Edit tour

Linux Analysis Report
hidakibest.arm5.elf

Overview

General Information

Sample name:	hidakibest.arm5.elf
Analysis ID:	1579495
MD5:	acd51cef824ff9ac06b21c6ebccdc6d2
SHA1:	76d2468ba82a120865e5fceec645d582dcb3285e
SHA256:	391d29d03801cb94ee932b2cb5c00250925b7e6edadbd9c26b2bc4afcf47132d
Tags:	elfuser-abuse_ch
Infos:

Detection

Gafgyt, Mirai

Score:	92
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Yara detected Gafgyt

Yara detected Mirai

Opens /proc/net/* files useful for finding connected devices and routers

Detected TCP or UDP traffic on non-standard ports

Sample contains strings that are user agent strings indicative of HTTP manipulation

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1579495
Start date and time:	2024-12-22 16:05:29 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 8s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	hidakibest.arm5.elf
Detection:	MAL
Classification:	mal92.spre.troj.linELF@0/0@2/0

Warnings

VT rate limit hit for: 31.172.83.147:4258

Runtime Messages

Command:	/tmp/hidakibest.arm5.elf
PID:	5452
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:

Process Tree

system is lnxubuntu20

hidakibest.arm5.elf (PID: 5452, Parent: 5376, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/hidakibest.arm5.elf

hidakibest.arm5.elf New Fork (PID: 5454, Parent: 5452)

hidakibest.arm5.elf New Fork (PID: 5456, Parent: 5454)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
hidakibest.arm5.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
hidakibest.arm5.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
hidakibest.arm5.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xd9c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd9dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd9f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xda04:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xda18:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xda2c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xda40:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xda54:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xda68:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xda7c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xda90:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdaa4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdab8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdacc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdae0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdaf4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdb08:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdb1c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdb30:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdb44:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdb58:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
hidakibest.arm5.elf	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0xd978:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64

Memory Dumps

Source	Rule	Description	Author	Strings
5452.1.00007f6e00017000.00007f6e00027000.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
5452.1.00007f6e00017000.00007f6e00027000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5452.1.00007f6e00017000.00007f6e00027000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xd9c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd9dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd9f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xda04:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xda18:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xda2c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xda40:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xda54:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xda68:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xda7c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xda90:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdaa4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdab8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdacc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdae0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdaf4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdb08:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdb1c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdb30:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdb44:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdb58:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5452.1.00007f6e00017000.00007f6e00027000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0xd978:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
5454.1.00007f6e00017000.00007f6e00027000.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
5454.1.00007f6e00017000.00007f6e00027000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5454.1.00007f6e00017000.00007f6e00027000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xd9c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd9dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd9f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xda04:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xda18:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xda2c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xda40:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xda54:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xda68:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xda7c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xda90:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdaa4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdab8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdacc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdae0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdaf4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdb08:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdb1c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdb30:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdb44:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdb58:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5454.1.00007f6e00017000.00007f6e00027000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0xd978:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: hidakibest.arm5.elf PID: 5452	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: hidakibest.arm5.elf PID: 5452	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x15882:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15896:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x158aa:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x158be:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x158d2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x158e6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x158fa:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1590e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15922:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15936:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1594a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1595e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15972:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15986:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1599a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x159ae:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x159c2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x159d6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x159ea:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x159fe:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15a12:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: hidakibest.arm5.elf PID: 5452	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x15835:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64 0x15ca7:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: hidakibest.arm5.elf PID: 5454	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: hidakibest.arm5.elf PID: 5454	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1257e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12592:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x125a6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x125ba:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x125ce:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x125e2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x125f6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1260a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1261e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12632:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12646:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1265a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1266e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12682:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12696:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x126aa:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x126be:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x126d2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x126e6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x126fa:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1270e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: hidakibest.arm5.elf PID: 5454	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x12531:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64 0x129a3:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Click to see the 9 entries

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: hidakibest.arm5.elf

Avira: detected

Found malware configuration

Source: hidakibest.arm5.elf

Malware Configuration Extractor: Gafgyt {"C2 url": "31.172.83.147:4258"}

Multi AV Scanner detection for submitted file

Source: hidakibest.arm5.elf	ReversingLabs: Detection: 68%
Source: hidakibest.arm5.elf	Virustotal: Detection: 64%			Perma Link

Spreading

Opens /proc/net/* files useful for finding connected devices and routers

Source: /tmp/hidakibest.arm5.elf (PID: 5452)

Opens: /proc/net/route

Jump to behavior

Source: global traffic

TCP traffic: 192.168.2.13:33896 -> 31.172.83.147:4258

Source: global traffic

TCP traffic: 192.168.2.13:48202 -> 185.125.190.26:443

Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 185.125.190.26
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147

Source: global traffic

DNS traffic detected: DNS query: daisy.ubuntu.com

Source: hidakibest.arm5.elf	String found in binary or memory: http://fast.no/support/crawler.asp)
Source: hidakibest.arm5.elf	String found in binary or memory: http://feedback.redkolibri.com/
Source: hidakibest.arm5.elf	String found in binary or memory: http://www.baidu.com/search/spider.htm)
Source: hidakibest.arm5.elf	String found in binary or memory: http://www.baidu.com/search/spider.html)
Source: hidakibest.arm5.elf	String found in binary or memory: http://www.billybobbot.com/crawler/)

Source: unknown

Network traffic detected: HTTP traffic on port 48202 -> 443

System Summary

Malicious sample detected (through community Yara rule)

Source: hidakibest.arm5.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: hidakibest.arm5.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5452.1.00007f6e00017000.00007f6e00027000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5452.1.00007f6e00017000.00007f6e00027000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5454.1.00007f6e00017000.00007f6e00027000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5454.1.00007f6e00017000.00007f6e00027000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: hidakibest.arm5.elf PID: 5452, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: hidakibest.arm5.elf PID: 5452, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: hidakibest.arm5.elf PID: 5454, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: hidakibest.arm5.elf PID: 5454, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown

Source: hidakibest.arm5.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: hidakibest.arm5.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5452.1.00007f6e00017000.00007f6e00027000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5452.1.00007f6e00017000.00007f6e00027000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5454.1.00007f6e00017000.00007f6e00027000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5454.1.00007f6e00017000.00007f6e00027000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: hidakibest.arm5.elf PID: 5452, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: hidakibest.arm5.elf PID: 5452, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: hidakibest.arm5.elf PID: 5454, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: hidakibest.arm5.elf PID: 5454, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16

Source: classification engine

Classification label: mal92.spre.troj.linELF@0/0@2/0

Source: hidakibest.arm5.elf	ELF static info symbol of initial sample: /home/firmware/build/temp-armv5l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: hidakibest.arm5.elf	ELF static info symbol of initial sample: /home/firmware/build/temp-armv5l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: hidakibest.arm5.elf	ELF static info symbol of initial sample: /home/firmware/build/temp-armv5l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: hidakibest.arm5.elf	ELF static info symbol of initial sample: /home/firmware/build/temp-armv5l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: hidakibest.arm5.elf	ELF static info symbol of initial sample: /home/firmware/build/temp-armv5l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: hidakibest.arm5.elf	ELF static info symbol of initial sample: libc/string/arm/_memcpy.S
Source: hidakibest.arm5.elf	ELF static info symbol of initial sample: libc/string/arm/bcopy.S
Source: hidakibest.arm5.elf	ELF static info symbol of initial sample: libc/string/arm/memcpy.S
Source: hidakibest.arm5.elf	ELF static info symbol of initial sample: libc/string/arm/memmove.S
Source: hidakibest.arm5.elf	ELF static info symbol of initial sample: libc/string/arm/memset.S
Source: hidakibest.arm5.elf	ELF static info symbol of initial sample: libc/string/arm/strcmp.S
Source: hidakibest.arm5.elf	ELF static info symbol of initial sample: libc/string/arm/strlen.S
Source: hidakibest.arm5.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/arm/crt1.S
Source: hidakibest.arm5.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/arm/crti.S
Source: hidakibest.arm5.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/arm/crtn.S
Source: hidakibest.arm5.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/arm/sigrestorer.S

Source: /tmp/hidakibest.arm5.elf (PID: 5452)

Queries kernel information via 'uname':

Jump to behavior

Source: hidakibest.arm5.elf, 5452.1.000055b17f1e2000.000055b17f310000.rw-.sdmp, hidakibest.arm5.elf, 5454.1.000055b17f1e2000.000055b17f310000.rw-.sdmp	Binary or memory string: U!/etc/qemu-binfmt/arm
Source: hidakibest.arm5.elf, 5452.1.00007ffc64089000.00007ffc640aa000.rw-.sdmp, hidakibest.arm5.elf, 5454.1.00007ffc64089000.00007ffc640aa000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-arm/tmp/hidakibest.arm5.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/hidakibest.arm5.elf
Source: hidakibest.arm5.elf, 5452.1.000055b17f1e2000.000055b17f310000.rw-.sdmp, hidakibest.arm5.elf, 5454.1.000055b17f1e2000.000055b17f310000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/arm
Source: hidakibest.arm5.elf, 5452.1.00007ffc64089000.00007ffc640aa000.rw-.sdmp, hidakibest.arm5.elf, 5454.1.00007ffc64089000.00007ffc640aa000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-arm

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match	File source: hidakibest.arm5.elf, type: SAMPLE
Source: Yara match	File source: 5452.1.00007f6e00017000.00007f6e00027000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5454.1.00007f6e00017000.00007f6e00027000.r-x.sdmp, type: MEMORY

Yara detected Mirai

Source: Yara match	File source: hidakibest.arm5.elf, type: SAMPLE
Source: Yara match	File source: 5452.1.00007f6e00017000.00007f6e00027000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5454.1.00007f6e00017000.00007f6e00027000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: hidakibest.arm5.elf PID: 5452, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: hidakibest.arm5.elf PID: 5454, type: MEMORYSTR

Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36
Source: Initial sample	User agent string found: Opera/9.80 (X11; Linux i686; Ubuntu/14.10) Presto/2.12.388 Version/12.16
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows; U; Windows NT 6.1; rv:2.2) Gecko/20110201
Source: Initial sample	User agent string found: Opera/9.80 (Windows NT 5.2; U; ru) Presto/2.5.22 Version/10.51
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; AS; rv:11.0) like Gecko
Source: Initial sample	User agent string found: Mozilla/5.0 (Android; Linux armv7l; rv:9.0) Gecko/20111216 Firefox/9.0 Fennec/9.0
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/536.5 (KHTML, like Gecko) Chrome/19.0.1084.56 Safari/536.5
Source: Initial sample	User agent string found: Opera/9.80 (Windows NT 5.1; U; en) Presto/2.10.229 Version/11.60
Source: Initial sample	User agent string found: Mozilla/5.0 (iPad; U; CPU OS 5_1 like Mac OS X) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B367 Safari/531.21.10 UCBrowser/3.4.3.532
Source: Initial sample	User agent string found: Mozilla/5.0 (Nintendo WiiU) AppleWebKit/536.30 (KHTML, like Gecko) NX/3.0.4.2.12 NintendoBrowser/4.3.1.11264.US
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:25.0) Gecko/20100101 Firefox/25.0
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; pl) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; en) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; ja) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; cn) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; fr) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:12.0) Gecko/20100101 Firefox/12.0
Source: Initial sample	User agent string found: Mozilla/5.0 (X11; U; Linux x86_64; de; rv:1.9.2.8) Gecko/20100723 Ubuntu/10.04 (lucid) Firefox/3.6.8
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1; rv:13.0) Gecko/20100101 Firefox/13.0.1
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:11.0) Gecko/20100101 Firefox/11.0
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1
Source: Initial sample	User agent string found: Opera/9.80 (Windows NT 5.1; U; en) Presto/2.10.289 Version/12.01
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1; rv:5.0.1) Gecko/20100101 Firefox/5.0.1
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; rv:5.0) Gecko/20100101 Firefox/5.02
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.0) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.112 Safari/535.1
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36

Remote Access Functionality

Yara detected Gafgyt

Source: Yara match	File source: hidakibest.arm5.elf, type: SAMPLE
Source: Yara match	File source: 5452.1.00007f6e00017000.00007f6e00027000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5454.1.00007f6e00017000.00007f6e00027000.r-x.sdmp, type: MEMORY

Yara detected Mirai

Source: Yara match	File source: hidakibest.arm5.elf, type: SAMPLE
Source: Yara match	File source: 5452.1.00007f6e00017000.00007f6e00027000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5454.1.00007f6e00017000.00007f6e00027000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: hidakibest.arm5.elf PID: 5452, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: hidakibest.arm5.elf PID: 5454, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Data Obfuscation	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	1 Remote System Discovery	Remote Desktop Protocol	Data from Removable Media	1 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Standard Port	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	2 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact

Malware Configuration

Threatname: Gafgyt

{"C2 url": "31.172.83.147:4258"}

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
hidakibest.arm5.elf	68%	ReversingLabs	Linux.Trojan.Gafgyt
hidakibest.arm5.elf	65%	Virustotal		Browse
hidakibest.arm5.elf	100%	Avira	LINUX/Gafgyt.opnd

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
daisy.ubuntu.com	162.213.35.24	true	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
31.172.83.147:4258	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://www.baidu.com/search/spider.html)	hidakibest.arm5.elf	false	high
http://www.billybobbot.com/crawler/)	hidakibest.arm5.elf	false	high
http://fast.no/support/crawler.asp)	hidakibest.arm5.elf	false	high
http://feedback.redkolibri.com/	hidakibest.arm5.elf	false	high
http://www.baidu.com/search/spider.htm)	hidakibest.arm5.elf	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
31.172.83.147	unknown	Germany		44066	DE-FIRSTCOLOwwwfirst-colonetDE	true
185.125.190.26	unknown	United Kingdom		41231	CANONICAL-ASGB	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
31.172.83.147	hidakibest.arm6.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	hidakibest.arm4.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	boatnet.m68k.elf	Get hash	malicious	Mirai	Browse
	boatnet.ppc.elf	Get hash	malicious	Mirai	Browse
	boatnet.arm.elf	Get hash	malicious	Mirai	Browse
	boatnet.sh4.elf	Get hash	malicious	Mirai	Browse
	boatnet.mips.elf	Get hash	malicious	Mirai	Browse
	boatnet.mpsl.elf	Get hash	malicious	Mirai	Browse
	main_x86.elf	Get hash	malicious	Mirai	Browse
	boatnet.m68k.elf	Get hash	malicious	Mirai	Browse
185.125.190.26	vlxx.mpsl.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse
	la.bot.m68k.elf	Get hash	malicious	Mirai	Browse
	nsharm6.elf	Get hash	malicious	Mirai	Browse
	boatnet.ppc.elf	Get hash	malicious	Mirai	Browse
	boatnet.mpsl.elf	Get hash	malicious	Mirai	Browse
	wkb86.elf	Get hash	malicious	Mirai	Browse
	boatnet.mpsl.elf	Get hash	malicious	Mirai	Browse
	armv6l.elf	Get hash	malicious	Mirai	Browse
	loligang.arm5.elf	Get hash	malicious	Mirai	Browse
	armv5l.elf	Get hash	malicious	Mirai	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
daisy.ubuntu.com	hidakibest.arm4.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	hidakibest.x86.elf	Get hash	malicious	Mirai, Gafgyt	Browse	162.213.35.25
	hidakibest.arm5.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.24
	hidakibest.mpsl.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.24
	hidakibest.arm7.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.24
	hidakibest.sparc.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	Space.arm6.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	most-mpsl.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	arm.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	byte.x86.elf	Get hash	malicious	Mirai, Okiru	Browse	162.213.35.25

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
DE-FIRSTCOLOwwwfirst-colonetDE	hidakibest.arm6.elf	Get hash	malicious	Gafgyt, Mirai	Browse	31.172.83.147
	hidakibest.arm4.elf	Get hash	malicious	Gafgyt, Mirai	Browse	31.172.83.147
	https://www.tblgroup.com/tbl2/certificados-digitales/	Get hash	malicious	CAPTCHA Scam ClickFix	Browse	185.26.98.68
	boatnet.m68k.elf	Get hash	malicious	Mirai	Browse	31.172.83.147
	boatnet.ppc.elf	Get hash	malicious	Mirai	Browse	31.172.83.147
	boatnet.arm.elf	Get hash	malicious	Mirai	Browse	31.172.83.147
	boatnet.sh4.elf	Get hash	malicious	Mirai	Browse	31.172.83.147
	boatnet.mips.elf	Get hash	malicious	Mirai	Browse	31.172.83.147
	boatnet.mpsl.elf	Get hash	malicious	Mirai	Browse	31.172.83.147
	236236236.elf	Get hash	malicious	Unknown	Browse	91.228.155.204
CANONICAL-ASGB	hidakibest.arm6.elf	Get hash	malicious	Gafgyt, Mirai	Browse	91.189.91.42
	hidakibest.arm4.elf	Get hash	malicious	Gafgyt, Mirai	Browse	91.189.91.42
	Space.arm7.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	Space.arm.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	Space.sh4.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	Space.x86.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	byte.x86.elf	Get hash	malicious	Mirai, Okiru	Browse	91.189.91.42
	nn.elf	Get hash	malicious	Nanominer, Xmrig	Browse	91.189.91.42
	arm6.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	91.189.91.42
	vlxx.m68k.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	91.189.91.42

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 32-bit LSB executable, ARM, version 1 (ARM), statically linked, with debug_info, not stripped
Entropy (8bit):	5.964131618959863
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	hidakibest.arm5.elf
File size:	96'196 bytes
MD5:	acd51cef824ff9ac06b21c6ebccdc6d2
SHA1:	76d2468ba82a120865e5fceec645d582dcb3285e
SHA256:	391d29d03801cb94ee932b2cb5c00250925b7e6edadbd9c26b2bc4afcf47132d
SHA512:	2366417d07f35e35c33fd1906e0f0fe09e83e961fb7f01134cc3ea88f38f62065ca12f19bbc95e7dad4433f09dc3b875a263ba34bdbcaf879788e77c3e809a25
SSDEEP:	1536:r8TbGir7UXykSCxTAiJxEONR5hDePK1BT4WVM/bC3xjvxqQEqn/lJXfPe:Kr1CXJp5hCPK1BTdVqijvxqQEqn9JXfW
TLSH:	E3932B41F9044B53C1C327B6F6CF47493B226AB95BDB3312A6346EF42BC2B9A1D29D50
File Content Preview:	.ELF...a..........(.........4...(.......4. ...(..................... ... ................................g..........Q.td..................................-...L."..../..........0@-.\P...0....S.0...P@...0... ....R......0...0...........0... ....R..... 0....S

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	ARM
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	ARM - ABI
ABI Version:	0
Entry Point Address:	0x8190
Flags:	0x2
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	71464
Section Header Size:	40
Number of Section Headers:	20
Header String Table Index:	17

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x8094	0x94	0x18	0x0	0x6	AX	0	0	4
.text	PROGBITS	0x80b0	0xb0	0xbc94	0x0	0x6	AX	0	0	16
.fini	PROGBITS	0x13d44	0xbd44	0x14	0x0	0x6	AX	0	0	4
.rodata	PROGBITS	0x13d58	0xbd58	0x3ec4	0x0	0x2	A	0	0	4
.eh_frame	PROGBITS	0x17c1c	0xfc1c	0x4	0x0	0x2	A	0	0	4
.ctors	PROGBITS	0x18000	0x10000	0x8	0x0	0x3	WA	0	0	4
.dtors	PROGBITS	0x18008	0x10008	0x8	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x18010	0x10010	0x4	0x0	0x3	WA	0	0	4
.data	PROGBITS	0x18014	0x10014	0x474	0x0	0x3	WA	0	0	4
.bss	NOBITS	0x18488	0x10488	0x6358	0x0	0x3	WA	0	0	4
.comment	PROGBITS	0x0	0x10488	0xa5a	0x0	0x0		0	0	1
.debug_aranges	PROGBITS	0x0	0x10ee8	0xa0	0x0	0x0		0	0	8
.debug_info	PROGBITS	0x0	0x10f88	0x30c	0x0	0x0		0	0	1
.debug_abbrev	PROGBITS	0x0	0x11294	0x64	0x0	0x0		0	0	1
.debug_line	PROGBITS	0x0	0x112f8	0x2e7	0x0	0x0		0	0	1
.debug_frame	PROGBITS	0x0	0x115e0	0xa0	0x0	0x0		0	0	4
.shstrtab	STRTAB	0x0	0x11680	0xa8	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x11a48	0x3cf0	0x10	0x0		19	555	4
.strtab	STRTAB	0x0	0x15738	0x208c	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x8000	0x8000	0xfc20	0xfc20	6.2262	0x5	R E	0x8000	.init .text .fini .rodata .eh_frame
LOAD	0x10000	0x18000	0x18000	0x488	0x67e0	3.2239	0x6	RW	0x8000	.ctors .dtors .jcr .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x8094	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x80b0	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x13d44	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x13d58	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x17c1c	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x18000	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x18008	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x18010	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x18014	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x18488	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	14
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	15
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	16
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	17
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	18
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	19
$a	.symtab	0x8094	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x13d44	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x80b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8128	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13d50	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x8188	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x80a0	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x13d08	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13d3c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x80a4	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x80a8	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x13d54	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x8190	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x81cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x82a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x83d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8438	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x87f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x90ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x94ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9904	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9bf4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9d58	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9ebc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa07c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xae04	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xae20	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb7bc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb948	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc188	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc298	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc364	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc368	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc3b8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc42c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc47c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc4a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc4d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc4fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc528	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc554	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc5a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc5d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc63c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc668	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc698	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc6c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc6f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc6f8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc724	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc73c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc770	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc77c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc7b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc860	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc8d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc8e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc998	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc9c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd08c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd124	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd15c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd2f8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd344	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd808	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd83c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd8f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd900	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd910	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd9b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xd9d0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xda30	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdb38	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdb54	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdc34	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdd2c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdd40	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xde28	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdea4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdeb0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xded0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdf3c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdfac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe038	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe05c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe0a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe414	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe440	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe46c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe49c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe4c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe4f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe524	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe550	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe608	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe674	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe7c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe8b8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe94c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xea74	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xebbc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xebc0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xec3c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xecc8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xed60	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xeddc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xee9c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xef2c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xeff8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf0c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf0cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf0d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf26c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf300	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf4a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf510	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf554	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf5b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf7fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf8e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf8e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf914	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf940	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf96c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf998	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf9c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf9f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfa48	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfa9c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfac8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfad4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfb24	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfb44	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfc00	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfcbc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfdf4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfef8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xff68	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xff9c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x100ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1050c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10760	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10bf0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10c00	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10cfc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10d14	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10e00	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10eb8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10f2c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10f6c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11058	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11864	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11b38	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11b80	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11b98	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11bbc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11bf8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11c24	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11da4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11db0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11dbc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11eec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11fb8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x122b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x122e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12374	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x124b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12698	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12730	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x127e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x128b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12900	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12930	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12c0c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12d70	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12fd0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x130b8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13170	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x131cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x131e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x132bc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x132f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13618	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1367c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x136b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x137e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13888	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13954	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x139a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x139fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13a28	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13ae4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13c24	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18000	0	NOTYPE	<unknown>	DEFAULT	6
$d	.symtab	0x18008	0	NOTYPE	<unknown>	DEFAULT	7
$d	.symtab	0x1801c	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x8118	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8174	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13d38	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18020	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x81c0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18024	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x8298	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x83cc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8434	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x87e0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x90e8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x94e8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x98fc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15420	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x9bf0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9d54	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9eb8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xa078	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xa9fc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xae1c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb790	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb93c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc168	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc638	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc738	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc76c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18124	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x1812c	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0xc778	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc8cc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc8dc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc988	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18134	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x16bc4	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0xd078	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xd2f4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xd338	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xd7e4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xdb30	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xdc2c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xde20	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xdea0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xdeac	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xdf38	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe034	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe098	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe3f8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe604	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe7b0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18270	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0xe8a0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xebac	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18378	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0xec24	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xecb0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xed48	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xedc4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18390	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0xee98	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xef28	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xefec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf0bc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x177f0	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0xf268	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf2e4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18444	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0xf4a0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf500	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf550	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf5a0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf7c8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1845c	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0xf8d8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xfa44	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18460	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x1e6ec	0	NOTYPE	<unknown>	DEFAULT	10
$d	.symtab	0xfad0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x104d4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17b38	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x10cf4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10df8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11054	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11830	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11af8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1846c	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x11bb4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11bf4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11d88	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11edc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12280	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12364	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1248c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12674	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x127e0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12c08	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12d6c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12fc8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x132e4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13614	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x136ac	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x137dc	0	NOTYPE	<unknown>	DEFAULT	2
/home/firmware/build/temp-armv5l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/firmware/build/temp-armv5l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/firmware/build/temp-armv5l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/firmware/build/temp-armv5l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/firmware/build/temp-armv5l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
C.72.4732	.symtab	0x15420	104	OBJECT	<unknown>	DEFAULT	4
C.82.4843	.symtab	0x160b4	1128	OBJECT	<unknown>	DEFAULT	4
Laligned	.symtab	0xd9f8	0	NOTYPE	<unknown>	DEFAULT	2
Llastword	.symtab	0xda14	0	NOTYPE	<unknown>	DEFAULT	2
Q	.symtab	0x184b8	16384	OBJECT	<unknown>	DEFAULT	10
Randhex	.symtab	0x9ebc	448	FUNC	<unknown>	DEFAULT	2
SendSTD	.symtab	0x9a50	420	FUNC	<unknown>	DEFAULT	2
UDPRAW	.symtab	0x9d58	356	FUNC	<unknown>	DEFAULT	2
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__CTOR_END__	.symtab	0x18004	0	OBJECT	<unknown>	DEFAULT	6
__CTOR_LIST__	.symtab	0x18000	0	OBJECT	<unknown>	DEFAULT	6
__C_ctype_b	.symtab	0x18124	4	OBJECT	<unknown>	DEFAULT	9
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x165c4	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_tolower	.symtab	0x18460	4	OBJECT	<unknown>	DEFAULT	9
__C_ctype_tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_tolower_data	.symtab	0x17822	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_toupper	.symtab	0x1812c	4	OBJECT	<unknown>	DEFAULT	9
__C_ctype_toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_toupper_data	.symtab	0x168c4	768	OBJECT	<unknown>	DEFAULT	4
__DTOR_END__	.symtab	0x1800c	0	OBJECT	<unknown>	DEFAULT	7
__DTOR_LIST__	.symtab	0x18008	0	OBJECT	<unknown>	DEFAULT	7
__EH_FRAME_BEGIN__	.symtab	0x17c1c	0	OBJECT	<unknown>	DEFAULT	5
__FRAME_END__	.symtab	0x17c1c	0	OBJECT	<unknown>	DEFAULT	5
__GI___C_ctype_b	.symtab	0x18124	4	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_b_data	.symtab	0x165c4	768	OBJECT	<unknown>	HIDDEN	4
__GI___C_ctype_tolower	.symtab	0x18460	4	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_tolower_data	.symtab	0x17822	768	OBJECT	<unknown>	HIDDEN	4
__GI___C_ctype_toupper	.symtab	0x1812c	4	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_toupper_data	.symtab	0x168c4	768	OBJECT	<unknown>	HIDDEN	4
__GI___ctype_b	.symtab	0x18128	4	OBJECT	<unknown>	HIDDEN	9
__GI___ctype_tolower	.symtab	0x18464	4	OBJECT	<unknown>	HIDDEN	9
__GI___ctype_toupper	.symtab	0x18130	4	OBJECT	<unknown>	HIDDEN	9
__GI___errno_location	.symtab	0xc770	12	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked	.symtab	0x136b0	304	FUNC	<unknown>	HIDDEN	2
__GI___glibc_strerror_r	.symtab	0xdd2c	20	FUNC	<unknown>	HIDDEN	2
__GI___h_errno_location	.symtab	0xfac8	12	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl	.symtab	0xc3b8	116	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl64	.symtab	0xc42c	80	FUNC	<unknown>	HIDDEN	2
__GI___libc_open	.symtab	0xc5d0	92	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini	.symtab	0xf4a4	108	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init	.symtab	0xf554	92	FUNC	<unknown>	HIDDEN	2
__GI___xpg_strerror_r	.symtab	0xdd40	232	FUNC	<unknown>	HIDDEN	2
__GI__exit	.symtab	0xc47c	40	FUNC	<unknown>	HIDDEN	2
__GI_abort	.symtab	0xea74	328	FUNC	<unknown>	HIDDEN	2
__GI_atoi	.symtab	0xf0c0	12	FUNC	<unknown>	HIDDEN	2
__GI_atol	.symtab	0xf0c0	12	FUNC	<unknown>	HIDDEN	2
__GI_brk	.symtab	0x11bbc	60	FUNC	<unknown>	HIDDEN	2
__GI_chdir	.symtab	0xc4a4	44	FUNC	<unknown>	HIDDEN	2
__GI_close	.symtab	0xc4d0	44	FUNC	<unknown>	HIDDEN	2
__GI_connect	.symtab	0xe414	44	FUNC	<unknown>	HIDDEN	2
__GI_errno	.symtab	0x1e6ec	4	OBJECT	<unknown>	HIDDEN	10
__GI_exit	.symtab	0xf26c	148	FUNC	<unknown>	HIDDEN	2
__GI_fclose	.symtab	0x11c24	384	FUNC	<unknown>	HIDDEN	2
__GI_fcntl	.symtab	0xc3b8	116	FUNC	<unknown>	HIDDEN	2
__GI_fcntl64	.symtab	0xc42c	80	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked	.symtab	0x124b4	484	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked	.symtab	0x136b0	304	FUNC	<unknown>	HIDDEN	2
__GI_fgets	.symtab	0x122e0	148	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked	.symtab	0x12698	152	FUNC	<unknown>	HIDDEN	2
__GI_fopen	.symtab	0x11da4	12	FUNC	<unknown>	HIDDEN	2
__GI_fork	.symtab	0xc4fc	44	FUNC	<unknown>	HIDDEN	2
__GI_fputs_unlocked	.symtab	0xd808	52	FUNC	<unknown>	HIDDEN	2
__GI_fseek	.symtab	0x11db0	12	FUNC	<unknown>	HIDDEN	2
__GI_fseeko64	.symtab	0x11dbc	304	FUNC	<unknown>	HIDDEN	2
__GI_fwrite_unlocked	.symtab	0xd83c	172	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked	.symtab	0x136b0	304	FUNC	<unknown>	HIDDEN	2
__GI_getegid	.symtab	0xf914	44	FUNC	<unknown>	HIDDEN	2
__GI_geteuid	.symtab	0xf940	44	FUNC	<unknown>	HIDDEN	2
__GI_getgid	.symtab	0xf96c	44	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname	.symtab	0xe05c	68	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname_r	.symtab	0xe0a0	884	FUNC	<unknown>	HIDDEN	2
__GI_getpid	.symtab	0xc528	44	FUNC	<unknown>	HIDDEN	2
__GI_getsockname	.symtab	0xe440	44	FUNC	<unknown>	HIDDEN	2
__GI_getuid	.symtab	0xf998	44	FUNC	<unknown>	HIDDEN	2
__GI_h_errno	.symtab	0x1e6f0	4	OBJECT	<unknown>	HIDDEN	10
__GI_inet_addr	.symtab	0xe038	36	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton	.symtab	0x10f6c	236	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa	.symtab	0xe02c	12	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa_r	.symtab	0xdfac	128	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntop	.symtab	0x12d70	608	FUNC	<unknown>	HIDDEN	2
__GI_inet_pton	.symtab	0x129fc	528	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r	.symtab	0xeff8	200	FUNC	<unknown>	HIDDEN	2
__GI_ioctl	.symtab	0xc554	80	FUNC	<unknown>	HIDDEN	2
__GI_isatty	.symtab	0xdeb0	32	FUNC	<unknown>	HIDDEN	2
__GI_kill	.symtab	0xc5a4	44	FUNC	<unknown>	HIDDEN	2
__GI_lseek64	.symtab	0x13618	100	FUNC	<unknown>	HIDDEN	2
__GI_memchr	.symtab	0x10c00	252	FUNC	<unknown>	HIDDEN	2
__GI_memcpy	.symtab	0xd900	4	FUNC	<unknown>	HIDDEN	2
__GI_memmove	.symtab	0x10bf0	4	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy	.symtab	0x10cfc	24	FUNC	<unknown>	HIDDEN	2
__GI_memrchr	.symtab	0x10d14	236	FUNC	<unknown>	HIDDEN	2
__GI_memset	.symtab	0xd910	156	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep	.symtab	0xf9c4	44	FUNC	<unknown>	HIDDEN	2
__GI_open	.symtab	0xc5d0	92	FUNC	<unknown>	HIDDEN	2
__GI_poll	.symtab	0x11bf8	44	FUNC	<unknown>	HIDDEN	2
__GI_raise	.symtab	0x11b80	24	FUNC	<unknown>	HIDDEN	2
__GI_random	.symtab	0xebc0	124	FUNC	<unknown>	HIDDEN	2
__GI_random_r	.symtab	0xee9c	144	FUNC	<unknown>	HIDDEN	2
__GI_rawmemchr	.symtab	0x12730	184	FUNC	<unknown>	HIDDEN	2
__GI_read	.symtab	0xc63c	44	FUNC	<unknown>	HIDDEN	2
__GI_recv	.symtab	0xe49c	44	FUNC	<unknown>	HIDDEN	2
__GI_sbrk	.symtab	0xf9f0	88	FUNC	<unknown>	HIDDEN	2
__GI_select	.symtab	0xc668	48	FUNC	<unknown>	HIDDEN	2
__GI_send	.symtab	0xe4c8	44	FUNC	<unknown>	HIDDEN	2
__GI_setsid	.symtab	0xc698	44	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt	.symtab	0xe4f4	48	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r	.symtab	0xeddc	192	FUNC	<unknown>	HIDDEN	2
__GI_sigaction	.symtab	0xf7fc	228	FUNC	<unknown>	HIDDEN	2
__GI_signal	.symtab	0xe550	184	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask	.symtab	0xfa48	84	FUNC	<unknown>	HIDDEN	2
__GI_sleep	.symtab	0xf300	420	FUNC	<unknown>	HIDDEN	2
__GI_socket	.symtab	0xe524	44	FUNC	<unknown>	HIDDEN	2
__GI_sprintf	.symtab	0xc77c	52	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r	.symtab	0xef2c	204	FUNC	<unknown>	HIDDEN	2
__GI_strcasecmp	.symtab	0xde28	124	FUNC	<unknown>	HIDDEN	2
__GI_strchr	.symtab	0xda30	264	FUNC	<unknown>	HIDDEN	2
__GI_strcmp	.symtab	0xd9b0	28	FUNC	<unknown>	HIDDEN	2
__GI_strcoll	.symtab	0xd9b0	28	FUNC	<unknown>	HIDDEN	2
__GI_strcpy	.symtab	0xdb38	28	FUNC	<unknown>	HIDDEN	2
__GI_strdup	.symtab	0x12900	48	FUNC	<unknown>	HIDDEN	2
__GI_strlen	.symtab	0xd9d0	96	FUNC	<unknown>	HIDDEN	2
__GI_strncat	.symtab	0x127e8	200	FUNC	<unknown>	HIDDEN	2
__GI_strncpy	.symtab	0x10e00	184	FUNC	<unknown>	HIDDEN	2
__GI_strnlen	.symtab	0xdb54	224	FUNC	<unknown>	HIDDEN	2
__GI_strpbrk	.symtab	0x10f2c	64	FUNC	<unknown>	HIDDEN	2
__GI_strspn	.symtab	0x128b0	80	FUNC	<unknown>	HIDDEN	2
__GI_strstr	.symtab	0xdc34	248	FUNC	<unknown>	HIDDEN	2
__GI_strtok	.symtab	0xdea4	12	FUNC	<unknown>	HIDDEN	2
__GI_strtok_r	.symtab	0x10eb8	116	FUNC	<unknown>	HIDDEN	2
__GI_strtol	.symtab	0xf0cc	8	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr	.symtab	0xded0	108	FUNC	<unknown>	HIDDEN	2
__GI_time	.symtab	0xc6c4	44	FUNC	<unknown>	HIDDEN	2
__GI_tolower	.symtab	0x1367c	52	FUNC	<unknown>	HIDDEN	2
__GI_toupper	.symtab	0xc73c	52	FUNC	<unknown>	HIDDEN	2
__GI_vsnprintf	.symtab	0xc7b0	176	FUNC	<unknown>	HIDDEN	2
__GI_wait4	.symtab	0xfa9c	44	FUNC	<unknown>	HIDDEN	2
__GI_waitpid	.symtab	0xc6f0	8	FUNC	<unknown>	HIDDEN	2
__GI_wcrtomb	.symtab	0xfad4	80	FUNC	<unknown>	HIDDEN	2
__GI_wcsnrtombs	.symtab	0xfb44	188	FUNC	<unknown>	HIDDEN	2
__GI_wcsrtombs	.symtab	0xfb24	32	FUNC	<unknown>	HIDDEN	2
__GI_write	.symtab	0xc6f8	44	FUNC	<unknown>	HIDDEN	2
__JCR_END__	.symtab	0x18010	0	OBJECT	<unknown>	DEFAULT	8
__JCR_LIST__	.symtab	0x18010	0	OBJECT	<unknown>	DEFAULT	8
__aeabi_idiv	.symtab	0x13ae4	0	FUNC	<unknown>	DEFAULT	2
__aeabi_idiv0	.symtab	0xc364	4	FUNC	<unknown>	DEFAULT	2
__aeabi_idivmod	.symtab	0x13c0c	24	FUNC	<unknown>	DEFAULT	2
__aeabi_ldiv0	.symtab	0xc364	4	FUNC	<unknown>	DEFAULT	2
__aeabi_uidiv	.symtab	0xc188	0	FUNC	<unknown>	DEFAULT	2
__aeabi_uidivmod	.symtab	0xc280	24	FUNC	<unknown>	DEFAULT	2
__app_fini	.symtab	0x1e6e0	4	OBJECT	<unknown>	HIDDEN	10
__atexit_lock	.symtab	0x18444	24	OBJECT	<unknown>	DEFAULT	9
__bsd_signal	.symtab	0xe550	184	FUNC	<unknown>	HIDDEN	2
__bss_end__	.symtab	0x1e7e0	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start	.symtab	0x18488	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start__	.symtab	0x18488	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0xf51c	56	FUNC	<unknown>	DEFAULT	2
__ctype_b	.symtab	0x18128	4	OBJECT	<unknown>	DEFAULT	9
__ctype_tolower	.symtab	0x18464	4	OBJECT	<unknown>	DEFAULT	9
__ctype_toupper	.symtab	0x18130	4	OBJECT	<unknown>	DEFAULT	9
__curbrk	.symtab	0x1e710	4	OBJECT	<unknown>	HIDDEN	10
__data_start	.symtab	0x18014	0	NOTYPE	<unknown>	DEFAULT	9
__decode_answer	.symtab	0x131e0	220	FUNC	<unknown>	HIDDEN	2
__decode_dotted	.symtab	0x13888	204	FUNC	<unknown>	HIDDEN	2
__decode_header	.symtab	0x130b8	184	FUNC	<unknown>	HIDDEN	2
__default_rt_sa_restorer	.symtab	0xf8e4	0	FUNC	<unknown>	DEFAULT	2
__default_sa_restorer	.symtab	0xf8e0	0	FUNC	<unknown>	DEFAULT	2
__deregister_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__div0	.symtab	0xc364	4	FUNC	<unknown>	DEFAULT	2
__divsi3	.symtab	0x13ae4	296	FUNC	<unknown>	DEFAULT	2
__dns_lookup	.symtab	0x11058	2060	FUNC	<unknown>	HIDDEN	2
__do_global_ctors_aux	.symtab	0x13d08	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux	.symtab	0x80b0	0	FUNC	<unknown>	DEFAULT	2
__dso_handle	.symtab	0x18018	0	OBJECT	<unknown>	HIDDEN	9
__encode_dotted	.symtab	0x137e0	168	FUNC	<unknown>	HIDDEN	2
__encode_header	.symtab	0x12fd0	232	FUNC	<unknown>	HIDDEN	2
__encode_question	.symtab	0x13170	92	FUNC	<unknown>	HIDDEN	2
__end__	.symtab	0x1e7e0	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__environ	.symtab	0x1e6d8	4	OBJECT	<unknown>	DEFAULT	10
__errno_location	.symtab	0xc770	12	FUNC	<unknown>	DEFAULT	2
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x1e6d0	4	OBJECT	<unknown>	HIDDEN	10
__fgetc_unlocked	.symtab	0x136b0	304	FUNC	<unknown>	DEFAULT	2
__fini_array_end	.symtab	0x18000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__fini_array_start	.symtab	0x18000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__get_hosts_byname_r	.symtab	0x11b38	72	FUNC	<unknown>	HIDDEN	2
__glibc_strerror_r	.symtab	0xdd2c	20	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__h_errno_location	.symtab	0xfac8	12	FUNC	<unknown>	DEFAULT	2
__h_errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__heap_alloc	.symtab	0xe8b8	148	FUNC	<unknown>	DEFAULT	2
__heap_free	.symtab	0xe980	244	FUNC	<unknown>	DEFAULT	2
__heap_link_free_area	.symtab	0xe94c	32	FUNC	<unknown>	DEFAULT	2
__heap_link_free_area_after	.symtab	0xe96c	20	FUNC	<unknown>	DEFAULT	2
__init_array_end	.symtab	0x18000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__init_array_start	.symtab	0x18000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__length_dotted	.symtab	0x13954	76	FUNC	<unknown>	HIDDEN	2
__length_question	.symtab	0x131cc	20	FUNC	<unknown>	HIDDEN	2
__libc_close	.symtab	0xc4d0	44	FUNC	<unknown>	DEFAULT	2
__libc_connect	.symtab	0xe414	44	FUNC	<unknown>	DEFAULT	2
__libc_creat	.symtab	0xc62c	16	FUNC	<unknown>	DEFAULT	2
__libc_fcntl	.symtab	0xc3b8	116	FUNC	<unknown>	DEFAULT	2
__libc_fcntl64	.symtab	0xc42c	80	FUNC	<unknown>	DEFAULT	2
__libc_fork	.symtab	0xc4fc	44	FUNC	<unknown>	DEFAULT	2
__libc_getpid	.symtab	0xc528	44	FUNC	<unknown>	DEFAULT	2
__libc_lseek64	.symtab	0x13618	100	FUNC	<unknown>	DEFAULT	2
__libc_nanosleep	.symtab	0xf9c4	44	FUNC	<unknown>	DEFAULT	2
__libc_open	.symtab	0xc5d0	92	FUNC	<unknown>	DEFAULT	2
__libc_poll	.symtab	0x11bf8	44	FUNC	<unknown>	DEFAULT	2
__libc_read	.symtab	0xc63c	44	FUNC	<unknown>	DEFAULT	2
__libc_recv	.symtab	0xe49c	44	FUNC	<unknown>	DEFAULT	2
__libc_select	.symtab	0xc668	48	FUNC	<unknown>	DEFAULT	2
__libc_send	.symtab	0xe4c8	44	FUNC	<unknown>	DEFAULT	2
__libc_sigaction	.symtab	0xf7fc	228	FUNC	<unknown>	DEFAULT	2
__libc_stack_end	.symtab	0x1e6d4	4	OBJECT	<unknown>	DEFAULT	10
__libc_waitpid	.symtab	0xc6f0	8	FUNC	<unknown>	DEFAULT	2
__libc_write	.symtab	0xc6f8	44	FUNC	<unknown>	DEFAULT	2
__malloc_heap	.symtab	0x18270	4	OBJECT	<unknown>	DEFAULT	9
__malloc_heap_lock	.symtab	0x1e6b4	24	OBJECT	<unknown>	DEFAULT	10
__malloc_sbrk_lock	.symtab	0x1e79c	24	OBJECT	<unknown>	DEFAULT	10
__modsi3	.symtab	0x13c24	228	FUNC	<unknown>	DEFAULT	2
__muldi3	.symtab	0xc368	80	FUNC	<unknown>	DEFAULT	2
__nameserver	.symtab	0x1e7c4	12	OBJECT	<unknown>	HIDDEN	10
__nameservers	.symtab	0x1e7d0	4	OBJECT	<unknown>	HIDDEN	10
__open_etc_hosts	.symtab	0x132bc	52	FUNC	<unknown>	HIDDEN	2
__open_nameservers	.symtab	0x11864	724	FUNC	<unknown>	HIDDEN	2
__pagesize	.symtab	0x1e6dc	4	OBJECT	<unknown>	DEFAULT	10
__preinit_array_end	.symtab	0x18000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__preinit_array_start	.symtab	0x18000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__pthread_initialize_minimal	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__pthread_mutex_init	.symtab	0xf510	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock	.symtab	0xf510	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock	.symtab	0xf510	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock	.symtab	0xf510	8	FUNC	<unknown>	DEFAULT	2
__pthread_return_0	.symtab	0xf510	8	FUNC	<unknown>	DEFAULT	2
__pthread_return_void	.symtab	0xf518	4	FUNC	<unknown>	DEFAULT	2
__raise	.symtab	0x11b80	24	FUNC	<unknown>	HIDDEN	2
__read_etc_hosts_r	.symtab	0x132f0	808	FUNC	<unknown>	HIDDEN	2
__register_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__resolv_lock	.symtab	0x1846c	24	OBJECT	<unknown>	DEFAULT	9
__rtld_fini	.symtab	0x1e6e4	4	OBJECT	<unknown>	HIDDEN	10
__searchdomain	.symtab	0x1e7b4	16	OBJECT	<unknown>	HIDDEN	10
__searchdomains	.symtab	0x1e7d4	4	OBJECT	<unknown>	HIDDEN	10
__sigaddset	.symtab	0xe62c	36	FUNC	<unknown>	DEFAULT	2
__sigdelset	.symtab	0xe650	36	FUNC	<unknown>	DEFAULT	2
__sigismember	.symtab	0xe608	36	FUNC	<unknown>	DEFAULT	2
__stdin	.symtab	0x18140	4	OBJECT	<unknown>	DEFAULT	9
__stdio_READ	.symtab	0x139a0	92	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE	.symtab	0xfc00	188	FUNC	<unknown>	HIDDEN	2
__stdio_adjust_position	.symtab	0x11eec	204	FUNC	<unknown>	HIDDEN	2
__stdio_fwrite	.symtab	0xfcbc	312	FUNC	<unknown>	HIDDEN	2
__stdio_init_mutex	.symtab	0xc8d0	16	FUNC	<unknown>	HIDDEN	2
__stdio_mutex_initializer.3929	.symtab	0x16bc4	24	OBJECT	<unknown>	DEFAULT	4
__stdio_rfill	.symtab	0x139fc	44	FUNC	<unknown>	HIDDEN	2
__stdio_seek	.symtab	0x122b0	48	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o	.symtab	0x13a28	188	FUNC	<unknown>	HIDDEN	2
__stdio_trans2w_o	.symtab	0xfdf4	260	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit	.symtab	0xc998	48	FUNC	<unknown>	HIDDEN	2
__stdout	.symtab	0x18144	4	OBJECT	<unknown>	DEFAULT	9
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fcntl64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_rt_sigaction	.symtab	0xf8e8	44	FUNC	<unknown>	HIDDEN	2
__syscall_rt_sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uClibc_fini	.symtab	0xf4a4	108	FUNC	<unknown>	DEFAULT	2
__uClibc_init	.symtab	0xf554	92	FUNC	<unknown>	DEFAULT	2
__uClibc_main	.symtab	0xf5b0	588	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x1845c	4	OBJECT	<unknown>	HIDDEN	9
__udivsi3	.symtab	0xc188	248	FUNC	<unknown>	DEFAULT	2
__umodsi3	.symtab	0xc298	204	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r	.symtab	0xdd40	232	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_adjust_pos.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_bss_end__	.symtab	0x1e7e0	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_charpad	.symtab	0xc9c8	76	FUNC	<unknown>	DEFAULT	2
_cs_funcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_dl_aux_init	.symtab	0x11b98	36	FUNC	<unknown>	DEFAULT	2
_dl_phdr	.symtab	0x1e7d8	4	OBJECT	<unknown>	DEFAULT	10
_dl_phnum	.symtab	0x1e7dc	4	OBJECT	<unknown>	DEFAULT	10
_edata	.symtab	0x18488	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x1e7e0	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_errno	.symtab	0x1e6ec	4	OBJECT	<unknown>	DEFAULT	10
_exit	.symtab	0xc47c	40	FUNC	<unknown>	DEFAULT	2
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fini	.symtab	0x13d44	4	FUNC	<unknown>	DEFAULT	3
_fixed_buffers	.symtab	0x1c4c0	8192	OBJECT	<unknown>	DEFAULT	10
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow	.symtab	0xca14	132	FUNC	<unknown>	DEFAULT	2
_fpmaxtostr	.symtab	0x100ec	1640	FUNC	<unknown>	HIDDEN	2
_fpmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_h_errno	.symtab	0x1e6f0	4	OBJECT	<unknown>	DEFAULT	10
_init	.symtab	0x8094	4	FUNC	<unknown>	DEFAULT	1
_load_inttype	.symtab	0xfef8	112	FUNC	<unknown>	HIDDEN	2
_load_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_memcpy	.symtab	0x10760	0	FUNC	<unknown>	HIDDEN	2
_ppfs_init	.symtab	0xd08c	152	FUNC	<unknown>	HIDDEN	2
_ppfs_init.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec	.symtab	0xd344	1220	FUNC	<unknown>	HIDDEN	2
_ppfs_parsespec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs	.symtab	0xd124	56	FUNC	<unknown>	HIDDEN	2
_ppfs_prepargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs	.symtab	0xd15c	412	FUNC	<unknown>	HIDDEN	2
_ppfs_setargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size	.symtab	0xd2f8	76	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_pop_restore	.symtab	0xf518	4	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_push_defer	.symtab	0xf518	4	FUNC	<unknown>	DEFAULT	2
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_sigintr	.symtab	0x1e71c	128	OBJECT	<unknown>	HIDDEN	10
_start	.symtab	0x8190	0	FUNC	<unknown>	DEFAULT	2
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x11fb8	760	FUNC	<unknown>	HIDDEN	2
_stdio_init	.symtab	0xc860	112	FUNC	<unknown>	HIDDEN	2
_stdio_openlist	.symtab	0x18148	4	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_add_lock	.symtab	0x1814c	24	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_dec_use	.symtab	0x12374	320	FUNC	<unknown>	DEFAULT	2
_stdio_openlist_del_count	.symtab	0x1c4bc	4	OBJECT	<unknown>	DEFAULT	10
_stdio_openlist_del_lock	.symtab	0x18164	24	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_use_count	.symtab	0x1c4b8	4	OBJECT	<unknown>	DEFAULT	10
_stdio_streams	.symtab	0x18180	240	OBJECT	<unknown>	DEFAULT	9
_stdio_term	.symtab	0xc8e0	184	FUNC	<unknown>	HIDDEN	2
_stdio_user_locking	.symtab	0x1817c	4	OBJECT	<unknown>	DEFAULT	9
_stdlib_strto_l	.symtab	0xf0d4	408	FUNC	<unknown>	HIDDEN	2
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_store_inttype	.symtab	0xff68	52	FUNC	<unknown>	HIDDEN	2
_store_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_string_syserrmsgs	.symtab	0x16c94	2906	OBJECT	<unknown>	HIDDEN	4
_string_syserrmsgs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr	.symtab	0xff9c	336	FUNC	<unknown>	HIDDEN	2
_uintmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal	.symtab	0xca98	1524	FUNC	<unknown>	HIDDEN	2
_vfprintf_internal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0xea74	328	FUNC	<unknown>	DEFAULT	2
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
atoi	.symtab	0xf0c0	12	FUNC	<unknown>	DEFAULT	2
atol	.symtab	0xf0c0	12	FUNC	<unknown>	DEFAULT	2
atol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bcopy	.symtab	0xd8f0	16	FUNC	<unknown>	DEFAULT	2
been_there_done_that	.symtab	0x1e6cc	4	OBJECT	<unknown>	DEFAULT	10
been_there_done_that.2789	.symtab	0x1e6e8	4	OBJECT	<unknown>	DEFAULT	10
bot.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
brk	.symtab	0x11bbc	60	FUNC	<unknown>	DEFAULT	2
brk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bsd_signal	.symtab	0xe550	184	FUNC	<unknown>	DEFAULT	2
buf.2613	.symtab	0x1e4c4	16	OBJECT	<unknown>	DEFAULT	10
buf.4901	.symtab	0x1e4d4	460	OBJECT	<unknown>	DEFAULT	10
c	.symtab	0x1811c	4	OBJECT	<unknown>	DEFAULT	9
call___do_global_ctors_aux	.symtab	0x13d3c	0	FUNC	<unknown>	DEFAULT	2
call___do_global_dtors_aux	.symtab	0x8128	0	FUNC	<unknown>	DEFAULT	2
call_frame_dummy	.symtab	0x8188	0	FUNC	<unknown>	DEFAULT	2
chdir	.symtab	0xc4a4	44	FUNC	<unknown>	DEFAULT	2
chdir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0xc4d0	44	FUNC	<unknown>	DEFAULT	2
close.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
commServer	.symtab	0x18024	4	OBJECT	<unknown>	DEFAULT	9
completed.2555	.symtab	0x18488	1	OBJECT	<unknown>	DEFAULT	10
connect	.symtab	0xe414	44	FUNC	<unknown>	DEFAULT	2
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
connectTimeout	.symtab	0x94ec	640	FUNC	<unknown>	DEFAULT	2
creat	.symtab	0xc62c	16	FUNC	<unknown>	DEFAULT	2
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
currentServer	.symtab	0x18118	4	OBJECT	<unknown>	DEFAULT	9
data_start	.symtab	0x18020	0	NOTYPE	<unknown>	DEFAULT	9
decodea.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dns	.symtab	0x18028	4	OBJECT	<unknown>	DEFAULT	9
dnslookup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
environ	.symtab	0x1e6d8	4	OBJECT	<unknown>	DEFAULT	10
errno	.symtab	0x1e6ec	4	OBJECT	<unknown>	DEFAULT	10
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exit	.symtab	0xf26c	148	FUNC	<unknown>	DEFAULT	2
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exp10_table	.symtab	0x17b38	72	OBJECT	<unknown>	DEFAULT	4
fclose	.symtab	0x11c24	384	FUNC	<unknown>	DEFAULT	2
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0xc3b8	116	FUNC	<unknown>	DEFAULT	2
fcntl64	.symtab	0xc42c	80	FUNC	<unknown>	DEFAULT	2
fdgets	.symtab	0x8438	208	FUNC	<unknown>	DEFAULT	2
fflush_unlocked	.symtab	0x124b4	484	FUNC	<unknown>	DEFAULT	2
fflush_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked	.symtab	0x136b0	304	FUNC	<unknown>	DEFAULT	2
fgetc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets	.symtab	0x122e0	148	FUNC	<unknown>	DEFAULT	2
fgets.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked	.symtab	0x12698	152	FUNC	<unknown>	DEFAULT	2
fgets_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fmt	.symtab	0x17b24	20	OBJECT	<unknown>	DEFAULT	4
fopen	.symtab	0x11da4	12	FUNC	<unknown>	DEFAULT	2
fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
force_to_data	.symtab	0x18014	0	OBJECT	<unknown>	DEFAULT	9
force_to_data	.symtab	0x18484	0	OBJECT	<unknown>	DEFAULT	9
fork	.symtab	0xc4fc	44	FUNC	<unknown>	DEFAULT	2
fork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fputs_unlocked	.symtab	0xd808	52	FUNC	<unknown>	DEFAULT	2
fputs_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
frame_dummy	.symtab	0x8130	0	FUNC	<unknown>	DEFAULT	2
free	.symtab	0xe7c8	240	FUNC	<unknown>	DEFAULT	2
free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseek	.symtab	0x11db0	12	FUNC	<unknown>	DEFAULT	2
fseeko	.symtab	0x11db0	12	FUNC	<unknown>	DEFAULT	2
fseeko.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseeko64	.symtab	0x11dbc	304	FUNC	<unknown>	DEFAULT	2
fseeko64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fwrite_unlocked	.symtab	0xd83c	172	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getArch	.symtab	0xae04	28	FUNC	<unknown>	DEFAULT	2
getHost	.symtab	0x91b4	100	FUNC	<unknown>	DEFAULT	2
getOurIP	.symtab	0x8508	748	FUNC	<unknown>	DEFAULT	2
getRandomIP	.symtab	0x83d8	96	FUNC	<unknown>	DEFAULT	2
get_hosts_byname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getc_unlocked	.symtab	0x136b0	304	FUNC	<unknown>	DEFAULT	2
getegid	.symtab	0xf914	44	FUNC	<unknown>	DEFAULT	2
getegid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid	.symtab	0xf940	44	FUNC	<unknown>	DEFAULT	2
geteuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid	.symtab	0xf96c	44	FUNC	<unknown>	DEFAULT	2
getgid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname	.symtab	0xe05c	68	FUNC	<unknown>	DEFAULT	2
gethostbyname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname_r	.symtab	0xe0a0	884	FUNC	<unknown>	DEFAULT	2
gethostbyname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid	.symtab	0xc528	44	FUNC	<unknown>	DEFAULT	2
getpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockname	.symtab	0xe440	44	FUNC	<unknown>	DEFAULT	2
getsockname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt	.symtab	0xe46c	48	FUNC	<unknown>	DEFAULT	2
getsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid	.symtab	0xf998	44	FUNC	<unknown>	DEFAULT	2
getuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
h.4900	.symtab	0x1e6a0	20	OBJECT	<unknown>	DEFAULT	10
h_errno	.symtab	0x1e6f0	4	OBJECT	<unknown>	DEFAULT	10
heap_alloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
heap_free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
htonl	.symtab	0xdf74	36	FUNC	<unknown>	DEFAULT	2
htons	.symtab	0xdf98	20	FUNC	<unknown>	DEFAULT	2
i.4123	.symtab	0x18120	4	OBJECT	<unknown>	DEFAULT	9
index	.symtab	0xda30	264	FUNC	<unknown>	DEFAULT	2
inet_addr	.symtab	0xe038	36	FUNC	<unknown>	DEFAULT	2
inet_aton	.symtab	0x10f6c	236	FUNC	<unknown>	DEFAULT	2
inet_aton.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa	.symtab	0xe02c	12	FUNC	<unknown>	DEFAULT	2
inet_ntoa.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa_r	.symtab	0xdfac	128	FUNC	<unknown>	DEFAULT	2
inet_ntop	.symtab	0x12d70	608	FUNC	<unknown>	DEFAULT	2
inet_ntop4	.symtab	0x12c0c	356	FUNC	<unknown>	DEFAULT	2
inet_pton	.symtab	0x129fc	528	FUNC	<unknown>	DEFAULT	2
inet_pton4	.symtab	0x12930	204	FUNC	<unknown>	DEFAULT	2
initConnection	.symtab	0xb7bc	396	FUNC	<unknown>	DEFAULT	2
init_rand	.symtab	0x81cc	212	FUNC	<unknown>	DEFAULT	2
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initial_fa	.symtab	0x18274	260	OBJECT	<unknown>	DEFAULT	9
initstate	.symtab	0xecc8	152	FUNC	<unknown>	DEFAULT	2
initstate_r	.symtab	0xeff8	200	FUNC	<unknown>	DEFAULT	2
ioctl	.symtab	0xc554	80	FUNC	<unknown>	DEFAULT	2
ioctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isatty	.symtab	0xdeb0	32	FUNC	<unknown>	DEFAULT	2
isatty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isspace	.symtab	0xc724	24	FUNC	<unknown>	DEFAULT	2
isspace.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill	.symtab	0xc5a4	44	FUNC	<unknown>	DEFAULT	2
kill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lengthd.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lengthq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/_memcpy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/bcopy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/memcpy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/memmove.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/memset.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/strcmp.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/strlen.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/arm/crt1.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/arm/crti.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/arm/crtn.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/arm/sigrestorer.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libgcc2.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
listFork	.symtab	0x976c	408	FUNC	<unknown>	DEFAULT	2
llseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lseek64	.symtab	0x13618	100	FUNC	<unknown>	DEFAULT	2
macAddress	.symtab	0x184b0	6	OBJECT	<unknown>	DEFAULT	10
main	.symtab	0xb948	2112	FUNC	<unknown>	DEFAULT	2
mainCommSock	.symtab	0x184a4	4	OBJECT	<unknown>	DEFAULT	10
malloc	.symtab	0xe674	340	FUNC	<unknown>	DEFAULT	2
malloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memchr	.symtab	0x10c00	252	FUNC	<unknown>	DEFAULT	2
memchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memcpy	.symtab	0xd900	4	FUNC	<unknown>	DEFAULT	2
memmove	.symtab	0x10bf0	4	FUNC	<unknown>	DEFAULT	2
mempcpy	.symtab	0x10cfc	24	FUNC	<unknown>	DEFAULT	2
mempcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memrchr	.symtab	0x10d14	236	FUNC	<unknown>	DEFAULT	2
memrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset	.symtab	0xd910	156	FUNC	<unknown>	DEFAULT	2
mylock	.symtab	0x18378	24	OBJECT	<unknown>	DEFAULT	9
mylock	.symtab	0x18390	24	OBJECT	<unknown>	DEFAULT	9
mylock	.symtab	0x1e6f4	24	OBJECT	<unknown>	DEFAULT	10
nanosleep	.symtab	0xf9c4	44	FUNC	<unknown>	DEFAULT	2
nanosleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
next_start.1066	.symtab	0x1e4c0	4	OBJECT	<unknown>	DEFAULT	10
ntohl	.symtab	0xdf3c	36	FUNC	<unknown>	DEFAULT	2
ntohl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ntohs	.symtab	0xdf60	20	FUNC	<unknown>	DEFAULT	2
ntop.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
numpids	.symtab	0x184a8	8	OBJECT	<unknown>	DEFAULT	10
object.2636	.symtab	0x1848c	24	OBJECT	<unknown>	DEFAULT	10
open	.symtab	0xc5d0	92	FUNC	<unknown>	DEFAULT	2
open.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
opennameservers.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ourIP	.symtab	0x1e714	4	OBJECT	<unknown>	DEFAULT	10
ovhl7	.symtab	0xa07c	3464	FUNC	<unknown>	DEFAULT	2
p.2553	.symtab	0x1801c	0	OBJECT	<unknown>	DEFAULT	9
pids	.symtab	0x1e718	4	OBJECT	<unknown>	DEFAULT	10
poll	.symtab	0x11bf8	44	FUNC	<unknown>	DEFAULT	2
poll.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prefix.4141	.symtab	0x16bec	12	OBJECT	<unknown>	DEFAULT	4
print	.symtab	0x8cfc	1008	FUNC	<unknown>	DEFAULT	2
printchar	.symtab	0x8924	108	FUNC	<unknown>	DEFAULT	2
printi	.symtab	0x8b14	488	FUNC	<unknown>	DEFAULT	2
prints	.symtab	0x8990	388	FUNC	<unknown>	DEFAULT	2
processCmd	.symtab	0xae20	2460	FUNC	<unknown>	DEFAULT	2
qual_chars.4147	.symtab	0x16c00	20	OBJECT	<unknown>	DEFAULT	4
raise	.symtab	0x11b80	24	FUNC	<unknown>	DEFAULT	2
raise.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand	.symtab	0xebbc	4	FUNC	<unknown>	DEFAULT	2
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand_cmwc	.symtab	0x82a0	312	FUNC	<unknown>	DEFAULT	2
random	.symtab	0xebc0	124	FUNC	<unknown>	DEFAULT	2
random.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
random_poly_info	.symtab	0x177f0	40	OBJECT	<unknown>	DEFAULT	4
random_r	.symtab	0xee9c	144	FUNC	<unknown>	DEFAULT	2
random_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
randtbl	.symtab	0x183c4	128	OBJECT	<unknown>	DEFAULT	9
rawmemchr	.symtab	0x12730	184	FUNC	<unknown>	DEFAULT	2
rawmemchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read	.symtab	0xc63c	44	FUNC	<unknown>	DEFAULT	2
read.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read_etc_hosts_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recv	.symtab	0xe49c	44	FUNC	<unknown>	DEFAULT	2
recv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recvLine	.symtab	0x9218	724	FUNC	<unknown>	DEFAULT	2
sbrk	.symtab	0xf9f0	88	FUNC	<unknown>	DEFAULT	2
sbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
select	.symtab	0xc668	48	FUNC	<unknown>	DEFAULT	2
select.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
send	.symtab	0xe4c8	44	FUNC	<unknown>	DEFAULT	2
send.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsid	.symtab	0xc698	44	FUNC	<unknown>	DEFAULT	2
setsid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsockopt	.symtab	0xe4f4	48	FUNC	<unknown>	DEFAULT	2
setsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setstate	.symtab	0xec3c	140	FUNC	<unknown>	DEFAULT	2
setstate_r	.symtab	0xeddc	192	FUNC	<unknown>	DEFAULT	2
sigaction	.symtab	0xf7fc	228	FUNC	<unknown>	DEFAULT	2
sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
signal	.symtab	0xe550	184	FUNC	<unknown>	DEFAULT	2
signal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigprocmask	.symtab	0xfa48	84	FUNC	<unknown>	DEFAULT	2
sigprocmask.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigsetops.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sleep	.symtab	0xf300	420	FUNC	<unknown>	DEFAULT	2
sleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket	.symtab	0xe524	44	FUNC	<unknown>	DEFAULT	2
socket.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket_connect	.symtab	0x9904	332	FUNC	<unknown>	DEFAULT	2
sockprintf	.symtab	0x90ec	200	FUNC	<unknown>	DEFAULT	2
spec_and_mask.4146	.symtab	0x16c14	16	OBJECT	<unknown>	DEFAULT	4
spec_base.4140	.symtab	0x16bf8	7	OBJECT	<unknown>	DEFAULT	4
spec_chars.4143	.symtab	0x16c40	21	OBJECT	<unknown>	DEFAULT	4
spec_flags.4142	.symtab	0x16c58	8	OBJECT	<unknown>	DEFAULT	4
spec_or_mask.4145	.symtab	0x16c24	16	OBJECT	<unknown>	DEFAULT	4
spec_ranges.4144	.symtab	0x16c34	9	OBJECT	<unknown>	DEFAULT	4
sprintf	.symtab	0xc77c	52	FUNC	<unknown>	DEFAULT	2
sprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
srand	.symtab	0xed60	124	FUNC	<unknown>	DEFAULT	2
srandom	.symtab	0xed60	124	FUNC	<unknown>	DEFAULT	2
srandom_r	.symtab	0xef2c	204	FUNC	<unknown>	DEFAULT	2
static_id	.symtab	0x18468	2	OBJECT	<unknown>	DEFAULT	9
static_ns	.symtab	0x1e70c	4	OBJECT	<unknown>	DEFAULT	10
stderr	.symtab	0x1813c	4	OBJECT	<unknown>	DEFAULT	9
stdin	.symtab	0x18134	4	OBJECT	<unknown>	DEFAULT	9
stdout	.symtab	0x18138	4	OBJECT	<unknown>	DEFAULT	9
strcasecmp	.symtab	0xde28	124	FUNC	<unknown>	DEFAULT	2
strcasecmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchr	.symtab	0xda30	264	FUNC	<unknown>	DEFAULT	2
strchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcmp	.symtab	0xd9b0	28	FUNC	<unknown>	DEFAULT	2
strcoll	.symtab	0xd9b0	28	FUNC	<unknown>	DEFAULT	2
strcpy	.symtab	0xdb38	28	FUNC	<unknown>	DEFAULT	2
strcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strdup	.symtab	0x12900	48	FUNC	<unknown>	DEFAULT	2
strdup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strerror_r	.symtab	0xdd40	232	FUNC	<unknown>	DEFAULT	2
strlen	.symtab	0xd9d0	96	FUNC	<unknown>	DEFAULT	2
strncat	.symtab	0x127e8	200	FUNC	<unknown>	DEFAULT	2
strncat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strncpy	.symtab	0x10e00	184	FUNC	<unknown>	DEFAULT	2
strncpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strnlen	.symtab	0xdb54	224	FUNC	<unknown>	DEFAULT	2
strnlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strpbrk	.symtab	0x10f2c	64	FUNC	<unknown>	DEFAULT	2
strpbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strspn	.symtab	0x128b0	80	FUNC	<unknown>	DEFAULT	2
strspn.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strstr	.symtab	0xdc34	248	FUNC	<unknown>	DEFAULT	2
strstr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok	.symtab	0xdea4	12	FUNC	<unknown>	DEFAULT	2
strtok.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok_r	.symtab	0x10eb8	116	FUNC	<unknown>	DEFAULT	2
strtok_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtol	.symtab	0xf0cc	8	FUNC	<unknown>	DEFAULT	2
strtol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcgetattr	.symtab	0xded0	108	FUNC	<unknown>	DEFAULT	2
tcgetattr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
time	.symtab	0xc6c4	44	FUNC	<unknown>	DEFAULT	2
time.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tolower	.symtab	0x1367c	52	FUNC	<unknown>	DEFAULT	2
tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
toupper	.symtab	0xc73c	52	FUNC	<unknown>	DEFAULT	2
toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
trim	.symtab	0x87f4	304	FUNC	<unknown>	DEFAULT	2
type_codes	.symtab	0x16c60	24	OBJECT	<unknown>	DEFAULT	4
type_sizes	.symtab	0x16c78	12	OBJECT	<unknown>	DEFAULT	4
unknown.1088	.symtab	0x16c84	14	OBJECT	<unknown>	DEFAULT	4
unsafe_state	.symtab	0x183a8	28	OBJECT	<unknown>	DEFAULT	9
useragents	.symtab	0x1802c	236	OBJECT	<unknown>	DEFAULT	9
vsnprintf	.symtab	0xc7b0	176	FUNC	<unknown>	DEFAULT	2
vsnprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wait4	.symtab	0xfa9c	44	FUNC	<unknown>	DEFAULT	2
wait4.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
waitpid	.symtab	0xc6f0	8	FUNC	<unknown>	DEFAULT	2
waitpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcrtomb	.symtab	0xfad4	80	FUNC	<unknown>	DEFAULT	2
wcrtomb.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsnrtombs	.symtab	0xfb44	188	FUNC	<unknown>	DEFAULT	2
wcsnrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsrtombs	.symtab	0xfb24	32	FUNC	<unknown>	DEFAULT	2
wcsrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
write	.symtab	0xc6f8	44	FUNC	<unknown>	DEFAULT	2
write.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
xdigits.3041	.symtab	0x17be4	17	OBJECT	<unknown>	DEFAULT	4
xtdcustom	.symtab	0x9bf4	356	FUNC	<unknown>	DEFAULT	2

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 22, 2024 16:06:21.797518015 CET	33896	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:21.918977022 CET	4258	33896	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:21.919034958 CET	33896	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:21.920109987 CET	33896	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:22.039623022 CET	4258	33896	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:23.018158913 CET	4258	33896	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:23.018186092 CET	4258	33896	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:23.018349886 CET	33896	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:23.019434929 CET	33896	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:23.020096064 CET	33898	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:23.138875008 CET	4258	33896	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:23.139652967 CET	4258	33898	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:23.139784098 CET	33898	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:23.139993906 CET	33898	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:23.259675026 CET	4258	33898	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:24.214850903 CET	4258	33898	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:24.214881897 CET	4258	33898	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:24.215039015 CET	33898	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:24.215203047 CET	33898	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:24.215817928 CET	33900	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:24.334695101 CET	4258	33898	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:24.335422039 CET	4258	33900	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:24.335515976 CET	33900	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:24.335752010 CET	33900	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:24.455522060 CET	4258	33900	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:25.403000116 CET	4258	33900	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:25.403024912 CET	4258	33900	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:25.403150082 CET	33900	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:25.403358936 CET	33900	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:25.403950930 CET	33902	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:25.523000002 CET	4258	33900	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:25.523498058 CET	4258	33902	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:25.523601055 CET	33902	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:25.523854017 CET	33902	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:25.643408060 CET	4258	33902	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:26.601435900 CET	4258	33902	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:26.601649046 CET	33902	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:26.601871014 CET	4258	33902	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:26.602031946 CET	33902	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:26.602561951 CET	33904	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:26.722150087 CET	4258	33902	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:26.722605944 CET	4258	33904	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:26.722676992 CET	33904	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:26.722742081 CET	33904	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:26.842281103 CET	4258	33904	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:27.790294886 CET	4258	33904	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:27.790324926 CET	4258	33904	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:27.790610075 CET	33904	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:27.790610075 CET	33904	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:27.791148901 CET	33906	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:27.910818100 CET	4258	33904	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:27.911087990 CET	4258	33906	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:27.911246061 CET	33906	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:27.911246061 CET	33906	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:28.033566952 CET	4258	33906	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:28.981214046 CET	4258	33906	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:28.981352091 CET	4258	33906	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:28.981456041 CET	33906	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:28.981456041 CET	33906	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:28.982132912 CET	33908	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:29.101597071 CET	4258	33906	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:29.102159977 CET	4258	33908	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:29.102327108 CET	33908	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:29.102327108 CET	33908	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:29.221899986 CET	4258	33908	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:30.186445951 CET	4258	33908	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:30.186518908 CET	4258	33908	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:30.186669111 CET	33908	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:30.186784983 CET	33908	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:30.187355042 CET	33910	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:30.306391954 CET	4258	33908	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:30.306956053 CET	4258	33910	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:30.307128906 CET	33910	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:30.307128906 CET	33910	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:30.426630020 CET	4258	33910	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:31.385827065 CET	4258	33910	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:31.385853052 CET	4258	33910	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:31.386090040 CET	33910	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:31.386090040 CET	33910	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:31.386851072 CET	33912	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:31.507085085 CET	4258	33910	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:31.507656097 CET	4258	33912	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:31.507837057 CET	33912	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:31.507837057 CET	33912	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:31.627540112 CET	4258	33912	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:31.795799971 CET	48202	443	192.168.2.13	185.125.190.26
Dec 22, 2024 16:06:32.584115028 CET	4258	33912	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:32.584146023 CET	4258	33912	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:32.584372044 CET	33912	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:32.584372044 CET	33912	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:32.585295916 CET	33914	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:32.704242945 CET	4258	33912	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:32.704792023 CET	4258	33914	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:32.704880953 CET	33914	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:32.704963923 CET	33914	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:32.824574947 CET	4258	33914	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:33.771812916 CET	4258	33914	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:33.772031069 CET	4258	33914	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:33.772236109 CET	33914	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:33.772236109 CET	33914	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:33.773067951 CET	33916	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:33.892028093 CET	4258	33914	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:33.892811060 CET	4258	33916	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:33.892908096 CET	33916	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:33.892952919 CET	33916	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:34.012720108 CET	4258	33916	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:34.960828066 CET	4258	33916	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:34.960860968 CET	4258	33916	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:34.961188078 CET	33916	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:34.961188078 CET	33916	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:34.961998940 CET	33918	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:35.080980062 CET	4258	33916	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:35.081762075 CET	4258	33918	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:35.081985950 CET	33918	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:35.081985950 CET	33918	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:35.201587915 CET	4258	33918	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:36.148755074 CET	4258	33918	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:36.148788929 CET	4258	33918	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:36.149097919 CET	33918	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:36.149156094 CET	33918	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:36.149782896 CET	33920	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:36.269140959 CET	4258	33918	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:36.269918919 CET	4258	33920	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:36.270009995 CET	33920	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:36.270128965 CET	33920	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:36.389662027 CET	4258	33920	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:37.336446047 CET	4258	33920	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:37.336474895 CET	4258	33920	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:37.336671114 CET	33920	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:37.336755991 CET	33920	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:37.337359905 CET	33922	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:37.456610918 CET	4258	33920	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:37.456931114 CET	4258	33922	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:37.457048893 CET	33922	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:37.457222939 CET	33922	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:37.577159882 CET	4258	33922	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:38.531876087 CET	4258	33922	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:38.531934977 CET	4258	33922	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:38.532102108 CET	33922	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:38.532190084 CET	33922	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:38.532999039 CET	33924	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:38.652278900 CET	4258	33922	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:38.653264046 CET	4258	33924	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:38.653378963 CET	33924	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:38.653441906 CET	33924	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:38.773097038 CET	4258	33924	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:39.759391069 CET	4258	33924	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:39.759532928 CET	4258	33924	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:39.759623051 CET	33924	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:39.759810925 CET	33924	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:39.760488987 CET	33926	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:39.879425049 CET	4258	33924	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:39.879939079 CET	4258	33926	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:39.880028963 CET	33926	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:39.880126953 CET	33926	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:39.999946117 CET	4258	33926	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:40.957648993 CET	4258	33926	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:40.957719088 CET	4258	33926	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:40.957868099 CET	33926	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:40.957967043 CET	33926	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:40.958746910 CET	33928	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:41.079618931 CET	4258	33926	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:41.080234051 CET	4258	33928	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:41.080351114 CET	33928	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:41.080430031 CET	33928	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:41.201093912 CET	4258	33928	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:42.157463074 CET	4258	33928	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:42.157593966 CET	4258	33928	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:42.157675982 CET	33928	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:42.157929897 CET	33928	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:42.158677101 CET	33930	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:42.277427912 CET	4258	33928	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:42.278166056 CET	4258	33930	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:42.278253078 CET	33930	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:42.278382063 CET	33930	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:42.397806883 CET	4258	33930	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:43.346126080 CET	4258	33930	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:43.346227884 CET	4258	33930	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:43.346453905 CET	33930	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:43.346684933 CET	33930	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:43.347776890 CET	33932	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:43.466348886 CET	4258	33930	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:43.467402935 CET	4258	33932	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:43.467478991 CET	33932	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:43.467521906 CET	33932	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:43.587712049 CET	4258	33932	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:44.535612106 CET	4258	33932	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:44.535662889 CET	4258	33932	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:44.535829067 CET	33932	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:44.536053896 CET	33932	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:44.536931038 CET	33934	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:44.655575037 CET	4258	33932	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:44.656536102 CET	4258	33934	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:44.656687975 CET	33934	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:44.656810999 CET	33934	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:44.776304007 CET	4258	33934	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:45.728121996 CET	4258	33934	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:45.728207111 CET	4258	33934	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:45.728282928 CET	33934	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:45.728370905 CET	33934	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:45.729177952 CET	33936	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:45.847851038 CET	4258	33934	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:45.848678112 CET	4258	33936	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:45.848822117 CET	33936	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:45.848917007 CET	33936	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:45.970366955 CET	4258	33936	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:46.918534040 CET	4258	33936	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:46.918585062 CET	4258	33936	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:46.918848991 CET	33936	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:46.919044971 CET	33936	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:46.920269012 CET	33938	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:47.038732052 CET	4258	33936	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:47.039860010 CET	4258	33938	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:47.039932966 CET	33938	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:47.040008068 CET	33938	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:47.160346985 CET	4258	33938	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:48.107692957 CET	4258	33938	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:48.107722044 CET	4258	33938	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:48.108056068 CET	33938	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:48.108256102 CET	33938	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:48.109287024 CET	33940	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:48.227915049 CET	4258	33938	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:48.228738070 CET	4258	33940	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:48.228831053 CET	33940	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:48.228919029 CET	33940	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:48.348432064 CET	4258	33940	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:49.296881914 CET	4258	33940	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:49.296946049 CET	4258	33940	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:49.297056913 CET	33940	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:49.297163963 CET	33940	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:49.298018932 CET	33942	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:49.416975975 CET	4258	33940	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:49.417551994 CET	4258	33942	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:49.417673111 CET	33942	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:49.417833090 CET	33942	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:49.538435936 CET	4258	33942	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:50.484127998 CET	4258	33942	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:50.484177113 CET	4258	33942	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:50.484286070 CET	33942	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:50.484381914 CET	33942	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:50.485131979 CET	33944	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:50.610090971 CET	4258	33942	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:50.610411882 CET	4258	33944	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:50.610491991 CET	33944	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:50.610563993 CET	33944	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:50.730436087 CET	4258	33944	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:51.678097010 CET	4258	33944	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:51.678198099 CET	4258	33944	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:51.678392887 CET	33944	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:51.678576946 CET	33944	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:51.679322004 CET	33946	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:51.798078060 CET	4258	33944	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:51.798909903 CET	4258	33946	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:51.799037933 CET	33946	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:51.799190044 CET	33946	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:51.918724060 CET	4258	33946	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:52.866835117 CET	4258	33946	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:52.867021084 CET	4258	33946	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:52.867058039 CET	33946	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:52.867213011 CET	33946	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:52.868280888 CET	33948	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:52.987364054 CET	4258	33946	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:52.988812923 CET	4258	33948	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:52.988977909 CET	33948	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:52.989052057 CET	33948	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:53.108838081 CET	4258	33948	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:57.363837957 CET	4258	33948	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:57.364039898 CET	33948	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:57.365041018 CET	33950	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:57.483829975 CET	4258	33948	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:57.484884024 CET	4258	33950	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:57.484992981 CET	33950	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:57.485014915 CET	33950	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:57.604871988 CET	4258	33950	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:58.552751064 CET	4258	33950	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:58.552886963 CET	33950	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:58.552963972 CET	4258	33950	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:58.553052902 CET	33950	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:58.553941965 CET	33952	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:58.672770977 CET	4258	33950	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:58.673650980 CET	4258	33952	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:58.673712015 CET	33952	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:58.673748016 CET	33952	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:58.795310974 CET	4258	33952	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:59.741945028 CET	4258	33952	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:59.742047071 CET	4258	33952	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:59.742115021 CET	33952	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:59.742249966 CET	33952	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:59.743382931 CET	33954	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:59.861854076 CET	4258	33952	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:59.862893105 CET	4258	33954	31.172.83.147	192.168.2.13
Dec 22, 2024 16:06:59.863096952 CET	33954	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:59.863120079 CET	33954	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:06:59.982599974 CET	4258	33954	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:00.939161062 CET	4258	33954	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:00.939384937 CET	4258	33954	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:00.939588070 CET	33954	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:00.939667940 CET	33954	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:00.940805912 CET	33956	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:01.059391975 CET	4258	33954	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:01.060451031 CET	4258	33956	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:01.060597897 CET	33956	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:01.060699940 CET	33956	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:01.181014061 CET	4258	33956	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:02.130319118 CET	4258	33956	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:02.130337954 CET	4258	33956	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:02.130522966 CET	33956	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:02.130670071 CET	33956	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:02.131774902 CET	33958	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:02.250375032 CET	4258	33956	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:02.251532078 CET	4258	33958	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:02.251699924 CET	33958	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:02.251804113 CET	33958	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:02.371638060 CET	4258	33958	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:03.334453106 CET	4258	33958	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:03.334474087 CET	4258	33958	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:03.334640980 CET	33958	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:03.334849119 CET	33958	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:03.335973024 CET	33960	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:03.454332113 CET	4258	33958	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:03.456235886 CET	4258	33960	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:03.456345081 CET	33960	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:03.456419945 CET	33960	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:03.578110933 CET	4258	33960	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:03.795739889 CET	48202	443	192.168.2.13	185.125.190.26
Dec 22, 2024 16:07:04.524560928 CET	4258	33960	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:04.524760962 CET	33960	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:04.524781942 CET	4258	33960	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:04.524930000 CET	33960	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:04.525918961 CET	33962	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:04.644505978 CET	4258	33960	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:04.645396948 CET	4258	33962	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:04.645545006 CET	33962	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:04.645643950 CET	33962	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:04.765110016 CET	4258	33962	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:05.740252018 CET	4258	33962	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:05.740279913 CET	4258	33962	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:05.740412951 CET	33962	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:05.740577936 CET	33962	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:05.741460085 CET	33964	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:05.860315084 CET	4258	33962	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:05.861969948 CET	4258	33964	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:05.862119913 CET	33964	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:05.862255096 CET	33964	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:05.981667042 CET	4258	33964	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:06.929703951 CET	4258	33964	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:06.929806948 CET	4258	33964	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:06.929825068 CET	33964	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:06.929889917 CET	33964	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:06.930850029 CET	33966	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:07.049438953 CET	4258	33964	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:07.050427914 CET	4258	33966	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:07.050561905 CET	33966	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:07.050580978 CET	33966	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:07.172142029 CET	4258	33966	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:08.160192966 CET	4258	33966	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:08.160224915 CET	4258	33966	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:08.160412073 CET	33966	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:08.160557985 CET	33966	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:08.161770105 CET	33968	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:08.280078888 CET	4258	33966	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:08.281389952 CET	4258	33968	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:08.281579018 CET	33968	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:08.281670094 CET	33968	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:08.401398897 CET	4258	33968	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:09.349354029 CET	4258	33968	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:09.349500895 CET	4258	33968	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:09.349499941 CET	33968	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:09.349709034 CET	33968	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:09.350990057 CET	33970	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:09.469193935 CET	4258	33968	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:09.470598936 CET	4258	33970	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:09.470755100 CET	33970	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:09.470887899 CET	33970	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:09.592253923 CET	4258	33970	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:10.556190968 CET	4258	33970	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:10.556215048 CET	4258	33970	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:10.556443930 CET	33970	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:10.556626081 CET	33970	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:10.557849884 CET	33972	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:10.676423073 CET	4258	33970	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:10.677485943 CET	4258	33972	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:10.677719116 CET	33972	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:10.677758932 CET	33972	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:10.797911882 CET	4258	33972	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:11.747307062 CET	4258	33972	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:11.747349977 CET	4258	33972	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:11.747452974 CET	33972	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:11.747590065 CET	33972	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:11.748431921 CET	33974	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:11.870400906 CET	4258	33972	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:11.871356010 CET	4258	33974	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:11.871603012 CET	33974	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:11.871659040 CET	33974	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:11.995620966 CET	4258	33974	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:12.945271015 CET	4258	33974	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:12.945379972 CET	4258	33974	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:12.945502996 CET	33974	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:12.945663929 CET	33974	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:12.946768045 CET	33976	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:13.065166950 CET	4258	33974	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:13.066313028 CET	4258	33976	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:13.066421032 CET	33976	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:13.066526890 CET	33976	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:13.187119961 CET	4258	33976	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:14.232445955 CET	4258	33976	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:14.232587099 CET	4258	33976	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:14.232750893 CET	33976	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:14.232938051 CET	33976	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:14.234019041 CET	33978	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:14.354176044 CET	4258	33976	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:14.355089903 CET	4258	33978	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:14.355201006 CET	33978	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:14.355338097 CET	33978	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:14.474862099 CET	4258	33978	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:15.421786070 CET	4258	33978	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:15.421942949 CET	33978	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:15.422851086 CET	4258	33978	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:15.422996044 CET	33978	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:15.424119949 CET	33980	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:15.543076992 CET	4258	33978	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:15.544023991 CET	4258	33980	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:15.544135094 CET	33980	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:15.544270039 CET	33980	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:15.664937019 CET	4258	33980	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:16.622330904 CET	4258	33980	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:16.622462034 CET	4258	33980	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:16.622622967 CET	33980	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:16.622809887 CET	33980	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:16.624118090 CET	33982	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:16.742595911 CET	4258	33980	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:16.743928909 CET	4258	33982	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:16.744173050 CET	33982	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:16.744406939 CET	33982	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:16.863909960 CET	4258	33982	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:17.811857939 CET	4258	33982	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:17.811996937 CET	4258	33982	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:17.812079906 CET	33982	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:17.812186956 CET	33982	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:17.813297033 CET	33984	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:17.931969881 CET	4258	33982	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:17.933203936 CET	4258	33984	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:17.933362961 CET	33984	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:17.933569908 CET	33984	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:18.053824902 CET	4258	33984	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:19.000829935 CET	4258	33984	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:19.000930071 CET	4258	33984	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:19.001076937 CET	33984	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:19.001331091 CET	33984	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:19.002361059 CET	33986	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:19.122092962 CET	4258	33984	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:19.122981071 CET	4258	33986	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:19.123234987 CET	33986	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:19.123370886 CET	33986	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:19.242822886 CET	4258	33986	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:20.191154957 CET	4258	33986	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:20.191272020 CET	4258	33986	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:20.191329956 CET	33986	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:20.191489935 CET	33986	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:20.192581892 CET	33988	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:20.311029911 CET	4258	33986	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:20.312155008 CET	4258	33988	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:20.312223911 CET	33988	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:20.312335014 CET	33988	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:20.431938887 CET	4258	33988	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:21.392976999 CET	4258	33988	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:21.393105984 CET	4258	33988	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:21.393249035 CET	33988	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:21.393461943 CET	33988	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:21.394622087 CET	33990	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:21.513016939 CET	4258	33988	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:21.514072895 CET	4258	33990	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:21.514255047 CET	33990	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:21.514319897 CET	33990	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:21.634382010 CET	4258	33990	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:22.602266073 CET	4258	33990	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:22.602389097 CET	4258	33990	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:22.602587938 CET	33990	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:22.602667093 CET	33990	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:22.603681087 CET	33992	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:22.722733021 CET	4258	33990	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:22.723686934 CET	4258	33992	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:22.723800898 CET	33992	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:22.723926067 CET	33992	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:22.843481064 CET	4258	33992	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:23.790534019 CET	4258	33992	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:23.790637016 CET	4258	33992	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:23.790823936 CET	33992	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:23.790983915 CET	33992	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:23.792275906 CET	33994	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:23.910548925 CET	4258	33992	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:23.911766052 CET	4258	33994	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:23.911978960 CET	33994	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:23.912024021 CET	33994	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:24.031734943 CET	4258	33994	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:24.979742050 CET	4258	33994	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:24.979916096 CET	4258	33994	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:24.980076075 CET	33994	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:24.980076075 CET	33994	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:24.980962038 CET	33996	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:25.099958897 CET	4258	33994	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:25.100703001 CET	4258	33996	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:25.100915909 CET	33996	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:25.100969076 CET	33996	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:25.220777035 CET	4258	33996	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:26.168365002 CET	4258	33996	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:26.168392897 CET	4258	33996	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:26.168628931 CET	33996	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:26.168708086 CET	33996	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:26.169785023 CET	33998	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:26.292006969 CET	4258	33996	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:26.293108940 CET	4258	33998	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:26.293256998 CET	33998	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:26.293351889 CET	33998	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:26.412972927 CET	4258	33998	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:27.360100985 CET	4258	33998	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:27.360250950 CET	33998	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:27.360408068 CET	4258	33998	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:27.360538006 CET	33998	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:27.361562014 CET	34000	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:27.480458975 CET	4258	33998	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:27.481266022 CET	4258	34000	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:27.481352091 CET	34000	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:27.481478930 CET	34000	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:27.603939056 CET	4258	34000	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:28.551903009 CET	4258	34000	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:28.552027941 CET	34000	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:28.552088022 CET	4258	34000	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:28.552295923 CET	34000	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:28.553309917 CET	34002	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:28.671869993 CET	4258	34000	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:28.672869921 CET	4258	34002	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:28.673202991 CET	34002	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:28.673274040 CET	34002	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:28.792845964 CET	4258	34002	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:29.740253925 CET	4258	34002	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:29.740381956 CET	4258	34002	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:29.740632057 CET	34002	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:29.740734100 CET	34002	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:29.741544962 CET	34004	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:29.860476971 CET	4258	34002	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:29.861120939 CET	4258	34004	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:29.861207008 CET	34004	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:29.861320019 CET	34004	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:29.982482910 CET	4258	34004	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:30.928832054 CET	4258	34004	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:30.928849936 CET	4258	34004	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:30.929075003 CET	34004	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:30.929243088 CET	34004	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:30.930327892 CET	34006	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:31.049264908 CET	4258	34004	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:31.049978018 CET	4258	34006	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:31.050055027 CET	34006	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:31.050260067 CET	34006	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:31.170912981 CET	4258	34006	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:32.142616987 CET	4258	34006	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:32.142801046 CET	4258	34006	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:32.142905951 CET	34006	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:32.143091917 CET	34006	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:32.144282103 CET	34008	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:32.262567043 CET	4258	34006	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:32.263875008 CET	4258	34008	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:32.264003038 CET	34008	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:32.264112949 CET	34008	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:32.383697033 CET	4258	34008	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:33.362677097 CET	4258	34008	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:33.362811089 CET	4258	34008	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:33.362818003 CET	34008	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:33.362874985 CET	34008	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:33.363776922 CET	34010	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:33.483711958 CET	4258	34008	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:33.484777927 CET	4258	34010	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:33.484909058 CET	34010	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:33.485030890 CET	34010	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:33.604551077 CET	4258	34010	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:34.552309990 CET	4258	34010	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:34.552583933 CET	34010	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:34.552823067 CET	4258	34010	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:34.552959919 CET	34010	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:34.553962946 CET	34012	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:34.672704935 CET	4258	34010	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:34.673784971 CET	4258	34012	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:34.674052000 CET	34012	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:34.674140930 CET	34012	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:34.793667078 CET	4258	34012	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:35.940643072 CET	4258	34012	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:35.940655947 CET	4258	34012	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:35.941128016 CET	34012	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:35.941236973 CET	34012	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:35.942408085 CET	34014	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:36.060928106 CET	4258	34012	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:36.062015057 CET	4258	34014	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:36.062300920 CET	34014	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:36.062349081 CET	34014	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:36.184385061 CET	4258	34014	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:37.131905079 CET	4258	34014	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:37.131916046 CET	4258	34014	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:37.132143021 CET	34014	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:37.132327080 CET	34014	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:37.133367062 CET	34016	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:37.251945019 CET	4258	34014	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:37.253123045 CET	4258	34016	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:37.253237009 CET	34016	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:37.253592014 CET	34016	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:37.374365091 CET	4258	34016	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:38.321757078 CET	4258	34016	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:38.321892977 CET	4258	34016	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:38.322118044 CET	34016	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:38.322329044 CET	34016	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:38.323523998 CET	34018	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:38.441958904 CET	4258	34016	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:38.443231106 CET	4258	34018	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:38.443528891 CET	34018	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:38.443640947 CET	34018	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:38.563143969 CET	4258	34018	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:39.509785891 CET	4258	34018	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:39.509905100 CET	4258	34018	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:39.509968996 CET	34018	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:39.510147095 CET	34018	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:39.511183023 CET	34020	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:39.629694939 CET	4258	34018	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:39.630675077 CET	4258	34020	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:39.630784988 CET	34020	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:39.630913019 CET	34020	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:39.750437975 CET	4258	34020	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:40.707098007 CET	4258	34020	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:40.707160950 CET	4258	34020	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:40.707281113 CET	34020	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:40.707523108 CET	34020	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:40.708646059 CET	34022	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:40.828150034 CET	4258	34020	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:40.828828096 CET	4258	34022	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:40.829063892 CET	34022	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:40.829191923 CET	34022	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:40.950361967 CET	4258	34022	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:41.897464991 CET	4258	34022	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:41.897660017 CET	4258	34022	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:41.897660971 CET	34022	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:41.897842884 CET	34022	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:41.899142027 CET	34024	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:42.017777920 CET	4258	34022	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:42.019012928 CET	4258	34024	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:42.019150972 CET	34024	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:42.019233942 CET	34024	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:42.139117956 CET	4258	34024	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:43.089117050 CET	4258	34024	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:43.089236021 CET	4258	34024	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:43.089323044 CET	34024	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:43.089481115 CET	34024	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:43.090514898 CET	34026	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:43.211843967 CET	4258	34024	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:43.212694883 CET	4258	34026	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:43.212975979 CET	34026	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:43.213162899 CET	34026	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:43.336924076 CET	4258	34026	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:44.280917883 CET	4258	34026	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:44.280947924 CET	4258	34026	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:44.281274080 CET	34026	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:44.281274080 CET	34026	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:44.282614946 CET	34028	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:44.401060104 CET	4258	34026	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:44.402216911 CET	4258	34028	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:44.402421951 CET	34028	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:44.402508974 CET	34028	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:44.522665024 CET	4258	34028	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:45.596239090 CET	4258	34028	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:45.596268892 CET	4258	34028	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:45.596577883 CET	34028	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:45.596945047 CET	34028	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:45.598450899 CET	34030	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:45.716537952 CET	4258	34028	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:45.718019009 CET	4258	34030	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:45.718137026 CET	34030	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:45.718308926 CET	34030	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:45.839082956 CET	4258	34030	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:46.785979033 CET	4258	34030	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:46.786097050 CET	4258	34030	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:46.786253929 CET	34030	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:46.786400080 CET	34030	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:46.788019896 CET	34032	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:46.906999111 CET	4258	34030	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:46.908396006 CET	4258	34032	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:46.908528090 CET	34032	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:46.908814907 CET	34032	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:47.030795097 CET	4258	34032	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:47.976946115 CET	4258	34032	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:47.977003098 CET	4258	34032	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:47.977143049 CET	34032	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:47.977390051 CET	34032	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:47.978343010 CET	34034	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:48.096899986 CET	4258	34032	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:48.097877026 CET	4258	34034	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:48.098025084 CET	34034	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:48.098119974 CET	34034	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:48.217976093 CET	4258	34034	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:58.488295078 CET	4258	34034	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:58.488544941 CET	34034	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:58.489346027 CET	34036	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:58.608634949 CET	4258	34034	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:58.608964920 CET	4258	34036	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:58.609153986 CET	34036	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:58.609232903 CET	34036	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:58.728873968 CET	4258	34036	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:59.676501036 CET	4258	34036	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:59.676630020 CET	4258	34036	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:59.676681042 CET	34036	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:59.676822901 CET	34036	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:59.677746058 CET	34038	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:59.799601078 CET	4258	34036	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:59.800303936 CET	4258	34038	31.172.83.147	192.168.2.13
Dec 22, 2024 16:07:59.800545931 CET	34038	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:59.800668955 CET	34038	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:07:59.922015905 CET	4258	34038	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:00.894346952 CET	4258	34038	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:00.894439936 CET	4258	34038	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:00.894654036 CET	34038	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:00.894814014 CET	34038	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:00.895927906 CET	34040	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:01.015717030 CET	4258	34038	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:01.016294003 CET	4258	34040	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:01.016439915 CET	34040	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:01.016515017 CET	34040	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:01.136038065 CET	4258	34040	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:02.092457056 CET	4258	34040	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:02.092632055 CET	4258	34040	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:02.092838049 CET	34040	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:02.092988968 CET	34040	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:02.093911886 CET	34042	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:02.212726116 CET	4258	34040	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:02.213665009 CET	4258	34042	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:02.213788986 CET	34042	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:02.214065075 CET	34042	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:02.333695889 CET	4258	34042	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:03.297722101 CET	4258	34042	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:03.297900915 CET	34042	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:03.297995090 CET	4258	34042	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:03.298104048 CET	34042	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:03.298934937 CET	34044	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:03.417692900 CET	4258	34042	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:03.418637037 CET	4258	34044	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:03.418745041 CET	34044	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:03.418804884 CET	34044	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:03.541003942 CET	4258	34044	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:04.522505045 CET	4258	34044	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:04.522527933 CET	4258	34044	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:04.522675037 CET	34044	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:04.522834063 CET	34044	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:04.523713112 CET	34046	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:04.642563105 CET	4258	34044	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:04.643367052 CET	4258	34046	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:04.643487930 CET	34046	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:04.643615007 CET	34046	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:04.763228893 CET	4258	34046	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:05.729069948 CET	4258	34046	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:05.729087114 CET	4258	34046	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:05.729218006 CET	34046	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:05.729301929 CET	34046	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:05.730071068 CET	34048	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:05.849168062 CET	4258	34046	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:05.849956036 CET	4258	34048	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:05.850163937 CET	34048	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:05.850235939 CET	34048	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:05.973340034 CET	4258	34048	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:06.920931101 CET	4258	34048	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:06.920973063 CET	4258	34048	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:06.921386003 CET	34048	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:06.921497107 CET	34048	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:06.923077106 CET	34050	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:07.048861027 CET	4258	34048	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:07.048872948 CET	4258	34050	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:07.049168110 CET	34050	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:07.049316883 CET	34050	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:07.169504881 CET	4258	34050	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:08.116497993 CET	4258	34050	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:08.116528988 CET	4258	34050	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:08.116667032 CET	34050	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:08.116823912 CET	34050	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:08.117902994 CET	34052	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:08.236615896 CET	4258	34050	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:08.237840891 CET	4258	34052	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:08.237972975 CET	34052	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:08.238051891 CET	34052	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:08.357801914 CET	4258	34052	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:09.310790062 CET	4258	34052	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:09.310820103 CET	4258	34052	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:09.311033964 CET	34052	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:09.311033964 CET	34052	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:09.311799049 CET	34054	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:09.430986881 CET	4258	34052	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:09.431454897 CET	4258	34054	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:09.431570053 CET	34054	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:09.431606054 CET	34054	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:09.551456928 CET	4258	34054	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:10.632567883 CET	4258	34054	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:10.632595062 CET	4258	34054	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:10.632843971 CET	34054	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:10.633016109 CET	34054	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:10.634103060 CET	34056	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:10.753516912 CET	4258	34054	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:10.754298925 CET	4258	34056	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:10.754456043 CET	34056	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:10.754611969 CET	34056	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:10.874500990 CET	4258	34056	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:11.821388960 CET	4258	34056	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:11.821461916 CET	4258	34056	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:11.821492910 CET	34056	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:11.821633101 CET	34056	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:11.822379112 CET	34058	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:11.941140890 CET	4258	34056	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:11.941884041 CET	4258	34058	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:11.942047119 CET	34058	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:11.942184925 CET	34058	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:12.061733961 CET	4258	34058	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:13.009164095 CET	4258	34058	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:13.009196043 CET	4258	34058	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:13.009368896 CET	34058	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:13.009459972 CET	34058	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:13.010422945 CET	34060	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:13.132592916 CET	4258	34058	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:13.133254051 CET	4258	34060	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:13.133461952 CET	34060	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:13.133589029 CET	34060	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:13.255520105 CET	4258	34060	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:14.204087973 CET	4258	34060	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:14.204144001 CET	4258	34060	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:14.204464912 CET	34060	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:14.204773903 CET	34060	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:14.209839106 CET	34062	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:14.325728893 CET	4258	34060	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:14.331439972 CET	4258	34062	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:14.331729889 CET	34062	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:14.331881046 CET	34062	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:14.451533079 CET	4258	34062	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:15.398260117 CET	4258	34062	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:15.398293018 CET	4258	34062	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:15.398718119 CET	34062	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:15.398773909 CET	34062	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:15.399620056 CET	34064	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:15.518666983 CET	4258	34062	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:15.519332886 CET	4258	34064	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:15.519563913 CET	34064	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:15.519690037 CET	34064	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:15.639132977 CET	4258	34064	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:16.588979959 CET	4258	34064	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:16.589010000 CET	4258	34064	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:16.589333057 CET	34064	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:16.589564085 CET	34064	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:16.591118097 CET	34066	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:16.709083080 CET	4258	34064	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:16.710686922 CET	4258	34066	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:16.711003065 CET	34066	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:16.711103916 CET	34066	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:16.830868006 CET	4258	34066	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:17.806626081 CET	4258	34066	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:17.806708097 CET	4258	34066	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:17.806979895 CET	34066	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:17.807177067 CET	34066	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:17.808970928 CET	34068	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:17.931777954 CET	4258	34066	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:17.934099913 CET	4258	34068	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:17.934360981 CET	34068	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:17.934422970 CET	34068	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:18.058365107 CET	4258	34068	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:19.014533043 CET	4258	34068	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:19.014714003 CET	34068	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:19.026055098 CET	4258	34068	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:19.026161909 CET	34068	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:19.027096987 CET	34070	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:19.146600962 CET	4258	34068	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:19.147217035 CET	4258	34070	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:19.147380114 CET	34070	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:19.147456884 CET	34070	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:19.272836924 CET	4258	34070	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:20.219850063 CET	4258	34070	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:20.219872952 CET	4258	34070	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:20.220155001 CET	34070	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:20.220397949 CET	34070	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:20.221291065 CET	34072	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:20.340234041 CET	4258	34070	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:20.340977907 CET	4258	34072	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:20.341190100 CET	34072	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:20.341248035 CET	34072	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:20.460844994 CET	4258	34072	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:21.409183025 CET	4258	34072	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:21.409221888 CET	4258	34072	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:21.409334898 CET	34072	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:21.409427881 CET	34072	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:21.410229921 CET	34074	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:21.529169083 CET	4258	34072	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:21.529831886 CET	4258	34074	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:21.530014038 CET	34074	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:21.530014038 CET	34074	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:21.649775982 CET	4258	34074	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:22.598927975 CET	4258	34074	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:22.598948002 CET	4258	34074	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:22.599170923 CET	34074	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:22.599529982 CET	34074	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:22.600455046 CET	34076	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:22.719064951 CET	4258	34074	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:22.719959974 CET	4258	34076	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:22.720257998 CET	34076	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:22.720365047 CET	34076	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:22.839883089 CET	4258	34076	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:23.787549973 CET	4258	34076	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:23.787693977 CET	4258	34076	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:23.788050890 CET	34076	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:23.788204908 CET	34076	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:23.789971113 CET	34078	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:23.907779932 CET	4258	34076	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:23.909625053 CET	4258	34078	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:23.909791946 CET	34078	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:23.910034895 CET	34078	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:24.029520988 CET	4258	34078	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:24.976660013 CET	4258	34078	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:24.976761103 CET	4258	34078	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:24.976823092 CET	34078	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:24.976912975 CET	34078	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:24.977644920 CET	34080	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:25.096540928 CET	4258	34078	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:25.097177029 CET	4258	34080	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:25.097245932 CET	34080	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:25.097311020 CET	34080	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:25.217082024 CET	4258	34080	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:26.164458990 CET	4258	34080	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:26.164515018 CET	4258	34080	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:26.164741039 CET	34080	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:26.164904118 CET	34080	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:26.165827990 CET	34082	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:26.284786940 CET	4258	34080	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:26.285563946 CET	4258	34082	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:26.285687923 CET	34082	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:26.285742998 CET	34082	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:26.405354023 CET	4258	34082	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:27.353686094 CET	4258	34082	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:27.353804111 CET	4258	34082	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:27.353929043 CET	34082	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:27.354161978 CET	34082	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:27.354691982 CET	34084	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:27.473802090 CET	4258	34082	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:27.474231958 CET	4258	34084	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:27.474556923 CET	34084	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:27.474556923 CET	34084	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:27.594691038 CET	4258	34084	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:28.542293072 CET	4258	34084	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:28.542500973 CET	4258	34084	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:28.542562962 CET	34084	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:28.542653084 CET	34084	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:28.543562889 CET	34086	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:28.666033983 CET	4258	34084	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:28.736217976 CET	4258	34086	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:28.736479044 CET	34086	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:28.736661911 CET	34086	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:28.861318111 CET	4258	34086	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:29.808491945 CET	4258	34086	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:29.808558941 CET	4258	34086	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:29.808711052 CET	34086	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:29.808990955 CET	34086	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:29.810122013 CET	34088	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:29.928723097 CET	4258	34086	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:29.929613113 CET	4258	34088	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:29.929812908 CET	34088	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:29.929883957 CET	34088	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:30.049360037 CET	4258	34088	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:30.997004032 CET	4258	34088	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:30.997186899 CET	34088	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:30.997199059 CET	4258	34088	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:30.997419119 CET	34088	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:30.998115063 CET	34090	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:31.117326021 CET	4258	34088	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:31.117700100 CET	4258	34090	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:31.117974997 CET	34090	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:31.118129969 CET	34090	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:31.268481970 CET	4258	34090	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:32.241084099 CET	4258	34090	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:32.241178036 CET	4258	34090	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:32.241352081 CET	34090	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:32.241352081 CET	34090	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:32.242600918 CET	34092	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:32.361025095 CET	4258	34090	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:32.362379074 CET	4258	34092	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:32.362548113 CET	34092	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:32.362698078 CET	34092	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:32.482314110 CET	4258	34092	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:33.471914053 CET	4258	34092	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:33.472069025 CET	4258	34092	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:33.472157955 CET	34092	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:33.472255945 CET	34092	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:33.473078966 CET	34094	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:33.632093906 CET	4258	34092	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:33.632108927 CET	4258	34094	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:33.632405043 CET	34094	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:33.632405996 CET	34094	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:33.827189922 CET	4258	34094	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:34.782253981 CET	4258	34094	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:34.782279015 CET	4258	34094	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:34.782426119 CET	34094	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:34.782526016 CET	34094	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:34.783186913 CET	34096	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:34.902237892 CET	4258	34094	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:34.902859926 CET	4258	34096	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:34.903036118 CET	34096	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:34.903135061 CET	34096	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:35.022712946 CET	4258	34096	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:35.975649118 CET	4258	34096	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:35.975706100 CET	4258	34096	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:35.975821018 CET	34096	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:35.975965023 CET	34096	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:35.976696014 CET	34098	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:36.096406937 CET	4258	34096	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:36.097026110 CET	4258	34098	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:36.097170115 CET	34098	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:36.097301960 CET	34098	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:36.217062950 CET	4258	34098	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:37.169116974 CET	4258	34098	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:37.169133902 CET	4258	34098	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:37.169261932 CET	34098	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:37.169352055 CET	34098	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:37.170166969 CET	34100	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:37.289417028 CET	4258	34098	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:37.290705919 CET	4258	34100	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:37.290867090 CET	34100	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:37.291013002 CET	34100	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:37.411129951 CET	4258	34100	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:38.379379034 CET	4258	34100	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:38.379409075 CET	4258	34100	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:38.379570961 CET	34100	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:38.379739046 CET	34100	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:38.380620956 CET	34102	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:38.499840021 CET	4258	34100	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:38.501172066 CET	4258	34102	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:38.501388073 CET	34102	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:38.501499891 CET	34102	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:38.625034094 CET	4258	34102	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:39.574465036 CET	4258	34102	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:39.574485064 CET	4258	34102	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:39.574788094 CET	34102	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:39.575048923 CET	34102	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:39.577003956 CET	34104	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:39.694582939 CET	4258	34102	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:39.696556091 CET	4258	34104	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:39.696933031 CET	34104	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:39.697083950 CET	34104	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:39.816842079 CET	4258	34104	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:40.763701916 CET	4258	34104	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:40.763725042 CET	4258	34104	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:40.763905048 CET	34104	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:40.764159918 CET	34104	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:40.765063047 CET	34106	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:40.884437084 CET	4258	34104	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:40.885117054 CET	4258	34106	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:40.885365009 CET	34106	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:40.885509014 CET	34106	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:41.005072117 CET	4258	34106	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:41.956017017 CET	4258	34106	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:41.956032991 CET	4258	34106	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:41.956341982 CET	34106	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:41.956511021 CET	34106	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:41.957391024 CET	34108	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:42.076057911 CET	4258	34106	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:42.076900959 CET	4258	34108	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:42.077027082 CET	34108	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:42.077136040 CET	34108	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:42.198014975 CET	4258	34108	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:43.165190935 CET	4258	34108	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:43.165411949 CET	4258	34108	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:43.165436983 CET	34108	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:43.165698051 CET	34108	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:43.166464090 CET	34110	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:43.289623976 CET	4258	34108	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:43.290683031 CET	4258	34110	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:43.290954113 CET	34110	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:43.291095018 CET	34110	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:43.418040037 CET	4258	34110	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:44.373774052 CET	4258	34110	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:44.373797894 CET	4258	34110	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:44.374094963 CET	34110	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:44.374257088 CET	34110	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:44.375117064 CET	34112	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:44.493768930 CET	4258	34110	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:44.494754076 CET	4258	34112	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:44.494874954 CET	34112	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:44.495003939 CET	34112	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:44.614537001 CET	4258	34112	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:45.574111938 CET	4258	34112	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:45.574131012 CET	4258	34112	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:45.574291945 CET	34112	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:45.574435949 CET	34112	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:45.575301886 CET	34114	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:45.693927050 CET	4258	34112	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:45.694787025 CET	4258	34114	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:45.694926977 CET	34114	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:45.694987059 CET	34114	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:45.814698935 CET	4258	34114	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:46.762037992 CET	4258	34114	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:46.762063026 CET	4258	34114	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:46.762281895 CET	34114	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:46.762367964 CET	34114	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:46.763021946 CET	34116	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:46.882416010 CET	4258	34114	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:46.882798910 CET	4258	34116	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:46.883052111 CET	34116	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:46.883188009 CET	34116	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:47.002765894 CET	4258	34116	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:47.950537920 CET	4258	34116	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:47.950649977 CET	34116	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:47.950655937 CET	4258	34116	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:47.950738907 CET	34116	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:47.951441050 CET	34118	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:48.070204973 CET	4258	34116	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:48.070873976 CET	4258	34118	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:48.071078062 CET	34118	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:48.071145058 CET	34118	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:48.191117048 CET	4258	34118	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:49.137793064 CET	4258	34118	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:49.137816906 CET	4258	34118	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:49.137967110 CET	34118	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:49.138041973 CET	34118	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:49.138775110 CET	34120	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:49.257671118 CET	4258	34118	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:49.258377075 CET	4258	34120	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:49.258465052 CET	34120	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:49.258730888 CET	34120	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:49.380575895 CET	4258	34120	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:50.327088118 CET	4258	34120	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:50.327153921 CET	4258	34120	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:50.327364922 CET	34120	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:50.327442884 CET	34120	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:50.328097105 CET	34122	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:50.447544098 CET	4258	34120	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:50.448249102 CET	4258	34122	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:50.448363066 CET	34122	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:50.448435068 CET	34122	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:50.570703983 CET	4258	34122	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:51.518682003 CET	4258	34122	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:51.518739939 CET	4258	34122	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:51.518917084 CET	34122	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:51.519012928 CET	34122	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:51.520412922 CET	34124	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:51.638820887 CET	4258	34122	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:51.639966965 CET	4258	34124	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:51.640132904 CET	34124	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:51.640305042 CET	34124	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:51.761360884 CET	4258	34124	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:52.708502054 CET	4258	34124	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:52.708523035 CET	4258	34124	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:52.708774090 CET	34124	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:52.708998919 CET	34124	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:52.709528923 CET	34126	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:52.828600883 CET	4258	34124	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:52.829077005 CET	4258	34126	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:52.829180956 CET	34126	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:52.829225063 CET	34126	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:52.948771954 CET	4258	34126	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:53.897032022 CET	4258	34126	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:53.897172928 CET	34126	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:53.897244930 CET	4258	34126	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:53.897316933 CET	34126	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:53.898097038 CET	34128	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:54.017045975 CET	4258	34126	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:54.017585993 CET	4258	34128	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:54.017642975 CET	34128	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:54.017704010 CET	34128	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:54.137579918 CET	4258	34128	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:55.095942020 CET	4258	34128	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:55.095969915 CET	4258	34128	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:55.096152067 CET	34128	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:55.096182108 CET	34128	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:55.096847057 CET	34130	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:55.215945005 CET	4258	34128	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:55.216389894 CET	4258	34130	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:55.216691971 CET	34130	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:55.216816902 CET	34130	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:55.336443901 CET	4258	34130	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:56.310720921 CET	4258	34130	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:56.310782909 CET	4258	34130	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:56.311031103 CET	34130	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:56.311031103 CET	34130	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:56.311645031 CET	34132	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:56.433165073 CET	4258	34130	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:56.433692932 CET	4258	34132	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:56.433789015 CET	34132	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:56.433829069 CET	34132	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:56.553350925 CET	4258	34132	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:57.500597954 CET	4258	34132	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:57.500623941 CET	4258	34132	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:57.500848055 CET	34132	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:57.500925064 CET	34132	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:57.501589060 CET	34134	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:57.620883942 CET	4258	34132	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:57.621480942 CET	4258	34134	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:57.621716976 CET	34134	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:57.621825933 CET	34134	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:57.741528034 CET	4258	34134	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:58.689372063 CET	4258	34134	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:58.689589024 CET	4258	34134	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:58.689683914 CET	34134	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:58.689897060 CET	34134	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:58.690804958 CET	34136	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:58.809612989 CET	4258	34134	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:58.810288906 CET	4258	34136	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:58.810389996 CET	34136	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:58.810472965 CET	34136	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:58.930103064 CET	4258	34136	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:59.877672911 CET	4258	34136	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:59.877940893 CET	4258	34136	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:59.878016949 CET	34136	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:59.878254890 CET	34136	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:59.879004002 CET	34138	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:59.998016119 CET	4258	34136	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:59.998461962 CET	4258	34138	31.172.83.147	192.168.2.13
Dec 22, 2024 16:08:59.998708963 CET	34138	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:08:59.998845100 CET	34138	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:00.118496895 CET	4258	34138	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:01.065336943 CET	4258	34138	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:01.065490961 CET	4258	34138	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:01.065500021 CET	34138	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:01.065665960 CET	34138	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:01.066453934 CET	34140	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:01.185909986 CET	4258	34138	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:01.186798096 CET	4258	34140	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:01.186908960 CET	34140	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:01.187041998 CET	34140	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:01.306898117 CET	4258	34140	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:02.255595922 CET	4258	34140	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:02.255775928 CET	4258	34140	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:02.255887985 CET	34140	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:02.255983114 CET	34140	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:02.256680012 CET	34142	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:02.375524044 CET	4258	34140	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:02.376236916 CET	4258	34142	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:02.376437902 CET	34142	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:02.376502991 CET	34142	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:02.496305943 CET	4258	34142	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:03.443284988 CET	4258	34142	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:03.443382025 CET	4258	34142	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:03.443572998 CET	34142	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:03.443649054 CET	34142	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:03.444489956 CET	34144	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:03.564904928 CET	4258	34142	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:03.565570116 CET	4258	34144	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:03.565699100 CET	34144	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:03.565884113 CET	34144	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:03.687212944 CET	4258	34144	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:04.634942055 CET	4258	34144	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:04.634959936 CET	4258	34144	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:04.635190010 CET	34144	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:04.635190010 CET	34144	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:04.635854959 CET	34146	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:04.755289078 CET	4258	34144	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:04.755690098 CET	4258	34146	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:04.755932093 CET	34146	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:04.755932093 CET	34146	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:04.875561953 CET	4258	34146	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:05.822180986 CET	4258	34146	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:05.822196960 CET	4258	34146	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:05.822326899 CET	34146	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:05.822360992 CET	34146	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:05.822958946 CET	34148	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:05.942061901 CET	4258	34146	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:05.942501068 CET	4258	34148	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:05.942594051 CET	34148	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:05.942643881 CET	34148	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:06.062252998 CET	4258	34148	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:07.010472059 CET	4258	34148	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:07.010499954 CET	4258	34148	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:07.010536909 CET	34148	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:07.010618925 CET	34148	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:07.011082888 CET	34150	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:07.130202055 CET	4258	34148	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:07.130635023 CET	4258	34150	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:07.130702972 CET	34150	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:07.130767107 CET	34150	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:07.250946045 CET	4258	34150	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:08.198400974 CET	4258	34150	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:08.198431969 CET	4258	34150	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:08.198590040 CET	34150	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:08.198656082 CET	34150	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:08.199054003 CET	34152	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:08.318237066 CET	4258	34150	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:08.318542957 CET	4258	34152	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:08.318641901 CET	34152	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:08.318641901 CET	34152	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:08.438251019 CET	4258	34152	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:09.387402058 CET	4258	34152	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:09.387419939 CET	4258	34152	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:09.387546062 CET	34152	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:09.387667894 CET	34152	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:09.388235092 CET	34154	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:09.507543087 CET	4258	34152	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:09.507968903 CET	4258	34154	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:09.508125067 CET	34154	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:09.508229017 CET	34154	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:09.627669096 CET	4258	34154	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:10.578176022 CET	4258	34154	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:10.578274965 CET	4258	34154	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:10.578325033 CET	34154	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:10.578368902 CET	34154	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:10.578929901 CET	34156	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:10.698160887 CET	4258	34154	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:10.698534966 CET	4258	34156	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:10.698632956 CET	34156	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:10.698659897 CET	34156	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:10.818236113 CET	4258	34156	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:11.814982891 CET	4258	34156	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:11.814995050 CET	4258	34156	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:11.815160036 CET	34156	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:11.815339088 CET	34156	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:11.815922022 CET	34158	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:11.935112953 CET	4258	34156	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:11.935672998 CET	4258	34158	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:11.935791969 CET	34158	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:11.935878038 CET	34158	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:12.055658102 CET	4258	34158	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:13.003375053 CET	4258	34158	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:13.003448009 CET	4258	34158	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:13.003532887 CET	34158	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:13.003592968 CET	34158	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:13.004229069 CET	34160	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:13.123488903 CET	4258	34158	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:13.123855114 CET	4258	34160	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:13.124156952 CET	34160	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:13.124157906 CET	34160	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:13.246164083 CET	4258	34160	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:14.191910028 CET	4258	34160	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:14.192039013 CET	34160	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:14.192068100 CET	4258	34160	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:14.192130089 CET	34160	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:14.192707062 CET	34162	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:14.311646938 CET	4258	34160	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:14.312292099 CET	4258	34162	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:14.312402010 CET	34162	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:14.312450886 CET	34162	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:14.432956934 CET	4258	34162	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:15.380382061 CET	4258	34162	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:15.380399942 CET	4258	34162	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:15.380654097 CET	34162	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:15.380850077 CET	34162	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:15.381300926 CET	34164	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:15.500461102 CET	4258	34162	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:15.500812054 CET	4258	34164	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:15.500974894 CET	34164	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:15.501084089 CET	34164	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:15.620896101 CET	4258	34164	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:16.589298964 CET	4258	34164	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:16.589392900 CET	4258	34164	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:16.589497089 CET	34164	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:16.589637041 CET	34164	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:16.590466976 CET	34166	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:16.714342117 CET	4258	34164	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:16.714749098 CET	4258	34166	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:16.714857101 CET	34166	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:16.714963913 CET	34166	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:16.834625006 CET	4258	34166	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:17.788412094 CET	4258	34166	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:17.788466930 CET	4258	34166	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:17.788625956 CET	34166	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:17.788815975 CET	34166	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:17.789647102 CET	34168	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:17.908314943 CET	4258	34166	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:17.909099102 CET	4258	34168	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:17.909178019 CET	34168	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:17.909320116 CET	34168	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:18.032007933 CET	4258	34168	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:18.978909016 CET	4258	34168	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:18.978926897 CET	4258	34168	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:18.979101896 CET	34168	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:18.979348898 CET	34168	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:18.980170965 CET	34170	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:19.099025965 CET	4258	34168	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:19.099874020 CET	4258	34170	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:19.100131035 CET	34170	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:19.100266933 CET	34170	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:19.219892979 CET	4258	34170	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:20.166754961 CET	4258	34170	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:20.167002916 CET	34170	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:20.167073965 CET	4258	34170	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:20.167162895 CET	34170	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:20.167951107 CET	34172	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:20.286660910 CET	4258	34170	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:20.287441015 CET	4258	34172	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:20.287587881 CET	34172	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:20.287709951 CET	34172	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:20.407430887 CET	4258	34172	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:21.354516029 CET	4258	34172	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:21.354537010 CET	4258	34172	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:21.354863882 CET	34172	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:21.355103016 CET	34172	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:21.355907917 CET	34174	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:21.474955082 CET	4258	34172	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:21.475404978 CET	4258	34174	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:21.475706100 CET	34174	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:21.475742102 CET	34174	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:21.596750975 CET	4258	34174	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:22.543973923 CET	4258	34174	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:22.544080019 CET	4258	34174	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:22.544313908 CET	34174	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:22.544482946 CET	34174	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:22.545258045 CET	34176	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:22.664540052 CET	4258	34174	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:22.665499926 CET	4258	34176	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:22.665729046 CET	34176	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:22.665852070 CET	34176	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:22.785285950 CET	4258	34176	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:23.732779026 CET	4258	34176	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:23.732861042 CET	4258	34176	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:23.733063936 CET	34176	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:23.733144999 CET	34176	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:23.733969927 CET	34178	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:23.852967024 CET	4258	34176	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:23.853430033 CET	4258	34178	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:23.853568077 CET	34178	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:23.853662014 CET	34178	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:23.973515034 CET	4258	34178	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:24.919094086 CET	4258	34178	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:24.919169903 CET	4258	34178	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:24.919437885 CET	34178	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:24.919620991 CET	34178	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:24.920619965 CET	34180	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:25.040071964 CET	4258	34178	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:25.041109085 CET	4258	34180	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:25.041229963 CET	34180	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:25.041348934 CET	34180	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:25.161396027 CET	4258	34180	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:26.109081030 CET	4258	34180	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:26.109405041 CET	34180	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:26.109514952 CET	4258	34180	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:26.109615088 CET	34180	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:26.110440969 CET	34182	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:26.230779886 CET	4258	34180	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:26.231283903 CET	4258	34182	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:26.231477976 CET	34182	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:26.231518030 CET	34182	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:26.352354050 CET	4258	34182	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:27.298666954 CET	4258	34182	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:27.298698902 CET	4258	34182	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:27.298854113 CET	34182	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:27.298918009 CET	34182	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:27.299556971 CET	34184	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:27.418543100 CET	4258	34182	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:27.421413898 CET	4258	34184	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:27.421531916 CET	34184	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:27.421643972 CET	34184	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:27.541259050 CET	4258	34184	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:28.516048908 CET	4258	34184	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:28.516273975 CET	4258	34184	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:28.516289949 CET	34184	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:28.516464949 CET	34184	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:28.517518997 CET	34186	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:28.636040926 CET	4258	34184	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:28.637232065 CET	4258	34186	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:28.637387991 CET	34186	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:28.637459993 CET	34186	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:28.757936001 CET	4258	34186	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:29.704883099 CET	4258	34186	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:29.704961061 CET	4258	34186	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:29.705240011 CET	34186	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:29.705351114 CET	34186	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:29.706013918 CET	34188	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:29.825378895 CET	4258	34186	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:29.825973034 CET	4258	34188	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:29.826107979 CET	34188	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:29.826169014 CET	34188	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:29.945732117 CET	4258	34188	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:30.893951893 CET	4258	34188	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:30.894085884 CET	4258	34188	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:30.894089937 CET	34188	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:30.894176006 CET	34188	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:30.894813061 CET	34190	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:31.013844013 CET	4258	34188	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:31.014481068 CET	4258	34190	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:31.014712095 CET	34190	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:31.014771938 CET	34190	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:31.134421110 CET	4258	34190	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:32.084146976 CET	4258	34190	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:32.084264994 CET	4258	34190	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:32.084444046 CET	34190	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:32.084626913 CET	34190	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:32.085390091 CET	34192	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:32.204449892 CET	4258	34190	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:32.204862118 CET	4258	34192	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:32.204963923 CET	34192	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:32.205090046 CET	34192	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:32.324709892 CET	4258	34192	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:33.274112940 CET	4258	34192	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:33.274271965 CET	34192	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:33.274286032 CET	4258	34192	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:33.274471045 CET	34192	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:33.275377035 CET	34194	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:33.394233942 CET	4258	34192	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:33.395029068 CET	4258	34194	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:33.395430088 CET	34194	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:33.395572901 CET	34194	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:33.515028000 CET	4258	34194	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:34.467618942 CET	4258	34194	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:34.467782974 CET	4258	34194	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:34.467792988 CET	34194	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:34.467981100 CET	34194	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:34.468797922 CET	34196	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:34.587984085 CET	4258	34194	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:34.589015007 CET	4258	34196	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:34.589154959 CET	34196	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:34.589246988 CET	34196	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:34.708714962 CET	4258	34196	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:35.656260967 CET	4258	34196	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:35.656368017 CET	4258	34196	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:35.656435966 CET	34196	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:35.656590939 CET	34196	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:35.657542944 CET	34198	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:35.777196884 CET	4258	34196	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:35.778269053 CET	4258	34198	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:35.778429031 CET	34198	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:35.778593063 CET	34198	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:35.898452044 CET	4258	34198	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:36.897696972 CET	4258	34198	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:36.897968054 CET	4258	34198	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:36.897996902 CET	34198	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:36.898195028 CET	34198	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:36.899043083 CET	34200	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:37.018384933 CET	4258	34198	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:37.019296885 CET	4258	34200	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:37.019404888 CET	34200	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:37.019545078 CET	34200	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:37.139166117 CET	4258	34200	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:38.086738110 CET	4258	34200	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:38.086754084 CET	4258	34200	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:38.086909056 CET	34200	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:38.087059021 CET	34200	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:38.087882042 CET	34202	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:38.206857920 CET	4258	34200	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:38.207411051 CET	4258	34202	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:38.207516909 CET	34202	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:38.207636118 CET	34202	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:38.327462912 CET	4258	34202	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:39.275954962 CET	4258	34202	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:39.276132107 CET	34202	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:39.276604891 CET	4258	34202	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:39.276684999 CET	34202	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:39.277368069 CET	34204	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:39.396212101 CET	4258	34202	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:39.396918058 CET	4258	34204	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:39.397104979 CET	34204	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:39.397226095 CET	34204	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:39.516653061 CET	4258	34204	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:40.465334892 CET	4258	34204	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:40.465348959 CET	4258	34204	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:40.465457916 CET	34204	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:40.465540886 CET	34204	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:40.466435909 CET	34206	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:40.585135937 CET	4258	34204	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:40.586035967 CET	4258	34206	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:40.586128950 CET	34206	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:40.586206913 CET	34206	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:40.705780983 CET	4258	34206	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:41.653600931 CET	4258	34206	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:41.653686047 CET	4258	34206	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:41.653788090 CET	34206	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:41.653990984 CET	34206	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:41.654822111 CET	34208	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:41.773612022 CET	4258	34206	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:41.774336100 CET	4258	34208	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:41.774507999 CET	34208	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:41.774523020 CET	34208	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:41.894036055 CET	4258	34208	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:42.859237909 CET	4258	34208	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:42.859369040 CET	4258	34208	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:42.859502077 CET	34208	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:42.859613895 CET	34208	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:42.860418081 CET	34210	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:42.980325937 CET	4258	34208	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:42.981429100 CET	4258	34210	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:42.981570005 CET	34210	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:42.981631994 CET	34210	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:43.102684021 CET	4258	34210	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:44.049715996 CET	4258	34210	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:44.049854040 CET	4258	34210	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:44.050023079 CET	34210	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:44.050112963 CET	34210	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:44.051233053 CET	34212	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:44.169604063 CET	4258	34210	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:44.170970917 CET	4258	34212	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:44.171142101 CET	34212	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:44.171279907 CET	34212	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:44.291069984 CET	4258	34212	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:45.283904076 CET	4258	34212	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:45.283922911 CET	4258	34212	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:45.284137964 CET	34212	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:45.284245968 CET	34212	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:45.284986019 CET	34214	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:45.405590057 CET	4258	34212	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:45.405909061 CET	4258	34214	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:45.406088114 CET	34214	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:45.406179905 CET	34214	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:45.525938988 CET	4258	34214	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:46.476207972 CET	4258	34214	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:46.476227045 CET	4258	34214	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:46.476638079 CET	34214	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:46.476674080 CET	34214	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:46.477821112 CET	34216	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:46.596326113 CET	4258	34214	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:46.597460032 CET	4258	34216	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:46.597579956 CET	34216	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:46.597656012 CET	34216	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:46.717840910 CET	4258	34216	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:47.664835930 CET	4258	34216	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:47.664975882 CET	4258	34216	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:47.665081024 CET	34216	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:47.665241003 CET	34216	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:47.666322947 CET	34218	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:47.787132025 CET	4258	34216	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:47.788111925 CET	4258	34218	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:47.788378954 CET	34218	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:47.788378954 CET	34218	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:47.909106016 CET	4258	34218	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:48.866719961 CET	4258	34218	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:48.866731882 CET	4258	34218	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:48.867007971 CET	34218	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:48.867098093 CET	34218	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:48.867748976 CET	34220	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:48.986896992 CET	4258	34218	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:48.987550974 CET	4258	34220	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:48.987823009 CET	34220	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:48.987924099 CET	34220	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:49.108463049 CET	4258	34220	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:50.056838989 CET	4258	34220	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:50.057037115 CET	34220	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:50.057162046 CET	4258	34220	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:50.057297945 CET	34220	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:50.058233976 CET	34222	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:50.177877903 CET	4258	34220	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:50.179058075 CET	4258	34222	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:50.179289103 CET	34222	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:50.180313110 CET	34222	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:50.299755096 CET	4258	34222	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:51.255350113 CET	4258	34222	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:51.255631924 CET	34222	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:51.255695105 CET	4258	34222	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:51.255842924 CET	34222	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:51.256851912 CET	34224	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:51.378319979 CET	4258	34222	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:51.379625082 CET	4258	34224	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:51.379762888 CET	34224	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:51.379831076 CET	34224	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:51.501038074 CET	4258	34224	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:52.449887037 CET	4258	34224	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:52.450028896 CET	4258	34224	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:52.450069904 CET	34224	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:52.450237036 CET	34224	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:52.451167107 CET	34226	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:52.573127031 CET	4258	34224	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:52.573152065 CET	4258	34226	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:52.573251009 CET	34226	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:52.573353052 CET	34226	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:52.694410086 CET	4258	34226	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:53.644114971 CET	4258	34226	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:53.644283056 CET	34226	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:53.644628048 CET	4258	34226	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:53.644737959 CET	34226	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:53.645828009 CET	34228	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:53.764328003 CET	4258	34226	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:53.765424013 CET	4258	34228	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:53.765506029 CET	34228	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:53.765635967 CET	34228	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:53.885262966 CET	4258	34228	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:54.838529110 CET	4258	34228	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:54.838591099 CET	4258	34228	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:54.838701010 CET	34228	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:54.838850975 CET	34228	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:54.839561939 CET	34230	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:54.958425999 CET	4258	34228	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:54.959346056 CET	4258	34230	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:54.959474087 CET	34230	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:54.959527969 CET	34230	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:55.079137087 CET	4258	34230	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:56.033747911 CET	4258	34230	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:56.033945084 CET	34230	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:56.033979893 CET	4258	34230	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:56.034113884 CET	34230	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:56.035067081 CET	34232	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:56.153729916 CET	4258	34230	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:56.154810905 CET	4258	34232	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:56.154947042 CET	34232	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:56.155047894 CET	34232	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:56.276096106 CET	4258	34232	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:57.232075930 CET	4258	34232	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:57.232212067 CET	4258	34232	31.172.83.147	192.168.2.13
Dec 22, 2024 16:09:57.232239008 CET	34232	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:57.232330084 CET	34232	4258	192.168.2.13	31.172.83.147
Dec 22, 2024 16:09:57.233095884 CET	34234	4258	192.168.2.13	31.172.83.147

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 22, 2024 16:09:06.628537893 CET	46236	53	192.168.2.13	1.1.1.1
Dec 22, 2024 16:09:06.628602028 CET	58819	53	192.168.2.13	1.1.1.1
Dec 22, 2024 16:09:06.767262936 CET	53	58819	1.1.1.1	192.168.2.13
Dec 22, 2024 16:09:06.853899956 CET	53	46236	1.1.1.1	192.168.2.13

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 22, 2024 16:09:06.628537893 CET	192.168.2.13	1.1.1.1	0x5840	Standard query (0)	daisy.ubuntu.com	A (IP address)	IN (0x0001)	false
Dec 22, 2024 16:09:06.628602028 CET	192.168.2.13	1.1.1.1	0x95bf	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 22, 2024 16:09:06.853899956 CET	1.1.1.1	192.168.2.13	0x5840	No error (0)	daisy.ubuntu.com		162.213.35.24	A (IP address)	IN (0x0001)	false
Dec 22, 2024 16:09:06.853899956 CET	1.1.1.1	192.168.2.13	0x5840	No error (0)	daisy.ubuntu.com		162.213.35.25	A (IP address)	IN (0x0001)	false

System Behavior

Analysis Process: hidakibest.arm5.elf PID: 5452, Parent PID: 5376

General

Start time (UTC):	15:06:20
Start date (UTC):	22/12/2024
Path:	/tmp/hidakibest.arm5.elf
Arguments:	/tmp/hidakibest.arm5.elf
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: hidakibest.arm5.elf PID: 5454, Parent PID: 5452

General

Start time (UTC):	15:06:21
Start date (UTC):	22/12/2024
Path:	/tmp/hidakibest.arm5.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: hidakibest.arm5.elf PID: 5456, Parent PID: 5454

General

Start time (UTC):	15:06:21
Start date (UTC):	22/12/2024
Path:	/tmp/hidakibest.arm5.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system. Functionality could exist within remote access tools to enable this, but utilities available on the operating system could also be used such as Ping or `net view` using Net .
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Network Traffic: Network Connection Creation, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may obfuscate command and control traffic to make it more difficult to detect. Command and control (C2) communications are hidden (but not necessarily encrypted) in an attempt to make the content more difficult to discover or decipher and to make the communication less conspicuous and hide commands from being seen. This encompasses many methods, such as adding junk data to protocol traffic, using steganography, or impersonating legitimate protocols.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report hidakibest.arm5.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Threatname: Gafgyt

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

System Behavior

Analysis Process: hidakibest.arm5.elf PID: 5452, Parent PID: 5376

General

Chronological Activities

Analysis Process: hidakibest.arm5.elf PID: 5454, Parent PID: 5452

General

Chronological Activities

Analysis Process: hidakibest.arm5.elf PID: 5456, Parent PID: 5454

General

Chronological Activities

Linux Analysis Report
hidakibest.arm5.elf