Edit tour

Linux Analysis Report
hidakibest.sparc.elf

Overview

General Information

Sample name:	hidakibest.sparc.elf
Analysis ID:	1579498
MD5:	5bd17494f52ee1ab1016673df7371793
SHA1:	a3a88b518197d886739fdf48b0c7ef0813d66985
SHA256:	3925d4d4ae279327e17160b8c9d1a181b2d72f52d04a7c1f2689eb6a191fcdd8
Tags:	elfuser-abuse_ch
Infos:

Detection

Gafgyt, Mirai

Score:	92
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Yara detected Gafgyt

Yara detected Mirai

Opens /proc/net/* files useful for finding connected devices and routers

Detected TCP or UDP traffic on non-standard ports

Sample contains strings that are user agent strings indicative of HTTP manipulation

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1579498
Start date and time:	2024-12-22 16:09:58 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 16s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	hidakibest.sparc.elf
Detection:	MAL
Classification:	mal92.spre.troj.linELF@0/1@2/0

Warnings

VT rate limit hit for: 31.172.83.147:4258

Runtime Messages

Command:	/tmp/hidakibest.sparc.elf
PID:	5583
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:

Process Tree

system is lnxubuntu20

hidakibest.sparc.elf (PID: 5583, Parent: 5501, MD5: 7dc1c0e23cd5e102bb12e5c29403410e) Arguments: /tmp/hidakibest.sparc.elf

hidakibest.sparc.elf New Fork (PID: 5585, Parent: 5583)

hidakibest.sparc.elf New Fork (PID: 5587, Parent: 5585)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
hidakibest.sparc.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
hidakibest.sparc.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
hidakibest.sparc.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x10558:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1056c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10580:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10594:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x105a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x105bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x105d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x105e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x105f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1060c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10620:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10634:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10648:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1065c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10670:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10684:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10698:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x106ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x106c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x106d4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x106e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
hidakibest.sparc.elf	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x10504:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64

Memory Dumps

Source	Rule	Description	Author	Strings
5585.1.00007f6114011000.00007f6114024000.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
5585.1.00007f6114011000.00007f6114024000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5585.1.00007f6114011000.00007f6114024000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x10558:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1056c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10580:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10594:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x105a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x105bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x105d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x105e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x105f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1060c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10620:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10634:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10648:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1065c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10670:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10684:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10698:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x106ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x106c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x106d4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x106e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5585.1.00007f6114011000.00007f6114024000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x10504:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
5583.1.00007f6114011000.00007f6114024000.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
5583.1.00007f6114011000.00007f6114024000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5583.1.00007f6114011000.00007f6114024000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x10558:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1056c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10580:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10594:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x105a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x105bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x105d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x105e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x105f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1060c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10620:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10634:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10648:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1065c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10670:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10684:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10698:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x106ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x106c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x106d4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x106e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5583.1.00007f6114011000.00007f6114024000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x10504:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: hidakibest.sparc.elf PID: 5583	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: hidakibest.sparc.elf PID: 5583	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x923a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x924e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x9262:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x9276:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x928a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x929e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x92b2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x92c6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x92da:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x92ee:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x9302:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x9316:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x932a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x933e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x9352:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x9366:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x937a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x938e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x93a2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x93b6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x93ca:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: hidakibest.sparc.elf PID: 5583	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x91ed:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64 0x965f:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: hidakibest.sparc.elf PID: 5585	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: hidakibest.sparc.elf PID: 5585	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x5af4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5b08:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5b1c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5b30:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5b44:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5b58:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5b6c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5b80:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5b94:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5ba8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5bbc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5bd0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5be4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5bf8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5c0c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5c20:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5c34:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5c48:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5c5c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5c70:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5c84:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: hidakibest.sparc.elf PID: 5585	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x5aa7:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64 0x5f19:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Click to see the 9 entries

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: hidakibest.sparc.elf

Avira: detected

Found malware configuration

Source: hidakibest.sparc.elf

Malware Configuration Extractor: Gafgyt {"C2 url": "31.172.83.147:4258"}

Multi AV Scanner detection for submitted file

Source: hidakibest.sparc.elf	ReversingLabs: Detection: 65%
Source: hidakibest.sparc.elf	Virustotal: Detection: 54%			Perma Link

Spreading

Opens /proc/net/* files useful for finding connected devices and routers

Source: /tmp/hidakibest.sparc.elf (PID: 5583)

Opens: /proc/net/route

Jump to behavior

Source: global traffic

TCP traffic: 192.168.2.14:56890 -> 31.172.83.147:4258

Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147
Source: unknown	TCP traffic detected without corresponding DNS query: 31.172.83.147

Source: global traffic

DNS traffic detected: DNS query: daisy.ubuntu.com

Source: hidakibest.sparc.elf	String found in binary or memory: http://fast.no/support/crawler.asp)
Source: hidakibest.sparc.elf	String found in binary or memory: http://feedback.redkolibri.com/
Source: hidakibest.sparc.elf	String found in binary or memory: http://www.baidu.com/search/spider.htm)
Source: hidakibest.sparc.elf	String found in binary or memory: http://www.baidu.com/search/spider.html)
Source: hidakibest.sparc.elf	String found in binary or memory: http://www.billybobbot.com/crawler/)

System Summary

Malicious sample detected (through community Yara rule)

Source: hidakibest.sparc.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: hidakibest.sparc.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5585.1.00007f6114011000.00007f6114024000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5585.1.00007f6114011000.00007f6114024000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5583.1.00007f6114011000.00007f6114024000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5583.1.00007f6114011000.00007f6114024000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: hidakibest.sparc.elf PID: 5583, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: hidakibest.sparc.elf PID: 5583, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: hidakibest.sparc.elf PID: 5585, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: hidakibest.sparc.elf PID: 5585, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown

Source: hidakibest.sparc.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: hidakibest.sparc.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5585.1.00007f6114011000.00007f6114024000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5585.1.00007f6114011000.00007f6114024000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5583.1.00007f6114011000.00007f6114024000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5583.1.00007f6114011000.00007f6114024000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: hidakibest.sparc.elf PID: 5583, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: hidakibest.sparc.elf PID: 5583, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: hidakibest.sparc.elf PID: 5585, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: hidakibest.sparc.elf PID: 5585, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16

Source: classification engine

Classification label: mal92.spre.troj.linELF@0/1@2/0

Source: hidakibest.sparc.elf	ELF static info symbol of initial sample: libc/string/sparc/memchr.S
Source: hidakibest.sparc.elf	ELF static info symbol of initial sample: libc/string/sparc/memcpy.S
Source: hidakibest.sparc.elf	ELF static info symbol of initial sample: libc/string/sparc/memset.S
Source: hidakibest.sparc.elf	ELF static info symbol of initial sample: libc/string/sparc/strchr.S
Source: hidakibest.sparc.elf	ELF static info symbol of initial sample: libc/string/sparc/strcmp.S
Source: hidakibest.sparc.elf	ELF static info symbol of initial sample: libc/string/sparc/strcpy.S
Source: hidakibest.sparc.elf	ELF static info symbol of initial sample: libc/string/sparc/strlen.S
Source: hidakibest.sparc.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/sparc/crt1.S
Source: hidakibest.sparc.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/sparc/crti.S
Source: hidakibest.sparc.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/sparc/crtn.S
Source: hidakibest.sparc.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/sparc/fork.S
Source: hidakibest.sparc.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/sparc/udiv.S
Source: hidakibest.sparc.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/sparc/umul.S
Source: hidakibest.sparc.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/sparc/urem.S

Source: /tmp/hidakibest.sparc.elf (PID: 5583)

Queries kernel information via 'uname':

Jump to behavior

Source: hidakibest.sparc.elf, 5583.1.0000559ef08ed000.0000559ef0952000.rw-.sdmp, hidakibest.sparc.elf, 5585.1.0000559ef08ed000.0000559ef0952000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/sparc
Source: hidakibest.sparc.elf, 5583.1.0000559ef08ed000.0000559ef0952000.rw-.sdmp, hidakibest.sparc.elf, 5585.1.0000559ef08ed000.0000559ef0952000.rw-.sdmp	Binary or memory string: U!/etc/qemu-binfmt/sparc
Source: hidakibest.sparc.elf, 5583.1.00007ffc4b25a000.00007ffc4b27b000.rw-.sdmp	Binary or memory string: U/tmp/qemu-open.qh37Kn\t
Source: hidakibest.sparc.elf, 5583.1.00007ffc4b25a000.00007ffc4b27b000.rw-.sdmp, hidakibest.sparc.elf, 5585.1.00007ffc4b25a000.00007ffc4b27b000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-sparc
Source: hidakibest.sparc.elf, 5583.1.00007ffc4b25a000.00007ffc4b27b000.rw-.sdmp, hidakibest.sparc.elf, 5585.1.00007ffc4b25a000.00007ffc4b27b000.rw-.sdmp	Binary or memory string: A!x86_64/usr/bin/qemu-sparc/tmp/hidakibest.sparc.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/hidakibest.sparc.elf
Source: hidakibest.sparc.elf, 5583.1.00007ffc4b25a000.00007ffc4b27b000.rw-.sdmp	Binary or memory string: /tmp/qemu-open.qh37Kn

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match	File source: hidakibest.sparc.elf, type: SAMPLE
Source: Yara match	File source: 5585.1.00007f6114011000.00007f6114024000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5583.1.00007f6114011000.00007f6114024000.r-x.sdmp, type: MEMORY

Yara detected Mirai

Source: Yara match	File source: hidakibest.sparc.elf, type: SAMPLE
Source: Yara match	File source: 5585.1.00007f6114011000.00007f6114024000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5583.1.00007f6114011000.00007f6114024000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: hidakibest.sparc.elf PID: 5583, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: hidakibest.sparc.elf PID: 5585, type: MEMORYSTR

Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36
Source: Initial sample	User agent string found: Opera/9.80 (X11; Linux i686; Ubuntu/14.10) Presto/2.12.388 Version/12.16
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows; U; Windows NT 6.1; rv:2.2) Gecko/20110201
Source: Initial sample	User agent string found: Opera/9.80 (Windows NT 5.2; U; ru) Presto/2.5.22 Version/10.51
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; AS; rv:11.0) like Gecko
Source: Initial sample	User agent string found: Mozilla/5.0 (Android; Linux armv7l; rv:9.0) Gecko/20111216 Firefox/9.0 Fennec/9.0
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/536.5 (KHTML, like Gecko) Chrome/19.0.1084.56 Safari/536.5
Source: Initial sample	User agent string found: Opera/9.80 (Windows NT 5.1; U; en) Presto/2.10.229 Version/11.60
Source: Initial sample	User agent string found: Mozilla/5.0 (iPad; U; CPU OS 5_1 like Mac OS X) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B367 Safari/531.21.10 UCBrowser/3.4.3.532
Source: Initial sample	User agent string found: Mozilla/5.0 (Nintendo WiiU) AppleWebKit/536.30 (KHTML, like Gecko) NX/3.0.4.2.12 NintendoBrowser/4.3.1.11264.US
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:25.0) Gecko/20100101 Firefox/25.0
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; pl) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; en) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; ja) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; cn) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; fr) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:12.0) Gecko/20100101 Firefox/12.0
Source: Initial sample	User agent string found: Mozilla/5.0 (X11; U; Linux x86_64; de; rv:1.9.2.8) Gecko/20100723 Ubuntu/10.04 (lucid) Firefox/3.6.8
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1; rv:13.0) Gecko/20100101 Firefox/13.0.1
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:11.0) Gecko/20100101 Firefox/11.0
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1
Source: Initial sample	User agent string found: Opera/9.80 (Windows NT 5.1; U; en) Presto/2.10.289 Version/12.01
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1; rv:5.0.1) Gecko/20100101 Firefox/5.0.1
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; rv:5.0) Gecko/20100101 Firefox/5.02
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.0) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.112 Safari/535.1
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36

Remote Access Functionality

Yara detected Gafgyt

Source: Yara match	File source: hidakibest.sparc.elf, type: SAMPLE
Source: Yara match	File source: 5585.1.00007f6114011000.00007f6114024000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5583.1.00007f6114011000.00007f6114024000.r-x.sdmp, type: MEMORY

Yara detected Mirai

Source: Yara match	File source: hidakibest.sparc.elf, type: SAMPLE
Source: Yara match	File source: 5585.1.00007f6114011000.00007f6114024000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5583.1.00007f6114011000.00007f6114024000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: hidakibest.sparc.elf PID: 5583, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: hidakibest.sparc.elf PID: 5585, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Data Obfuscation	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	1 Remote System Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Application Layer Protocol	Traffic Duplication	Data Destruction

Malware Configuration

Threatname: Gafgyt

{"C2 url": "31.172.83.147:4258"}

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
hidakibest.sparc.elf	66%	ReversingLabs	Linux.Trojan.LnxGafgyt
hidakibest.sparc.elf	54%	Virustotal		Browse
hidakibest.sparc.elf	100%	Avira	EXP/ELF.Mirai.Z.A

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
daisy.ubuntu.com	162.213.35.25	true	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
31.172.83.147:4258	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://www.baidu.com/search/spider.html)	hidakibest.sparc.elf	false	high
http://www.billybobbot.com/crawler/)	hidakibest.sparc.elf	false	high
http://fast.no/support/crawler.asp)	hidakibest.sparc.elf	false	high
http://feedback.redkolibri.com/	hidakibest.sparc.elf	false	high
http://www.baidu.com/search/spider.htm)	hidakibest.sparc.elf	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
31.172.83.147	unknown	Germany		44066	DE-FIRSTCOLOwwwfirst-colonetDE	true

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
31.172.83.147	hidakibest.arm7.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	hidakibest.ppc.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	hidakibest.arm5.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	hidakibest.mips.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	hidakibest.arm6.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	hidakibest.arm4.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	boatnet.m68k.elf	Get hash	malicious	Mirai	Browse
	boatnet.ppc.elf	Get hash	malicious	Mirai	Browse
	boatnet.arm.elf	Get hash	malicious	Mirai	Browse
	boatnet.sh4.elf	Get hash	malicious	Mirai	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
daisy.ubuntu.com	hidakibest.ppc.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	hidakibest.arm5.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.24
	hidakibest.mips.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.24
	hidakibest.arm4.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	hidakibest.x86.elf	Get hash	malicious	Mirai, Gafgyt	Browse	162.213.35.25
	hidakibest.arm5.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.24
	hidakibest.mpsl.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.24
	hidakibest.arm7.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.24
	hidakibest.sparc.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	Space.arm6.elf	Get hash	malicious	Mirai	Browse	162.213.35.25

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
DE-FIRSTCOLOwwwfirst-colonetDE	hidakibest.arm7.elf	Get hash	malicious	Gafgyt, Mirai	Browse	31.172.83.147
	hidakibest.ppc.elf	Get hash	malicious	Gafgyt, Mirai	Browse	31.172.83.147
	hidakibest.arm5.elf	Get hash	malicious	Gafgyt, Mirai	Browse	31.172.83.147
	hidakibest.mips.elf	Get hash	malicious	Gafgyt, Mirai	Browse	31.172.83.147
	hidakibest.arm6.elf	Get hash	malicious	Gafgyt, Mirai	Browse	31.172.83.147
	hidakibest.arm4.elf	Get hash	malicious	Gafgyt, Mirai	Browse	31.172.83.147
	https://www.tblgroup.com/tbl2/certificados-digitales/	Get hash	malicious	CAPTCHA Scam ClickFix	Browse	185.26.98.68
	boatnet.m68k.elf	Get hash	malicious	Mirai	Browse	31.172.83.147
	boatnet.ppc.elf	Get hash	malicious	Mirai	Browse	31.172.83.147
	boatnet.arm.elf	Get hash	malicious	Mirai	Browse	31.172.83.147

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

/tmp/qemu-open.qh37Kn (deleted)

Download File

Process:	/tmp/hidakibest.sparc.elf
File Type:	ASCII text
Category:	dropped
Size (bytes):	230
Entropy (8bit):	3.709552666863289
Encrypted:	false
SSDEEP:	6:iekrEcvwAsE5KlwSd4pzKaV6Lpms/a/1VCxGF:ur+m5MwSdIKaV6L1adVRF
MD5:	2E667F43AE18CD1FE3C108641708A82C
SHA1:	12B90DE2DA0FBCFE66F3D6130905E56C8D6A68D3
SHA-256:	6F721492E7A337C5B498A8F55F5EB7AC745AFF716D0B5B08EFF2C1B6B250F983
SHA-512:	D2A0EE2509154EC1098994F38BE172F98F4150399C534A04D5C675D7C05630802225019F19344CC9070C576BC465A4FEB382AC7712DE6BF25E9244B54A9DB830
Malicious:	false
Reputation:	high, very likely benign file
Preview:	Iface.Destination.Gateway .Flags.RefCnt.Use.Metric.Mask..MTU.Window.IRTT .ens160.00000000.c0a80201.0003.0.0.0.00000000.0.0.0.ens160.c0a80200.00000000.0001.0.0.0.ffffff00.0.0.0.

Static File Info

General

File type:	ELF 32-bit MSB executable, SPARC, version 1 (SYSV), statically linked, with debug_info, not stripped
Entropy (8bit):	6.056126047873375
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	hidakibest.sparc.elf
File size:	100'918 bytes
MD5:	5bd17494f52ee1ab1016673df7371793
SHA1:	a3a88b518197d886739fdf48b0c7ef0813d66985
SHA256:	3925d4d4ae279327e17160b8c9d1a181b2d72f52d04a7c1f2689eb6a191fcdd8
SHA512:	c655f7e2f63a64d6ebb33797754aad69a9ee10f35fa44be58efdb5156f4fb9792a94d2fecf1e601305c05a306207f806f620690431dc4eb1b74481033fd75beb
SSDEEP:	1536:UqWHGtajNM5FtNxt6Wphaw1rKzOmF6OXj6ufeuTe:ZEjN8xx/phaw1rKzOmF6OXGufhTe
TLSH:	F9A33A37BB220E23C0CA947111E71731BBB5D3DA29FA5243BAD16DAC6F165803962FD4
File Content Preview:	.ELF...........................4..=......4. ...(......................(...(...............(...(...(.......g.........dt.Q................................@..(....@.8.................#.....a...`.....!.....!...@.....".........`......$!...!...@...........`....

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, big endian
Version:	1 (current)
Machine:	Sparc
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x101a4
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	81152
Section Header Size:	40
Number of Section Headers:	24
Header String Table Index:	21

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x10094	0x94	0x1c	0x0	0x6	AX	0	0	4
.text	PROGBITS	0x100b0	0xb0	0xe398	0x0	0x6	AX	0	0	4
.fini	PROGBITS	0x1e448	0xe448	0x14	0x0	0x6	AX	0	0	4
.rodata	PROGBITS	0x1e460	0xe460	0x4490	0x0	0x2	A	0	0	8
.eh_frame	PROGBITS	0x228f0	0x128f0	0x4	0x0	0x2	A	0	0	4
.ctors	PROGBITS	0x328f4	0x128f4	0x8	0x0	0x3	WA	0	0	4
.dtors	PROGBITS	0x328fc	0x128fc	0x8	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x32904	0x12904	0x4	0x0	0x3	WA	0	0	4
.data	PROGBITS	0x32908	0x12908	0x474	0x0	0x3	WA	0	0	8
.bss	NOBITS	0x32d80	0x12d7c	0x6368	0x0	0x3	WA	0	0	8
.comment	PROGBITS	0x0	0x12d7c	0x9c6	0x0	0x0		0	0	1
.debug_aranges	PROGBITS	0x0	0x13742	0x20	0x0	0x0		0	0	1
.debug_pubnames	PROGBITS	0x0	0x13762	0x1f	0x0	0x0		0	0	1
.debug_info	PROGBITS	0x0	0x13781	0x16e	0x0	0x0		0	0	1
.debug_abbrev	PROGBITS	0x0	0x138ef	0xfb	0x0	0x0		0	0	1
.debug_line	PROGBITS	0x0	0x139ea	0x7c	0x0	0x0		0	0	1
.debug_frame	PROGBITS	0x0	0x13a68	0x28	0x0	0x0		0	0	4
.debug_str	PROGBITS	0x0	0x13a90	0x10b	0x1	0x30	MS	0	0	1
.debug_loc	PROGBITS	0x0	0x13b9b	0x6e	0x0	0x0		0	0	1
.debug_ranges	PROGBITS	0x0	0x13c09	0x18	0x0	0x0		0	0	1
.shstrtab	STRTAB	0x0	0x13c21	0xdc	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x140c0	0x2990	0x10	0x0		23	254	4
.strtab	STRTAB	0x0	0x16a50	0x1fe6	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x10000	0x10000	0x128f4	0x128f4	6.1232	0x5	R E	0x10000	.init .text .fini .rodata .eh_frame
LOAD	0x128f4	0x328f4	0x328f4	0x488	0x67f4	3.3140	0x6	RW	0x10000	.ctors .dtors .jcr .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x10094	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x100b0	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x1e448	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x1e460	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x228f0	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x328f4	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x328fc	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x32904	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x32908	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x32d80	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	14
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	15
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	16
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	17
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	18
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	19
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	20
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	21
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	22
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	23
.udiv	.symtab	0x14a50	20	FUNC	<unknown>	DEFAULT	2
.umul	.symtab	0x14a64	12	FUNC	<unknown>	DEFAULT	2
.urem	.symtab	0x14a30	32	FUNC	<unknown>	DEFAULT	2
C.72.4749	.symtab	0x1fbb8	104	OBJECT	<unknown>	DEFAULT	4
C.82.4860	.symtab	0x20c4c	1128	OBJECT	<unknown>	DEFAULT	4
Q	.symtab	0x32db8	16384	OBJECT	<unknown>	DEFAULT	10
Randhex	.symtab	0x12144	428	FUNC	<unknown>	DEFAULT	2
SendSTD	.symtab	0x11cd0	428	FUNC	<unknown>	DEFAULT	2
UDPRAW	.symtab	0x11fe0	356	FUNC	<unknown>	DEFAULT	2
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__CTOR_END__	.symtab	0x328f8	0	OBJECT	<unknown>	DEFAULT	6
__CTOR_LIST__	.symtab	0x328f4	0	OBJECT	<unknown>	DEFAULT	6
__C_ctype_b	.symtab	0x32a14	4	OBJECT	<unknown>	DEFAULT	9
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x21180	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_tolower	.symtab	0x32d40	4	OBJECT	<unknown>	DEFAULT	9
__C_ctype_tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_tolower_data	.symtab	0x2248a	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_toupper	.symtab	0x32a1c	4	OBJECT	<unknown>	DEFAULT	9
__C_ctype_toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_toupper_data	.symtab	0x21480	768	OBJECT	<unknown>	DEFAULT	4
__DTOR_END__	.symtab	0x32900	0	OBJECT	<unknown>	DEFAULT	7
__DTOR_LIST__	.symtab	0x328fc	0	OBJECT	<unknown>	DEFAULT	7
__EH_FRAME_BEGIN__	.symtab	0x228f0	0	OBJECT	<unknown>	DEFAULT	5
__FRAME_END__	.symtab	0x228f0	0	OBJECT	<unknown>	DEFAULT	5
__GI___C_ctype_b	.symtab	0x32a14	4	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_b_data	.symtab	0x21180	768	OBJECT	<unknown>	HIDDEN	4
__GI___C_ctype_tolower	.symtab	0x32d40	4	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_tolower_data	.symtab	0x2248a	768	OBJECT	<unknown>	HIDDEN	4
__GI___C_ctype_toupper	.symtab	0x32a1c	4	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_toupper_data	.symtab	0x21480	768	OBJECT	<unknown>	HIDDEN	4
__GI___ctype_b	.symtab	0x32a18	4	OBJECT	<unknown>	HIDDEN	9
__GI___ctype_tolower	.symtab	0x32d44	4	OBJECT	<unknown>	HIDDEN	9
__GI___ctype_toupper	.symtab	0x32a20	4	OBJECT	<unknown>	HIDDEN	9
__GI___errno_location	.symtab	0x14f64	12	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked	.symtab	0x1dfd0	328	FUNC	<unknown>	HIDDEN	2
__GI___glibc_strerror_r	.symtab	0x18770	32	FUNC	<unknown>	HIDDEN	2
__GI___h_errno_location	.symtab	0x1a430	12	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl	.symtab	0x14a70	136	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl64	.symtab	0x14af8	100	FUNC	<unknown>	HIDDEN	2
__GI___libc_open	.symtab	0x14d10	120	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini	.symtab	0x19dc4	132	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init	.symtab	0x19e9c	104	FUNC	<unknown>	HIDDEN	2
__GI___xpg_strerror_r	.symtab	0x18790	284	FUNC	<unknown>	HIDDEN	2
__GI__exit	.symtab	0x14b5c	64	FUNC	<unknown>	HIDDEN	2
__GI_abort	.symtab	0x1c238	316	FUNC	<unknown>	HIDDEN	2
__GI_atoi	.symtab	0x199c0	24	FUNC	<unknown>	HIDDEN	2
__GI_atol	.symtab	0x199c0	24	FUNC	<unknown>	HIDDEN	2
__GI_brk	.symtab	0x1c390	60	FUNC	<unknown>	HIDDEN	2
__GI_chdir	.symtab	0x14b9c	68	FUNC	<unknown>	HIDDEN	2
__GI_close	.symtab	0x14be0	68	FUNC	<unknown>	HIDDEN	2
__GI_connect	.symtab	0x18dd0	76	FUNC	<unknown>	HIDDEN	2
__GI_errno	.symtab	0x38fec	4	OBJECT	<unknown>	HIDDEN	10
__GI_exit	.symtab	0x19b98	128	FUNC	<unknown>	HIDDEN	2
__GI_fclose	.symtab	0x1c468	324	FUNC	<unknown>	HIDDEN	2
__GI_fcntl	.symtab	0x14a70	136	FUNC	<unknown>	HIDDEN	2
__GI_fcntl64	.symtab	0x14af8	100	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked	.symtab	0x1cc7c	420	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked	.symtab	0x1dfd0	328	FUNC	<unknown>	HIDDEN	2
__GI_fgets	.symtab	0x1cb04	100	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked	.symtab	0x1ce20	192	FUNC	<unknown>	HIDDEN	2
__GI_fopen	.symtab	0x1c5ac	24	FUNC	<unknown>	HIDDEN	2
__GI_fork	.symtab	0x149fc	52	FUNC	<unknown>	HIDDEN	2
__GI_fputs_unlocked	.symtab	0x1612c	60	FUNC	<unknown>	HIDDEN	2
__GI_fseek	.symtab	0x1c5c4	36	FUNC	<unknown>	HIDDEN	2
__GI_fseeko64	.symtab	0x1c5e8	272	FUNC	<unknown>	HIDDEN	2
__GI_fwrite_unlocked	.symtab	0x16168	176	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked	.symtab	0x1dfd0	328	FUNC	<unknown>	HIDDEN	2
__GI_getegid	.symtab	0x1a1b8	64	FUNC	<unknown>	HIDDEN	2
__GI_geteuid	.symtab	0x1a1f8	64	FUNC	<unknown>	HIDDEN	2
__GI_getgid	.symtab	0x1a238	64	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname	.symtab	0x18a94	60	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname_r	.symtab	0x18ad0	768	FUNC	<unknown>	HIDDEN	2
__GI_getpid	.symtab	0x14c24	64	FUNC	<unknown>	HIDDEN	2
__GI_getsockname	.symtab	0x18e1c	76	FUNC	<unknown>	HIDDEN	2
__GI_getuid	.symtab	0x1a278	64	FUNC	<unknown>	HIDDEN	2
__GI_h_errno	.symtab	0x38ff0	4	OBJECT	<unknown>	HIDDEN	10
__GI_inet_addr	.symtab	0x18a6c	40	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton	.symtab	0x1b660	220	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa	.symtab	0x18a48	36	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa_r	.symtab	0x189d8	112	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntop	.symtab	0x1d5c4	684	FUNC	<unknown>	HIDDEN	2
__GI_inet_pton	.symtab	0x1d200	544	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r	.symtab	0x198dc	228	FUNC	<unknown>	HIDDEN	2
__GI_ioctl	.symtab	0x14c64	100	FUNC	<unknown>	HIDDEN	2
__GI_isatty	.symtab	0x18920	32	FUNC	<unknown>	HIDDEN	2
__GI_kill	.symtab	0x14cc8	72	FUNC	<unknown>	HIDDEN	2
__GI_lseek64	.symtab	0x1df3c	112	FUNC	<unknown>	HIDDEN	2
__GI_memchr	.symtab	0x1b254	280	FUNC	<unknown>	HIDDEN	2
__GI_memcpy	.symtab	0x16844	4212	FUNC	<unknown>	HIDDEN	2
__GI_memmove	.symtab	0x16260	1508	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy	.symtab	0x1b36c	32	FUNC	<unknown>	HIDDEN	2
__GI_memrchr	.symtab	0x1b38c	272	FUNC	<unknown>	HIDDEN	2
__GI_memset	.symtab	0x178ec	416	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep	.symtab	0x1a2b8	72	FUNC	<unknown>	HIDDEN	2
__GI_open	.symtab	0x14d10	120	FUNC	<unknown>	HIDDEN	2
__GI_poll	.symtab	0x1c41c	76	FUNC	<unknown>	HIDDEN	2
__GI_raise	.symtab	0x1df24	24	FUNC	<unknown>	HIDDEN	2
__GI_random	.symtab	0x194dc	80	FUNC	<unknown>	HIDDEN	2
__GI_random_r	.symtab	0x1975c	156	FUNC	<unknown>	HIDDEN	2
__GI_rawmemchr	.symtab	0x1cee0	204	FUNC	<unknown>	HIDDEN	2
__GI_read	.symtab	0x14da0	76	FUNC	<unknown>	HIDDEN	2
__GI_recv	.symtab	0x18ebc	32	FUNC	<unknown>	HIDDEN	2
__GI_sbrk	.symtab	0x1a300	84	FUNC	<unknown>	HIDDEN	2
__GI_select	.symtab	0x14dec	84	FUNC	<unknown>	HIDDEN	2
__GI_send	.symtab	0x18edc	32	FUNC	<unknown>	HIDDEN	2
__GI_setsid	.symtab	0x14e40	64	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt	.symtab	0x18efc	44	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r	.symtab	0x19638	292	FUNC	<unknown>	HIDDEN	2
__GI_sigaction	.symtab	0x1c198	160	FUNC	<unknown>	HIDDEN	2
__GI_signal	.symtab	0x18f74	188	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask	.symtab	0x1a354	140	FUNC	<unknown>	HIDDEN	2
__GI_sleep	.symtab	0x19c18	428	FUNC	<unknown>	HIDDEN	2
__GI_socket	.symtab	0x18f28	76	FUNC	<unknown>	HIDDEN	2
__GI_sprintf	.symtab	0x14f70	52	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r	.symtab	0x197f8	228	FUNC	<unknown>	HIDDEN	2
__GI_strcasecmp	.symtab	0x188ac	92	FUNC	<unknown>	HIDDEN	2
__GI_strchr	.symtab	0x17b00	524	FUNC	<unknown>	HIDDEN	2
__GI_strcmp	.symtab	0x17e60	648	FUNC	<unknown>	HIDDEN	2
__GI_strcoll	.symtab	0x17e60	648	FUNC	<unknown>	HIDDEN	2
__GI_strcpy	.symtab	0x18150	804	FUNC	<unknown>	HIDDEN	2
__GI_strdup	.symtab	0x1d0fc	56	FUNC	<unknown>	HIDDEN	2
__GI_strlen	.symtab	0x184dc	120	FUNC	<unknown>	HIDDEN	2
__GI_strncat	.symtab	0x1cfac	224	FUNC	<unknown>	HIDDEN	2
__GI_strncpy	.symtab	0x1b49c	248	FUNC	<unknown>	HIDDEN	2
__GI_strnlen	.symtab	0x18554	252	FUNC	<unknown>	HIDDEN	2
__GI_strpbrk	.symtab	0x1b610	80	FUNC	<unknown>	HIDDEN	2
__GI_strrchr	.symtab	0x17d0c	192	FUNC	<unknown>	HIDDEN	2
__GI_strspn	.symtab	0x1d08c	112	FUNC	<unknown>	HIDDEN	2
__GI_strstr	.symtab	0x18650	288	FUNC	<unknown>	HIDDEN	2
__GI_strtok	.symtab	0x18908	24	FUNC	<unknown>	HIDDEN	2
__GI_strtok_r	.symtab	0x1b594	124	FUNC	<unknown>	HIDDEN	2
__GI_strtol	.symtab	0x199d8	20	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr	.symtab	0x18940	112	FUNC	<unknown>	HIDDEN	2
__GI_time	.symtab	0x14e80	72	FUNC	<unknown>	HIDDEN	2
__GI_tolower	.symtab	0x1dfac	36	FUNC	<unknown>	HIDDEN	2
__GI_toupper	.symtab	0x14f40	36	FUNC	<unknown>	HIDDEN	2
__GI_vsnprintf	.symtab	0x14fa4	156	FUNC	<unknown>	HIDDEN	2
__GI_wait4	.symtab	0x1a3e0	80	FUNC	<unknown>	HIDDEN	2
__GI_waitpid	.symtab	0x14ec8	20	FUNC	<unknown>	HIDDEN	2
__GI_wcrtomb	.symtab	0x1a43c	72	FUNC	<unknown>	HIDDEN	2
__GI_wcsnrtombs	.symtab	0x1a4a0	188	FUNC	<unknown>	HIDDEN	2
__GI_wcsrtombs	.symtab	0x1a484	28	FUNC	<unknown>	HIDDEN	2
__GI_write	.symtab	0x14edc	76	FUNC	<unknown>	HIDDEN	2
__JCR_END__	.symtab	0x32904	0	OBJECT	<unknown>	DEFAULT	8
__JCR_LIST__	.symtab	0x32904	0	OBJECT	<unknown>	DEFAULT	8
__app_fini	.symtab	0x38fe0	4	OBJECT	<unknown>	HIDDEN	10
__atexit_lock	.symtab	0x32d24	24	OBJECT	<unknown>	DEFAULT	9
__bsd_signal	.symtab	0x18f74	188	FUNC	<unknown>	HIDDEN	2
__bss_start	.symtab	0x32d7c	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x19e58	68	FUNC	<unknown>	DEFAULT	2
__ctype_b	.symtab	0x32a18	4	OBJECT	<unknown>	DEFAULT	9
__ctype_tolower	.symtab	0x32d44	4	OBJECT	<unknown>	DEFAULT	9
__ctype_toupper	.symtab	0x32a20	4	OBJECT	<unknown>	DEFAULT	9
__curbrk	.symtab	0x39014	4	OBJECT	<unknown>	HIDDEN	10
__data_start	.symtab	0x32910	0	NOTYPE	<unknown>	DEFAULT	9
__decode_answer	.symtab	0x1daf8	240	FUNC	<unknown>	HIDDEN	2
__decode_dotted	.symtab	0x1e1bc	196	FUNC	<unknown>	HIDDEN	2
__decode_header	.symtab	0x1d98c	208	FUNC	<unknown>	HIDDEN	2
__deregister_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__dns_lookup	.symtab	0x1b73c	1852	FUNC	<unknown>	HIDDEN	2
__do_global_ctors_aux	.symtab	0x1e400	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux	.symtab	0x100b0	0	FUNC	<unknown>	DEFAULT	2
__dso_handle	.symtab	0x32908	0	OBJECT	<unknown>	HIDDEN	9
__encode_dotted	.symtab	0x1e118	164	FUNC	<unknown>	HIDDEN	2
__encode_header	.symtab	0x1d870	284	FUNC	<unknown>	HIDDEN	2
__encode_question	.symtab	0x1da5c	120	FUNC	<unknown>	HIDDEN	2
__environ	.symtab	0x38fd8	4	OBJECT	<unknown>	DEFAULT	10
__errno_location	.symtab	0x14f64	12	FUNC	<unknown>	DEFAULT	2
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x38fd0	4	OBJECT	<unknown>	HIDDEN	10
__fgetc_unlocked	.symtab	0x1dfd0	328	FUNC	<unknown>	DEFAULT	2
__fini_array_end	.symtab	0x328f4	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__fini_array_start	.symtab	0x328f4	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__get_hosts_byname_r	.symtab	0x1c160	56	FUNC	<unknown>	HIDDEN	2
__glibc_strerror_r	.symtab	0x18770	32	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__h_errno_location	.symtab	0x1a430	12	FUNC	<unknown>	DEFAULT	2
__h_errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__heap_alloc	.symtab	0x192d8	160	FUNC	<unknown>	DEFAULT	2
__heap_free	.symtab	0x193c0	268	FUNC	<unknown>	DEFAULT	2
__heap_link_free_area	.symtab	0x19378	48	FUNC	<unknown>	DEFAULT	2
__heap_link_free_area_after	.symtab	0x193a8	24	FUNC	<unknown>	DEFAULT	2
__init_array_end	.symtab	0x328f4	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__init_array_start	.symtab	0x328f4	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__length_dotted	.symtab	0x1e280	72	FUNC	<unknown>	HIDDEN	2
__length_question	.symtab	0x1dad4	36	FUNC	<unknown>	HIDDEN	2
__libc_close	.symtab	0x14be0	68	FUNC	<unknown>	DEFAULT	2
__libc_connect	.symtab	0x18dd0	76	FUNC	<unknown>	DEFAULT	2
__libc_creat	.symtab	0x14d88	24	FUNC	<unknown>	DEFAULT	2
__libc_fcntl	.symtab	0x14a70	136	FUNC	<unknown>	DEFAULT	2
__libc_fcntl64	.symtab	0x14af8	100	FUNC	<unknown>	DEFAULT	2
__libc_fork	.symtab	0x149fc	52	FUNC	<unknown>	DEFAULT	2
__libc_getpid	.symtab	0x14c24	64	FUNC	<unknown>	DEFAULT	2
__libc_lseek64	.symtab	0x1df3c	112	FUNC	<unknown>	DEFAULT	2
__libc_nanosleep	.symtab	0x1a2b8	72	FUNC	<unknown>	DEFAULT	2
__libc_open	.symtab	0x14d10	120	FUNC	<unknown>	DEFAULT	2
__libc_poll	.symtab	0x1c41c	76	FUNC	<unknown>	DEFAULT	2
__libc_read	.symtab	0x14da0	76	FUNC	<unknown>	DEFAULT	2
__libc_recv	.symtab	0x18ebc	32	FUNC	<unknown>	DEFAULT	2
__libc_select	.symtab	0x14dec	84	FUNC	<unknown>	DEFAULT	2
__libc_send	.symtab	0x18edc	32	FUNC	<unknown>	DEFAULT	2
__libc_sigaction	.symtab	0x1c198	160	FUNC	<unknown>	DEFAULT	2
__libc_stack_end	.symtab	0x38fd4	4	OBJECT	<unknown>	DEFAULT	10
__libc_waitpid	.symtab	0x14ec8	20	FUNC	<unknown>	DEFAULT	2
__libc_write	.symtab	0x14edc	76	FUNC	<unknown>	DEFAULT	2
__malloc_heap	.symtab	0x32b60	4	OBJECT	<unknown>	DEFAULT	9
__malloc_heap_lock	.symtab	0x38fb8	24	OBJECT	<unknown>	DEFAULT	10
__malloc_sbrk_lock	.symtab	0x390a0	24	OBJECT	<unknown>	DEFAULT	10
__muldi3	.symtab	0x14928	212	FUNC	<unknown>	DEFAULT	2
__nameserver	.symtab	0x390c8	12	OBJECT	<unknown>	HIDDEN	10
__nameservers	.symtab	0x390d4	4	OBJECT	<unknown>	HIDDEN	10
__open_etc_hosts	.symtab	0x1dbe8	56	FUNC	<unknown>	HIDDEN	2
__open_nameservers	.symtab	0x1be78	744	FUNC	<unknown>	HIDDEN	2
__pagesize	.symtab	0x38fdc	4	OBJECT	<unknown>	DEFAULT	10
__preinit_array_end	.symtab	0x328f4	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__preinit_array_start	.symtab	0x328f4	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__pthread_initialize_minimal	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__pthread_mutex_init	.symtab	0x19e48	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock	.symtab	0x19e48	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock	.symtab	0x19e48	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock	.symtab	0x19e48	8	FUNC	<unknown>	DEFAULT	2
__pthread_return_0	.symtab	0x19e48	8	FUNC	<unknown>	DEFAULT	2
__pthread_return_void	.symtab	0x19e50	8	FUNC	<unknown>	DEFAULT	2
__raise	.symtab	0x1df24	24	FUNC	<unknown>	HIDDEN	2
__read_etc_hosts_r	.symtab	0x1dc20	772	FUNC	<unknown>	HIDDEN	2
__register_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__resolv_lock	.symtab	0x32d4c	24	OBJECT	<unknown>	DEFAULT	9
__rtld_fini	.symtab	0x38fe4	4	OBJECT	<unknown>	HIDDEN	10
__searchdomain	.symtab	0x390b8	16	OBJECT	<unknown>	HIDDEN	10
__searchdomains	.symtab	0x390d8	4	OBJECT	<unknown>	HIDDEN	10
__sigaddset	.symtab	0x19058	44	FUNC	<unknown>	DEFAULT	2
__sigdelset	.symtab	0x19084	44	FUNC	<unknown>	DEFAULT	2
__sigismember	.symtab	0x19030	40	FUNC	<unknown>	DEFAULT	2
__socketcall	.symtab	0x1a170	72	FUNC	<unknown>	HIDDEN	2
__socketcall.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__stdin	.symtab	0x32a30	4	OBJECT	<unknown>	DEFAULT	9
__stdio_READ	.symtab	0x1e2c8	104	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE	.symtab	0x1a55c	196	FUNC	<unknown>	HIDDEN	2
__stdio_adjust_position	.symtab	0x1c6f8	252	FUNC	<unknown>	HIDDEN	2
__stdio_fwrite	.symtab	0x1a620	320	FUNC	<unknown>	HIDDEN	2
__stdio_init_mutex	.symtab	0x150a0	28	FUNC	<unknown>	HIDDEN	2
__stdio_mutex_initializer.3860	.symtab	0x21780	24	OBJECT	<unknown>	DEFAULT	4
__stdio_rfill	.symtab	0x1e330	56	FUNC	<unknown>	HIDDEN	2
__stdio_seek	.symtab	0x1cad0	52	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o	.symtab	0x1e368	152	FUNC	<unknown>	HIDDEN	2
__stdio_trans2w_o	.symtab	0x1a760	252	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit	.symtab	0x1516c	56	FUNC	<unknown>	HIDDEN	2
__stdout	.symtab	0x32a34	4	OBJECT	<unknown>	DEFAULT	9
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fcntl64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_rt_sigaction	.symtab	0x1c3cc	80	FUNC	<unknown>	HIDDEN	2
__syscall_rt_sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uClibc_fini	.symtab	0x19dc4	132	FUNC	<unknown>	DEFAULT	2
__uClibc_init	.symtab	0x19e9c	104	FUNC	<unknown>	DEFAULT	2
__uClibc_main	.symtab	0x19f04	620	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__ubp_memchr	.symtab	0x1b254	280	FUNC	<unknown>	DEFAULT	2
__uclibc_progname	.symtab	0x32d3c	4	OBJECT	<unknown>	HIDDEN	9
__xpg_strerror_r	.symtab	0x18790	284	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_adjust_pos.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_charpad	.symtab	0x151a4	60	FUNC	<unknown>	DEFAULT	2
_cs_funcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_dl_aux_init	.symtab	0x1c374	28	FUNC	<unknown>	DEFAULT	2
_dl_phdr	.symtab	0x390dc	4	OBJECT	<unknown>	DEFAULT	10
_dl_phnum	.symtab	0x390e0	4	OBJECT	<unknown>	DEFAULT	10
_edata	.symtab	0x32d7c	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x390e8	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_errno	.symtab	0x38fec	4	OBJECT	<unknown>	DEFAULT	10
_exit	.symtab	0x14b5c	64	FUNC	<unknown>	DEFAULT	2
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fini	.symtab	0x1e448	8	FUNC	<unknown>	DEFAULT	3
_fixed_buffers	.symtab	0x36dc0	8192	OBJECT	<unknown>	DEFAULT	10
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow	.symtab	0x151e0	128	FUNC	<unknown>	DEFAULT	2
_fpmaxtostr	.symtab	0x1aa60	1908	FUNC	<unknown>	HIDDEN	2
_fpmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_h_errno	.symtab	0x38ff0	4	OBJECT	<unknown>	DEFAULT	10
_init	.symtab	0x10094	8	FUNC	<unknown>	DEFAULT	1
_load_inttype	.symtab	0x1a85c	144	FUNC	<unknown>	HIDDEN	2
_load_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_init	.symtab	0x158dc	164	FUNC	<unknown>	HIDDEN	2
_ppfs_init.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec	.symtab	0x15be4	1352	FUNC	<unknown>	HIDDEN	2
_ppfs_parsespec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs	.symtab	0x15980	60	FUNC	<unknown>	HIDDEN	2
_ppfs_prepargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs	.symtab	0x159bc	480	FUNC	<unknown>	HIDDEN	2
_ppfs_setargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size	.symtab	0x15b9c	72	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_pop_restore	.symtab	0x19e50	8	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_push_defer	.symtab	0x19e50	8	FUNC	<unknown>	DEFAULT	2
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_sigintr	.symtab	0x39020	128	OBJECT	<unknown>	HIDDEN	10
_start	.symtab	0x101a4	56	FUNC	<unknown>	DEFAULT	2
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x1c7f4	732	FUNC	<unknown>	HIDDEN	2
_stdio_init	.symtab	0x15040	96	FUNC	<unknown>	HIDDEN	2
_stdio_openlist	.symtab	0x32a38	4	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_add_lock	.symtab	0x32a3c	24	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_dec_use	.symtab	0x1cb68	276	FUNC	<unknown>	DEFAULT	2
_stdio_openlist_del_count	.symtab	0x36dbc	4	OBJECT	<unknown>	DEFAULT	10
_stdio_openlist_del_lock	.symtab	0x32a54	24	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_use_count	.symtab	0x36db8	4	OBJECT	<unknown>	DEFAULT	10
_stdio_streams	.symtab	0x32a70	240	OBJECT	<unknown>	DEFAULT	9
_stdio_term	.symtab	0x150bc	176	FUNC	<unknown>	HIDDEN	2
_stdio_user_locking	.symtab	0x32a6c	4	OBJECT	<unknown>	DEFAULT	9
_stdlib_strto_l	.symtab	0x199ec	428	FUNC	<unknown>	HIDDEN	2
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_store_inttype	.symtab	0x1a8ec	60	FUNC	<unknown>	HIDDEN	2
_store_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_string_syserrmsgs	.symtab	0x218e0	2934	OBJECT	<unknown>	HIDDEN	4
_string_syserrmsgs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr	.symtab	0x1a928	312	FUNC	<unknown>	HIDDEN	2
_uintmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal	.symtab	0x15260	1660	FUNC	<unknown>	HIDDEN	2
_vfprintf_internal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0x1c238	316	FUNC	<unknown>	DEFAULT	2
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
atoi	.symtab	0x199c0	24	FUNC	<unknown>	DEFAULT	2
atol	.symtab	0x199c0	24	FUNC	<unknown>	DEFAULT	2
atol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bcopy	.symtab	0x16254	12	FUNC	<unknown>	DEFAULT	2
been_there_done_that	.symtab	0x39010	4	OBJECT	<unknown>	DEFAULT	10
been_there_done_that.2818	.symtab	0x38fe8	4	OBJECT	<unknown>	DEFAULT	10
bot.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
brk	.symtab	0x1c390	60	FUNC	<unknown>	DEFAULT	2
brk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bsd_signal	.symtab	0x18f74	188	FUNC	<unknown>	DEFAULT	2
buf.2628	.symtab	0x38dc8	16	OBJECT	<unknown>	DEFAULT	10
buf.4861	.symtab	0x38dd8	460	OBJECT	<unknown>	DEFAULT	10
bzero	.symtab	0x178b8	52	FUNC	<unknown>	DEFAULT	2
c	.symtab	0x32a0c	4	OBJECT	<unknown>	DEFAULT	9
call___do_global_ctors_aux	.symtab	0x1e43c	0	FUNC	<unknown>	DEFAULT	2
call___do_global_dtors_aux	.symtab	0x1012c	0	FUNC	<unknown>	DEFAULT	2
call_frame_dummy	.symtab	0x10198	0	FUNC	<unknown>	DEFAULT	2
chdir	.symtab	0x14b9c	68	FUNC	<unknown>	DEFAULT	2
chdir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0x14be0	68	FUNC	<unknown>	DEFAULT	2
close.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
commServer	.symtab	0x32914	4	OBJECT	<unknown>	DEFAULT	9
completed.2248	.symtab	0x32d80	1	OBJECT	<unknown>	DEFAULT	10
connect	.symtab	0x18dd0	76	FUNC	<unknown>	DEFAULT	2
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
connectTimeout	.symtab	0x11734	672	FUNC	<unknown>	DEFAULT	2
creat	.symtab	0x14d88	24	FUNC	<unknown>	DEFAULT	2
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
currentServer	.symtab	0x32a08	4	OBJECT	<unknown>	DEFAULT	9
data_start	.symtab	0x32910	0	NOTYPE	<unknown>	DEFAULT	9
decodea.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dns	.symtab	0x32918	4	OBJECT	<unknown>	DEFAULT	9
dnslookup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
environ	.symtab	0x38fd8	4	OBJECT	<unknown>	DEFAULT	10
errno	.symtab	0x38fec	4	OBJECT	<unknown>	DEFAULT	10
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
estridx	.symtab	0x21850	126	OBJECT	<unknown>	DEFAULT	4
exit	.symtab	0x19b98	128	FUNC	<unknown>	DEFAULT	2
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exp10_table	.symtab	0x227e8	72	OBJECT	<unknown>	DEFAULT	4
fclose	.symtab	0x1c468	324	FUNC	<unknown>	DEFAULT	2
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0x14a70	136	FUNC	<unknown>	DEFAULT	2
fcntl64	.symtab	0x14af8	100	FUNC	<unknown>	DEFAULT	2
fdgets	.symtab	0x10484	224	FUNC	<unknown>	DEFAULT	2
fflush_unlocked	.symtab	0x1cc7c	420	FUNC	<unknown>	DEFAULT	2
fflush_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked	.symtab	0x1dfd0	328	FUNC	<unknown>	DEFAULT	2
fgetc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets	.symtab	0x1cb04	100	FUNC	<unknown>	DEFAULT	2
fgets.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked	.symtab	0x1ce20	192	FUNC	<unknown>	DEFAULT	2
fgets_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fmt	.symtab	0x227d0	20	OBJECT	<unknown>	DEFAULT	4
fopen	.symtab	0x1c5ac	24	FUNC	<unknown>	DEFAULT	2
fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork	.symtab	0x149fc	52	FUNC	<unknown>	DEFAULT	2
fputs_unlocked	.symtab	0x1612c	60	FUNC	<unknown>	DEFAULT	2
fputs_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
frame_dummy	.symtab	0x10138	0	FUNC	<unknown>	DEFAULT	2
free	.symtab	0x191f0	232	FUNC	<unknown>	DEFAULT	2
free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseek	.symtab	0x1c5c4	36	FUNC	<unknown>	DEFAULT	2
fseeko	.symtab	0x1c5c4	36	FUNC	<unknown>	DEFAULT	2
fseeko.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseeko64	.symtab	0x1c5e8	272	FUNC	<unknown>	DEFAULT	2
fseeko64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fwrite_unlocked	.symtab	0x16168	176	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getArch	.symtab	0x13088	28	FUNC	<unknown>	DEFAULT	2
getHost	.symtab	0x113e0	100	FUNC	<unknown>	DEFAULT	2
getOurIP	.symtab	0x10564	892	FUNC	<unknown>	DEFAULT	2
getRandomIP	.symtab	0x10424	96	FUNC	<unknown>	DEFAULT	2
get_hosts_byname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getc_unlocked	.symtab	0x1dfd0	328	FUNC	<unknown>	DEFAULT	2
getegid	.symtab	0x1a1b8	64	FUNC	<unknown>	DEFAULT	2
getegid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid	.symtab	0x1a1f8	64	FUNC	<unknown>	DEFAULT	2
geteuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid	.symtab	0x1a238	64	FUNC	<unknown>	DEFAULT	2
getgid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname	.symtab	0x18a94	60	FUNC	<unknown>	DEFAULT	2
gethostbyname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname_r	.symtab	0x18ad0	768	FUNC	<unknown>	DEFAULT	2
gethostbyname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid	.symtab	0x14c24	64	FUNC	<unknown>	DEFAULT	2
getpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockname	.symtab	0x18e1c	76	FUNC	<unknown>	DEFAULT	2
getsockname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt	.symtab	0x18e68	84	FUNC	<unknown>	DEFAULT	2
getsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid	.symtab	0x1a278	64	FUNC	<unknown>	DEFAULT	2
getuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
h.4860	.symtab	0x38fa4	20	OBJECT	<unknown>	DEFAULT	10
h_errno	.symtab	0x38ff0	4	OBJECT	<unknown>	DEFAULT	10
heap_alloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
heap_free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
htonl	.symtab	0x189c4	8	FUNC	<unknown>	DEFAULT	2
htons	.symtab	0x189cc	12	FUNC	<unknown>	DEFAULT	2
i.4140	.symtab	0x32a10	4	OBJECT	<unknown>	DEFAULT	9
index	.symtab	0x17b00	524	FUNC	<unknown>	DEFAULT	2
inet_addr	.symtab	0x18a6c	40	FUNC	<unknown>	DEFAULT	2
inet_aton	.symtab	0x1b660	220	FUNC	<unknown>	DEFAULT	2
inet_aton.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa	.symtab	0x18a48	36	FUNC	<unknown>	DEFAULT	2
inet_ntoa.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa_r	.symtab	0x189d8	112	FUNC	<unknown>	DEFAULT	2
inet_ntop	.symtab	0x1d5c4	684	FUNC	<unknown>	DEFAULT	2
inet_ntop4	.symtab	0x1d420	420	FUNC	<unknown>	DEFAULT	2
inet_pton	.symtab	0x1d200	544	FUNC	<unknown>	DEFAULT	2
inet_pton4	.symtab	0x1d134	204	FUNC	<unknown>	DEFAULT	2
initConnection	.symtab	0x13cc0	468	FUNC	<unknown>	DEFAULT	2
init_rand	.symtab	0x101dc	228	FUNC	<unknown>	DEFAULT	2
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initial_fa	.symtab	0x32b68	264	OBJECT	<unknown>	DEFAULT	9
initstate	.symtab	0x1958c	96	FUNC	<unknown>	DEFAULT	2
initstate_r	.symtab	0x198dc	228	FUNC	<unknown>	DEFAULT	2
ioctl	.symtab	0x14c64	100	FUNC	<unknown>	DEFAULT	2
ioctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isatty	.symtab	0x18920	32	FUNC	<unknown>	DEFAULT	2
isatty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isspace	.symtab	0x14f28	24	FUNC	<unknown>	DEFAULT	2
isspace.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill	.symtab	0x14cc8	72	FUNC	<unknown>	DEFAULT	2
kill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lengthd.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lengthq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/sparc/memchr.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/sparc/memcpy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/sparc/memset.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/sparc/strchr.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/sparc/strcmp.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/sparc/strcpy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/sparc/strlen.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/sparc/crt1.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/sparc/crti.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/sparc/crtn.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/sparc/fork.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/sparc/udiv.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/sparc/umul.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/sparc/urem.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libgcc2.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
listFork	.symtab	0x119d4	432	FUNC	<unknown>	DEFAULT	2
llseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lseek64	.symtab	0x1df3c	112	FUNC	<unknown>	DEFAULT	2
macAddress	.symtab	0x32db0	6	OBJECT	<unknown>	DEFAULT	10
main	.symtab	0x13e94	2708	FUNC	<unknown>	DEFAULT	2
mainCommSock	.symtab	0x32da0	4	OBJECT	<unknown>	DEFAULT	10
malloc	.symtab	0x190b0	320	FUNC	<unknown>	DEFAULT	2
malloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memchr	.symtab	0x1b254	280	FUNC	<unknown>	DEFAULT	2
memcpy	.symtab	0x16844	4212	FUNC	<unknown>	DEFAULT	2
memmove	.symtab	0x16260	1508	FUNC	<unknown>	DEFAULT	2
mempcpy	.symtab	0x1b36c	32	FUNC	<unknown>	DEFAULT	2
mempcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memrchr	.symtab	0x1b38c	272	FUNC	<unknown>	DEFAULT	2
memrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset	.symtab	0x178ec	416	FUNC	<unknown>	DEFAULT	2
mylock	.symtab	0x32c70	24	OBJECT	<unknown>	DEFAULT	9
mylock	.symtab	0x38ff4	24	OBJECT	<unknown>	DEFAULT	10
mylock	.symtab	0x32d64	24	OBJECT	<unknown>	DEFAULT	9
nanosleep	.symtab	0x1a2b8	72	FUNC	<unknown>	DEFAULT	2
nanosleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
next_start.1092	.symtab	0x38dc0	4	OBJECT	<unknown>	DEFAULT	10
ntohl	.symtab	0x189b0	8	FUNC	<unknown>	DEFAULT	2
ntohl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ntohs	.symtab	0x189b8	12	FUNC	<unknown>	DEFAULT	2
ntop.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
numpids	.symtab	0x32da8	8	OBJECT	<unknown>	DEFAULT	10
object.2329	.symtab	0x32d84	24	OBJECT	<unknown>	DEFAULT	10
open	.symtab	0x14d10	120	FUNC	<unknown>	DEFAULT	2
open.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
opennameservers.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ourIP	.symtab	0x39018	4	OBJECT	<unknown>	DEFAULT	10
ovhl7	.symtab	0x122f0	3480	FUNC	<unknown>	DEFAULT	2
p.2246	.symtab	0x3290c	0	OBJECT	<unknown>	DEFAULT	9
pids	.symtab	0x3901c	4	OBJECT	<unknown>	DEFAULT	10
poll	.symtab	0x1c41c	76	FUNC	<unknown>	DEFAULT	2
poll.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prefix.4072	.symtab	0x217a8	12	OBJECT	<unknown>	DEFAULT	4
print	.symtab	0x10e78	1144	FUNC	<unknown>	DEFAULT	2
printchar	.symtab	0x10a38	108	FUNC	<unknown>	DEFAULT	2
printi	.symtab	0x10c60	536	FUNC	<unknown>	DEFAULT	2
prints	.symtab	0x10aa4	444	FUNC	<unknown>	DEFAULT	2
processCmd	.symtab	0x130a4	3100	FUNC	<unknown>	DEFAULT	2
qual_chars.4078	.symtab	0x217c0	20	OBJECT	<unknown>	DEFAULT	4
raise	.symtab	0x1df24	24	FUNC	<unknown>	DEFAULT	2
raise.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand	.symtab	0x194cc	16	FUNC	<unknown>	DEFAULT	2
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand_cmwc	.symtab	0x102c0	356	FUNC	<unknown>	DEFAULT	2
random	.symtab	0x194dc	80	FUNC	<unknown>	DEFAULT	2
random.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
random_poly_info	.symtab	0x22458	40	OBJECT	<unknown>	DEFAULT	4
random_r	.symtab	0x1975c	156	FUNC	<unknown>	DEFAULT	2
random_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
randtbl	.symtab	0x32ca4	128	OBJECT	<unknown>	DEFAULT	9
rawmemchr	.symtab	0x1cee0	204	FUNC	<unknown>	DEFAULT	2
rawmemchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read	.symtab	0x14da0	76	FUNC	<unknown>	DEFAULT	2
read.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read_etc_hosts_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recv	.symtab	0x18ebc	32	FUNC	<unknown>	DEFAULT	2
recv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recvLine	.symtab	0x11444	752	FUNC	<unknown>	DEFAULT	2
rindex	.symtab	0x17d0c	192	FUNC	<unknown>	DEFAULT	2
sbrk	.symtab	0x1a300	84	FUNC	<unknown>	DEFAULT	2
sbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
select	.symtab	0x14dec	84	FUNC	<unknown>	DEFAULT	2
select.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
send	.symtab	0x18edc	32	FUNC	<unknown>	DEFAULT	2
send.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsid	.symtab	0x14e40	64	FUNC	<unknown>	DEFAULT	2
setsid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsockopt	.symtab	0x18efc	44	FUNC	<unknown>	DEFAULT	2
setsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setstate	.symtab	0x1952c	96	FUNC	<unknown>	DEFAULT	2
setstate_r	.symtab	0x19638	292	FUNC	<unknown>	DEFAULT	2
sigaction	.symtab	0x1c198	160	FUNC	<unknown>	DEFAULT	2
sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
signal	.symtab	0x18f74	188	FUNC	<unknown>	DEFAULT	2
signal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigprocmask	.symtab	0x1a354	140	FUNC	<unknown>	DEFAULT	2
sigprocmask.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigsetops.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sleep	.symtab	0x19c18	428	FUNC	<unknown>	DEFAULT	2
sleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket	.symtab	0x18f28	76	FUNC	<unknown>	DEFAULT	2
socket.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket_connect	.symtab	0x11b84	332	FUNC	<unknown>	DEFAULT	2
sockprintf	.symtab	0x112f0	240	FUNC	<unknown>	DEFAULT	2
spec_and_mask.4077	.symtab	0x217d4	16	OBJECT	<unknown>	DEFAULT	4
spec_base.4071	.symtab	0x217b8	7	OBJECT	<unknown>	DEFAULT	4
spec_chars.4074	.symtab	0x21808	21	OBJECT	<unknown>	DEFAULT	4
spec_flags.4073	.symtab	0x21820	8	OBJECT	<unknown>	DEFAULT	4
spec_or_mask.4076	.symtab	0x217e4	16	OBJECT	<unknown>	DEFAULT	4
spec_ranges.4075	.symtab	0x217f8	9	OBJECT	<unknown>	DEFAULT	4
sprintf	.symtab	0x14f70	52	FUNC	<unknown>	DEFAULT	2
sprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
srand	.symtab	0x195ec	76	FUNC	<unknown>	DEFAULT	2
srandom	.symtab	0x195ec	76	FUNC	<unknown>	DEFAULT	2
srandom_r	.symtab	0x197f8	228	FUNC	<unknown>	DEFAULT	2
static_id	.symtab	0x32d48	2	OBJECT	<unknown>	DEFAULT	9
static_ns	.symtab	0x3900c	4	OBJECT	<unknown>	DEFAULT	10
stderr	.symtab	0x32a2c	4	OBJECT	<unknown>	DEFAULT	9
stdin	.symtab	0x32a24	4	OBJECT	<unknown>	DEFAULT	9
stdout	.symtab	0x32a28	4	OBJECT	<unknown>	DEFAULT	9
strcasecmp	.symtab	0x188ac	92	FUNC	<unknown>	DEFAULT	2
strcasecmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchr	.symtab	0x17b00	524	FUNC	<unknown>	DEFAULT	2
strcmp	.symtab	0x17e60	648	FUNC	<unknown>	DEFAULT	2
strcoll	.symtab	0x17e60	648	FUNC	<unknown>	DEFAULT	2
strcpy	.symtab	0x18150	804	FUNC	<unknown>	DEFAULT	2
strdup	.symtab	0x1d0fc	56	FUNC	<unknown>	DEFAULT	2
strdup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strerror_r	.symtab	0x18790	284	FUNC	<unknown>	DEFAULT	2
strlen	.symtab	0x184dc	120	FUNC	<unknown>	DEFAULT	2
strncat	.symtab	0x1cfac	224	FUNC	<unknown>	DEFAULT	2
strncat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strncpy	.symtab	0x1b49c	248	FUNC	<unknown>	DEFAULT	2
strncpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strnlen	.symtab	0x18554	252	FUNC	<unknown>	DEFAULT	2
strnlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strpbrk	.symtab	0x1b610	80	FUNC	<unknown>	DEFAULT	2
strpbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strrchr	.symtab	0x17d0c	192	FUNC	<unknown>	DEFAULT	2
strspn	.symtab	0x1d08c	112	FUNC	<unknown>	DEFAULT	2
strspn.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strstr	.symtab	0x18650	288	FUNC	<unknown>	DEFAULT	2
strstr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok	.symtab	0x18908	24	FUNC	<unknown>	DEFAULT	2
strtok.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok_r	.symtab	0x1b594	124	FUNC	<unknown>	DEFAULT	2
strtok_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtol	.symtab	0x199d8	20	FUNC	<unknown>	DEFAULT	2
strtol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcgetattr	.symtab	0x18940	112	FUNC	<unknown>	DEFAULT	2
tcgetattr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
time	.symtab	0x14e80	72	FUNC	<unknown>	DEFAULT	2
time.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tolower	.symtab	0x1dfac	36	FUNC	<unknown>	DEFAULT	2
tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
toupper	.symtab	0x14f40	36	FUNC	<unknown>	DEFAULT	2
toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
trim	.symtab	0x108e0	344	FUNC	<unknown>	DEFAULT	2
type_codes	.symtab	0x21828	24	OBJECT	<unknown>	DEFAULT	4
type_sizes	.symtab	0x21840	12	OBJECT	<unknown>	DEFAULT	4
unknown.1115	.symtab	0x218d0	14	OBJECT	<unknown>	DEFAULT	4
unsafe_state	.symtab	0x32c88	28	OBJECT	<unknown>	DEFAULT	9
useragents	.symtab	0x3291c	236	OBJECT	<unknown>	DEFAULT	9
vsnprintf	.symtab	0x14fa4	156	FUNC	<unknown>	DEFAULT	2
vsnprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wait4	.symtab	0x1a3e0	80	FUNC	<unknown>	DEFAULT	2
wait4.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
waitpid	.symtab	0x14ec8	20	FUNC	<unknown>	DEFAULT	2
waitpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcrtomb	.symtab	0x1a43c	72	FUNC	<unknown>	DEFAULT	2
wcrtomb.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsnrtombs	.symtab	0x1a4a0	188	FUNC	<unknown>	DEFAULT	2
wcsnrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsrtombs	.symtab	0x1a484	28	FUNC	<unknown>	DEFAULT	2
wcsrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
write	.symtab	0x14edc	76	FUNC	<unknown>	DEFAULT	2
write.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
xdigits.3071	.symtab	0x228a8	17	OBJECT	<unknown>	DEFAULT	4
xtdcustom	.symtab	0x11e7c	356	FUNC	<unknown>	DEFAULT	2

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 22, 2024 16:11:01.270916939 CET	56890	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:01.392158985 CET	4258	56890	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:01.392242908 CET	56890	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:01.393424034 CET	56890	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:01.513066053 CET	4258	56890	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:02.460593939 CET	4258	56890	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:02.460613966 CET	4258	56890	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:02.461400032 CET	56890	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:02.461678028 CET	56890	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:02.462332010 CET	56892	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:02.581456900 CET	4258	56890	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:02.581835032 CET	4258	56892	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:02.582149029 CET	56892	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:02.582149029 CET	56892	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:02.701772928 CET	4258	56892	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:03.665014982 CET	4258	56892	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:03.665041924 CET	4258	56892	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:03.665188074 CET	56892	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:03.665272951 CET	56892	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:03.665834904 CET	56894	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:03.784959078 CET	4258	56892	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:03.785449028 CET	4258	56894	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:03.785578966 CET	56894	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:03.785660982 CET	56894	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:03.906416893 CET	4258	56894	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:04.859545946 CET	4258	56894	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:04.859569073 CET	4258	56894	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:04.859683990 CET	56894	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:04.859915018 CET	56894	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:04.860539913 CET	56896	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:04.979728937 CET	4258	56894	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:04.980066061 CET	4258	56896	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:04.980151892 CET	56896	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:04.980348110 CET	56896	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:05.100223064 CET	4258	56896	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:06.057339907 CET	4258	56896	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:06.057569981 CET	4258	56896	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:06.057579994 CET	56896	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:06.057651997 CET	56896	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:06.058231115 CET	56898	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:06.177680969 CET	4258	56896	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:06.178066015 CET	4258	56898	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:06.178153038 CET	56898	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:06.178184986 CET	56898	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:06.297770977 CET	4258	56898	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:07.282908916 CET	4258	56898	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:07.282917976 CET	4258	56898	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:07.283052921 CET	56898	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:07.283225060 CET	56898	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:07.283859015 CET	56900	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:07.402789116 CET	4258	56898	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:07.403542042 CET	4258	56900	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:07.403671026 CET	56900	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:07.403743982 CET	56900	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:07.525371075 CET	4258	56900	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:08.472280025 CET	4258	56900	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:08.472405910 CET	4258	56900	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:08.472568989 CET	56900	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:08.472647905 CET	56900	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:08.473397970 CET	56902	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:08.592509985 CET	4258	56900	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:08.592947960 CET	4258	56902	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:08.593089104 CET	56902	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:08.593156099 CET	56902	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:08.713124037 CET	4258	56902	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:09.660592079 CET	4258	56902	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:09.660723925 CET	4258	56902	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:09.660727024 CET	56902	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:09.660824060 CET	56902	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:09.661437035 CET	56904	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:09.780478001 CET	4258	56902	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:09.780944109 CET	4258	56904	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:09.781085014 CET	56904	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:09.781147003 CET	56904	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:09.900736094 CET	4258	56904	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:10.848556995 CET	4258	56904	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:10.848649025 CET	4258	56904	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:10.848754883 CET	56904	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:10.848872900 CET	56904	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:10.849643946 CET	56906	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:10.971384048 CET	4258	56904	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:10.971985102 CET	4258	56906	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:10.972268105 CET	56906	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:10.972502947 CET	56906	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:11.095762968 CET	4258	56906	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:12.043597937 CET	4258	56906	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:12.043643951 CET	4258	56906	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:12.043965101 CET	56906	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:12.044126034 CET	56906	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:12.044799089 CET	56908	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:12.163788080 CET	4258	56906	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:12.164341927 CET	4258	56908	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:12.164448977 CET	56908	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:12.164789915 CET	56908	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:12.284539938 CET	4258	56908	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:13.231539011 CET	4258	56908	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:13.231632948 CET	4258	56908	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:13.231792927 CET	56908	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:13.232100964 CET	56908	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:13.232870102 CET	56910	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:13.354860067 CET	4258	56908	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:13.355695963 CET	4258	56910	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:13.355844021 CET	56910	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:13.355961084 CET	56910	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:13.476248026 CET	4258	56910	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:14.429140091 CET	4258	56910	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:14.429189920 CET	4258	56910	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:14.429601908 CET	56910	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:14.429673910 CET	56910	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:14.430385113 CET	56912	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:14.549359083 CET	4258	56910	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:14.549930096 CET	4258	56912	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:14.550040960 CET	56912	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:14.550256014 CET	56912	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:14.671418905 CET	4258	56912	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:15.734057903 CET	4258	56912	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:15.734107971 CET	4258	56912	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:15.734421968 CET	56912	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:15.734560013 CET	56912	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:15.735285044 CET	56914	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:15.858076096 CET	4258	56912	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:15.858633995 CET	4258	56914	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:15.858763933 CET	56914	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:15.858874083 CET	56914	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:15.979018927 CET	4258	56914	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:16.927606106 CET	4258	56914	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:16.927838087 CET	4258	56914	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:16.927891016 CET	56914	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:16.928073883 CET	56914	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:16.929002047 CET	56916	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:17.048460960 CET	4258	56914	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:17.157881021 CET	4258	56916	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:17.158155918 CET	56916	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:17.158271074 CET	56916	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:17.281954050 CET	4258	56916	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:18.230046988 CET	4258	56916	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:18.230101109 CET	4258	56916	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:18.230410099 CET	56916	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:18.230484009 CET	56916	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:18.231205940 CET	56918	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:18.351022959 CET	4258	56916	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:18.351438046 CET	4258	56918	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:18.351526976 CET	56918	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:18.351756096 CET	56918	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:18.471541882 CET	4258	56918	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:19.423789024 CET	4258	56918	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:19.423844099 CET	4258	56918	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:19.424149036 CET	56918	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:19.424237013 CET	56918	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:19.425187111 CET	56920	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:19.544118881 CET	4258	56918	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:19.545114040 CET	4258	56920	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:19.545348883 CET	56920	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:19.545541048 CET	56920	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:19.666142941 CET	4258	56920	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:20.697596073 CET	4258	56920	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:20.697669983 CET	4258	56920	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:20.697931051 CET	56920	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:20.698000908 CET	56920	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:20.698692083 CET	56922	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:20.817790031 CET	4258	56920	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:20.818739891 CET	4258	56922	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:20.818969965 CET	56922	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:20.818969965 CET	56922	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:20.938682079 CET	4258	56922	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:21.921159029 CET	4258	56922	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:21.921216011 CET	4258	56922	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:21.921407938 CET	56922	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:21.921487093 CET	56922	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:21.922173977 CET	56924	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:22.041141033 CET	4258	56922	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:22.041873932 CET	4258	56924	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:22.042257071 CET	56924	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:22.042257071 CET	56924	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:22.161989927 CET	4258	56924	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:23.139030933 CET	4258	56924	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:23.139142036 CET	4258	56924	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:23.139476061 CET	56924	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:23.139560938 CET	56924	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:23.140702963 CET	56926	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:23.259963036 CET	4258	56924	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:23.261001110 CET	4258	56926	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:23.261279106 CET	56926	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:23.261482000 CET	56926	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:23.381331921 CET	4258	56926	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:24.407687902 CET	4258	56926	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:24.407916069 CET	56926	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:24.407968044 CET	4258	56926	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:24.408122063 CET	56926	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:24.409071922 CET	56928	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:24.527791023 CET	4258	56926	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:24.528703928 CET	4258	56928	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:24.528808117 CET	56928	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:24.529170990 CET	56928	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:24.648844004 CET	4258	56928	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:25.595957994 CET	4258	56928	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:25.596136093 CET	4258	56928	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:25.596282959 CET	56928	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:25.596282959 CET	56928	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:25.597291946 CET	56930	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:25.716025114 CET	4258	56928	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:25.717025042 CET	4258	56930	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:25.717274904 CET	56930	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:25.717274904 CET	56930	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:25.837306023 CET	4258	56930	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:26.789298058 CET	4258	56930	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:26.789509058 CET	56930	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:26.789583921 CET	4258	56930	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:26.789681911 CET	56930	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:26.790395021 CET	56932	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:26.909807920 CET	4258	56930	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:26.910506010 CET	4258	56932	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:26.910712957 CET	56932	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:26.910770893 CET	56932	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:27.030445099 CET	4258	56932	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:27.979937077 CET	4258	56932	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:27.980021000 CET	4258	56932	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:27.980211973 CET	56932	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:27.980211973 CET	56932	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:27.980990887 CET	56934	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:28.100519896 CET	4258	56932	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:28.100801945 CET	4258	56934	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:28.101087093 CET	56934	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:28.101293087 CET	56934	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:28.222897053 CET	4258	56934	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:29.174824953 CET	4258	56934	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:29.174851894 CET	4258	56934	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:29.175139904 CET	56934	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:29.175139904 CET	56934	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:29.175930977 CET	56936	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:29.295021057 CET	4258	56934	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:29.295564890 CET	4258	56936	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:29.295808077 CET	56936	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:29.295809031 CET	56936	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:29.415541887 CET	4258	56936	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:30.362497091 CET	4258	56936	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:30.362560987 CET	4258	56936	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:30.362772942 CET	56936	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:30.362818003 CET	56936	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:30.363629103 CET	56938	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:30.482417107 CET	4258	56936	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:30.483232975 CET	4258	56938	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:30.483479977 CET	56938	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:30.483479977 CET	56938	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:30.603260994 CET	4258	56938	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:31.550124884 CET	4258	56938	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:31.550170898 CET	4258	56938	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:31.550334930 CET	56938	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:31.550486088 CET	56938	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:31.551300049 CET	56940	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:31.671067953 CET	4258	56938	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:31.671674013 CET	4258	56940	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:31.671978951 CET	56940	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:31.672070026 CET	56940	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:31.791774035 CET	4258	56940	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:32.748792887 CET	4258	56940	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:32.748826981 CET	4258	56940	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:32.748939037 CET	56940	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:32.749196053 CET	56940	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:32.749986887 CET	56942	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:32.870146990 CET	4258	56940	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:32.870959997 CET	4258	56942	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:32.871108055 CET	56942	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:32.871207952 CET	56942	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:32.990705967 CET	4258	56942	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:33.938940048 CET	4258	56942	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:33.939045906 CET	4258	56942	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:33.939112902 CET	56942	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:33.939217091 CET	56942	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:33.939800978 CET	56944	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:34.059078932 CET	4258	56942	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:34.059593916 CET	4258	56944	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:34.059705973 CET	56944	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:34.059839964 CET	56944	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:34.179371119 CET	4258	56944	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:35.143271923 CET	4258	56944	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:35.143445015 CET	56944	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:35.143520117 CET	4258	56944	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:35.143589020 CET	56944	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:35.144196033 CET	56946	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:35.263171911 CET	4258	56944	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:35.263712883 CET	4258	56946	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:35.263866901 CET	56946	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:35.263933897 CET	56946	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:35.383821964 CET	4258	56946	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:36.341562033 CET	4258	56946	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:36.341609955 CET	4258	56946	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:36.341996908 CET	56946	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:36.342051029 CET	56946	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:36.342638969 CET	56948	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:36.464231014 CET	4258	56946	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:36.464802980 CET	4258	56948	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:36.464906931 CET	56948	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:36.464994907 CET	56948	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:36.584696054 CET	4258	56948	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:37.532269001 CET	4258	56948	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:37.532366991 CET	4258	56948	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:37.532665014 CET	56948	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:37.532720089 CET	56948	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:37.533468962 CET	56950	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:37.652676105 CET	4258	56948	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:37.654833078 CET	4258	56950	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:37.654966116 CET	56950	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:37.655056000 CET	56950	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:37.774749041 CET	4258	56950	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:38.785422087 CET	4258	56950	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:38.785444021 CET	4258	56950	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:38.785664082 CET	56950	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:38.785914898 CET	56950	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:38.786613941 CET	56952	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:38.905405998 CET	4258	56950	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:38.906080008 CET	4258	56952	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:38.906213999 CET	56952	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:38.906315088 CET	56952	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:39.026390076 CET	4258	56952	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:39.988682032 CET	4258	56952	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:39.988728046 CET	4258	56952	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:39.988945007 CET	56952	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:39.989001989 CET	56952	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:39.989736080 CET	56954	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:40.108781099 CET	4258	56952	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:40.109194994 CET	4258	56954	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:40.109348059 CET	56954	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:40.109425068 CET	56954	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:40.228996992 CET	4258	56954	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:41.195971966 CET	4258	56954	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:41.196125031 CET	4258	56954	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:41.196178913 CET	56954	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:41.196233988 CET	56954	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:41.196841955 CET	56956	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:41.315766096 CET	4258	56954	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:41.316371918 CET	4258	56956	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:41.316621065 CET	56956	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:41.316756964 CET	56956	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:41.436300039 CET	4258	56956	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:42.389642954 CET	4258	56956	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:42.389703989 CET	4258	56956	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:42.390043020 CET	56956	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:42.390089035 CET	56956	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:42.390877962 CET	56958	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:42.509708881 CET	4258	56956	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:42.510329962 CET	4258	56958	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:42.510497093 CET	56958	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:42.510519028 CET	56958	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:42.630783081 CET	4258	56958	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:43.579374075 CET	4258	56958	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:43.579426050 CET	4258	56958	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:43.579576015 CET	56958	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:43.579576015 CET	56958	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:43.580163002 CET	56960	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:43.699125051 CET	4258	56958	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:43.699610949 CET	4258	56960	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:43.699815035 CET	56960	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:43.699815035 CET	56960	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:43.819494009 CET	4258	56960	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:45.051918983 CET	4258	56960	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:45.052042007 CET	56960	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:45.052445889 CET	56962	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:45.172111034 CET	4258	56960	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:45.172209024 CET	4258	56962	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:45.172296047 CET	56962	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:45.172364950 CET	56962	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:45.292020082 CET	4258	56962	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:46.238969088 CET	4258	56962	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:46.239048958 CET	4258	56962	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:46.239130020 CET	56962	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:46.239259958 CET	56962	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:46.239880085 CET	56964	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:46.360326052 CET	4258	56962	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:46.360815048 CET	4258	56964	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:46.360912085 CET	56964	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:46.360985994 CET	56964	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:46.482117891 CET	4258	56964	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:47.438194036 CET	4258	56964	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:47.438268900 CET	4258	56964	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:47.438370943 CET	56964	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:47.438541889 CET	56964	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:47.439254045 CET	56966	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:47.558237076 CET	4258	56964	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:47.558744907 CET	4258	56966	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:47.558835030 CET	56966	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:47.558887959 CET	56966	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:47.678400993 CET	4258	56966	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:48.640841007 CET	4258	56966	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:48.640964985 CET	56966	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:48.640985966 CET	4258	56966	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:48.641125917 CET	56966	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:48.641850948 CET	56968	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:48.760977983 CET	4258	56966	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:48.761790991 CET	4258	56968	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:48.762120008 CET	56968	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:48.762214899 CET	56968	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:48.882687092 CET	4258	56968	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:49.830631971 CET	4258	56968	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:49.830919027 CET	56968	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:49.831124067 CET	4258	56968	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:49.831221104 CET	56968	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:49.831927061 CET	56970	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:49.950846910 CET	4258	56968	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:49.951495886 CET	4258	56970	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:49.951592922 CET	56970	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:49.951698065 CET	56970	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:50.078049898 CET	4258	56970	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:51.053211927 CET	4258	56970	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:51.053333044 CET	56970	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:51.053446054 CET	4258	56970	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:51.053540945 CET	56970	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:51.054106951 CET	56972	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:51.173877954 CET	4258	56970	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:51.174300909 CET	4258	56972	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:51.174422979 CET	56972	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:51.174422979 CET	56972	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:51.294292927 CET	4258	56972	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:52.241988897 CET	4258	56972	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:52.242173910 CET	4258	56972	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:52.242367029 CET	56972	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:52.242470026 CET	56972	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:52.243201017 CET	56974	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:52.362251043 CET	4258	56972	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:52.362832069 CET	4258	56974	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:52.363090038 CET	56974	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:52.363246918 CET	56974	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:52.483598948 CET	4258	56974	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:53.434452057 CET	4258	56974	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:53.434514999 CET	4258	56974	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:53.434626102 CET	56974	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:53.434853077 CET	56974	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:53.435642004 CET	56976	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:53.554529905 CET	4258	56974	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:53.555255890 CET	4258	56976	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:53.555363894 CET	56976	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:53.555571079 CET	56976	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:53.675570965 CET	4258	56976	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:54.626085997 CET	4258	56976	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:54.626199961 CET	4258	56976	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:54.626421928 CET	56976	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:54.626477003 CET	56976	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:54.627166033 CET	56978	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:54.746697903 CET	4258	56976	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:54.747092962 CET	4258	56978	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:54.747350931 CET	56978	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:54.747525930 CET	56978	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:54.867602110 CET	4258	56978	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:55.814177990 CET	4258	56978	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:55.814435959 CET	4258	56978	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:55.814459085 CET	56978	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:55.814606905 CET	56978	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:55.816277981 CET	56980	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:55.936552048 CET	4258	56978	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:55.938136101 CET	4258	56980	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:55.938364983 CET	56980	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:55.938424110 CET	56980	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:56.061239004 CET	4258	56980	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:57.016696930 CET	4258	56980	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:57.016930103 CET	4258	56980	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:57.017069101 CET	56980	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:57.017215014 CET	56980	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:57.017967939 CET	56982	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:57.142410994 CET	4258	56980	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:57.142987013 CET	4258	56982	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:57.143194914 CET	56982	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:57.143196106 CET	56982	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:57.269057035 CET	4258	56982	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:58.232522964 CET	4258	56982	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:58.232732058 CET	4258	56982	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:58.232741117 CET	56982	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:58.232872963 CET	56982	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:58.233628988 CET	56984	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:58.352627993 CET	4258	56982	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:58.353099108 CET	4258	56984	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:58.353374958 CET	56984	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:58.353374958 CET	56984	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:58.475028992 CET	4258	56984	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:59.424624920 CET	4258	56984	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:59.424689054 CET	4258	56984	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:59.424896002 CET	56984	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:59.424896002 CET	56984	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:59.425342083 CET	56986	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:59.551362991 CET	4258	56984	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:59.551650047 CET	4258	56986	31.172.83.147	192.168.2.14
Dec 22, 2024 16:11:59.551819086 CET	56986	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:59.552016973 CET	56986	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:11:59.671591997 CET	4258	56986	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:00.618742943 CET	4258	56986	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:00.618793964 CET	4258	56986	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:00.619126081 CET	56986	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:00.619189978 CET	56986	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:00.619908094 CET	56988	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:00.738667011 CET	4258	56986	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:00.739358902 CET	4258	56988	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:00.739609957 CET	56988	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:00.739609957 CET	56988	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:00.861445904 CET	4258	56988	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:01.809053898 CET	4258	56988	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:01.809139967 CET	4258	56988	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:01.809243917 CET	56988	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:01.809341908 CET	56988	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:01.810177088 CET	56990	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:01.928998947 CET	4258	56988	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:01.929773092 CET	4258	56990	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:01.930088043 CET	56990	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:01.930138111 CET	56990	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:02.049684048 CET	4258	56990	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:03.021651983 CET	4258	56990	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:03.021771908 CET	4258	56990	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:03.022037983 CET	56990	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:03.022098064 CET	56990	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:03.022829056 CET	56992	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:03.143069983 CET	4258	56990	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:03.143902063 CET	4258	56992	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:03.144139051 CET	56992	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:03.144139051 CET	56992	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:03.263895988 CET	4258	56992	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:04.222600937 CET	4258	56992	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:04.222675085 CET	4258	56992	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:04.222758055 CET	56992	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:04.222879887 CET	56992	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:04.223378897 CET	56994	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:04.345101118 CET	4258	56992	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:04.345860958 CET	4258	56994	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:04.345967054 CET	56994	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:04.346026897 CET	56994	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:04.466314077 CET	4258	56994	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:05.423418045 CET	4258	56994	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:05.423468113 CET	4258	56994	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:05.423579931 CET	56994	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:05.423732042 CET	56994	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:05.424612999 CET	56996	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:05.543262005 CET	4258	56994	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:05.544210911 CET	4258	56996	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:05.544351101 CET	56996	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:05.544476032 CET	56996	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:05.665622950 CET	4258	56996	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:06.623143911 CET	4258	56996	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:06.623246908 CET	4258	56996	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:06.623363972 CET	56996	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:06.623526096 CET	56996	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:06.624325037 CET	56998	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:06.743079901 CET	4258	56996	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:06.743863106 CET	4258	56998	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:06.744038105 CET	56998	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:06.744097948 CET	56998	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:06.863886118 CET	4258	56998	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:07.811453104 CET	4258	56998	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:07.811568975 CET	4258	56998	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:07.811728001 CET	56998	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:07.811930895 CET	56998	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:07.812542915 CET	57000	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:07.932429075 CET	4258	56998	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:07.933144093 CET	4258	57000	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:07.933281898 CET	57000	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:07.933334112 CET	57000	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:08.052829981 CET	4258	57000	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:09.001923084 CET	4258	57000	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:09.002007008 CET	4258	57000	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:09.002085924 CET	57000	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:09.002263069 CET	57000	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:09.002963066 CET	57002	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:09.121711016 CET	4258	57000	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:09.122437954 CET	4258	57002	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:09.122560024 CET	57002	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:09.122646093 CET	57002	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:09.242268085 CET	4258	57002	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:10.188971043 CET	4258	57002	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:10.189114094 CET	4258	57002	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:10.189264059 CET	57002	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:10.189378977 CET	57002	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:10.190083981 CET	57004	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:10.310554981 CET	4258	57002	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:10.311261892 CET	4258	57004	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:10.311342001 CET	57004	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:10.311393976 CET	57004	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:10.430845976 CET	4258	57004	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:11.377976894 CET	4258	57004	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:11.378129959 CET	57004	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:11.378379107 CET	4258	57004	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:11.378473997 CET	57004	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:11.379371881 CET	57006	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:11.498419046 CET	4258	57004	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:11.499249935 CET	4258	57006	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:11.499434948 CET	57006	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:11.499469042 CET	57006	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:11.619358063 CET	4258	57006	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:12.566468000 CET	4258	57006	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:12.566529036 CET	4258	57006	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:12.566597939 CET	57006	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:12.566716909 CET	57006	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:12.567420959 CET	57008	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:12.686852932 CET	4258	57006	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:12.687546968 CET	4258	57008	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:12.687658072 CET	57008	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:12.687820911 CET	57008	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:12.807297945 CET	4258	57008	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:13.820638895 CET	4258	57008	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:13.820822001 CET	4258	57008	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:13.820955992 CET	57008	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:13.821078062 CET	57008	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:13.822014093 CET	57010	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:13.940757036 CET	4258	57008	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:13.941878080 CET	4258	57010	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:13.942013979 CET	57010	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:13.942097902 CET	57010	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:14.061932087 CET	4258	57010	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:15.025171995 CET	4258	57010	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:15.025289059 CET	4258	57010	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:15.025412083 CET	57010	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:15.025487900 CET	57010	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:15.026123047 CET	57012	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:15.145234108 CET	4258	57010	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:15.145791054 CET	4258	57012	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:15.145947933 CET	57012	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:15.146075010 CET	57012	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:15.266992092 CET	4258	57012	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:16.214608908 CET	4258	57012	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:16.214632034 CET	4258	57012	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:16.214862108 CET	57012	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:16.215097904 CET	57012	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:16.215995073 CET	57014	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:16.334934950 CET	4258	57012	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:16.335869074 CET	4258	57014	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:16.336149931 CET	57014	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:16.336286068 CET	57014	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:16.455899954 CET	4258	57014	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:17.409672022 CET	4258	57014	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:17.409722090 CET	4258	57014	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:17.410043955 CET	57014	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:17.410130978 CET	57014	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:17.411117077 CET	57016	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:17.530323982 CET	4258	57014	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:17.531351089 CET	4258	57016	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:17.531660080 CET	57016	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:17.531955957 CET	57016	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:17.651479006 CET	4258	57016	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:18.598978996 CET	4258	57016	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:18.599009991 CET	4258	57016	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:18.599281073 CET	57016	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:18.599404097 CET	57016	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:18.600119114 CET	57018	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:18.723344088 CET	4258	57016	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:18.723989964 CET	4258	57018	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:18.724165916 CET	57018	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:18.724364996 CET	57018	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:18.845992088 CET	4258	57018	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:19.793291092 CET	4258	57018	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:19.793387890 CET	4258	57018	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:19.793725967 CET	57018	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:19.793823004 CET	57018	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:19.794867039 CET	57020	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:19.913454056 CET	4258	57018	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:19.914572001 CET	4258	57020	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:19.914963961 CET	57020	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:19.914963961 CET	57020	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:20.036807060 CET	4258	57020	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:20.984443903 CET	4258	57020	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:20.984473944 CET	4258	57020	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:20.984868050 CET	57020	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:20.984868050 CET	57020	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:20.985706091 CET	57022	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:21.104928970 CET	4258	57020	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:21.105267048 CET	4258	57022	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:21.105515003 CET	57022	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:21.105586052 CET	57022	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:21.225977898 CET	4258	57022	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:22.270309925 CET	4258	57022	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:22.270354986 CET	4258	57022	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:22.270580053 CET	57022	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:22.270704031 CET	57022	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:22.271601915 CET	57024	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:22.391340017 CET	4258	57022	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:22.392097950 CET	4258	57024	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:22.392218113 CET	57024	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:22.392322063 CET	57024	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:22.511804104 CET	4258	57024	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:23.516814947 CET	4258	57024	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:23.516932964 CET	4258	57024	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:23.517216921 CET	57024	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:23.517229080 CET	57024	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:23.518074036 CET	57026	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:23.636779070 CET	4258	57024	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:23.637583971 CET	4258	57026	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:23.637875080 CET	57026	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:23.638032913 CET	57026	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:23.757582903 CET	4258	57026	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:24.714932919 CET	4258	57026	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:24.715080976 CET	4258	57026	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:24.715209007 CET	57026	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:24.715471983 CET	57026	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:24.716315985 CET	57028	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:24.835211039 CET	4258	57026	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:24.836091042 CET	4258	57028	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:24.836227894 CET	57028	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:24.836330891 CET	57028	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:24.955857038 CET	4258	57028	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:25.903188944 CET	4258	57028	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:25.903353930 CET	4258	57028	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:25.903413057 CET	57028	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:25.903542042 CET	57028	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:25.904576063 CET	57030	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:26.023293972 CET	4258	57028	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:26.024091005 CET	4258	57030	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:26.024277925 CET	57030	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:26.024389029 CET	57030	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:26.143852949 CET	4258	57030	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:27.090650082 CET	4258	57030	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:27.090780973 CET	4258	57030	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:27.090807915 CET	57030	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:27.090929985 CET	57030	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:27.091994047 CET	57032	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:27.215755939 CET	4258	57030	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:27.215763092 CET	4258	57032	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:27.216166019 CET	57032	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:27.216260910 CET	57032	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:27.335724115 CET	4258	57032	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:28.283826113 CET	4258	57032	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:28.283953905 CET	4258	57032	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:28.284157991 CET	57032	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:28.284296036 CET	57032	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:28.286178112 CET	57034	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:28.405155897 CET	4258	57032	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:28.406994104 CET	4258	57034	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:28.407131910 CET	57034	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:28.407278061 CET	57034	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:28.526751995 CET	4258	57034	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:29.472578049 CET	4258	57034	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:29.472625017 CET	4258	57034	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:29.472852945 CET	57034	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:29.473067999 CET	57034	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:29.473871946 CET	57036	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:29.592595100 CET	4258	57034	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:29.593389034 CET	4258	57036	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:29.593559980 CET	57036	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:29.593667030 CET	57036	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:29.713202953 CET	4258	57036	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:30.662312984 CET	4258	57036	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:30.662372112 CET	4258	57036	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:30.662568092 CET	57036	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:30.662688971 CET	57036	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:30.663479090 CET	57038	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:30.786226988 CET	4258	57036	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:30.786267042 CET	4258	57038	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:30.786356926 CET	57038	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:30.786623955 CET	57038	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:30.906822920 CET	4258	57038	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:31.853938103 CET	4258	57038	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:31.854038954 CET	4258	57038	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:31.854084015 CET	57038	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:31.854286909 CET	57038	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:31.855329037 CET	57040	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:31.975060940 CET	4258	57038	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:31.976161957 CET	4258	57040	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:31.976289034 CET	57040	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:31.976398945 CET	57040	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:32.096230984 CET	4258	57040	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:33.053431034 CET	4258	57040	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:33.053596973 CET	4258	57040	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:33.053608894 CET	57040	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:33.053747892 CET	57040	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:33.054614067 CET	57042	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:33.175265074 CET	4258	57040	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:33.176115036 CET	4258	57042	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:33.176403999 CET	57042	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:33.176513910 CET	57042	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:33.302949905 CET	4258	57042	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:34.250502110 CET	4258	57042	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:34.250775099 CET	57042	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:34.251048088 CET	4258	57042	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:34.251149893 CET	57042	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:34.252253056 CET	57044	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:34.373030901 CET	4258	57042	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:34.374203920 CET	4258	57044	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:34.374334097 CET	57044	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:34.374455929 CET	57044	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:34.495217085 CET	4258	57044	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:35.441590071 CET	4258	57044	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:35.441751957 CET	57044	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:35.441786051 CET	4258	57044	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:35.441890955 CET	57044	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:35.444880009 CET	57046	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:35.561383963 CET	4258	57044	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:35.564476013 CET	4258	57046	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:35.564598083 CET	57046	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:35.564702034 CET	57046	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:35.685744047 CET	4258	57046	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:36.649570942 CET	4258	57046	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:36.649697065 CET	57046	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:36.649712086 CET	4258	57046	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:36.649938107 CET	57046	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:36.650985003 CET	57048	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:36.769423962 CET	4258	57046	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:36.770508051 CET	4258	57048	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:36.770675898 CET	57048	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:36.770765066 CET	57048	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:36.890683889 CET	4258	57048	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:37.836771965 CET	4258	57048	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:37.836880922 CET	4258	57048	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:37.836990118 CET	57048	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:37.837158918 CET	57048	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:37.838048935 CET	57050	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:37.956811905 CET	4258	57048	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:37.957984924 CET	4258	57050	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:37.958228111 CET	57050	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:37.958331108 CET	57050	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:38.077970028 CET	4258	57050	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:39.026279926 CET	4258	57050	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:39.026309013 CET	4258	57050	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:39.026514053 CET	57050	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:39.026671886 CET	57050	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:39.027686119 CET	57052	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:39.147810936 CET	4258	57050	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:39.149821997 CET	4258	57052	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:39.150029898 CET	57052	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:39.150095940 CET	57052	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:39.273535967 CET	4258	57052	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:40.224963903 CET	4258	57052	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:40.225003004 CET	4258	57052	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:40.225187063 CET	57052	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:40.225358009 CET	57052	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:40.226378918 CET	57054	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:40.344963074 CET	4258	57052	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:40.346082926 CET	4258	57054	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:40.346266985 CET	57054	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:40.346312046 CET	57054	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:40.466203928 CET	4258	57054	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:41.414513111 CET	4258	57054	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:41.414577007 CET	4258	57054	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:41.414671898 CET	57054	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:41.414737940 CET	57054	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:41.415283918 CET	57056	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:41.534631968 CET	4258	57054	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:41.535346985 CET	4258	57056	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:41.535408974 CET	57056	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:41.535454035 CET	57056	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:41.655241013 CET	4258	57056	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:42.603446960 CET	4258	57056	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:42.603679895 CET	57056	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:42.603687048 CET	4258	57056	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:42.603848934 CET	57056	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:42.604648113 CET	57058	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:42.723511934 CET	4258	57056	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:42.724241972 CET	4258	57058	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:42.724421024 CET	57058	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:42.724550009 CET	57058	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:42.847608089 CET	4258	57058	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:43.795279026 CET	4258	57058	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:43.795409918 CET	4258	57058	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:43.795438051 CET	57058	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:43.795615911 CET	57058	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:43.796818018 CET	57060	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:43.917836905 CET	4258	57058	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:43.919162989 CET	4258	57060	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:43.919342041 CET	57060	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:43.919395924 CET	57060	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:44.039350986 CET	4258	57060	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:44.988289118 CET	4258	57060	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:44.988317966 CET	4258	57060	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:44.988409996 CET	57060	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:44.988461971 CET	57060	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:44.988991022 CET	57062	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:45.108577967 CET	4258	57060	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:45.108593941 CET	4258	57062	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:45.108752966 CET	57062	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:45.108787060 CET	57062	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:45.231751919 CET	4258	57062	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:46.187423944 CET	4258	57062	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:46.187448978 CET	4258	57062	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:46.187741995 CET	57062	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:46.187796116 CET	57062	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:46.188488960 CET	57064	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:46.307429075 CET	4258	57062	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:46.307987928 CET	4258	57064	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:46.308202982 CET	57064	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:46.308202982 CET	57064	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:46.427886963 CET	4258	57064	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:47.377460003 CET	4258	57064	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:47.377485991 CET	4258	57064	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:47.377605915 CET	57064	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:47.377641916 CET	57064	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:47.378253937 CET	57066	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:47.497309923 CET	4258	57064	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:47.497812986 CET	4258	57066	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:47.498105049 CET	57066	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:47.498131990 CET	57066	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:47.617893934 CET	4258	57066	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:48.565639973 CET	4258	57066	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:48.565808058 CET	4258	57066	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:48.565860987 CET	57066	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:48.566014051 CET	57066	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:48.567019939 CET	57068	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:48.685666084 CET	4258	57066	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:48.686577082 CET	4258	57068	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:48.686904907 CET	57068	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:48.687024117 CET	57068	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:48.806684971 CET	4258	57068	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:49.753427982 CET	4258	57068	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:49.753580093 CET	57068	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:49.753658056 CET	4258	57068	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:49.753726006 CET	57068	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:49.754467964 CET	57070	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:49.873298883 CET	4258	57068	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:49.874109983 CET	4258	57070	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:49.874279976 CET	57070	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:49.874279976 CET	57070	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:49.994009972 CET	4258	57070	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:50.941349030 CET	4258	57070	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:50.941415071 CET	4258	57070	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:50.941546917 CET	57070	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:50.941653967 CET	57070	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:50.942501068 CET	57072	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:51.066415071 CET	4258	57070	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:51.067148924 CET	4258	57072	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:51.067262888 CET	57072	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:51.067408085 CET	57072	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:51.194369078 CET	4258	57072	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:52.145400047 CET	4258	57072	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:52.145558119 CET	57072	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:52.145603895 CET	4258	57072	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:52.145730019 CET	57072	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:52.146646023 CET	57074	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:52.265307903 CET	4258	57072	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:52.266112089 CET	4258	57074	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:52.266303062 CET	57074	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:52.266381979 CET	57074	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:52.388293982 CET	4258	57074	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:53.353017092 CET	4258	57074	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:53.353046894 CET	4258	57074	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:53.353161097 CET	57074	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:53.353256941 CET	57074	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:53.353859901 CET	57076	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:53.472908974 CET	4258	57074	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:53.473372936 CET	4258	57076	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:53.473525047 CET	57076	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:53.473571062 CET	57076	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:53.596673012 CET	4258	57076	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:54.543375015 CET	4258	57076	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:54.543390989 CET	4258	57076	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:54.543550968 CET	57076	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:54.543598890 CET	57076	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:54.544589996 CET	57078	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:54.663250923 CET	4258	57076	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:54.664094925 CET	4258	57078	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:54.664268017 CET	57078	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:54.664324999 CET	57078	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:54.784367085 CET	4258	57078	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:55.732662916 CET	4258	57078	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:55.732777119 CET	4258	57078	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:55.732848883 CET	57078	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:55.732999086 CET	57078	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:55.734103918 CET	57080	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:55.852483034 CET	4258	57078	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:55.853682995 CET	4258	57080	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:55.853770971 CET	57080	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:55.853893995 CET	57080	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:55.974246979 CET	4258	57080	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:56.963785887 CET	4258	57080	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:56.963807106 CET	4258	57080	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:56.963984013 CET	57080	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:56.964092970 CET	57080	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:56.965161085 CET	57082	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:57.083693027 CET	4258	57080	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:57.084685087 CET	4258	57082	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:57.084884882 CET	57082	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:57.084945917 CET	57082	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:57.204479933 CET	4258	57082	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:58.152187109 CET	4258	57082	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:58.152209997 CET	4258	57082	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:58.152513981 CET	57082	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:58.152640104 CET	57082	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:58.153651953 CET	57084	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:58.272264957 CET	4258	57082	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:58.273319960 CET	4258	57084	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:58.273498058 CET	57084	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:58.273590088 CET	57084	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:58.393647909 CET	4258	57084	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:59.379117012 CET	4258	57084	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:59.379147053 CET	4258	57084	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:59.379355907 CET	57084	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:59.379471064 CET	57084	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:59.380675077 CET	57086	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:59.499187946 CET	4258	57084	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:59.500262976 CET	4258	57086	31.172.83.147	192.168.2.14
Dec 22, 2024 16:12:59.500499010 CET	57086	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:59.500499010 CET	57086	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:12:59.620018959 CET	4258	57086	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:00.567717075 CET	4258	57086	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:00.567744970 CET	4258	57086	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:00.567936897 CET	57086	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:00.568084002 CET	57086	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:00.569188118 CET	57088	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:00.688005924 CET	4258	57086	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:00.688955069 CET	4258	57088	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:00.689074039 CET	57088	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:00.689189911 CET	57088	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:00.808756113 CET	4258	57088	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:01.756205082 CET	4258	57088	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:01.756227016 CET	4258	57088	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:01.756417990 CET	57088	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:01.756556034 CET	57088	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:01.757657051 CET	57090	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:01.876112938 CET	4258	57088	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:01.877305031 CET	4258	57090	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:01.877446890 CET	57090	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:01.877470970 CET	57090	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:01.997157097 CET	4258	57090	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:02.944757938 CET	4258	57090	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:02.944839001 CET	4258	57090	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:02.944912910 CET	57090	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:02.944973946 CET	57090	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:02.945866108 CET	57092	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:03.070225954 CET	4258	57090	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:03.070281982 CET	4258	57092	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:03.070362091 CET	57092	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:03.070409060 CET	57092	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:03.190509081 CET	4258	57092	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:04.138995886 CET	4258	57092	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:04.139015913 CET	4258	57092	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:04.139204025 CET	57092	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:04.139322996 CET	57092	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:04.140314102 CET	57094	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:04.258955956 CET	4258	57092	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:04.259788990 CET	4258	57094	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:04.260107040 CET	57094	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:04.260107040 CET	57094	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:04.380198956 CET	4258	57094	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:05.345330000 CET	4258	57094	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:05.345403910 CET	4258	57094	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:05.345550060 CET	57094	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:05.345587015 CET	57094	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:05.346489906 CET	57096	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:05.465194941 CET	4258	57094	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:05.466147900 CET	4258	57096	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:05.466453075 CET	57096	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:05.466453075 CET	57096	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:05.585982084 CET	4258	57096	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:06.533170938 CET	4258	57096	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:06.533468962 CET	4258	57096	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:06.533494949 CET	57096	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:06.533591032 CET	57096	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:06.534626961 CET	57098	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:06.655431986 CET	4258	57096	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:06.656313896 CET	4258	57098	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:06.656598091 CET	57098	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:06.656636953 CET	57098	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:06.776386976 CET	4258	57098	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:07.724232912 CET	4258	57098	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:07.724260092 CET	4258	57098	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:07.724555016 CET	57098	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:07.724601030 CET	57098	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:07.725425959 CET	57100	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:07.844404936 CET	4258	57098	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:07.845241070 CET	4258	57100	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:07.845501900 CET	57100	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:07.845710993 CET	57100	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:07.966008902 CET	4258	57100	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:08.914051056 CET	4258	57100	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:08.914138079 CET	4258	57100	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:08.914343119 CET	57100	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:08.914439917 CET	57100	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:08.915227890 CET	57102	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:09.034118891 CET	4258	57100	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:09.034807920 CET	4258	57102	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:09.034956932 CET	57102	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:09.035013914 CET	57102	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:09.154759884 CET	4258	57102	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:10.102332115 CET	4258	57102	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:10.102351904 CET	4258	57102	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:10.102550983 CET	57102	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:10.102770090 CET	57102	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:10.103632927 CET	57104	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:10.222534895 CET	4258	57102	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:10.223535061 CET	4258	57104	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:10.223774910 CET	57104	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:10.223917961 CET	57104	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:10.343729019 CET	4258	57104	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:11.293632984 CET	4258	57104	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:11.293667078 CET	4258	57104	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:11.293867111 CET	57104	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:11.294212103 CET	57104	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:11.294929028 CET	57106	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:11.414376974 CET	4258	57104	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:11.415008068 CET	4258	57106	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:11.415407896 CET	57106	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:11.415497065 CET	57106	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:11.535521984 CET	4258	57106	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:12.483159065 CET	4258	57106	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:12.483194113 CET	4258	57106	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:12.483367920 CET	57106	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:12.483504057 CET	57106	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:12.484365940 CET	57108	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:12.603035927 CET	4258	57106	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:12.603944063 CET	4258	57108	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:12.604305029 CET	57108	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:12.604394913 CET	57108	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:12.724013090 CET	4258	57108	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:13.671699047 CET	4258	57108	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:13.671740055 CET	4258	57108	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:13.672038078 CET	57108	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:13.672123909 CET	57108	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:13.672739983 CET	57110	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:13.791712999 CET	4258	57108	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:13.792391062 CET	4258	57110	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:13.792486906 CET	57110	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:13.792551994 CET	57110	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:13.912050962 CET	4258	57110	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:14.861592054 CET	4258	57110	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:14.861751080 CET	4258	57110	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:14.861783028 CET	57110	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:14.861927986 CET	57110	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:14.862967014 CET	57112	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:14.981461048 CET	4258	57110	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:14.982573032 CET	4258	57112	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:14.982836008 CET	57112	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:14.983053923 CET	57112	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:15.102660894 CET	4258	57112	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:16.058392048 CET	4258	57112	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:16.058604956 CET	57112	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:16.059195042 CET	4258	57112	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:16.059619904 CET	57112	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:16.061043024 CET	57114	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:16.179444075 CET	4258	57112	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:16.180713892 CET	4258	57114	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:16.180963993 CET	57114	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:16.181056976 CET	57114	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:16.302696943 CET	4258	57114	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:17.251703978 CET	4258	57114	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:17.251734018 CET	4258	57114	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:17.251905918 CET	57114	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:17.252070904 CET	57114	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:17.252991915 CET	57116	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:17.371499062 CET	4258	57114	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:17.372570992 CET	4258	57116	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:17.372817039 CET	57116	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:17.372925997 CET	57116	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:17.492475033 CET	4258	57116	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:18.474371910 CET	4258	57116	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:18.474436998 CET	4258	57116	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:18.474519014 CET	57116	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:18.474759102 CET	57116	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:18.475542068 CET	57118	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:18.594335079 CET	4258	57116	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:18.595220089 CET	4258	57118	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:18.595361948 CET	57118	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:18.595451117 CET	57118	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:18.715101957 CET	4258	57118	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:19.662596941 CET	4258	57118	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:19.662720919 CET	4258	57118	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:19.662853003 CET	57118	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:19.662951946 CET	57118	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:19.664161921 CET	57120	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:19.782630920 CET	4258	57118	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:19.783934116 CET	4258	57120	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:19.784131050 CET	57120	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:19.784131050 CET	57120	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:19.903836966 CET	4258	57120	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:20.851257086 CET	4258	57120	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:20.851356030 CET	4258	57120	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:20.851434946 CET	57120	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:20.851578951 CET	57120	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:20.852840900 CET	57122	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:20.971558094 CET	4258	57120	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:20.972310066 CET	4258	57122	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:20.972448111 CET	57122	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:20.972526073 CET	57122	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:21.092066050 CET	4258	57122	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:22.040266037 CET	4258	57122	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:22.040448904 CET	4258	57122	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:22.040446043 CET	57122	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:22.040626049 CET	57122	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:22.041773081 CET	57124	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:22.160084963 CET	4258	57122	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:22.161361933 CET	4258	57124	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:22.161479950 CET	57124	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:22.161591053 CET	57124	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:22.281323910 CET	4258	57124	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:23.229460001 CET	4258	57124	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:23.229485035 CET	4258	57124	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:23.229697943 CET	57124	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:23.229764938 CET	57124	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:23.230412006 CET	57126	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:23.349708080 CET	4258	57124	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:23.350545883 CET	4258	57126	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:23.350697041 CET	57126	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:23.350795984 CET	57126	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:23.470487118 CET	4258	57126	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:24.429310083 CET	4258	57126	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:24.429330111 CET	4258	57126	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:24.429570913 CET	57126	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:24.429656029 CET	57126	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:24.430536032 CET	57128	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:24.549192905 CET	4258	57126	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:24.550077915 CET	4258	57128	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:24.550199986 CET	57128	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:24.550276041 CET	57128	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:24.669979095 CET	4258	57128	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:25.627480030 CET	4258	57128	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:25.627783060 CET	57128	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:25.627791882 CET	4258	57128	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:25.628124952 CET	57128	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:25.629522085 CET	57130	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:25.748426914 CET	4258	57128	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:25.749511003 CET	4258	57130	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:25.749687910 CET	57130	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:25.750015974 CET	57130	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:25.870254040 CET	4258	57130	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:26.816929102 CET	4258	57130	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:26.817094088 CET	4258	57130	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:26.817127943 CET	57130	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:26.817246914 CET	57130	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:26.818219900 CET	57132	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:26.938052893 CET	4258	57130	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:26.938944101 CET	4258	57132	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:26.939142942 CET	57132	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:26.939220905 CET	57132	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:27.061913967 CET	4258	57132	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:28.020772934 CET	4258	57132	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:28.020804882 CET	4258	57132	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:28.020992041 CET	57132	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:28.021069050 CET	57132	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:28.022007942 CET	57134	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:28.142339945 CET	4258	57132	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:28.143105030 CET	4258	57134	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:28.143201113 CET	57134	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:28.143349886 CET	57134	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:28.269776106 CET	4258	57134	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:29.221514940 CET	4258	57134	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:29.221668005 CET	4258	57134	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:29.221837997 CET	57134	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:29.222095013 CET	57134	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:29.222937107 CET	57136	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:29.341701031 CET	4258	57134	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:29.342756987 CET	4258	57136	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:29.342901945 CET	57136	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:29.342952967 CET	57136	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:29.463668108 CET	4258	57136	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:30.410759926 CET	4258	57136	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:30.410855055 CET	4258	57136	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:30.410993099 CET	57136	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:30.411071062 CET	57136	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:30.411761999 CET	57138	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:30.530706882 CET	4258	57136	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:30.531407118 CET	4258	57138	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:30.531584024 CET	57138	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:30.531697035 CET	57138	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:30.652127028 CET	4258	57138	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:31.621915102 CET	4258	57138	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:31.622154951 CET	57138	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:31.622288942 CET	4258	57138	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:31.622402906 CET	57138	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:31.623214006 CET	57140	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:31.743098021 CET	4258	57138	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:31.743577957 CET	4258	57140	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:31.743742943 CET	57140	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:31.743875027 CET	57140	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:31.863913059 CET	4258	57140	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:32.814419031 CET	4258	57140	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:32.814490080 CET	4258	57140	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:32.814780951 CET	57140	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:32.814846039 CET	57140	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:32.815706968 CET	57142	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:32.934537888 CET	4258	57140	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:32.935307026 CET	4258	57142	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:32.935380936 CET	57142	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:32.935412884 CET	57142	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:33.055107117 CET	4258	57142	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:34.006987095 CET	4258	57142	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:34.007008076 CET	4258	57142	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:34.007123947 CET	57142	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:34.007173061 CET	57142	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:34.007956028 CET	57144	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:34.128599882 CET	4258	57142	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:34.129403114 CET	4258	57144	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:34.129651070 CET	57144	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:34.129756927 CET	57144	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:34.249444962 CET	4258	57144	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:35.207097054 CET	4258	57144	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:35.207168102 CET	4258	57144	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:35.207293034 CET	57144	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:35.207385063 CET	57144	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:35.208102942 CET	57146	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:35.327286005 CET	4258	57144	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:35.327872038 CET	4258	57146	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:35.328018904 CET	57146	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:35.328075886 CET	57146	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:35.448326111 CET	4258	57146	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:36.411147118 CET	4258	57146	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:36.411189079 CET	4258	57146	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:36.411478996 CET	57146	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:36.411607027 CET	57146	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:36.412677050 CET	57148	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:36.531251907 CET	4258	57146	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:36.532207966 CET	4258	57148	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:36.532356977 CET	57148	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:36.532471895 CET	57148	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:36.653085947 CET	4258	57148	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:37.609643936 CET	4258	57148	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:37.609683990 CET	4258	57148	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:37.610004902 CET	57148	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:37.610121012 CET	57148	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:37.610948086 CET	57150	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:37.729729891 CET	4258	57148	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:37.730621099 CET	4258	57150	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:37.730954885 CET	57150	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:37.731044054 CET	57150	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:37.850725889 CET	4258	57150	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:38.824316978 CET	4258	57150	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:38.824462891 CET	57150	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:38.824523926 CET	4258	57150	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:38.824601889 CET	57150	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:38.825316906 CET	57152	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:38.944299936 CET	4258	57150	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:38.945290089 CET	4258	57152	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:38.945388079 CET	57152	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:38.945486069 CET	57152	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:39.064996958 CET	4258	57152	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:40.076735973 CET	4258	57152	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:40.076986074 CET	57152	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:40.077078104 CET	4258	57152	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:40.077183008 CET	57152	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:40.078243971 CET	57154	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:40.196656942 CET	4258	57152	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:40.197772026 CET	4258	57154	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:40.197988033 CET	57154	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:40.198059082 CET	57154	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:40.317609072 CET	4258	57154	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:41.302510023 CET	4258	57154	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:41.302726984 CET	57154	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:41.303019047 CET	4258	57154	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:41.303272963 CET	57154	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:41.304156065 CET	57156	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:41.422698975 CET	4258	57154	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:41.423691988 CET	4258	57156	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:41.423926115 CET	57156	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:41.424031019 CET	57156	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:41.543562889 CET	4258	57156	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:42.501156092 CET	4258	57156	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:42.501178980 CET	4258	57156	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:42.501280069 CET	57156	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:42.501358986 CET	57156	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:42.502356052 CET	57158	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:42.625199080 CET	4258	57156	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:42.626115084 CET	4258	57158	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:42.626219034 CET	57158	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:42.626255035 CET	57158	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:42.750763893 CET	4258	57158	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:43.719161987 CET	4258	57158	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:43.719225883 CET	4258	57158	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:43.719352007 CET	57158	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:43.719444990 CET	57158	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:43.720072031 CET	57160	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:43.839248896 CET	4258	57158	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:43.839658976 CET	4258	57160	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:43.839715004 CET	57160	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:43.839755058 CET	57160	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:43.959656000 CET	4258	57160	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:44.364146948 CET	45432	53	192.168.2.14	8.8.8.8
Dec 22, 2024 16:13:44.483820915 CET	53	45432	8.8.8.8	192.168.2.14
Dec 22, 2024 16:13:44.483899117 CET	45432	53	192.168.2.14	8.8.8.8
Dec 22, 2024 16:13:44.483947039 CET	45432	53	192.168.2.14	8.8.8.8
Dec 22, 2024 16:13:44.483978033 CET	45432	53	192.168.2.14	8.8.8.8
Dec 22, 2024 16:13:44.605165005 CET	53	45432	8.8.8.8	192.168.2.14
Dec 22, 2024 16:13:44.605175972 CET	53	45432	8.8.8.8	192.168.2.14
Dec 22, 2024 16:13:44.909655094 CET	4258	57160	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:44.909708977 CET	57160	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:44.909941912 CET	4258	57160	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:44.910026073 CET	57160	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:44.910739899 CET	57164	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:45.031214952 CET	4258	57160	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:45.031747103 CET	4258	57164	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:45.031806946 CET	57164	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:45.031855106 CET	57164	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:45.151566029 CET	4258	57164	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:45.570538044 CET	53	45432	8.8.8.8	192.168.2.14
Dec 22, 2024 16:13:45.570621967 CET	45432	53	192.168.2.14	8.8.8.8
Dec 22, 2024 16:13:45.807954073 CET	53	45432	8.8.8.8	192.168.2.14
Dec 22, 2024 16:13:45.808064938 CET	45432	53	192.168.2.14	8.8.8.8
Dec 22, 2024 16:13:46.111131907 CET	4258	57164	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:46.111176968 CET	4258	57164	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:46.111263990 CET	57164	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:46.111351967 CET	57164	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:46.111848116 CET	57166	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:46.238127947 CET	4258	57164	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:46.238568068 CET	4258	57166	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:46.238775015 CET	57166	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:46.238858938 CET	57166	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:46.358624935 CET	4258	57166	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:47.306010008 CET	4258	57166	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:47.306070089 CET	4258	57166	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:47.306150913 CET	57166	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:47.306258917 CET	57166	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:47.306751966 CET	57168	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:47.428814888 CET	4258	57166	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:47.429617882 CET	4258	57168	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:47.429703951 CET	57168	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:47.429763079 CET	57168	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:47.549371004 CET	4258	57168	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:47.570837975 CET	53	45432	8.8.8.8	192.168.2.14
Dec 22, 2024 16:13:47.571069956 CET	45432	53	192.168.2.14	8.8.8.8
Dec 22, 2024 16:13:47.690664053 CET	53	45432	8.8.8.8	192.168.2.14
Dec 22, 2024 16:13:48.519551992 CET	4258	57168	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:48.519599915 CET	4258	57168	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:48.519646883 CET	57168	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:48.519731998 CET	57168	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:48.520106077 CET	57170	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:48.639343023 CET	4258	57168	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:48.639704943 CET	4258	57170	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:48.639796019 CET	57170	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:48.639847994 CET	57170	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:48.761492014 CET	4258	57170	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:49.768038988 CET	4258	57170	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:49.768210888 CET	4258	57170	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:49.768218994 CET	57170	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:49.768318892 CET	57170	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:49.768876076 CET	57172	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:49.888169050 CET	4258	57170	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:49.889296055 CET	4258	57172	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:49.889411926 CET	57172	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:49.889463902 CET	57172	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:50.010112047 CET	4258	57172	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:50.974653959 CET	4258	57172	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:50.974695921 CET	4258	57172	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:50.974911928 CET	57172	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:50.974981070 CET	57172	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:50.975501060 CET	57174	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:51.095490932 CET	4258	57172	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:51.095738888 CET	4258	57174	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:51.095813990 CET	57174	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:51.095858097 CET	57174	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:51.217082977 CET	4258	57174	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:52.261229992 CET	4258	57174	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:52.261267900 CET	4258	57174	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:52.261356115 CET	57174	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:52.261436939 CET	57174	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:52.262038946 CET	57176	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:52.381263971 CET	4258	57174	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:52.381654024 CET	4258	57176	31.172.83.147	192.168.2.14
Dec 22, 2024 16:13:52.381855965 CET	57176	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:52.381884098 CET	57176	4258	192.168.2.14	31.172.83.147
Dec 22, 2024 16:13:52.501440048 CET	4258	57176	31.172.83.147	192.168.2.14

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 22, 2024 16:13:44.483947039 CET	192.168.2.14	8.8.8.8	0xac43	Standard query (0)	daisy.ubuntu.com	A (IP address)	IN (0x0001)	false
Dec 22, 2024 16:13:44.483978033 CET	192.168.2.14	8.8.8.8	0x7829	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 22, 2024 16:13:45.807954073 CET	8.8.8.8	192.168.2.14	0xac43	No error (0)	daisy.ubuntu.com		162.213.35.25	A (IP address)	IN (0x0001)	false
Dec 22, 2024 16:13:45.807954073 CET	8.8.8.8	192.168.2.14	0xac43	No error (0)	daisy.ubuntu.com		162.213.35.24	A (IP address)	IN (0x0001)	false

System Behavior

Analysis Process: hidakibest.sparc.elf PID: 5583, Parent PID: 5501

General

Start time (UTC):	15:10:59
Start date (UTC):	22/12/2024
Path:	/tmp/hidakibest.sparc.elf
Arguments:	/tmp/hidakibest.sparc.elf
File size:	4379400 bytes
MD5 hash:	7dc1c0e23cd5e102bb12e5c29403410e

Chronological Activities

Analysis Process: hidakibest.sparc.elf PID: 5585, Parent PID: 5583

General

Start time (UTC):	15:11:00
Start date (UTC):	22/12/2024
Path:	/tmp/hidakibest.sparc.elf
Arguments:	-
File size:	4379400 bytes
MD5 hash:	7dc1c0e23cd5e102bb12e5c29403410e

Chronological Activities

Analysis Process: hidakibest.sparc.elf PID: 5587, Parent PID: 5585

General

Start time (UTC):	15:11:00
Start date (UTC):	22/12/2024
Path:	/tmp/hidakibest.sparc.elf
Arguments:	-
File size:	4379400 bytes
MD5 hash:	7dc1c0e23cd5e102bb12e5c29403410e

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system. Functionality could exist within remote access tools to enable this, but utilities available on the operating system could also be used such as Ping or `net view` using Net .
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Network Traffic: Network Connection Creation, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may obfuscate command and control traffic to make it more difficult to detect. Command and control (C2) communications are hidden (but not necessarily encrypted) in an attempt to make the content more difficult to discover or decipher and to make the communication less conspicuous and hide commands from being seen. This encompasses many methods, such as adding junk data to protocol traffic, using steganography, or impersonating legitimate protocols.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report hidakibest.sparc.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Threatname: Gafgyt

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/tmp/qemu-open.qh37Kn (deleted)

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Network Port Distribution

TCP Packets

DNS Queries

DNS Answers

System Behavior

Analysis Process: hidakibest.sparc.elf PID: 5583, Parent PID: 5501

General

Chronological Activities

Analysis Process: hidakibest.sparc.elf PID: 5585, Parent PID: 5583

General

Chronological Activities

Analysis Process: hidakibest.sparc.elf PID: 5587, Parent PID: 5585

General

Chronological Activities

Linux Analysis Report
hidakibest.sparc.elf