET	56936	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:45.866615057 CET	56938	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:45.985129118 CET	4258	56936	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:45.986254930 CET	4258	56938	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:45.986354113 CET	56938	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:45.986490965 CET	56938	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:46.106273890 CET	4258	56938	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:47.077931881 CET	4258	56938	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:47.077963114 CET	4258	56938	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:47.078290939 CET	56938	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:47.078537941 CET	56938	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:47.079735041 CET	56940	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:47.198299885 CET	4258	56938	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:47.199578047 CET	4258	56940	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:47.199698925 CET	56940	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:47.199925900 CET	56940	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:47.319869995 CET	4258	56940	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:57.382930040 CET	4258	56940	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:57.383125067 CET	56940	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:57.383162022 CET	4258	56940	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:57.383374929 CET	56940	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:57.384499073 CET	56942	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:57.504462957 CET	4258	56940	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:57.505892038 CET	4258	56942	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:57.506202936 CET	56942	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:57.506429911 CET	56942	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:57.626034021 CET	4258	56942	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:58.577657938 CET	4258	56942	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:58.577830076 CET	4258	56942	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:58.577861071 CET	56942	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:58.577984095 CET	56942	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:58.579134941 CET	56944	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:58.697386980 CET	4258	56942	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:58.698690891 CET	4258	56944	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:58.698827982 CET	56944	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:58.698899984 CET	56944	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:58.821835995 CET	4258	56944	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:59.792227983 CET	4258	56944	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:59.792294979 CET	4258	56944	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:59.792596102 CET	56944	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:59.792674065 CET	56944	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:59.793792009 CET	56946	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:59.912197113 CET	4258	56944	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:59.913254023 CET	4258	56946	31.172.83.147	192.168.2.14
Dec 22, 2024 16:06:59.913598061 CET	56946	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:06:59.913598061 CET	56946	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:00.033499956 CET	4258	56946	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:00.979624033 CET	4258	56946	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:00.979754925 CET	4258	56946	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:00.980031013 CET	56946	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:00.980117083 CET	56946	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:00.981231928 CET	56948	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:01.100007057 CET	4258	56946	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:01.100996017 CET	4258	56948	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:01.101316929 CET	56948	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:01.101345062 CET	56948	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:01.221179008 CET	4258	56948	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:02.178944111 CET	4258	56948	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:02.179023981 CET	4258	56948	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:02.179236889 CET	56948	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:02.179364920 CET	56948	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:02.180629015 CET	56950	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:02.298886061 CET	4258	56948	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:02.300162077 CET	4258	56950	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:02.300420046 CET	56950	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:02.300527096 CET	56950	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:02.420059919 CET	4258	56950	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:03.366930962 CET	4258	56950	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:03.366971970 CET	4258	56950	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:03.367100000 CET	56950	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:03.367270947 CET	56950	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:03.368474960 CET	56952	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:03.486737013 CET	4258	56950	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:03.488111019 CET	4258	56952	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:03.488228083 CET	56952	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:03.488322020 CET	56952	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:03.608506918 CET	4258	56952	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:04.555083036 CET	4258	56952	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:04.555222034 CET	56952	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:04.555330992 CET	4258	56952	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:04.555419922 CET	56952	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:04.556479931 CET	56954	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:04.675005913 CET	4258	56952	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:04.676078081 CET	4258	56954	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:04.676194906 CET	56954	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:04.676223993 CET	56954	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:04.796192884 CET	4258	56954	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:05.758913994 CET	4258	56954	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:05.759031057 CET	56954	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:05.759052038 CET	4258	56954	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:05.759198904 CET	56954	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:05.759943008 CET	56956	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:05.878612041 CET	4258	56954	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:05.879456997 CET	4258	56956	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:05.879582882 CET	56956	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:05.879674911 CET	56956	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:05.999363899 CET	4258	56956	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:06.978650093 CET	4258	56956	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:06.978724957 CET	4258	56956	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:06.978780031 CET	56956	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:06.978866100 CET	56956	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:06.979623079 CET	56958	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:07.098901033 CET	4258	56956	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:07.099628925 CET	4258	56958	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:07.099754095 CET	56958	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:07.099986076 CET	56958	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:07.219968081 CET	4258	56958	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:08.170137882 CET	4258	56958	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:08.170233965 CET	4258	56958	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:08.170314074 CET	56958	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:08.170569897 CET	56958	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:08.171605110 CET	56960	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:08.290334940 CET	4258	56958	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:08.291157007 CET	4258	56960	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:08.292515039 CET	56960	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:08.292608976 CET	56960	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:08.412218094 CET	4258	56960	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:09.358593941 CET	4258	56960	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:09.358674049 CET	4258	56960	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:09.358864069 CET	56960	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:09.359056950 CET	56960	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:09.359996080 CET	56962	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:09.478945971 CET	4258	56960	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:09.479727030 CET	4258	56962	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:09.479839087 CET	56962	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:09.479945898 CET	56962	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:09.602838993 CET	4258	56962	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:10.558870077 CET	4258	56962	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:10.558954000 CET	4258	56962	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:10.559041023 CET	56962	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:10.559180021 CET	56962	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:10.560317039 CET	56964	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:10.678617001 CET	4258	56962	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:10.679817915 CET	4258	56964	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:10.679939032 CET	56964	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:10.680077076 CET	56964	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:10.800029993 CET	4258	56964	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:11.754676104 CET	4258	56964	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:11.754690886 CET	4258	56964	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:11.754956007 CET	56964	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:11.755067110 CET	56964	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:11.756216049 CET	56966	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:11.878985882 CET	4258	56964	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:11.880230904 CET	4258	56966	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:11.880393028 CET	56966	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:11.880480051 CET	56966	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:12.004245996 CET	4258	56966	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:12.963016033 CET	4258	56966	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:12.963108063 CET	4258	56966	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:12.963370085 CET	56966	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:12.963490963 CET	56966	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:12.964710951 CET	56968	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:13.083158016 CET	4258	56966	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:13.084230900 CET	4258	56968	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:13.084467888 CET	56968	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:13.084595919 CET	56968	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:13.204092026 CET	4258	56968	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:14.155608892 CET	4258	56968	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:14.155632973 CET	4258	56968	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:14.155765057 CET	56968	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:14.155859947 CET	56968	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:14.156975031 CET	56970	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:14.279424906 CET	4258	56968	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:14.280538082 CET	4258	56970	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:14.280678988 CET	56970	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:14.280807972 CET	56970	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:14.400716066 CET	4258	56970	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:15.347923994 CET	4258	56970	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:15.347950935 CET	4258	56970	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:15.348131895 CET	56970	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:15.348241091 CET	56970	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:15.349232912 CET	56972	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:15.469136000 CET	4258	56970	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:15.470345974 CET	4258	56972	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:15.470592022 CET	56972	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:15.470704079 CET	56972	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:15.590425014 CET	4258	56972	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:16.543338060 CET	4258	56972	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:16.543359041 CET	4258	56972	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:16.543467045 CET	56972	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:16.543580055 CET	56972	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:16.544620037 CET	56974	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:16.665263891 CET	4258	56972	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:16.666027069 CET	4258	56974	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:16.666270971 CET	56974	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:16.666388035 CET	56974	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:16.785897970 CET	4258	56974	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:17.733057022 CET	4258	56974	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:17.733141899 CET	4258	56974	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:17.733349085 CET	56974	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:17.733576059 CET	56974	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:17.734658957 CET	56976	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:17.856632948 CET	4258	56974	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:17.858397007 CET	4258	56976	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:17.858455896 CET	56976	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:17.858479977 CET	56976	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:17.978347063 CET	4258	56976	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:18.925054073 CET	4258	56976	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:18.925154924 CET	4258	56976	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:18.925313950 CET	56976	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:18.925360918 CET	56976	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:18.926235914 CET	56978	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:19.045074940 CET	4258	56976	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:19.045969009 CET	4258	56978	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:19.046053886 CET	56978	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:19.046097994 CET	56978	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:19.165580988 CET	4258	56978	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:20.112376928 CET	4258	56978	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:20.112507105 CET	56978	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:20.112587929 CET	4258	56978	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:20.112667084 CET	56978	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:20.113634109 CET	56980	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:20.232163906 CET	4258	56978	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:20.233232021 CET	4258	56980	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:20.233319044 CET	56980	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:20.233356953 CET	56980	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:20.352875948 CET	4258	56980	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:24.574848890 CET	4258	56980	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:24.575243950 CET	56980	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:24.576359987 CET	56982	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:24.694895983 CET	4258	56980	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:24.695858955 CET	4258	56982	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:24.696052074 CET	56982	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:24.696213007 CET	56982	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:24.815826893 CET	4258	56982	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:25.769936085 CET	4258	56982	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:25.769993067 CET	4258	56982	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:25.770124912 CET	56982	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:25.770257950 CET	56982	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:25.771564007 CET	56984	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:25.890048981 CET	4258	56982	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:25.891392946 CET	4258	56984	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:25.891560078 CET	56984	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:25.891654015 CET	56984	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:26.011487007 CET	4258	56984	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:26.969748020 CET	4258	56984	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:26.969865084 CET	4258	56984	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:26.969940901 CET	56984	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:26.970073938 CET	56984	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:26.971164942 CET	56986	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:27.090998888 CET	4258	56984	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:27.092113972 CET	4258	56986	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:27.092485905 CET	56986	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:27.092485905 CET	56986	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:27.212543011 CET	4258	56986	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:28.182805061 CET	4258	56986	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:28.182902098 CET	4258	56986	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:28.182985067 CET	56986	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:28.183067083 CET	56986	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:28.184045076 CET	56988	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:28.303849936 CET	4258	56986	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:28.304554939 CET	4258	56988	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:28.304631948 CET	56988	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:28.304672956 CET	56988	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:28.426564932 CET	4258	56988	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:29.374394894 CET	4258	56988	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:29.374469042 CET	4258	56988	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:29.374582052 CET	56988	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:29.374741077 CET	56988	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:29.375833988 CET	56990	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:29.494818926 CET	4258	56988	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:29.495769024 CET	4258	56990	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:29.495918036 CET	56990	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:29.495918036 CET	56990	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:29.622453928 CET	4258	56990	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:30.577744961 CET	4258	56990	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:30.577862978 CET	4258	56990	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:30.577900887 CET	56990	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:30.577961922 CET	56990	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:30.578927040 CET	56992	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:30.699181080 CET	4258	56990	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:30.699760914 CET	4258	56992	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:30.699842930 CET	56992	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:30.699871063 CET	56992	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:30.819569111 CET	4258	56992	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:31.787048101 CET	4258	56992	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:31.787136078 CET	4258	56992	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:31.787225962 CET	56992	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:31.787297010 CET	56992	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:31.788338900 CET	56994	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:31.911581039 CET	4258	56992	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:31.912365913 CET	4258	56994	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:31.912506104 CET	56994	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:31.912600040 CET	56994	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:32.034465075 CET	4258	56994	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:32.980777025 CET	4258	56994	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:32.980891943 CET	56994	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:32.980902910 CET	4258	56994	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:32.980958939 CET	56994	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:32.981852055 CET	56996	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:33.101089954 CET	4258	56994	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:33.101636887 CET	4258	56996	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:33.101881027 CET	56996	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:33.101973057 CET	56996	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:33.222601891 CET	4258	56996	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:34.169118881 CET	4258	56996	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:34.169233084 CET	4258	56996	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:34.169426918 CET	56996	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:34.169584036 CET	56996	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:34.170706987 CET	56998	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:34.289522886 CET	4258	56996	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:34.291146994 CET	4258	56998	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:34.291337013 CET	56998	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:34.291445971 CET	56998	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:34.411268950 CET	4258	56998	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:35.536834002 CET	4258	56998	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:35.537117004 CET	4258	56998	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:35.537163019 CET	56998	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:35.537317991 CET	56998	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:35.538472891 CET	57000	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:35.657237053 CET	4258	56998	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:35.658055067 CET	4258	57000	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:35.658304930 CET	57000	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:35.658404112 CET	57000	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:35.778033018 CET	4258	57000	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:36.725545883 CET	4258	57000	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:36.725708008 CET	4258	57000	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:36.725847006 CET	57000	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:36.725975037 CET	57000	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:36.726794004 CET	57002	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:36.845720053 CET	4258	57000	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:36.846612930 CET	4258	57002	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:36.846750021 CET	57002	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:36.846851110 CET	57002	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:36.971602917 CET	4258	57002	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:37.920160055 CET	4258	57002	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:37.920183897 CET	4258	57002	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:37.920402050 CET	57002	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:37.920527935 CET	57002	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:37.921566963 CET	57004	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:38.040123940 CET	4258	57002	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:38.041213036 CET	4258	57004	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:38.041491985 CET	57004	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:38.041559935 CET	57004	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:38.161379099 CET	4258	57004	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:39.109998941 CET	4258	57004	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:39.110014915 CET	4258	57004	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:39.110153913 CET	57004	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:39.110255957 CET	57004	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:39.111330032 CET	57006	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:39.230166912 CET	4258	57004	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:39.230931044 CET	4258	57006	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:39.231019020 CET	57006	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:39.231060028 CET	57006	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:39.350754976 CET	4258	57006	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:40.298537970 CET	4258	57006	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:40.298603058 CET	4258	57006	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:40.298892021 CET	57006	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:40.299091101 CET	57006	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:40.300112009 CET	57008	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:40.418556929 CET	4258	57006	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:40.419578075 CET	4258	57008	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:40.419703007 CET	57008	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:40.419795990 CET	57008	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:40.539516926 CET	4258	57008	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:41.485867977 CET	4258	57008	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:41.485937119 CET	4258	57008	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:41.486112118 CET	57008	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:41.486206055 CET	57008	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:41.487236023 CET	57010	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:41.608108997 CET	4258	57008	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:41.609235048 CET	4258	57010	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:41.609347105 CET	57010	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:41.609385014 CET	57010	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:41.729746103 CET	4258	57010	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:42.679980040 CET	4258	57010	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:42.680015087 CET	4258	57010	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:42.680332899 CET	57010	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:42.680568933 CET	57010	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:42.681412935 CET	57012	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:42.800224066 CET	4258	57010	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:42.801037073 CET	4258	57012	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:42.801295996 CET	57012	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:42.801414967 CET	57012	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:42.922494888 CET	4258	57012	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:43.870575905 CET	4258	57012	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:43.870659113 CET	4258	57012	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:43.870901108 CET	57012	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:43.871047974 CET	57012	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:43.872287035 CET	57014	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:43.997396946 CET	4258	57012	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:43.998409033 CET	4258	57014	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:43.998584032 CET	57014	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:43.998689890 CET	57014	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:44.118829012 CET	4258	57014	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:45.086437941 CET	4258	57014	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:45.086802006 CET	57014	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:45.088166952 CET	4258	57014	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:45.088270903 CET	57014	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:45.089095116 CET	57016	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:45.207973957 CET	4258	57014	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:45.208831072 CET	4258	57016	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:45.209022045 CET	57016	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:45.209074974 CET	57016	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:45.328702927 CET	4258	57016	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:46.276707888 CET	4258	57016	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:46.276741028 CET	4258	57016	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:46.277026892 CET	57016	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:46.277254105 CET	57016	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:46.278223038 CET	57018	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:46.396764040 CET	4258	57016	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:46.397778988 CET	4258	57018	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:46.398086071 CET	57018	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:46.398184061 CET	57018	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:46.522896051 CET	4258	57018	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:47.469753981 CET	4258	57018	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:47.469779968 CET	4258	57018	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:47.469862938 CET	57018	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:47.469971895 CET	57018	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:47.470597982 CET	57020	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:47.596563101 CET	4258	57018	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:48.059590101 CET	4258	57020	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:48.059815884 CET	57020	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:48.059889078 CET	57020	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:48.182471037 CET	4258	57020	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:49.128619909 CET	4258	57020	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:49.128648996 CET	4258	57020	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:49.128880024 CET	57020	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:49.128973961 CET	57020	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:49.129803896 CET	57022	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:49.250797033 CET	4258	57020	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:49.250822067 CET	4258	57022	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:49.251065016 CET	57022	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:49.251065016 CET	57022	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:49.371450901 CET	4258	57022	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:50.354537010 CET	4258	57022	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:50.354585886 CET	4258	57022	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:50.354772091 CET	57022	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:50.354836941 CET	57022	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:50.355597973 CET	57024	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:50.474550962 CET	4258	57022	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:50.475203037 CET	4258	57024	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:50.475326061 CET	57024	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:50.475389004 CET	57024	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:50.595246077 CET	4258	57024	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:51.542336941 CET	4258	57024	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:51.542422056 CET	4258	57024	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:51.542545080 CET	57024	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:51.542644024 CET	57024	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:51.543402910 CET	57026	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:51.662426949 CET	4258	57024	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:51.663397074 CET	4258	57026	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:51.663522959 CET	57026	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:51.663568974 CET	57026	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:51.783792973 CET	4258	57026	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:52.742072105 CET	4258	57026	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:52.742167950 CET	4258	57026	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:52.742247105 CET	57026	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:52.742309093 CET	57026	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:52.743381023 CET	57028	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:52.862061977 CET	4258	57026	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:52.863095999 CET	4258	57028	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:52.863245964 CET	57028	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:52.863325119 CET	57028	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:52.983073950 CET	4258	57028	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:53.930507898 CET	4258	57028	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:53.930538893 CET	4258	57028	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:53.930701017 CET	57028	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:53.930854082 CET	57028	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:53.931725025 CET	57030	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:54.056957006 CET	4258	57028	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:54.057641029 CET	4258	57030	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:54.057812929 CET	57030	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:54.057873964 CET	57030	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:54.178452969 CET	4258	57030	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:55.126132965 CET	4258	57030	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:55.126194000 CET	4258	57030	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:55.126369953 CET	57030	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:55.126516104 CET	57030	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:55.127365112 CET	57032	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:55.246129036 CET	4258	57030	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:55.246892929 CET	4258	57032	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:55.247170925 CET	57032	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:55.247294903 CET	57032	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:55.366985083 CET	4258	57032	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:56.316462994 CET	4258	57032	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:56.316492081 CET	4258	57032	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:56.316761017 CET	57032	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:56.316992998 CET	57032	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:56.318089962 CET	57034	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:56.436646938 CET	4258	57032	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:56.437751055 CET	4258	57034	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:56.438132048 CET	57034	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:56.438240051 CET	57034	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:56.557945967 CET	4258	57034	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:57.504654884 CET	4258	57034	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:57.504679918 CET	4258	57034	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:57.505007029 CET	57034	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:57.505189896 CET	57034	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:57.506067991 CET	57036	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:57.625180006 CET	4258	57034	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:57.625569105 CET	4258	57036	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:57.625741959 CET	57036	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:57.625787020 CET	57036	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:57.749070883 CET	4258	57036	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:58.724616051 CET	4258	57036	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:58.724764109 CET	4258	57036	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:58.724894047 CET	57036	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:58.725229025 CET	57036	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:58.726095915 CET	57038	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:58.844964027 CET	4258	57036	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:58.845654011 CET	4258	57038	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:58.845932007 CET	57038	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:58.846108913 CET	57038	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:58.965598106 CET	4258	57038	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:59.913337946 CET	4258	57038	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:59.913383961 CET	4258	57038	31.172.83.147	192.168.2.14
Dec 22, 2024 16:07:59.913528919 CET	57038	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:59.913711071 CET	57038	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:07:59.914845943 CET	57040	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:00.039999962 CET	4258	57038	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:00.041091919 CET	4258	57040	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:00.041219950 CET	57040	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:00.041263103 CET	57040	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:00.161071062 CET	4258	57040	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:01.235594034 CET	4258	57040	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:01.235609055 CET	4258	57040	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:01.235827923 CET	57040	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:01.235827923 CET	57040	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:01.236763000 CET	57042	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:01.355686903 CET	4258	57040	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:01.356417894 CET	4258	57042	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:01.356515884 CET	57042	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:01.356627941 CET	57042	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:01.478990078 CET	4258	57042	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:02.438592911 CET	4258	57042	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:02.438662052 CET	4258	57042	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:02.438730001 CET	57042	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:02.438925028 CET	57042	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:02.440022945 CET	57044	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:02.558660030 CET	4258	57042	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:02.559870958 CET	4258	57044	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:02.560009956 CET	57044	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:02.560111046 CET	57044	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:02.680262089 CET	4258	57044	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:03.637111902 CET	4258	57044	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:03.637300968 CET	57044	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:03.637501001 CET	4258	57044	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:03.637562990 CET	57044	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:03.638418913 CET	57046	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:03.757317066 CET	4258	57044	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:03.758203983 CET	4258	57046	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:03.758384943 CET	57046	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:03.758435011 CET	57046	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:03.878175020 CET	4258	57046	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:04.828555107 CET	4258	57046	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:04.828743935 CET	4258	57046	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:04.828738928 CET	57046	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:04.828840017 CET	57046	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:04.829879045 CET	57048	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:04.953377962 CET	4258	57046	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:04.954190016 CET	4258	57048	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:04.954467058 CET	57048	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:04.954567909 CET	57048	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:05.076385021 CET	4258	57048	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:06.024367094 CET	4258	57048	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:06.024485111 CET	4258	57048	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:06.024488926 CET	57048	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:06.024647951 CET	57048	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:06.025444031 CET	57050	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:06.144077063 CET	4258	57048	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:06.144964933 CET	4258	57050	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:06.145201921 CET	57050	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:06.145325899 CET	57050	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:06.264744043 CET	4258	57050	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:07.221909046 CET	4258	57050	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:07.221934080 CET	4258	57050	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:07.222203970 CET	57050	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:07.222461939 CET	57050	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:07.223913908 CET	57052	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:07.342423916 CET	4258	57050	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:07.343791008 CET	4258	57052	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:07.344232082 CET	57052	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:07.344414949 CET	57052	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:07.464304924 CET	4258	57052	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:08.419641018 CET	4258	57052	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:08.419656038 CET	4258	57052	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:08.419971943 CET	57052	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:08.420124054 CET	57052	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:08.421026945 CET	57054	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:08.539653063 CET	4258	57052	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:08.540581942 CET	4258	57054	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:08.540761948 CET	57054	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:08.540851116 CET	57054	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:08.660717964 CET	4258	57054	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:09.724409103 CET	4258	57054	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:09.724443913 CET	4258	57054	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:09.724730968 CET	57054	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:09.724874973 CET	57054	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:09.725847006 CET	57056	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:09.846426964 CET	4258	57054	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:09.847228050 CET	4258	57056	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:09.847347975 CET	57056	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:09.847614050 CET	57056	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:09.967720985 CET	4258	57056	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:10.914490938 CET	4258	57056	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:10.914539099 CET	4258	57056	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:10.914598942 CET	57056	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:10.914660931 CET	57056	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:10.915503025 CET	57058	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:11.036530972 CET	4258	57056	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:11.037179947 CET	4258	57058	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:11.037385941 CET	57058	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:11.037513971 CET	57058	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:11.157016039 CET	4258	57058	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:12.104204893 CET	4258	57058	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:12.104434967 CET	4258	57058	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:12.104464054 CET	57058	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:12.104509115 CET	57058	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:12.105742931 CET	57060	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:12.224020004 CET	4258	57058	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:12.225218058 CET	4258	57060	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:12.225433111 CET	57060	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:12.225541115 CET	57060	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:12.345165014 CET	4258	57060	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:13.292936087 CET	4258	57060	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:13.293050051 CET	4258	57060	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:13.293132067 CET	57060	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:13.293262005 CET	57060	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:13.294233084 CET	57062	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:13.418832064 CET	4258	57060	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:13.419744968 CET	4258	57062	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:13.419940948 CET	57062	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:13.420084953 CET	57062	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:13.539706945 CET	4258	57062	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:14.559510946 CET	4258	57062	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:14.559549093 CET	4258	57062	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:14.559664011 CET	57062	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:14.559760094 CET	57062	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:14.560777903 CET	57064	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:14.680937052 CET	4258	57062	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:14.681720018 CET	4258	57064	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:14.681986094 CET	57064	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:14.682048082 CET	57064	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:14.801738977 CET	4258	57064	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:15.750014067 CET	4258	57064	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:15.750049114 CET	4258	57064	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:15.750401974 CET	57064	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:15.750590086 CET	57064	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:15.752101898 CET	57066	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:15.870250940 CET	4258	57064	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:15.871582031 CET	4258	57066	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:15.871867895 CET	57066	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:15.871995926 CET	57066	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:15.991532087 CET	4258	57066	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:16.938476086 CET	4258	57066	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:16.938502073 CET	4258	57066	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:16.938652039 CET	57066	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:16.938735008 CET	57066	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:16.939806938 CET	57068	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:17.058526039 CET	4258	57066	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:17.059401035 CET	4258	57068	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:17.059694052 CET	57068	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:17.059902906 CET	57068	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:17.179508924 CET	4258	57068	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:18.139041901 CET	4258	57068	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:18.139111996 CET	4258	57068	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:18.139354944 CET	57068	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:18.139487028 CET	57068	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:18.140415907 CET	57070	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:18.259130955 CET	4258	57068	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:18.259937048 CET	4258	57070	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:18.260181904 CET	57070	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:18.260288954 CET	57070	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:18.380028963 CET	4258	57070	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:19.326927900 CET	4258	57070	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:19.326941967 CET	4258	57070	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:19.327361107 CET	57070	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:19.327361107 CET	57070	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:19.329248905 CET	57072	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:19.453032970 CET	4258	57070	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:19.454576015 CET	4258	57072	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:19.454935074 CET	57072	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:19.454935074 CET	57072	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:19.575218916 CET	4258	57072	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:20.522098064 CET	4258	57072	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:20.522218943 CET	4258	57072	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:20.522353888 CET	57072	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:20.522459984 CET	57072	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:20.523578882 CET	57074	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:20.642040014 CET	4258	57072	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:20.643287897 CET	4258	57074	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:20.643649101 CET	57074	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:20.643712997 CET	57074	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:20.763356924 CET	4258	57074	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:21.711451054 CET	4258	57074	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:21.711620092 CET	57074	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:21.711637974 CET	4258	57074	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:21.711721897 CET	57074	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:21.712584019 CET	57076	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:21.831207037 CET	4258	57074	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:21.832031965 CET	4258	57076	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:21.832295895 CET	57076	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:21.832426071 CET	57076	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:21.953039885 CET	4258	57076	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:22.899765015 CET	4258	57076	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:22.899929047 CET	4258	57076	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:22.900150061 CET	57076	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:22.900336027 CET	57076	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:22.901870966 CET	57078	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:23.020081997 CET	4258	57076	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:23.021326065 CET	4258	57078	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:23.021478891 CET	57078	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:23.021717072 CET	57078	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:23.141215086 CET	4258	57078	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:24.087753057 CET	4258	57078	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:24.087830067 CET	4258	57078	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:24.088051081 CET	57078	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:24.088294029 CET	57078	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:24.090280056 CET	57080	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:24.207823992 CET	4258	57078	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:24.209820032 CET	4258	57080	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:24.210082054 CET	57080	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:24.210175991 CET	57080	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:24.330091000 CET	4258	57080	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:25.276547909 CET	4258	57080	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:25.276711941 CET	4258	57080	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:25.276784897 CET	57080	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:25.277100086 CET	57080	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:25.278578997 CET	57082	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:25.396687984 CET	4258	57080	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:25.398232937 CET	4258	57082	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:25.398332119 CET	57082	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:25.398437977 CET	57082	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:25.518985987 CET	4258	57082	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:26.490062952 CET	4258	57082	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:26.490114927 CET	4258	57082	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:26.490307093 CET	57082	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:26.490453959 CET	57082	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:26.491741896 CET	57084	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:26.610001087 CET	4258	57082	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:26.611284971 CET	4258	57084	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:26.611494064 CET	57084	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:26.611552954 CET	57084	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:26.731215954 CET	4258	57084	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:27.691227913 CET	4258	57084	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:27.691550970 CET	57084	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:27.691991091 CET	4258	57084	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:27.692336082 CET	57084	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:27.694020987 CET	57086	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:27.836723089 CET	4258	57084	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:27.836740017 CET	4258	57086	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:27.836843967 CET	57086	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:27.836957932 CET	57086	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:27.990912914 CET	4258	57086	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:28.939548969 CET	4258	57086	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:28.939805031 CET	57086	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:28.939977884 CET	4258	57086	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:28.940093040 CET	57086	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:28.940994024 CET	57088	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:29.101457119 CET	4258	57086	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:29.101484060 CET	4258	57088	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:29.101972103 CET	57088	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:29.101972103 CET	57088	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:29.221601009 CET	4258	57088	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:30.178391933 CET	4258	57088	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:30.178595066 CET	4258	57088	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:30.178734064 CET	57088	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:30.178822994 CET	57088	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:30.179905891 CET	57090	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:30.302440882 CET	4258	57088	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:30.302496910 CET	4258	57090	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:30.302742958 CET	57090	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:30.302840948 CET	57090	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:30.493160009 CET	4258	57090	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:31.377000093 CET	4258	57090	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:31.377052069 CET	4258	57090	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:31.377317905 CET	57090	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:31.377502918 CET	57090	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:31.379172087 CET	57092	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:31.497018099 CET	4258	57090	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:31.498714924 CET	4258	57092	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:31.499003887 CET	57092	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:31.499188900 CET	57092	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:31.638016939 CET	4258	57092	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:32.619040966 CET	4258	57092	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:32.619126081 CET	4258	57092	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:32.619335890 CET	57092	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:32.619473934 CET	57092	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:32.620874882 CET	57094	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:32.738912106 CET	4258	57092	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:32.740375042 CET	4258	57094	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:32.740495920 CET	57094	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:32.740564108 CET	57094	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:32.862696886 CET	4258	57094	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:33.838506937 CET	4258	57094	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:33.838587046 CET	4258	57094	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:33.838650942 CET	57094	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:33.838715076 CET	57094	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:33.839457035 CET	57096	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:34.021656036 CET	4258	57094	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:34.021670103 CET	4258	57096	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:34.022048950 CET	57096	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:34.022355080 CET	57096	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:34.214385033 CET	4258	57096	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:35.162396908 CET	4258	57096	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:35.162426949 CET	4258	57096	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:35.162542105 CET	57096	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:35.162667036 CET	57096	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:35.163590908 CET	57098	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:35.282290936 CET	4258	57096	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:35.283246994 CET	4258	57098	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:35.283390045 CET	57098	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:35.283447981 CET	57098	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:35.404047012 CET	4258	57098	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:36.354280949 CET	4258	57098	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:36.354372978 CET	4258	57098	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:36.354669094 CET	57098	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:36.354743958 CET	57098	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:36.356210947 CET	57100	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:36.474529028 CET	4258	57098	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:36.475738049 CET	4258	57100	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:36.475832939 CET	57100	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:36.475961924 CET	57100	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:36.595973969 CET	4258	57100	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:37.569256067 CET	4258	57100	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:37.569369078 CET	4258	57100	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:37.569403887 CET	57100	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:37.569551945 CET	57100	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:37.570559978 CET	57102	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:37.689076900 CET	4258	57100	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:37.690116882 CET	4258	57102	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:37.690355062 CET	57102	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:37.690489054 CET	57102	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:37.810060978 CET	4258	57102	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:38.759543896 CET	4258	57102	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:38.759774923 CET	4258	57102	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:38.759871960 CET	57102	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:38.760044098 CET	57102	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:38.761127949 CET	57104	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:38.879554987 CET	4258	57102	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:38.880656958 CET	4258	57104	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:38.880918026 CET	57104	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:38.881063938 CET	57104	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:39.003391981 CET	4258	57104	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:39.950382948 CET	4258	57104	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:39.950598955 CET	4258	57104	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:39.950679064 CET	57104	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:39.950886965 CET	57104	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:39.952516079 CET	57106	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:40.071491957 CET	4258	57104	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:40.072694063 CET	4258	57106	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:40.072876930 CET	57106	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:40.073016882 CET	57106	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:40.192615032 CET	4258	57106	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:41.142292023 CET	4258	57106	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:41.142307043 CET	4258	57106	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:41.142465115 CET	57106	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:41.142523050 CET	57106	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:41.143383980 CET	57108	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:41.262068033 CET	4258	57106	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:41.262959003 CET	4258	57108	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:41.263180017 CET	57108	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:41.263258934 CET	57108	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:41.383476973 CET	4258	57108	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:42.331738949 CET	4258	57108	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:42.331785917 CET	4258	57108	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:42.331892014 CET	57108	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:42.331983089 CET	57108	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:42.332722902 CET	57110	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:42.451623917 CET	4258	57108	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:42.452246904 CET	4258	57110	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:42.452435017 CET	57110	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:42.452526093 CET	57110	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:42.572563887 CET	4258	57110	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:43.519498110 CET	4258	57110	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:43.519793987 CET	57110	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:43.520315886 CET	4258	57110	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:43.520472050 CET	57110	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:43.521552086 CET	57112	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:43.640580893 CET	4258	57110	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:43.641649961 CET	4258	57112	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:43.641855955 CET	57112	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:43.641957045 CET	57112	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:43.761670113 CET	4258	57112	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:44.708436966 CET	4258	57112	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:44.708499908 CET	4258	57112	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:44.708631039 CET	57112	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:44.708813906 CET	57112	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:44.709835052 CET	57114	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:44.828376055 CET	4258	57112	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:44.829514980 CET	4258	57114	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:44.829818964 CET	57114	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:44.829819918 CET	57114	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:44.953708887 CET	4258	57114	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:45.901237965 CET	4258	57114	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:45.901276112 CET	4258	57114	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:45.901396036 CET	57114	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:45.901619911 CET	57114	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:45.902421951 CET	57116	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:46.021274090 CET	4258	57114	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:46.022073030 CET	4258	57116	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:46.022155046 CET	57116	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:46.022206068 CET	57116	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:46.143672943 CET	4258	57116	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:47.090377092 CET	4258	57116	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:47.090477943 CET	4258	57116	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:47.090595961 CET	57116	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:47.090739965 CET	57116	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:47.091857910 CET	57118	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:47.211101055 CET	4258	57116	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:47.212091923 CET	4258	57118	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:47.212346077 CET	57118	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:47.212410927 CET	57118	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:47.333236933 CET	4258	57118	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:48.281302929 CET	4258	57118	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:48.281342983 CET	4258	57118	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:48.281755924 CET	57118	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:48.281914949 CET	57118	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:48.283364058 CET	57120	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:48.401370049 CET	4258	57118	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:48.402903080 CET	4258	57120	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:48.403280020 CET	57120	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:48.403397083 CET	57120	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:48.522953033 CET	4258	57120	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:49.470055103 CET	4258	57120	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:49.470102072 CET	4258	57120	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:49.470274925 CET	57120	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:49.470504045 CET	57120	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:49.471618891 CET	57122	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:49.590507030 CET	4258	57120	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:49.591659069 CET	4258	57122	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:49.591924906 CET	57122	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:49.592101097 CET	57122	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:49.711622000 CET	4258	57122	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:50.659307957 CET	4258	57122	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:50.659529924 CET	57122	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:50.659607887 CET	4258	57122	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:50.659701109 CET	57122	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:50.660624981 CET	57124	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:50.779944897 CET	4258	57122	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:50.780695915 CET	4258	57124	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:50.780841112 CET	57124	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:50.781197071 CET	57124	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:50.902328968 CET	4258	57124	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:51.870342016 CET	4258	57124	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:51.870471954 CET	4258	57124	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:51.870656013 CET	57124	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:51.870949984 CET	57124	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:51.871826887 CET	57126	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:51.990849018 CET	4258	57124	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:51.992899895 CET	4258	57126	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:51.993158102 CET	57126	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:51.993311882 CET	57126	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:52.112781048 CET	4258	57126	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:53.060856104 CET	4258	57126	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:53.060925007 CET	4258	57126	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:53.060992956 CET	57126	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:53.061101913 CET	57126	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:53.062050104 CET	57128	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:53.181955099 CET	4258	57126	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:53.182796955 CET	4258	57128	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:53.182914972 CET	57128	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:53.182965994 CET	57128	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:53.307152033 CET	4258	57128	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:54.257360935 CET	4258	57128	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:54.257385969 CET	4258	57128	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:54.257491112 CET	57128	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:54.257565975 CET	57128	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:54.258383036 CET	57130	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:54.378586054 CET	4258	57128	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:54.379169941 CET	4258	57130	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:54.379256964 CET	57130	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:54.379307985 CET	57130	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:54.498835087 CET	4258	57130	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:55.469163895 CET	4258	57130	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:55.469274998 CET	4258	57130	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:55.469337940 CET	57130	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:55.469512939 CET	57130	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:55.470454931 CET	57132	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:55.589026928 CET	4258	57130	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:55.590044022 CET	4258	57132	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:55.590181112 CET	57132	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:55.590318918 CET	57132	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:55.710011959 CET	4258	57132	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:56.681343079 CET	4258	57132	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:56.681513071 CET	4258	57132	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:56.681674957 CET	57132	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:56.681766987 CET	57132	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:56.682516098 CET	57134	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:56.801328897 CET	4258	57132	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:56.802062035 CET	4258	57134	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:56.802196980 CET	57134	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:56.802288055 CET	57134	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:56.921984911 CET	4258	57134	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:57.876801014 CET	4258	57134	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:57.877024889 CET	57134	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:57.877201080 CET	4258	57134	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:57.877319098 CET	57134	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:57.878170013 CET	57136	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:57.998384953 CET	4258	57134	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:57.999237061 CET	4258	57136	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:57.999356985 CET	57136	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:57.999461889 CET	57136	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:58.119508028 CET	4258	57136	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:59.070154905 CET	4258	57136	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:59.070184946 CET	4258	57136	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:59.070472956 CET	57136	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:59.070636034 CET	57136	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:59.071644068 CET	57138	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:59.190426111 CET	4258	57136	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:59.191248894 CET	4258	57138	31.172.83.147	192.168.2.14
Dec 22, 2024 16:08:59.191370964 CET	57138	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:59.191473961 CET	57138	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:08:59.311258078 CET	4258	57138	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:00.258775949 CET	4258	57138	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:00.258898020 CET	4258	57138	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:00.258935928 CET	57138	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:00.259107113 CET	57138	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:00.260055065 CET	57140	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:00.378639936 CET	4258	57138	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:00.379548073 CET	4258	57140	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:00.379760981 CET	57140	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:00.379884958 CET	57140	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:00.500987053 CET	4258	57140	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:01.456814051 CET	4258	57140	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:01.456911087 CET	4258	57140	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:01.457005024 CET	57140	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:01.457151890 CET	57140	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:01.457828999 CET	57142	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:01.576843023 CET	4258	57140	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:01.577383995 CET	4258	57142	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:01.577440023 CET	57142	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:01.577539921 CET	57142	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:01.698271036 CET	4258	57142	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:02.166625023 CET	45414	53	192.168.2.14	8.8.8.8
Dec 22, 2024 16:09:02.286242008 CET	53	45414	8.8.8.8	192.168.2.14
Dec 22, 2024 16:09:02.286309958 CET	45414	53	192.168.2.14	8.8.8.8
Dec 22, 2024 16:09:02.286369085 CET	45414	53	192.168.2.14	8.8.8.8
Dec 22, 2024 16:09:02.286369085 CET	45414	53	192.168.2.14	8.8.8.8
Dec 22, 2024 16:09:02.406153917 CET	53	45414	8.8.8.8	192.168.2.14
Dec 22, 2024 16:09:02.406167984 CET	53	45414	8.8.8.8	192.168.2.14
Dec 22, 2024 16:09:02.646645069 CET	4258	57142	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:02.646764994 CET	4258	57142	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:02.646780968 CET	57142	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:02.646903992 CET	57142	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:02.647975922 CET	57146	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:02.769136906 CET	4258	57142	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:02.770343065 CET	4258	57146	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:02.770431042 CET	57146	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:02.770431042 CET	57146	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:02.890132904 CET	4258	57146	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:03.376090050 CET	53	45414	8.8.8.8	192.168.2.14
Dec 22, 2024 16:09:03.376205921 CET	45414	53	192.168.2.14	8.8.8.8
Dec 22, 2024 16:09:03.847373962 CET	4258	57146	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:03.847476006 CET	57146	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:03.847480059 CET	4258	57146	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:03.847589016 CET	57146	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:03.848336935 CET	57148	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:03.970035076 CET	4258	57146	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:03.970845938 CET	4258	57148	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:03.970954895 CET	57148	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:03.971026897 CET	57148	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:04.091197014 CET	4258	57148	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:05.038338900 CET	4258	57148	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:05.038357019 CET	4258	57148	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:05.038589954 CET	57148	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:05.038630962 CET	57148	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:05.039489031 CET	57150	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:05.158303976 CET	4258	57148	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:05.158951998 CET	4258	57150	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:05.159157038 CET	57150	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:05.159344912 CET	57150	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:05.279062033 CET	4258	57150	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:05.376463890 CET	53	45414	8.8.8.8	192.168.2.14
Dec 22, 2024 16:09:05.377785921 CET	45414	53	192.168.2.14	8.8.8.8
Dec 22, 2024 16:09:05.497742891 CET	53	45414	8.8.8.8	192.168.2.14
Dec 22, 2024 16:09:06.226727009 CET	4258	57150	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:06.226739883 CET	4258	57150	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:06.226944923 CET	57150	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:06.226958990 CET	57150	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:06.227735996 CET	57152	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:06.349145889 CET	4258	57150	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:06.350447893 CET	4258	57152	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:06.350569963 CET	57152	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:06.350739956 CET	57152	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:06.470305920 CET	4258	57152	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:07.429958105 CET	4258	57152	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:07.429985046 CET	4258	57152	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:07.430283070 CET	57152	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:07.430335045 CET	57152	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:07.431067944 CET	57154	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:07.549989939 CET	4258	57152	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:07.550596952 CET	4258	57154	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:07.550707102 CET	57154	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:07.550873995 CET	57154	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:07.671888113 CET	4258	57154	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:08.617553949 CET	4258	57154	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:08.617687941 CET	4258	57154	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:08.617813110 CET	57154	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:08.617813110 CET	57154	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:08.618467093 CET	57156	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:08.737616062 CET	4258	57154	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:08.738061905 CET	4258	57156	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:08.738281012 CET	57156	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:08.738493919 CET	57156	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:08.859220982 CET	4258	57156	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:09.816833019 CET	4258	57156	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:09.816858053 CET	4258	57156	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:09.816958904 CET	57156	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:09.817073107 CET	57156	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:09.817811966 CET	57158	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:09.936809063 CET	4258	57156	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:09.937647104 CET	4258	57158	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:09.937762976 CET	57158	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:09.937925100 CET	57158	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:10.057511091 CET	4258	57158	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:11.004056931 CET	4258	57158	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:11.004070044 CET	4258	57158	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:11.004290104 CET	57158	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:11.004447937 CET	57158	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:11.005141973 CET	57160	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:11.124018908 CET	4258	57158	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:11.124679089 CET	4258	57160	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:11.124767065 CET	57160	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:11.124830961 CET	57160	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:11.244451046 CET	4258	57160	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:12.215908051 CET	4258	57160	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:12.215924978 CET	4258	57160	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:12.216053009 CET	57160	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:12.216110945 CET	57160	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:12.216763020 CET	57162	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:12.335623980 CET	4258	57160	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:12.336316109 CET	4258	57162	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:12.336492062 CET	57162	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:12.336492062 CET	57162	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:12.456144094 CET	4258	57162	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:13.412606001 CET	4258	57162	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:13.412622929 CET	4258	57162	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:13.412929058 CET	57162	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:13.413021088 CET	57162	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:13.413981915 CET	57164	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:13.532792091 CET	4258	57162	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:13.533740044 CET	4258	57164	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:13.534040928 CET	57164	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:13.534040928 CET	57164	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:13.658832073 CET	4258	57164	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:14.615516901 CET	4258	57164	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:14.615770102 CET	57164	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:14.615890980 CET	4258	57164	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:14.616019964 CET	57164	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:14.616769075 CET	57166	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:14.736021042 CET	4258	57164	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:14.737255096 CET	4258	57166	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:14.737454891 CET	57166	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:14.737514973 CET	57166	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:14.858061075 CET	4258	57166	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:15.805036068 CET	4258	57166	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:15.805052996 CET	4258	57166	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:15.805207968 CET	57166	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:15.805367947 CET	57166	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:15.806082010 CET	57168	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:15.924953938 CET	4258	57166	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:15.925623894 CET	4258	57168	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:15.925734997 CET	57168	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:15.925849915 CET	57168	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:16.048394918 CET	4258	57168	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:16.995361090 CET	4258	57168	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:16.995399952 CET	4258	57168	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:16.995656967 CET	57168	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:16.995743036 CET	57168	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:16.996536970 CET	57170	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:17.115643978 CET	4258	57168	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:17.116072893 CET	4258	57170	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:17.116211891 CET	57170	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:17.116261005 CET	57170	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:17.235888958 CET	4258	57170	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:18.182274103 CET	4258	57170	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:18.182363987 CET	4258	57170	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:18.182606936 CET	57170	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:18.182663918 CET	57170	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:18.183353901 CET	57172	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:18.302985907 CET	4258	57170	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:18.303375006 CET	4258	57172	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:18.303487062 CET	57172	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:18.303592920 CET	57172	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:18.423228979 CET	4258	57172	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:19.370198011 CET	4258	57172	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:19.370218039 CET	4258	57172	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:19.370464087 CET	57172	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:19.370543003 CET	57172	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:19.371346951 CET	57174	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:19.490264893 CET	4258	57172	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:19.490860939 CET	4258	57174	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:19.491241932 CET	57174	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:19.491241932 CET	57174	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:19.610747099 CET	4258	57174	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:20.580593109 CET	4258	57174	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:20.580733061 CET	4258	57174	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:20.580877066 CET	57174	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:20.580996037 CET	57174	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:20.581789970 CET	57176	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:20.701219082 CET	4258	57174	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:20.702301025 CET	4258	57176	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:20.702469110 CET	57176	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:20.702501059 CET	57176	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:20.824146986 CET	4258	57176	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:21.790137053 CET	4258	57176	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:21.790328026 CET	4258	57176	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:21.790395021 CET	57176	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:21.790498972 CET	57176	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:21.791273117 CET	57178	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:21.909955025 CET	4258	57176	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:21.910788059 CET	4258	57178	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:21.910960913 CET	57178	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:21.910978079 CET	57178	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:22.031750917 CET	4258	57178	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:22.979094028 CET	4258	57178	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:22.979145050 CET	4258	57178	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:22.979379892 CET	57178	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:22.979577065 CET	57178	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:22.980428934 CET	57180	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:23.099112988 CET	4258	57178	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:23.100162029 CET	4258	57180	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:23.100249052 CET	57180	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:23.100364923 CET	57180	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:23.220259905 CET	4258	57180	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:24.167342901 CET	4258	57180	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:24.167474985 CET	4258	57180	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:24.167498112 CET	57180	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:24.167581081 CET	57180	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:24.168368101 CET	57182	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:24.287156105 CET	4258	57180	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:24.287852049 CET	4258	57182	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:24.288012981 CET	57182	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:24.288037062 CET	57182	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:24.407840014 CET	4258	57182	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:25.355237007 CET	4258	57182	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:25.355379105 CET	4258	57182	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:25.355519056 CET	57182	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:25.355828047 CET	57182	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:25.357168913 CET	57184	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:25.475431919 CET	4258	57182	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:25.476785898 CET	4258	57184	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:25.477046967 CET	57184	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:25.477154970 CET	57184	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:25.596673965 CET	4258	57184	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:26.544545889 CET	4258	57184	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:26.544617891 CET	57184	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:26.544672012 CET	4258	57184	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:26.544830084 CET	57184	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:26.545500994 CET	57186	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:26.665185928 CET	4258	57184	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:26.665968895 CET	4258	57186	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:26.666039944 CET	57186	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:26.666182995 CET	57186	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:26.785661936 CET	4258	57186	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:27.732100964 CET	4258	57186	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:27.732271910 CET	57186	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:27.732284069 CET	4258	57186	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:27.732372046 CET	57186	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:27.733078957 CET	57188	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:27.852936983 CET	4258	57186	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:27.853734016 CET	4258	57188	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:27.854022026 CET	57188	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:27.854106903 CET	57188	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:27.974704981 CET	4258	57188	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:28.922561884 CET	4258	57188	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:28.922656059 CET	4258	57188	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:28.922888041 CET	57188	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:28.923002958 CET	57188	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:28.923928022 CET	57190	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:29.042817116 CET	4258	57188	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:29.043827057 CET	4258	57190	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:29.043967009 CET	57190	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:29.044023991 CET	57190	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:29.164230108 CET	4258	57190	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:30.112268925 CET	4258	57190	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:30.112406015 CET	57190	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:30.112437963 CET	4258	57190	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:30.112514973 CET	57190	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:30.113411903 CET	57192	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:30.234698057 CET	4258	57190	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:30.235512972 CET	4258	57192	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:30.235616922 CET	57192	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:30.235666990 CET	57192	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:30.355443954 CET	4258	57192	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:31.304140091 CET	4258	57192	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:31.304277897 CET	57192	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:31.304305077 CET	4258	57192	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:31.304399967 CET	57192	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:31.305295944 CET	57194	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:31.424005032 CET	4258	57192	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:31.424885035 CET	4258	57194	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:31.424959898 CET	57194	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:31.425004005 CET	57194	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:31.544491053 CET	4258	57194	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:32.500916958 CET	4258	57194	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:32.500943899 CET	4258	57194	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:32.501221895 CET	57194	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:32.501310110 CET	57194	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:32.502353907 CET	57196	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:32.623016119 CET	4258	57194	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:32.623037100 CET	4258	57196	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:32.623183966 CET	57196	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:32.623270988 CET	57196	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:32.743190050 CET	4258	57196	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:33.691200972 CET	4258	57196	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:33.691365957 CET	4258	57196	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:33.691364050 CET	57196	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:33.691612959 CET	57196	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:33.692606926 CET	57198	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:33.811134100 CET	4258	57196	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:33.812207937 CET	4258	57198	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:33.812350988 CET	57198	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:33.812447071 CET	57198	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:33.934478045 CET	4258	57198	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:34.880892992 CET	4258	57198	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:34.881019115 CET	4258	57198	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:34.881161928 CET	57198	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:34.881264925 CET	57198	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:34.882253885 CET	57200	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:35.000829935 CET	4258	57198	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:35.001930952 CET	4258	57200	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:35.002002954 CET	57200	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:35.002062082 CET	57200	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:35.122880936 CET	4258	57200	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:36.068516970 CET	4258	57200	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:36.068553925 CET	4258	57200	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:36.068820953 CET	57200	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:36.068933010 CET	57200	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:36.069751978 CET	57202	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:36.188591003 CET	4258	57200	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:36.189254999 CET	4258	57202	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:36.189469099 CET	57202	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:36.189618111 CET	57202	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:36.309603930 CET	4258	57202	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:37.258511066 CET	4258	57202	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:37.258672953 CET	57202	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:37.258759022 CET	4258	57202	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:37.258934021 CET	57202	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:37.260024071 CET	57204	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:37.381483078 CET	4258	57202	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:37.382622004 CET	4258	57204	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:37.382900953 CET	57204	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:37.383079052 CET	57204	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:37.502733946 CET	4258	57204	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:38.466775894 CET	4258	57204	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:38.466865063 CET	4258	57204	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:38.467022896 CET	57204	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:38.467128038 CET	57204	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:38.468161106 CET	57206	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:38.586762905 CET	4258	57204	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:38.587707996 CET	4258	57206	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:38.587879896 CET	57206	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:38.587923050 CET	57206	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:38.708553076 CET	4258	57206	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:39.655342102 CET	4258	57206	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:39.655482054 CET	4258	57206	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:39.655476093 CET	57206	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:39.655595064 CET	57206	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:39.656215906 CET	57208	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:39.775084019 CET	4258	57206	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:39.775804996 CET	4258	57208	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:39.775930882 CET	57208	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:39.776005983 CET	57208	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:39.895903111 CET	4258	57208	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:40.862111092 CET	4258	57208	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:40.862256050 CET	57208	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:40.862375975 CET	4258	57208	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:40.862452984 CET	57208	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:40.863487005 CET	57210	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:40.982203007 CET	4258	57208	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:40.983062029 CET	4258	57210	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:40.983273983 CET	57210	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:40.983330011 CET	57210	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:41.102981091 CET	4258	57210	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:42.050263882 CET	4258	57210	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:42.050375938 CET	4258	57210	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:42.050399065 CET	57210	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:42.050685883 CET	57210	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:42.051671028 CET	57212	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:42.170902967 CET	4258	57210	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:42.171818018 CET	4258	57212	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:42.172082901 CET	57212	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:42.172203064 CET	57212	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:42.297185898 CET	4258	57212	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:43.272111893 CET	4258	57212	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:43.272181034 CET	4258	57212	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:43.272424936 CET	57212	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:43.272595882 CET	57212	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:43.273766041 CET	57214	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:43.392090082 CET	4258	57212	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:43.393420935 CET	4258	57214	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:43.393791914 CET	57214	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:43.393793106 CET	57214	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:43.514218092 CET	4258	57214	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:44.461715937 CET	4258	57214	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:44.461736917 CET	4258	57214	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:44.461920023 CET	57214	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:44.461988926 CET	57214	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:44.462786913 CET	57216	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:44.581631899 CET	4258	57214	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:44.582362890 CET	4258	57216	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:44.582489967 CET	57216	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:44.582688093 CET	57216	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:44.702152967 CET	4258	57216	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:45.655981064 CET	4258	57216	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:45.656075954 CET	57216	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:45.656158924 CET	4258	57216	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:45.656225920 CET	57216	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:45.657020092 CET	57218	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:45.775998116 CET	4258	57216	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:45.776557922 CET	4258	57218	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:45.776685953 CET	57218	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:45.776730061 CET	57218	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:45.897170067 CET	4258	57218	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:46.989927053 CET	4258	57218	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:46.990168095 CET	57218	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:46.990236044 CET	4258	57218	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:46.990325928 CET	57218	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:46.991039038 CET	57220	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:47.110253096 CET	4258	57218	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:47.110846043 CET	4258	57220	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:47.111064911 CET	57220	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:47.111066103 CET	57220	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:47.230752945 CET	4258	57220	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:48.177830935 CET	4258	57220	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:48.177871943 CET	4258	57220	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:48.178309917 CET	57220	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:48.178417921 CET	57220	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:48.179456949 CET	57222	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:48.302551985 CET	4258	57220	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:48.303642035 CET	4258	57222	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:48.303850889 CET	57222	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:48.303903103 CET	57222	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:48.426814079 CET	4258	57222	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:49.375178099 CET	4258	57222	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:49.375386953 CET	4258	57222	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:49.375581980 CET	57222	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:49.375582933 CET	57222	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:49.376419067 CET	57224	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:49.495537043 CET	4258	57222	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:49.496398926 CET	4258	57224	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:49.496659040 CET	57224	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:49.496720076 CET	57224	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:49.616210938 CET	4258	57224	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:50.564368963 CET	4258	57224	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:50.564707994 CET	57224	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:50.565052032 CET	4258	57224	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:50.565175056 CET	57224	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:50.566209078 CET	57226	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:50.684763908 CET	4258	57224	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:50.685838938 CET	4258	57226	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:50.686111927 CET	57226	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:50.686171055 CET	57226	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:50.806080103 CET	4258	57226	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:51.754153013 CET	4258	57226	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:51.754259109 CET	4258	57226	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:51.754574060 CET	57226	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:51.754734039 CET	57226	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:51.755846024 CET	57228	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:51.874263048 CET	4258	57226	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:51.875394106 CET	4258	57228	31.172.83.147	192.168.2.14
Dec 22, 2024 16:09:51.875762939 CET	57228	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:51.875762939 CET	57228	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:09:51.995377064 CET	4258	57228	31.172.83.147	192.168.2.14

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 22, 2024 16:09:02.286369085 CET	192.168.2.14	8.8.8.8	0x618b	Standard query (0)	daisy.ubuntu.com	A (IP address)	IN (0x0001)	false
Dec 22, 2024 16:09:02.286369085 CET	192.168.2.14	8.8.8.8	0x9e99	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 22, 2024 16:09:03.376090050 CET	8.8.8.8	192.168.2.14	0x618b	No error (0)	daisy.ubuntu.com		162.213.35.24	A (IP address)	IN (0x0001)	false
Dec 22, 2024 16:09:03.376090050 CET	8.8.8.8	192.168.2.14	0x618b	No error (0)	daisy.ubuntu.com		162.213.35.25	A (IP address)	IN (0x0001)	false

System Behavior

Analysis Process: hidakibest.mips.elf PID: 5554, Parent PID: 5471

General

Start time (UTC):	15:06:16
Start date (UTC):	22/12/2024
Path:	/tmp/hidakibest.mips.elf
Arguments:	/tmp/hidakibest.mips.elf
File size:	5777432 bytes
MD5 hash:	0083f1f0e77be34ad27f849842bbb00c

Chronological Activities

Analysis Process: hidakibest.mips.elf PID: 5556, Parent PID: 5554

General

Start time (UTC):	15:06:16
Start date (UTC):	22/12/2024
Path:	/tmp/hidakibest.mips.elf
Arguments:	-
File size:	5777432 bytes
MD5 hash:	0083f1f0e77be34ad27f849842bbb00c

Chronological Activities

Analysis Process: hidakibest.mips.elf PID: 5558, Parent PID: 5556

General

Start time (UTC):	15:06:16
Start date (UTC):	22/12/2024
Path:	/tmp/hidakibest.mips.elf
Arguments:	-
File size:	5777432 bytes
MD5 hash:	0083f1f0e77be34ad27f849842bbb00c

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system. Functionality could exist within remote access tools to enable this, but utilities available on the operating system could also be used such as Ping or `net view` using Net .
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Network Traffic: Network Connection Creation, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may obfuscate command and control traffic to make it more difficult to detect. Command and control (C2) communications are hidden (but not necessarily encrypted) in an attempt to make the content more difficult to discover or decipher and to make the communication less conspicuous and hide commands from being seen. This encompasses many methods, such as adding junk data to protocol traffic, using steganography, or impersonating legitimate protocols.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report hidakibest.mips.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Threatname: Gafgyt

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/tmp/qemu-open.ykIPqa (deleted)

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Network Port Distribution

TCP Packets

DNS Queries

DNS Answers

System Behavior

Analysis Process: hidakibest.mips.elf PID: 5554, Parent PID: 5471

General

Chronological Activities

Analysis Process: hidakibest.mips.elf PID: 5556, Parent PID: 5554

General

Chronological Activities

Analysis Process: hidakibest.mips.elf PID: 5558, Parent PID: 5556

General

Chronological Activities

Linux Analysis Report
hidakibest.mips.elf