Edit tour

Linux Analysis Report
hidakibest.mips.elf

Overview

General Information

Sample name:	hidakibest.mips.elf
Analysis ID:	1579499
MD5:	a2f2e318660621d3770d1f55789199d5
SHA1:	46c7c72f1eb438259c5c0d2c74a9ecbd4070578e
SHA256:	412dfa6621f9156ace7e40661d5a8d2c60451592f297037730ae00b359923537
Tags:	elfuser-abuse_ch
Infos:

Detection

Gafgyt, Mirai

Score:	92
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Yara detected Gafgyt

Yara detected Mirai

Opens /proc/net/* files useful for finding connected devices and routers

Detected TCP or UDP traffic on non-standard ports

Sample contains strings that are user agent strings indicative of HTTP manipulation

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1579499
Start date and time:	2024-12-22 16:10:02 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 26s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	hidakibest.mips.elf
Detection:	MAL
Classification:	mal92.spre.troj.linELF@0/1@2/0

Warnings

VT rate limit hit for: 185.216.71.152:4258

Runtime Messages

Command:	/tmp/hidakibest.mips.elf
PID:	5499
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:

Process Tree

system is lnxubuntu20

hidakibest.mips.elf (PID: 5499, Parent: 5424, MD5: 0083f1f0e77be34ad27f849842bbb00c) Arguments: /tmp/hidakibest.mips.elf

hidakibest.mips.elf New Fork (PID: 5501, Parent: 5499)

hidakibest.mips.elf New Fork (PID: 5503, Parent: 5501)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
hidakibest.mips.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
hidakibest.mips.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
hidakibest.mips.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x16df8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16e0c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16e20:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16e34:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16e48:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16e5c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16e70:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16e84:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16e98:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16eac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16ec0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16ed4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16ee8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16efc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16f10:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16f24:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16f38:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16f4c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16f60:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16f74:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16f88:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
hidakibest.mips.elf	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x16da8:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64

Memory Dumps

Source	Rule	Description	Author	Strings
5499.1.00007f8298400000.00007f829841a000.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
5499.1.00007f8298400000.00007f829841a000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5499.1.00007f8298400000.00007f829841a000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x16df8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16e0c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16e20:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16e34:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16e48:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16e5c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16e70:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16e84:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16e98:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16eac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16ec0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16ed4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16ee8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16efc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16f10:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16f24:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16f38:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16f4c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16f60:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16f74:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16f88:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5499.1.00007f8298400000.00007f829841a000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x16da8:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
5501.1.00007f8298400000.00007f829841a000.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
5501.1.00007f8298400000.00007f829841a000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5501.1.00007f8298400000.00007f829841a000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x16df8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16e0c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16e20:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16e34:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16e48:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16e5c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16e70:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16e84:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16e98:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16eac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16ec0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16ed4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16ee8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16efc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16f10:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16f24:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16f38:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16f4c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16f60:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16f74:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16f88:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5501.1.00007f8298400000.00007f829841a000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x16da8:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: hidakibest.mips.elf PID: 5499	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: hidakibest.mips.elf PID: 5499	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x7b70:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7b84:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7b98:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7bac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7bc0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7bd4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7be8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7bfc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7c10:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7c24:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7c38:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7c4c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7c60:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7c74:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7c88:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7c9c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7cb0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7cc4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7cd8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7cec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7d00:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: hidakibest.mips.elf PID: 5499	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x7b23:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64 0x7f95:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: hidakibest.mips.elf PID: 5501	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: hidakibest.mips.elf PID: 5501	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x6b24:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6b38:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6b4c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6b60:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6b74:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6b88:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6b9c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6bb0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6bc4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6bd8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6bec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6c00:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6c14:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6c28:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6c3c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6c50:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6c64:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6c78:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6c8c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6ca0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x6cb4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: hidakibest.mips.elf PID: 5501	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x6ad7:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64 0x6f49:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Click to see the 9 entries

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: hidakibest.mips.elf

Avira: detected

Found malware configuration

Source: hidakibest.mips.elf

Malware Configuration Extractor: Gafgyt {"C2 url": "185.216.71.152:4258"}

Multi AV Scanner detection for submitted file

Source: hidakibest.mips.elf	Virustotal: Detection: 65%			Perma Link
Source: hidakibest.mips.elf	ReversingLabs: Detection: 63%

Spreading

Opens /proc/net/* files useful for finding connected devices and routers

Source: /tmp/hidakibest.mips.elf (PID: 5499)

Opens: /proc/net/route

Jump to behavior

Source: global traffic

TCP traffic: 192.168.2.13:40076 -> 185.216.71.152:4258

Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152

Source: global traffic

DNS traffic detected: DNS query: daisy.ubuntu.com

Source: hidakibest.mips.elf	String found in binary or memory: http://fast.no/support/crawler.asp)
Source: hidakibest.mips.elf	String found in binary or memory: http://feedback.redkolibri.com/
Source: hidakibest.mips.elf	String found in binary or memory: http://www.baidu.com/search/spider.htm)
Source: hidakibest.mips.elf	String found in binary or memory: http://www.baidu.com/search/spider.html)
Source: hidakibest.mips.elf	String found in binary or memory: http://www.billybobbot.com/crawler/)

System Summary

Malicious sample detected (through community Yara rule)

Source: hidakibest.mips.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: hidakibest.mips.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5499.1.00007f8298400000.00007f829841a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5499.1.00007f8298400000.00007f829841a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5501.1.00007f8298400000.00007f829841a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5501.1.00007f8298400000.00007f829841a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: hidakibest.mips.elf PID: 5499, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: hidakibest.mips.elf PID: 5499, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: hidakibest.mips.elf PID: 5501, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: hidakibest.mips.elf PID: 5501, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown

Source: hidakibest.mips.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: hidakibest.mips.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5499.1.00007f8298400000.00007f829841a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5499.1.00007f8298400000.00007f829841a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5501.1.00007f8298400000.00007f829841a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5501.1.00007f8298400000.00007f829841a000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: hidakibest.mips.elf PID: 5499, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: hidakibest.mips.elf PID: 5499, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: hidakibest.mips.elf PID: 5501, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: hidakibest.mips.elf PID: 5501, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16

Source: classification engine

Classification label: mal92.spre.troj.linELF@0/1@2/0

Source: /tmp/hidakibest.mips.elf (PID: 5499)

Queries kernel information via 'uname':

Jump to behavior

Source: hidakibest.mips.elf, 5499.1.0000556f0f379000.0000556f0f400000.rw-.sdmp, hidakibest.mips.elf, 5501.1.0000556f0f379000.0000556f0f400000.rw-.sdmp	Binary or memory string: oU!/etc/qemu-binfmt/mips
Source: hidakibest.mips.elf, 5499.1.0000556f0f379000.0000556f0f400000.rw-.sdmp, hidakibest.mips.elf, 5501.1.0000556f0f379000.0000556f0f400000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/mips
Source: hidakibest.mips.elf, 5499.1.00007ffdee195000.00007ffdee1b6000.rw-.sdmp, hidakibest.mips.elf, 5501.1.00007ffdee195000.00007ffdee1b6000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-mips
Source: hidakibest.mips.elf, 5499.1.00007ffdee195000.00007ffdee1b6000.rw-.sdmp	Binary or memory string: oU/tmp/qemu-open.OQewv2\
Source: hidakibest.mips.elf, 5499.1.00007ffdee195000.00007ffdee1b6000.rw-.sdmp, hidakibest.mips.elf, 5501.1.00007ffdee195000.00007ffdee1b6000.rw-.sdmp	Binary or memory string: Nx86_64/usr/bin/qemu-mips/tmp/hidakibest.mips.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/hidakibest.mips.elf
Source: hidakibest.mips.elf, 5499.1.00007ffdee195000.00007ffdee1b6000.rw-.sdmp	Binary or memory string: /tmp/qemu-open.OQewv2

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match	File source: hidakibest.mips.elf, type: SAMPLE
Source: Yara match	File source: 5499.1.00007f8298400000.00007f829841a000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5501.1.00007f8298400000.00007f829841a000.r-x.sdmp, type: MEMORY

Yara detected Mirai

Source: Yara match	File source: hidakibest.mips.elf, type: SAMPLE
Source: Yara match	File source: 5499.1.00007f8298400000.00007f829841a000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5501.1.00007f8298400000.00007f829841a000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: hidakibest.mips.elf PID: 5499, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: hidakibest.mips.elf PID: 5501, type: MEMORYSTR

Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36
Source: Initial sample	User agent string found: Opera/9.80 (X11; Linux i686; Ubuntu/14.10) Presto/2.12.388 Version/12.16
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows; U; Windows NT 6.1; rv:2.2) Gecko/20110201
Source: Initial sample	User agent string found: Opera/9.80 (Windows NT 5.2; U; ru) Presto/2.5.22 Version/10.51
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; AS; rv:11.0) like Gecko
Source: Initial sample	User agent string found: Mozilla/5.0 (Android; Linux armv7l; rv:9.0) Gecko/20111216 Firefox/9.0 Fennec/9.0
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/536.5 (KHTML, like Gecko) Chrome/19.0.1084.56 Safari/536.5
Source: Initial sample	User agent string found: Opera/9.80 (Windows NT 5.1; U; en) Presto/2.10.229 Version/11.60
Source: Initial sample	User agent string found: Mozilla/5.0 (iPad; U; CPU OS 5_1 like Mac OS X) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B367 Safari/531.21.10 UCBrowser/3.4.3.532
Source: Initial sample	User agent string found: Mozilla/5.0 (Nintendo WiiU) AppleWebKit/536.30 (KHTML, like Gecko) NX/3.0.4.2.12 NintendoBrowser/4.3.1.11264.US
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:25.0) Gecko/20100101 Firefox/25.0
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; pl) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; en) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; ja) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; cn) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; fr) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:12.0) Gecko/20100101 Firefox/12.0
Source: Initial sample	User agent string found: Mozilla/5.0 (X11; U; Linux x86_64; de; rv:1.9.2.8) Gecko/20100723 Ubuntu/10.04 (lucid) Firefox/3.6.8
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1; rv:13.0) Gecko/20100101 Firefox/13.0.1
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:11.0) Gecko/20100101 Firefox/11.0
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1
Source: Initial sample	User agent string found: Opera/9.80 (Windows NT 5.1; U; en) Presto/2.10.289 Version/12.01
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1; rv:5.0.1) Gecko/20100101 Firefox/5.0.1
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; rv:5.0) Gecko/20100101 Firefox/5.02
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.0) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.112 Safari/535.1
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36

Remote Access Functionality

Yara detected Gafgyt

Source: Yara match	File source: hidakibest.mips.elf, type: SAMPLE
Source: Yara match	File source: 5499.1.00007f8298400000.00007f829841a000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5501.1.00007f8298400000.00007f829841a000.r-x.sdmp, type: MEMORY

Yara detected Mirai

Source: Yara match	File source: hidakibest.mips.elf, type: SAMPLE
Source: Yara match	File source: 5499.1.00007f8298400000.00007f829841a000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5501.1.00007f8298400000.00007f829841a000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: hidakibest.mips.elf PID: 5499, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: hidakibest.mips.elf PID: 5501, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Data Obfuscation	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	1 Remote System Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Application Layer Protocol	Traffic Duplication	Data Destruction

Malware Configuration

Threatname: Gafgyt

{"C2 url": "185.216.71.152:4258"}

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
hidakibest.mips.elf	65%	Virustotal		Browse
hidakibest.mips.elf	63%	ReversingLabs	Linux.Trojan.LnxGafgyt
hidakibest.mips.elf	100%	Avira	EXP/ELF.Mirai.Z.A

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
daisy.ubuntu.com	162.213.35.24	true	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
185.216.71.152:4258	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://www.baidu.com/search/spider.html)	hidakibest.mips.elf	false	high
http://www.billybobbot.com/crawler/)	hidakibest.mips.elf	false	high
http://fast.no/support/crawler.asp)	hidakibest.mips.elf	false	high
http://feedback.redkolibri.com/	hidakibest.mips.elf	false	high
http://www.baidu.com/search/spider.htm)	hidakibest.mips.elf	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
185.216.71.152	unknown	Germany		43659	CLOUDCOMPUTINGDE	true

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
185.216.71.152	hidakibest.x86.elf	Get hash	malicious	Mirai, Gafgyt	Browse
	hidakibest.arm5.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	hidakibest.arm4.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	hidakibest.mpsl.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	hidakibest.arm7.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	hidakibest.sparc.elf	Get hash	malicious	Gafgyt, Mirai	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
daisy.ubuntu.com	hidakibest.ppc.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	hidakibest.arm5.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.24
	hidakibest.mips.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.24
	hidakibest.arm4.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	hidakibest.x86.elf	Get hash	malicious	Mirai, Gafgyt	Browse	162.213.35.25
	hidakibest.arm5.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.24
	hidakibest.mpsl.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.24
	hidakibest.arm7.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.24
	hidakibest.sparc.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	Space.arm6.elf	Get hash	malicious	Mirai	Browse	162.213.35.25

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDCOMPUTINGDE	hidakibest.x86.elf	Get hash	malicious	Mirai, Gafgyt	Browse	185.216.71.152
	hidakibest.arm5.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.216.71.152
	hidakibest.arm4.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.216.71.152
	hidakibest.mpsl.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.216.71.152
	hidakibest.arm7.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.216.71.152
	hidakibest.sparc.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.216.71.152
	https://www.google.gr/url?url=https://pniuvlpkjqhdwff&exox=rvhqtix&eaydny=ysf&gzfds=lqrwiz&nci=qtwmzch&iccvb=yhwtsp&vtqs=avtajyu&oagvzgp=irlq&mvdoc=embwrj&yylmwei=tmn&mntt=qqcvuhkd&lkydbjfiod=izjcgyubqc&q=amp/anre6g6.j%c2%adh%c2%adhn%c2%adt%c2%addd%c2%adsm%c2%ado%c2%admcw%c2%adw%c2%adgu%c2%adno.com%e2%80%8b/99twfh3p8&gcyx=ncgobia&yfevoul=wtloixvv&hukl=qfkmtky&nlhwnbr=bwkoiopy&eqfw=bmcpntp&vlvegw=zdbpajeyq&ghrv=kcdfwrl&kyddme=myxsnvtxf&asco=mgumegd&dvvibf=hzfexefeg&osme=bdyguyp&njtjvd=bkelfwmxg&bxrb=ltpyjsv&girpat=lswjchrwc&qapj=wwwowde&vahefc=ghseyzgyf&ahaj=zfqmkuo&pfsfeu=ttucmtamu&sffs=oxaajjo&hbwhgy=mgfzglmmo&bdwl=oifsufx&befsmv=jskhtmnps&sfjy=powmsnr&zixjqp=jyttdwbmu&fzkp=hztiqjm&jmzuvc=ufyoeqgfi&zujr=jxtbdtg&plvxoh=fxumxxddw&nkin=ykbzrdh&lghzli=agvbttfta&suag=ioudcjc&zpptpx=dxacgdnox&hmfz=yueoymp&fnshpz=wgayslegy&gjtg=qcjjozv&rymask=thcxzfpca&zcgn=ywtonnx&kqrpog=kgfvcqswk&imwa=wlvocxf&ggqznt=budaflbgp&zjhr=zscgach&esrhmq=qjdngljnl&ppoz=nhwzlik&zejsqg=vnvpaymyl&dnqb=kjswpyt&kunwbg=pzauoqliz&bqlz=qabnsnu&dlfnsr=dakxdfzen&uffg=uwnswdr&ywjevz=bnvkfavcb&rrob=celdmvn&czdusr=sjfjazfqw&ipgr=exylggn&fltcvh=sdfsricvf&byfs=apntxot&javhwh=nyphchiee&owbh=haflpez&mbyvqw=pdzpxeedx&ejov=taakkyw&oylsfz=qnzuplrnz&hxrq=ovegslq&duqjcc=pjwdpyvec&uoec=pjouxrb&eiezwk=okbkttiao&knji=kcmfaqe&qmathj=vymnqrvxa&gajs=riewukz&czxhiu=uysriqpma&avwe=gssbenk&jnwgpb=iqkroelwx&sjyt=zhxfzpx&liqoqs=bbajxgpxm&dqqu=ztzooam&haagcu=gkijlwgjy&mnsq=uervedi&yckhpb=ngqrbrqpc&pkne=nwisdfz&eqsiqu=mlrhvpuav	Get hash	malicious	Unknown	Browse	85.31.47.165
	6G4au3vWsI.lnk	Get hash	malicious	Unknown	Browse	80.76.51.231
	tegga.hta	Get hash	malicious	Xmrig	Browse	185.216.68.189
	KzHndnydSG.dll	Get hash	malicious	CobaltStrike	Browse	185.216.71.202

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

/tmp/qemu-open.OQewv2 (deleted)

Download File

Process:	/tmp/hidakibest.mips.elf
File Type:	ASCII text
Category:	dropped
Size (bytes):	230
Entropy (8bit):	3.709552666863289
Encrypted:	false
SSDEEP:	6:iekrEcvwAsE5KlwSd4pzKaV6Lpms/a/1VCxGF:ur+m5MwSdIKaV6L1adVRF
MD5:	2E667F43AE18CD1FE3C108641708A82C
SHA1:	12B90DE2DA0FBCFE66F3D6130905E56C8D6A68D3
SHA-256:	6F721492E7A337C5B498A8F55F5EB7AC745AFF716D0B5B08EFF2C1B6B250F983
SHA-512:	D2A0EE2509154EC1098994F38BE172F98F4150399C534A04D5C675D7C05630802225019F19344CC9070C576BC465A4FEB382AC7712DE6BF25E9244B54A9DB830
Malicious:	false
Reputation:	high, very likely benign file
Preview:	Iface.Destination.Gateway .Flags.RefCnt.Use.Metric.Mask..MTU.Window.IRTT .ens160.00000000.c0a80201.0003.0.0.0.00000000.0.0.0.ens160.c0a80200.00000000.0001.0.0.0.ffffff00.0.0.0.

Static File Info

General

File type:	ELF 32-bit MSB executable, MIPS, MIPS-I version 1 (SYSV), statically linked, not stripped
Entropy (8bit):	5.405938040701972
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	hidakibest.mips.elf
File size:	144'442 bytes
MD5:	a2f2e318660621d3770d1f55789199d5
SHA1:	46c7c72f1eb438259c5c0d2c74a9ecbd4070578e
SHA256:	412dfa6621f9156ace7e40661d5a8d2c60451592f297037730ae00b359923537
SHA512:	e322837fdb04deb162adb2bf91f99c49e61b08081f7616974a55920db75bd1e08b175ecfee96d0f9dc26d75dce20ccde6b33c14fe0823dd1d16edc1c5d441e7b
SSDEEP:	3072:sGGNZfCos2pA4FCV5hvikTam0/5ApYADn:hACyK40V5hvi9m0/5ASADn
TLSH:	B9E3D96B7961EBFAD05DC2310BF7AF6096A521E217D09345F2ACDB185E2034E1C5FBA0
File Content Preview:	.ELF.....................@.....4.........4. ...(....p........@...@...........................@...@...........................B...B.........x...............D.B.D.B.D................dt.Q.................................................C(.<...'.(....!'......

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, big endian
Version:	1 (current)
Machine:	MIPS R3000
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x4002d0
Flags:	0x1007
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	5
Section Header Offset:	121096
Section Header Size:	40
Number of Section Headers:	23
Header String Table Index:	20

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.reginfo	MIPS_REGINFO	0x4000d4	0xd4	0x18	0x18	0x2	A	0	0	4
.init	PROGBITS	0x4000ec	0xec	0x8c	0x0	0x6	AX	0	0	4
.text	PROGBITS	0x400180	0x180	0x15010	0x0	0x6	AX	0	0	16
.fini	PROGBITS	0x415190	0x15190	0x5c	0x0	0x6	AX	0	0	4
.rodata	PROGBITS	0x4151f0	0x151f0	0x3fc0	0x0	0x2	A	0	0	16
.eh_frame	PROGBITS	0x42a000	0x1a000	0x44	0x0	0x3	WA	0	0	4
.tbss	NOBITS	0x42a044	0x1a044	0x8	0x0	0x403	WAT	0	0	4
.ctors	PROGBITS	0x42a044	0x1a044	0x8	0x0	0x3	WA	0	0	4
.dtors	PROGBITS	0x42a04c	0x1a04c	0x8	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x42a054	0x1a054	0x4	0x0	0x3	WA	0	0	4
.data.rel.ro	PROGBITS	0x42a058	0x1a058	0x4d0	0x0	0x3	WA	0	0	4
.data	PROGBITS	0x42a530	0x1a530	0x3d0	0x0	0x3	WA	0	0	16
.got	PROGBITS	0x42a900	0x1a900	0x4e0	0x4	0x10000003	WAp	0	0	16
.sdata	PROGBITS	0x42ade0	0x1ade0	0x4	0x0	0x10000003	WAp	0	0	4
.sbss	NOBITS	0x42ade4	0x1ade4	0x4c	0x0	0x10000003	WAp	0	0	4
.bss	NOBITS	0x42ae30	0x1ade4	0x7148	0x0	0x3	WA	0	0	16
.comment	PROGBITS	0x0	0x1ade4	0xb9a	0x0	0x0		0	0	1
.mdebug.abi32	PROGBITS	0xb9a	0x1b97e	0x0	0x0	0x0		0	0	1
.pdr	PROGBITS	0x0	0x1b980	0x1ee0	0x0	0x0		0	0	4
.shstrtab	STRTAB	0x0	0x1d860	0xa7	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x1dca0	0x3180	0x10	0x0		22	322	4
.strtab	STRTAB	0x0	0x20e20	0x261a	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
<unknown>	0xd4	0x4000d4	0x4000d4	0x18	0x18	0.9834	0x4	R	0x4	.reginfo
LOAD	0x0	0x400000	0x400000	0x191b0	0x191b0	5.5418	0x5	R E	0x10000	.reginfo .init .text .fini .rodata
LOAD	0x1a000	0x42a000	0x42a000	0xde4	0x7f78	4.7852	0x6	RW	0x10000	.eh_frame .tbss .ctors .dtors .jcr .data.rel.ro .data .got .sdata .sbss .bss
TLS	0x1a044	0x42a044	0x42a044	0x0	0x8	0.0000	0x4	R	0x4	.tbss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x4000d4	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x4000ec	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x400180	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x415190	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x4151f0	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x42a000	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x42a044	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x42a044	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x42a04c	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x42a054	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x42a058	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x42a530	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x42a900	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x42ade0	0	SECTION	<unknown>	DEFAULT	14
	.symtab	0x42ade4	0	SECTION	<unknown>	DEFAULT	15
	.symtab	0x42ae30	0	SECTION	<unknown>	DEFAULT	16
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	17
	.symtab	0xb9a	0	SECTION	<unknown>	DEFAULT	18
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	19
C.1.5091	.symtab	0x418ff0	24	OBJECT	<unknown>	DEFAULT	5
C.3.5380	.symtab	0x418ccc	12	OBJECT	<unknown>	DEFAULT	5
C.3.6092	.symtab	0x417b90	12	OBJECT	<unknown>	DEFAULT	5
C.3.6114	.symtab	0x419038	12	OBJECT	<unknown>	DEFAULT	5
C.3.6172	.symtab	0x419010	12	OBJECT	<unknown>	DEFAULT	5
C.4.6115	.symtab	0x41902c	12	OBJECT	<unknown>	DEFAULT	5
C.5.6123	.symtab	0x419020	12	OBJECT	<unknown>	DEFAULT	5
C.6.5518	.symtab	0x418cc0	12	OBJECT	<unknown>	DEFAULT	5
C.70.5296	.symtab	0x42a058	104	OBJECT	<unknown>	DEFAULT	11
C.77.5395	.symtab	0x42a0c0	1128	OBJECT	<unknown>	DEFAULT	11
FRAMESZ	.symtab	0x20	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
GPOFF	.symtab	0x18	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
LOCALSZ	.symtab	0x3	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
Q	.symtab	0x42ae68	16384	OBJECT	<unknown>	DEFAULT	16
RAOFF	.symtab	0x1c	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
Randhex	.symtab	0x402c80	696	FUNC	<unknown>	DEFAULT	3
SendSTD	.symtab	0x4025a0	688	FUNC	<unknown>	DEFAULT	3
UDPRAW	.symtab	0x402a68	536	FUNC	<unknown>	DEFAULT	3
V0OFF	.symtab	0x14	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_Exit	.symtab	0x406290	76	FUNC	<unknown>	DEFAULT	3
_GLOBAL_OFFSET_TABLE_	.symtab	0x42a900	0	OBJECT	<unknown>	DEFAULT	13
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__CTOR_END__	.symtab	0x42a048	0	OBJECT	<unknown>	DEFAULT	8
__CTOR_LIST__	.symtab	0x42a044	0	OBJECT	<unknown>	DEFAULT	8
__C_ctype_b	.symtab	0x42a660	4	OBJECT	<unknown>	DEFAULT	12
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x417590	768	OBJECT	<unknown>	DEFAULT	5
__C_ctype_tolower	.symtab	0x42a7c0	4	OBJECT	<unknown>	DEFAULT	12
__C_ctype_tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_tolower_data	.symtab	0x418cf0	768	OBJECT	<unknown>	DEFAULT	5
__C_ctype_toupper	.symtab	0x42a670	4	OBJECT	<unknown>	DEFAULT	12
__C_ctype_toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_toupper_data	.symtab	0x417890	768	OBJECT	<unknown>	DEFAULT	5
__DTOR_END__	.symtab	0x42a050	0	OBJECT	<unknown>	DEFAULT	9
__DTOR_LIST__	.symtab	0x42a04c	0	OBJECT	<unknown>	DEFAULT	9
__EH_FRAME_BEGIN__	.symtab	0x42a000	0	OBJECT	<unknown>	DEFAULT	6
__FRAME_END__	.symtab	0x42a040	0	OBJECT	<unknown>	DEFAULT	6
__GI___C_ctype_b	.symtab	0x42a660	4	OBJECT	<unknown>	HIDDEN	12
__GI___C_ctype_tolower	.symtab	0x42a7c0	4	OBJECT	<unknown>	HIDDEN	12
__GI___C_ctype_toupper	.symtab	0x42a670	4	OBJECT	<unknown>	HIDDEN	12
__GI___close	.symtab	0x40bb9c	176	FUNC	<unknown>	HIDDEN	3
__GI___close_nocancel	.symtab	0x40bb74	40	FUNC	<unknown>	HIDDEN	3
__GI___ctype_b	.symtab	0x42a664	4	OBJECT	<unknown>	HIDDEN	12
__GI___ctype_tolower	.symtab	0x42a7c4	4	OBJECT	<unknown>	HIDDEN	12
__GI___ctype_toupper	.symtab	0x42a674	4	OBJECT	<unknown>	HIDDEN	12
__GI___errno_location	.symtab	0x406690	28	FUNC	<unknown>	HIDDEN	3
__GI___fcntl_nocancel	.symtab	0x406110	108	FUNC	<unknown>	HIDDEN	3
__GI___fgetc_unlocked	.symtab	0x40fb90	388	FUNC	<unknown>	HIDDEN	3
__GI___glibc_strerror_r	.symtab	0x408440	68	FUNC	<unknown>	HIDDEN	3
__GI___libc_close	.symtab	0x40bb9c	176	FUNC	<unknown>	HIDDEN	3
__GI___libc_fcntl	.symtab	0x40617c	268	FUNC	<unknown>	HIDDEN	3
__GI___libc_open	.symtab	0x40bc8c	192	FUNC	<unknown>	HIDDEN	3
__GI___libc_read	.symtab	0x40be8c	192	FUNC	<unknown>	HIDDEN	3
__GI___libc_waitpid	.symtab	0x40bf8c	192	FUNC	<unknown>	HIDDEN	3
__GI___libc_write	.symtab	0x40bd8c	192	FUNC	<unknown>	HIDDEN	3
__GI___open	.symtab	0x40bc8c	192	FUNC	<unknown>	HIDDEN	3
__GI___open_nocancel	.symtab	0x40bc64	40	FUNC	<unknown>	HIDDEN	3
__GI___read	.symtab	0x40be8c	192	FUNC	<unknown>	HIDDEN	3
__GI___read_nocancel	.symtab	0x40be64	40	FUNC	<unknown>	HIDDEN	3
__GI___register_atfork	.symtab	0x40b600	452	FUNC	<unknown>	HIDDEN	3
__GI___sigaddset	.symtab	0x408e88	44	FUNC	<unknown>	HIDDEN	3
__GI___sigdelset	.symtab	0x408eb4	48	FUNC	<unknown>	HIDDEN	3
__GI___sigismember	.symtab	0x408e60	40	FUNC	<unknown>	HIDDEN	3
__GI___uClibc_fini	.symtab	0x40c200	204	FUNC	<unknown>	HIDDEN	3
__GI___uClibc_init	.symtab	0x40c354	120	FUNC	<unknown>	HIDDEN	3
__GI___waitpid	.symtab	0x40bf8c	192	FUNC	<unknown>	HIDDEN	3
__GI___write	.symtab	0x40bd8c	192	FUNC	<unknown>	HIDDEN	3
__GI___write_nocancel	.symtab	0x40bd64	40	FUNC	<unknown>	HIDDEN	3
__GI___xpg_strerror_r	.symtab	0x408490	380	FUNC	<unknown>	HIDDEN	3
__GI__exit	.symtab	0x406290	76	FUNC	<unknown>	HIDDEN	3
__GI_abort	.symtab	0x40a070	408	FUNC	<unknown>	HIDDEN	3
__GI_atoi	.symtab	0x40a990	28	FUNC	<unknown>	HIDDEN	3
__GI_brk	.symtab	0x411710	80	FUNC	<unknown>	HIDDEN	3
__GI_chdir	.symtab	0x4062e0	56	FUNC	<unknown>	HIDDEN	3
__GI_close	.symtab	0x40bb9c	176	FUNC	<unknown>	HIDDEN	3
__GI_closedir	.symtab	0x40cd70	292	FUNC	<unknown>	HIDDEN	3
__GI_config_close	.symtab	0x40d764	132	FUNC	<unknown>	HIDDEN	3
__GI_config_open	.symtab	0x40d7e8	116	FUNC	<unknown>	HIDDEN	3
__GI_config_read	.symtab	0x40d2a0	1220	FUNC	<unknown>	HIDDEN	3
__GI_connect	.symtab	0x4088ec	220	FUNC	<unknown>	HIDDEN	3
__GI_exit	.symtab	0x40abc0	240	FUNC	<unknown>	HIDDEN	3
__GI_fclose	.symtab	0x40d9d0	804	FUNC	<unknown>	HIDDEN	3
__GI_fcntl	.symtab	0x40617c	268	FUNC	<unknown>	HIDDEN	3
__GI_fflush_unlocked	.symtab	0x40f7d8	940	FUNC	<unknown>	HIDDEN	3
__GI_fgetc	.symtab	0x40f290	372	FUNC	<unknown>	HIDDEN	3
__GI_fgetc_unlocked	.symtab	0x40fb90	388	FUNC	<unknown>	HIDDEN	3
__GI_fgets	.symtab	0x40f410	320	FUNC	<unknown>	HIDDEN	3
__GI_fgets_unlocked	.symtab	0x40fd20	276	FUNC	<unknown>	HIDDEN	3
__GI_fopen	.symtab	0x40dd00	28	FUNC	<unknown>	HIDDEN	3
__GI_fork	.symtab	0x40b1d0	988	FUNC	<unknown>	HIDDEN	3
__GI_fputs_unlocked	.symtab	0x407cc0	124	FUNC	<unknown>	HIDDEN	3
__GI_fseek	.symtab	0x411c70	68	FUNC	<unknown>	HIDDEN	3
__GI_fseeko64	.symtab	0x411cc0	500	FUNC	<unknown>	HIDDEN	3
__GI_fstat	.symtab	0x4117e0	136	FUNC	<unknown>	HIDDEN	3
__GI_fwrite_unlocked	.symtab	0x407d40	268	FUNC	<unknown>	HIDDEN	3
__GI_getc_unlocked	.symtab	0x40fb90	388	FUNC	<unknown>	HIDDEN	3
__GI_getdtablesize	.symtab	0x40c9c0	72	FUNC	<unknown>	HIDDEN	3
__GI_getegid	.symtab	0x40ca10	16	FUNC	<unknown>	HIDDEN	3
__GI_geteuid	.symtab	0x40ca20	16	FUNC	<unknown>	HIDDEN	3
__GI_getgid	.symtab	0x40ca30	16	FUNC	<unknown>	HIDDEN	3
__GI_gethostbyname	.symtab	0x408820	28	FUNC	<unknown>	HIDDEN	3
__GI_gethostbyname2	.symtab	0x408840	104	FUNC	<unknown>	HIDDEN	3
__GI_gethostbyname2_r	.symtab	0x410920	948	FUNC	<unknown>	HIDDEN	3
__GI_gethostbyname_r	.symtab	0x414230	968	FUNC	<unknown>	HIDDEN	3
__GI_gethostname	.symtab	0x414660	192	FUNC	<unknown>	HIDDEN	3
__GI_getpagesize	.symtab	0x40ca40	48	FUNC	<unknown>	HIDDEN	3
__GI_getpid	.symtab	0x40b7d0	84	FUNC	<unknown>	HIDDEN	3
__GI_getrlimit	.symtab	0x40ca70	60	FUNC	<unknown>	HIDDEN	3
__GI_getsockname	.symtab	0x4089d0	60	FUNC	<unknown>	HIDDEN	3
__GI_getuid	.symtab	0x40cab0	16	FUNC	<unknown>	HIDDEN	3
__GI_htonl	.symtab	0x4086f0	8	FUNC	<unknown>	HIDDEN	3
__GI_htons	.symtab	0x4086f8	8	FUNC	<unknown>	HIDDEN	3
__GI_inet_addr	.symtab	0x4087d0	72	FUNC	<unknown>	HIDDEN	3
__GI_inet_aton	.symtab	0x410820	244	FUNC	<unknown>	HIDDEN	3
__GI_inet_ntoa	.symtab	0x4087ac	32	FUNC	<unknown>	HIDDEN	3
__GI_inet_ntoa_r	.symtab	0x408700	172	FUNC	<unknown>	HIDDEN	3
__GI_inet_ntop	.symtab	0x412a8c	852	FUNC	<unknown>	HIDDEN	3
__GI_inet_pton	.symtab	0x412618	696	FUNC	<unknown>	HIDDEN	3
__GI_initstate_r	.symtab	0x40a74c	300	FUNC	<unknown>	HIDDEN	3
__GI_ioctl	.symtab	0x406320	248	FUNC	<unknown>	HIDDEN	3
__GI_isatty	.symtab	0x410730	60	FUNC	<unknown>	HIDDEN	3
__GI_isspace	.symtab	0x406620	44	FUNC	<unknown>	HIDDEN	3
__GI_kill	.symtab	0x406420	56	FUNC	<unknown>	HIDDEN	3
__GI_lseek64	.symtab	0x414910	140	FUNC	<unknown>	HIDDEN	3
__GI_memchr	.symtab	0x40fe40	260	FUNC	<unknown>	HIDDEN	3
__GI_memcpy	.symtab	0x407e50	308	FUNC	<unknown>	HIDDEN	3
__GI_memmove	.symtab	0x40ff50	824	FUNC	<unknown>	HIDDEN	3
__GI_mempcpy	.symtab	0x412360	76	FUNC	<unknown>	HIDDEN	3
__GI_memrchr	.symtab	0x410290	260	FUNC	<unknown>	HIDDEN	3
__GI_memset	.symtab	0x407f90	144	FUNC	<unknown>	HIDDEN	3
__GI_mmap	.symtab	0x40c840	112	FUNC	<unknown>	HIDDEN	3
__GI_mremap	.symtab	0x411870	96	FUNC	<unknown>	HIDDEN	3
__GI_munmap	.symtab	0x40cac0	60	FUNC	<unknown>	HIDDEN	3
__GI_nanosleep	.symtab	0x40cb3c	200	FUNC	<unknown>	HIDDEN	3
__GI_ntohl	.symtab	0x4086e0	8	FUNC	<unknown>	HIDDEN	3
__GI_ntohs	.symtab	0x4086e8	8	FUNC	<unknown>	HIDDEN	3
__GI_open	.symtab	0x40bc8c	192	FUNC	<unknown>	HIDDEN	3
__GI_opendir	.symtab	0x40cfb4	240	FUNC	<unknown>	HIDDEN	3
__GI_poll	.symtab	0x41475c	220	FUNC	<unknown>	HIDDEN	3
__GI_raise	.symtab	0x40b830	264	FUNC	<unknown>	HIDDEN	3
__GI_random	.symtab	0x40a230	164	FUNC	<unknown>	HIDDEN	3
__GI_random_r	.symtab	0x40a510	172	FUNC	<unknown>	HIDDEN	3
__GI_rawmemchr	.symtab	0x4123b0	192	FUNC	<unknown>	HIDDEN	3
__GI_read	.symtab	0x40be8c	192	FUNC	<unknown>	HIDDEN	3
__GI_readdir64	.symtab	0x40d190	272	FUNC	<unknown>	HIDDEN	3
__GI_recv	.symtab	0x408aac	240	FUNC	<unknown>	HIDDEN	3
__GI_sbrk	.symtab	0x40cc10	164	FUNC	<unknown>	HIDDEN	3
__GI_select	.symtab	0x4064c0	260	FUNC	<unknown>	HIDDEN	3
__GI_send	.symtab	0x408bdc	240	FUNC	<unknown>	HIDDEN	3
__GI_setsid	.symtab	0x4065d0	60	FUNC	<unknown>	HIDDEN	3
__GI_setsockopt	.symtab	0x408cd0	96	FUNC	<unknown>	HIDDEN	3
__GI_setstate_r	.symtab	0x40a878	272	FUNC	<unknown>	HIDDEN	3
__GI_sigaction	.symtab	0x40c8b0	28	FUNC	<unknown>	HIDDEN	3
__GI_signal	.symtab	0x408d70	228	FUNC	<unknown>	HIDDEN	3
__GI_sigprocmask	.symtab	0x40ccc0	176	FUNC	<unknown>	HIDDEN	3
__GI_sleep	.symtab	0x40b940	404	FUNC	<unknown>	HIDDEN	3
__GI_socket	.symtab	0x408d30	60	FUNC	<unknown>	HIDDEN	3
__GI_sprintf	.symtab	0x4066b0	80	FUNC	<unknown>	HIDDEN	3
__GI_srandom_r	.symtab	0x40a5bc	400	FUNC	<unknown>	HIDDEN	3
__GI_stat	.symtab	0x414840	136	FUNC	<unknown>	HIDDEN	3
__GI_strcasecmp	.symtab	0x408650	108	FUNC	<unknown>	HIDDEN	3
__GI_strchr	.symtab	0x408020	248	FUNC	<unknown>	HIDDEN	3
__GI_strchrnul	.symtab	0x4103a0	248	FUNC	<unknown>	HIDDEN	3
__GI_strcmp	.symtab	0x408120	44	FUNC	<unknown>	HIDDEN	3
__GI_strcoll	.symtab	0x408120	44	FUNC	<unknown>	HIDDEN	3
__GI_strcpy	.symtab	0x408150	36	FUNC	<unknown>	HIDDEN	3
__GI_strcspn	.symtab	0x4104a0	144	FUNC	<unknown>	HIDDEN	3
__GI_strdup	.symtab	0x4149a0	140	FUNC	<unknown>	HIDDEN	3
__GI_strlen	.symtab	0x408180	184	FUNC	<unknown>	HIDDEN	3
__GI_strncpy	.symtab	0x412470	188	FUNC	<unknown>	HIDDEN	3
__GI_strnlen	.symtab	0x408240	248	FUNC	<unknown>	HIDDEN	3
__GI_strpbrk	.symtab	0x4106f0	64	FUNC	<unknown>	HIDDEN	3
__GI_strrchr	.symtab	0x410530	160	FUNC	<unknown>	HIDDEN	3
__GI_strspn	.symtab	0x4105d0	72	FUNC	<unknown>	HIDDEN	3
__GI_strstr	.symtab	0x408340	256	FUNC	<unknown>	HIDDEN	3
__GI_strtok	.symtab	0x4086c0	32	FUNC	<unknown>	HIDDEN	3
__GI_strtok_r	.symtab	0x410620	208	FUNC	<unknown>	HIDDEN	3
__GI_strtol	.symtab	0x40a9b0	28	FUNC	<unknown>	HIDDEN	3
__GI_sysconf	.symtab	0x40aeac	792	FUNC	<unknown>	HIDDEN	3
__GI_tcgetattr	.symtab	0x410770	176	FUNC	<unknown>	HIDDEN	3
__GI_time	.symtab	0x406610	16	FUNC	<unknown>	HIDDEN	3
__GI_toupper	.symtab	0x406650	60	FUNC	<unknown>	HIDDEN	3
__GI_uname	.symtab	0x4148d0	60	FUNC	<unknown>	HIDDEN	3
__GI_vsnprintf	.symtab	0x406700	248	FUNC	<unknown>	HIDDEN	3
__GI_waitpid	.symtab	0x40bf8c	192	FUNC	<unknown>	HIDDEN	3
__GI_wcrtomb	.symtab	0x40d860	108	FUNC	<unknown>	HIDDEN	3
__GI_wcsnrtombs	.symtab	0x40d910	192	FUNC	<unknown>	HIDDEN	3
__GI_wcsrtombs	.symtab	0x40d8d0	64	FUNC	<unknown>	HIDDEN	3
__GI_write	.symtab	0x40bd8c	192	FUNC	<unknown>	HIDDEN	3
__JCR_END__	.symtab	0x42a054	0	OBJECT	<unknown>	DEFAULT	10
__JCR_LIST__	.symtab	0x42a054	0	OBJECT	<unknown>	DEFAULT	10
__app_fini	.symtab	0x42f5ec	4	OBJECT	<unknown>	HIDDEN	16
__atexit_lock	.symtab	0x42a790	24	OBJECT	<unknown>	DEFAULT	12
__bss_start	.symtab	0x42ade4	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x40c2cc	136	FUNC	<unknown>	DEFAULT	3
__close	.symtab	0x40bb9c	176	FUNC	<unknown>	DEFAULT	3
__close_nameservers	.symtab	0x4140e0	220	FUNC	<unknown>	HIDDEN	3
__close_nocancel	.symtab	0x40bb74	40	FUNC	<unknown>	DEFAULT	3
__ctype_b	.symtab	0x42a664	4	OBJECT	<unknown>	DEFAULT	12
__ctype_tolower	.symtab	0x42a7c4	4	OBJECT	<unknown>	DEFAULT	12
__ctype_toupper	.symtab	0x42a674	4	OBJECT	<unknown>	DEFAULT	12
__curbrk	.symtab	0x431b60	4	OBJECT	<unknown>	HIDDEN	16
__data_start	.symtab	0x42a540	0	OBJECT	<unknown>	DEFAULT	12
__decode_dotted	.symtab	0x412de0	400	FUNC	<unknown>	HIDDEN	3
__decode_header	.symtab	0x414b50	228	FUNC	<unknown>	HIDDEN	3
__deregister_frame_info	.symtab	0x0	0	FUNC	<unknown>	DEFAULT	SHN_UNDEF
__dns_lookup	.symtab	0x412f70	2608	FUNC	<unknown>	HIDDEN	3
__do_global_ctors_aux	.symtab	0x415120	0	FUNC	<unknown>	DEFAULT	3
__do_global_dtors_aux	.symtab	0x400180	0	FUNC	<unknown>	DEFAULT	3
__dso_handle	.symtab	0x42ade0	0	OBJECT	<unknown>	HIDDEN	14
__encode_dotted	.symtab	0x414fe0	316	FUNC	<unknown>	HIDDEN	3
__encode_header	.symtab	0x414a30	276	FUNC	<unknown>	HIDDEN	3
__encode_question	.symtab	0x414c40	172	FUNC	<unknown>	HIDDEN	3
__environ	.symtab	0x42f5e4	4	OBJECT	<unknown>	DEFAULT	16
__errno_location	.symtab	0x406690	28	FUNC	<unknown>	DEFAULT	3
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x42f080	4	OBJECT	<unknown>	HIDDEN	16
__fcntl_nocancel	.symtab	0x406110	108	FUNC	<unknown>	DEFAULT	3
__fgetc_unlocked	.symtab	0x40fb90	388	FUNC	<unknown>	DEFAULT	3
__fini_array_end	.symtab	0x42a044	0	NOTYPE	<unknown>	HIDDEN	7
__fini_array_start	.symtab	0x42a044	0	NOTYPE	<unknown>	HIDDEN	7
__fork	.symtab	0x40b1d0	988	FUNC	<unknown>	DEFAULT	3
__fork_generation_pointer	.symtab	0x42adec	4	OBJECT	<unknown>	HIDDEN	15
__fork_handlers	.symtab	0x42adf0	4	OBJECT	<unknown>	HIDDEN	15
__fork_lock	.symtab	0x42f090	4	OBJECT	<unknown>	HIDDEN	16
__get_hosts_byname_r	.symtab	0x4141c0	104	FUNC	<unknown>	HIDDEN	3
__getdents64	.symtab	0x411ab0	436	FUNC	<unknown>	HIDDEN	3
__getpagesize	.symtab	0x40ca40	48	FUNC	<unknown>	DEFAULT	3
__getpid	.symtab	0x40b7d0	84	FUNC	<unknown>	DEFAULT	3
__glibc_strerror_r	.symtab	0x408440	68	FUNC	<unknown>	DEFAULT	3
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__h_errno_location	.symtab	0x0	0	FUNC	<unknown>	DEFAULT	SHN_UNDEF
__init_array_end	.symtab	0x42a044	0	NOTYPE	<unknown>	HIDDEN	7
__init_array_start	.symtab	0x42a044	0	NOTYPE	<unknown>	HIDDEN	7
__libc_close	.symtab	0x40bb9c	176	FUNC	<unknown>	DEFAULT	3
__libc_connect	.symtab	0x4088ec	220	FUNC	<unknown>	DEFAULT	3
__libc_disable_asynccancel	.symtab	0x40c050	136	FUNC	<unknown>	HIDDEN	3
__libc_enable_asynccancel	.symtab	0x40c0d8	220	FUNC	<unknown>	HIDDEN	3
__libc_errno	.symtab	0x0	4	TLS	<unknown>	HIDDEN	7
__libc_fcntl	.symtab	0x40617c	268	FUNC	<unknown>	DEFAULT	3
__libc_fork	.symtab	0x40b1d0	988	FUNC	<unknown>	DEFAULT	3
__libc_h_errno	.symtab	0x4	4	TLS	<unknown>	HIDDEN	7
__libc_nanosleep	.symtab	0x40cb3c	200	FUNC	<unknown>	DEFAULT	3
__libc_open	.symtab	0x40bc8c	192	FUNC	<unknown>	DEFAULT	3
__libc_read	.symtab	0x40be8c	192	FUNC	<unknown>	DEFAULT	3
__libc_recv	.symtab	0x408aac	240	FUNC	<unknown>	DEFAULT	3
__libc_select	.symtab	0x4064c0	260	FUNC	<unknown>	DEFAULT	3
__libc_send	.symtab	0x408bdc	240	FUNC	<unknown>	DEFAULT	3
__libc_setup_tls	.symtab	0x411398	660	FUNC	<unknown>	DEFAULT	3
__libc_sigaction	.symtab	0x40c8b0	28	FUNC	<unknown>	DEFAULT	3
__libc_stack_end	.symtab	0x42f5e0	4	OBJECT	<unknown>	DEFAULT	16
__libc_waitpid	.symtab	0x40bf8c	192	FUNC	<unknown>	DEFAULT	3
__libc_write	.symtab	0x40bd8c	192	FUNC	<unknown>	DEFAULT	3
__linkin_atfork	.symtab	0x40b5b0	80	FUNC	<unknown>	HIDDEN	3
__lll_lock_wait_private	.symtab	0x40bae0	120	FUNC	<unknown>	HIDDEN	3
__local_nameserver	.symtab	0x419190	16	OBJECT	<unknown>	HIDDEN	5
__malloc_consolidate	.symtab	0x409b74	520	FUNC	<unknown>	HIDDEN	3
__malloc_largebin_index	.symtab	0x408ef0	140	FUNC	<unknown>	DEFAULT	3
__malloc_lock	.symtab	0x42a690	24	OBJECT	<unknown>	DEFAULT	12
__malloc_state	.symtab	0x431c00	888	OBJECT	<unknown>	DEFAULT	16
__malloc_trim	.symtab	0x409a50	292	FUNC	<unknown>	DEFAULT	3
__nameserver	.symtab	0x42ae24	4	OBJECT	<unknown>	HIDDEN	15
__nameservers	.symtab	0x42ae28	4	OBJECT	<unknown>	HIDDEN	15
__nptl_deallocate_tsd	.symtab	0x0	0	FUNC	<unknown>	DEFAULT	SHN_UNDEF
__nptl_nthreads	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__open	.symtab	0x40bc8c	192	FUNC	<unknown>	DEFAULT	3
__open_etc_hosts	.symtab	0x414cf0	32	FUNC	<unknown>	HIDDEN	3
__open_nameservers	.symtab	0x413a70	1636	FUNC	<unknown>	HIDDEN	3
__open_nocancel	.symtab	0x40bc64	40	FUNC	<unknown>	DEFAULT	3
__pagesize	.symtab	0x42f5e8	4	OBJECT	<unknown>	DEFAULT	16
__preinit_array_end	.symtab	0x42a044	0	NOTYPE	<unknown>	HIDDEN	7
__preinit_array_start	.symtab	0x42a044	0	NOTYPE	<unknown>	HIDDEN	7
__progname	.symtab	0x42a7b4	4	OBJECT	<unknown>	DEFAULT	12
__progname_full	.symtab	0x42a7b8	4	OBJECT	<unknown>	DEFAULT	12
__pthread_initialize_minimal	.symtab	0x41162c	28	FUNC	<unknown>	DEFAULT	3
__pthread_mutex_init	.symtab	0x40c1c8	8	FUNC	<unknown>	DEFAULT	3
__pthread_mutex_lock	.symtab	0x40c1c0	8	FUNC	<unknown>	DEFAULT	3
__pthread_mutex_trylock	.symtab	0x40c1c0	8	FUNC	<unknown>	DEFAULT	3
__pthread_mutex_unlock	.symtab	0x40c1c0	8	FUNC	<unknown>	DEFAULT	3
__pthread_return_0	.symtab	0x40c1c0	8	FUNC	<unknown>	DEFAULT	3
__pthread_unwind	.symtab	0x0	0	FUNC	<unknown>	DEFAULT	SHN_UNDEF
__read	.symtab	0x40be8c	192	FUNC	<unknown>	DEFAULT	3
__read_etc_hosts_r	.symtab	0x414d10	720	FUNC	<unknown>	HIDDEN	3
__read_nocancel	.symtab	0x40be64	40	FUNC	<unknown>	DEFAULT	3
__register_atfork	.symtab	0x40b600	452	FUNC	<unknown>	DEFAULT	3
__register_frame_info	.symtab	0x0	0	FUNC	<unknown>	DEFAULT	SHN_UNDEF
__res_sync	.symtab	0x42ae1c	4	OBJECT	<unknown>	HIDDEN	15
__resolv_attempts	.symtab	0x42a8f1	1	OBJECT	<unknown>	HIDDEN	12
__resolv_lock	.symtab	0x431b80	24	OBJECT	<unknown>	DEFAULT	16
__resolv_timeout	.symtab	0x42a8f0	1	OBJECT	<unknown>	HIDDEN	12
__rtld_fini	.symtab	0x42f5f0	4	OBJECT	<unknown>	HIDDEN	16
__searchdomain	.symtab	0x42ae20	4	OBJECT	<unknown>	HIDDEN	15
__searchdomains	.symtab	0x42ae2c	4	OBJECT	<unknown>	HIDDEN	15
__sigaddset	.symtab	0x408e88	44	FUNC	<unknown>	DEFAULT	3
__sigdelset	.symtab	0x408eb4	48	FUNC	<unknown>	DEFAULT	3
__sigismember	.symtab	0x408e60	40	FUNC	<unknown>	DEFAULT	3
__sigjmp_save	.symtab	0x414600	96	FUNC	<unknown>	HIDDEN	3
__sigsetjmp	.symtab	0x40c8f0	36	FUNC	<unknown>	DEFAULT	3
__sigsetjmp_aux	.symtab	0x411760	128	FUNC	<unknown>	DEFAULT	3
__start	.symtab	0x4002d0	100	FUNC	<unknown>	DEFAULT	3
__stdin	.symtab	0x42a7ec	4	OBJECT	<unknown>	DEFAULT	12
__stdio_READ	.symtab	0x411ec0	144	FUNC	<unknown>	HIDDEN	3
__stdio_WRITE	.symtab	0x411f50	344	FUNC	<unknown>	HIDDEN	3
__stdio_adjust_position	.symtab	0x4120b0	256	FUNC	<unknown>	HIDDEN	3
__stdio_fwrite	.symtab	0x40e1b0	472	FUNC	<unknown>	HIDDEN	3
__stdio_rfill	.symtab	0x4121b0	88	FUNC	<unknown>	HIDDEN	3
__stdio_seek	.symtab	0x4122f0	112	FUNC	<unknown>	HIDDEN	3
__stdio_trans2r_o	.symtab	0x412210	220	FUNC	<unknown>	HIDDEN	3
__stdio_trans2w_o	.symtab	0x40e5f0	304	FUNC	<unknown>	HIDDEN	3
__stdio_wcommit	.symtab	0x40e720	100	FUNC	<unknown>	HIDDEN	3
__stdout	.symtab	0x42a7f0	4	OBJECT	<unknown>	DEFAULT	12
__sys_connect	.symtab	0x4088b0	60	FUNC	<unknown>	DEFAULT	3
__sys_recv	.symtab	0x408a70	60	FUNC	<unknown>	DEFAULT	3
__sys_send	.symtab	0x408ba0	60	FUNC	<unknown>	DEFAULT	3
__syscall_error	.symtab	0x40c920	92	FUNC	<unknown>	DEFAULT	3
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_nanosleep	.symtab	0x40cb00	60	FUNC	<unknown>	DEFAULT	3
__syscall_poll	.symtab	0x414720	60	FUNC	<unknown>	DEFAULT	3
__syscall_rt_sigaction	.symtab	0x40c980	60	FUNC	<unknown>	DEFAULT	3
__syscall_rt_sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_select	.symtab	0x406460	96	FUNC	<unknown>	DEFAULT	3
__tls_get_addr	.symtab	0x411378	32	FUNC	<unknown>	DEFAULT	3
__uClibc_fini	.symtab	0x40c200	204	FUNC	<unknown>	DEFAULT	3
__uClibc_init	.symtab	0x40c354	120	FUNC	<unknown>	DEFAULT	3
__uClibc_main	.symtab	0x40c3cc	1132	FUNC	<unknown>	DEFAULT	3
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x42a7b0	4	OBJECT	<unknown>	HIDDEN	12
__waitpid	.symtab	0x40bf8c	192	FUNC	<unknown>	DEFAULT	3
__waitpid_nocancel	.symtab	0x40bf64	40	FUNC	<unknown>	DEFAULT	3
__write	.symtab	0x40bd8c	192	FUNC	<unknown>	DEFAULT	3
__write_nocancel	.symtab	0x40bd64	40	FUNC	<unknown>	DEFAULT	3
__xpg_strerror_r	.symtab	0x408490	380	FUNC	<unknown>	DEFAULT	3
__xpg_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__xstat32_conv	.symtab	0x4119c8	220	FUNC	<unknown>	HIDDEN	3
__xstat64_conv	.symtab	0x4118d0	248	FUNC	<unknown>	HIDDEN	3
_adjust_pos.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_bss_custom_printf_spec	.symtab	0x42ee70	10	OBJECT	<unknown>	DEFAULT	16
_charpad	.symtab	0x406800	156	FUNC	<unknown>	DEFAULT	3
_cs_funcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_custom_printf_arginfo	.symtab	0x431ba0	40	OBJECT	<unknown>	HIDDEN	16
_custom_printf_handler	.symtab	0x431bc8	40	OBJECT	<unknown>	HIDDEN	16
_custom_printf_spec	.symtab	0x42a680	4	OBJECT	<unknown>	HIDDEN	12
_dl_aux_init	.symtab	0x411650	40	FUNC	<unknown>	DEFAULT	3
_dl_init_static_tls	.symtab	0x42a8d0	4	OBJECT	<unknown>	DEFAULT	12
_dl_nothread_init_static_tls	.symtab	0x411678	148	FUNC	<unknown>	HIDDEN	3
_dl_phdr	.symtab	0x42ae14	4	OBJECT	<unknown>	DEFAULT	15
_dl_phnum	.symtab	0x42ae18	4	OBJECT	<unknown>	DEFAULT	15
_dl_tls_dtv_gaps	.symtab	0x42ae08	1	OBJECT	<unknown>	DEFAULT	15
_dl_tls_dtv_slotinfo_list	.symtab	0x42ae04	4	OBJECT	<unknown>	DEFAULT	15
_dl_tls_generation	.symtab	0x42ae0c	4	OBJECT	<unknown>	DEFAULT	15
_dl_tls_max_dtv_idx	.symtab	0x42adfc	4	OBJECT	<unknown>	DEFAULT	15
_dl_tls_setup	.symtab	0x411314	100	FUNC	<unknown>	DEFAULT	3
_dl_tls_static_align	.symtab	0x42adf8	4	OBJECT	<unknown>	DEFAULT	15
_dl_tls_static_nelem	.symtab	0x42ae10	4	OBJECT	<unknown>	DEFAULT	15
_dl_tls_static_size	.symtab	0x42ae00	4	OBJECT	<unknown>	DEFAULT	15
_dl_tls_static_used	.symtab	0x42adf4	4	OBJECT	<unknown>	DEFAULT	15
_edata	.symtab	0x42ade4	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x431f78	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_exit	.symtab	0x406290	76	FUNC	<unknown>	DEFAULT	3
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fbss	.symtab	0x42ade4	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_fdata	.symtab	0x42a530	0	NOTYPE	<unknown>	DEFAULT	12
_fini	.symtab	0x415190	28	FUNC	<unknown>	DEFAULT	4
_fixed_buffers	.symtab	0x42f620	8192	OBJECT	<unknown>	DEFAULT	16
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow	.symtab	0x40689c	232	FUNC	<unknown>	DEFAULT	3
_fpmaxtostr	.symtab	0x40e9c0	2252	FUNC	<unknown>	HIDDEN	3
_fpmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ftext	.symtab	0x400180	0	NOTYPE	<unknown>	DEFAULT	3
_fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_gp	.symtab	0x4328f0	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_gp_disp	.symtab	0x0	0	OBJECT	<unknown>	DEFAULT	SHN_UNDEF
_init	.symtab	0x4000ec	28	FUNC	<unknown>	DEFAULT	2
_load_inttype	.symtab	0x40e790	136	FUNC	<unknown>	HIDDEN	3
_load_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_init	.symtab	0x407220	248	FUNC	<unknown>	HIDDEN	3
_ppfs_init.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec	.symtab	0x40762c	1684	FUNC	<unknown>	HIDDEN	3
_ppfs_parsespec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs	.symtab	0x407320	100	FUNC	<unknown>	HIDDEN	3
_ppfs_prepargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs	.symtab	0x407390	548	FUNC	<unknown>	HIDDEN	3
_ppfs_setargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size	.symtab	0x4075c0	108	FUNC	<unknown>	DEFAULT	3
_pthread_cleanup_pop_restore	.symtab	0x40c1dc	36	FUNC	<unknown>	DEFAULT	3
_pthread_cleanup_push_defer	.symtab	0x40c1d0	12	FUNC	<unknown>	DEFAULT	3
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_setjmp	.symtab	0x40c8d0	28	FUNC	<unknown>	DEFAULT	3
_sigintr	.symtab	0x431bf0	16	OBJECT	<unknown>	HIDDEN	16
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x40dd20	1168	FUNC	<unknown>	HIDDEN	3
_stdio_init	.symtab	0x40e390	184	FUNC	<unknown>	HIDDEN	3
_stdio_openlist	.symtab	0x42a7f4	4	OBJECT	<unknown>	DEFAULT	12
_stdio_openlist_add_lock	.symtab	0x42f600	12	OBJECT	<unknown>	DEFAULT	16
_stdio_openlist_dec_use	.symtab	0x40f550	648	FUNC	<unknown>	HIDDEN	3
_stdio_openlist_del_count	.symtab	0x42f61c	4	OBJECT	<unknown>	DEFAULT	16
_stdio_openlist_del_lock	.symtab	0x42f60c	12	OBJECT	<unknown>	DEFAULT	16
_stdio_openlist_use_count	.symtab	0x42f618	4	OBJECT	<unknown>	DEFAULT	16
_stdio_streams	.symtab	0x42a7f8	204	OBJECT	<unknown>	DEFAULT	12
_stdio_term	.symtab	0x40e448	416	FUNC	<unknown>	HIDDEN	3
_stdio_user_locking	.symtab	0x42a7d0	4	OBJECT	<unknown>	DEFAULT	12
_stdlib_strto_l	.symtab	0x40a9d0	488	FUNC	<unknown>	HIDDEN	3
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_store_inttype	.symtab	0x40e820	68	FUNC	<unknown>	HIDDEN	3
_store_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_string_syserrmsgs	.symtab	0x417cf0	2934	OBJECT	<unknown>	HIDDEN	5
_string_syserrmsgs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr	.symtab	0x40e870	332	FUNC	<unknown>	HIDDEN	3
_uintmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal	.symtab	0x406984	2204	FUNC	<unknown>	HIDDEN	3
_vfprintf_internal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0x40a070	408	FUNC	<unknown>	DEFAULT	3
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
atoi	.symtab	0x40a990	28	FUNC	<unknown>	DEFAULT	3
atol	.symtab	0x40a990	28	FUNC	<unknown>	DEFAULT	3
atol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bcopy	.symtab	0x408610	32	FUNC	<unknown>	DEFAULT	3
bcopy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
been_there_done_that	.symtab	0x42f070	4	OBJECT	<unknown>	DEFAULT	16
bot.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
brk	.symtab	0x411710	80	FUNC	<unknown>	DEFAULT	3
brk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bsd_signal	.symtab	0x408d70	228	FUNC	<unknown>	DEFAULT	3
buf.4497	.symtab	0x42ee90	16	OBJECT	<unknown>	DEFAULT	16
buf.6560	.symtab	0x42eea0	440	OBJECT	<unknown>	DEFAULT	16
bzero	.symtab	0x408630	28	FUNC	<unknown>	DEFAULT	3
bzero.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
c	.symtab	0x42a554	4	OBJECT	<unknown>	DEFAULT	12
calloc	.symtab	0x410ce0	344	FUNC	<unknown>	DEFAULT	3
calloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
chdir	.symtab	0x4062e0	56	FUNC	<unknown>	DEFAULT	3
chdir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0x40bb9c	176	FUNC	<unknown>	DEFAULT	3
closedir	.symtab	0x40cd70	292	FUNC	<unknown>	DEFAULT	3
closedir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
closenameservers.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
commServer	.symtab	0x42a560	4	OBJECT	<unknown>	DEFAULT	12
completed.4786	.symtab	0x42ae30	1	OBJECT	<unknown>	DEFAULT	16
connect	.symtab	0x4088ec	220	FUNC	<unknown>	DEFAULT	3
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
connectTimeout	.symtab	0x401e0c	828	FUNC	<unknown>	DEFAULT	3
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
currentServer	.symtab	0x42a550	4	OBJECT	<unknown>	DEFAULT	12
data_start	.symtab	0x42a540	0	OBJECT	<unknown>	DEFAULT	12
decoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dns	.symtab	0x42a564	4	OBJECT	<unknown>	DEFAULT	12
dnslookup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
environ	.symtab	0x42f5e4	4	OBJECT	<unknown>	DEFAULT	16
errno	.symtab	0x0	4	TLS	<unknown>	DEFAULT	7
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
estridx	.symtab	0x417c60	126	OBJECT	<unknown>	DEFAULT	5
exit	.symtab	0x40abc0	240	FUNC	<unknown>	DEFAULT	3
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exp10_table	.symtab	0x419068	72	OBJECT	<unknown>	DEFAULT	5
fclose	.symtab	0x40d9d0	804	FUNC	<unknown>	DEFAULT	3
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0x40617c	268	FUNC	<unknown>	DEFAULT	3
fd_to_DIR	.symtab	0x40cea0	276	FUNC	<unknown>	DEFAULT	3
fdgets	.symtab	0x4006ec	292	FUNC	<unknown>	DEFAULT	3
fdopendir	.symtab	0x40d0a4	228	FUNC	<unknown>	DEFAULT	3
fflush_unlocked	.symtab	0x40f7d8	940	FUNC	<unknown>	DEFAULT	3
fflush_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc	.symtab	0x40f290	372	FUNC	<unknown>	DEFAULT	3
fgetc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked	.symtab	0x40fb90	388	FUNC	<unknown>	DEFAULT	3
fgetc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets	.symtab	0x40f410	320	FUNC	<unknown>	DEFAULT	3
fgets.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked	.symtab	0x40fd20	276	FUNC	<unknown>	DEFAULT	3
fgets_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fmt	.symtab	0x419050	20	OBJECT	<unknown>	DEFAULT	5
fopen	.symtab	0x40dd00	28	FUNC	<unknown>	DEFAULT	3
fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork	.symtab	0x40b1d0	988	FUNC	<unknown>	DEFAULT	3
fork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork_handler_pool	.symtab	0x42f094	1348	OBJECT	<unknown>	DEFAULT	16
fputs_unlocked	.symtab	0x407cc0	124	FUNC	<unknown>	DEFAULT	3
fputs_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
frame_dummy	.symtab	0x40023c	0	FUNC	<unknown>	DEFAULT	3
free	.symtab	0x409d7c	660	FUNC	<unknown>	DEFAULT	3
free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseek	.symtab	0x411c70	68	FUNC	<unknown>	DEFAULT	3
fseeko	.symtab	0x411c70	68	FUNC	<unknown>	DEFAULT	3
fseeko.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseeko64	.symtab	0x411cc0	500	FUNC	<unknown>	DEFAULT	3
fseeko64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fstat	.symtab	0x4117e0	136	FUNC	<unknown>	DEFAULT	3
fstat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fwrite_unlocked	.symtab	0x407d40	268	FUNC	<unknown>	DEFAULT	3
fwrite_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getArch	.symtab	0x4041cc	56	FUNC	<unknown>	DEFAULT	3
getHost	.symtab	0x401a00	160	FUNC	<unknown>	DEFAULT	3
getOurIP	.symtab	0x400810	904	FUNC	<unknown>	DEFAULT	3
getRandomIP	.symtab	0x400640	172	FUNC	<unknown>	DEFAULT	3
get_hosts_byname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getc	.symtab	0x40f290	372	FUNC	<unknown>	DEFAULT	3
getc_unlocked	.symtab	0x40fb90	388	FUNC	<unknown>	DEFAULT	3
getdents64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getdtablesize	.symtab	0x40c9c0	72	FUNC	<unknown>	DEFAULT	3
getdtablesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getegid	.symtab	0x40ca10	16	FUNC	<unknown>	DEFAULT	3
getegid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid	.symtab	0x40ca20	16	FUNC	<unknown>	DEFAULT	3
geteuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid	.symtab	0x40ca30	16	FUNC	<unknown>	DEFAULT	3
getgid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname	.symtab	0x408820	28	FUNC	<unknown>	DEFAULT	3
gethostbyname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname2	.symtab	0x408840	104	FUNC	<unknown>	DEFAULT	3
gethostbyname2.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname2_r	.symtab	0x410920	948	FUNC	<unknown>	DEFAULT	3
gethostbyname2_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname_r	.symtab	0x414230	968	FUNC	<unknown>	DEFAULT	3
gethostbyname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostname	.symtab	0x414660	192	FUNC	<unknown>	DEFAULT	3
gethostname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpagesize	.symtab	0x40ca40	48	FUNC	<unknown>	DEFAULT	3
getpagesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid	.symtab	0x40b7d0	84	FUNC	<unknown>	DEFAULT	3
getpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getrlimit	.symtab	0x40ca70	60	FUNC	<unknown>	DEFAULT	3
getrlimit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockname	.symtab	0x4089d0	60	FUNC	<unknown>	DEFAULT	3
getsockname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt	.symtab	0x408a10	96	FUNC	<unknown>	DEFAULT	3
getsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid	.symtab	0x40cab0	16	FUNC	<unknown>	DEFAULT	3
getuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
h_errno	.symtab	0x4	4	TLS	<unknown>	DEFAULT	7
hlt	.symtab	0x40032c	0	NOTYPE	<unknown>	DEFAULT	3
hoste.6559	.symtab	0x42f058	20	OBJECT	<unknown>	DEFAULT	16
htonl	.symtab	0x4086f0	8	FUNC	<unknown>	DEFAULT	3
htons	.symtab	0x4086f8	8	FUNC	<unknown>	DEFAULT	3
i.4697	.symtab	0x42a558	4	OBJECT	<unknown>	DEFAULT	12
index	.symtab	0x408020	248	FUNC	<unknown>	DEFAULT	3
inet_addr	.symtab	0x4087d0	72	FUNC	<unknown>	DEFAULT	3
inet_aton	.symtab	0x410820	244	FUNC	<unknown>	DEFAULT	3
inet_aton.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa	.symtab	0x4087ac	32	FUNC	<unknown>	DEFAULT	3
inet_ntoa.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa_r	.symtab	0x408700	172	FUNC	<unknown>	DEFAULT	3
inet_ntop	.symtab	0x412a8c	852	FUNC	<unknown>	DEFAULT	3
inet_ntop4	.symtab	0x4128d0	444	FUNC	<unknown>	DEFAULT	3
inet_pton	.symtab	0x412618	696	FUNC	<unknown>	DEFAULT	3
inet_pton4	.symtab	0x412530	232	FUNC	<unknown>	DEFAULT	3
initConnection	.symtab	0x4052ac	592	FUNC	<unknown>	DEFAULT	3
init_rand	.symtab	0x400340	300	FUNC	<unknown>	DEFAULT	3
init_static_tls	.symtab	0x4112c0	84	FUNC	<unknown>	DEFAULT	3
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initstate	.symtab	0x40a38c	208	FUNC	<unknown>	DEFAULT	3
initstate_r	.symtab	0x40a74c	300	FUNC	<unknown>	DEFAULT	3
ioctl	.symtab	0x406320	248	FUNC	<unknown>	DEFAULT	3
ioctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isatty	.symtab	0x410730	60	FUNC	<unknown>	DEFAULT	3
isatty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isspace	.symtab	0x406620	44	FUNC	<unknown>	DEFAULT	3
isspace.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill	.symtab	0x406420	56	FUNC	<unknown>	DEFAULT	3
kill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
last_id.6617	.symtab	0x42a8e0	2	OBJECT	<unknown>	DEFAULT	12
last_ns_num.6616	.symtab	0x431b70	4	OBJECT	<unknown>	DEFAULT	16
libc-cancellation.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc-lowlevellock.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc-tls.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
listFork	.symtab	0x402148	668	FUNC	<unknown>	DEFAULT	3
llseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lseek64	.symtab	0x414910	140	FUNC	<unknown>	DEFAULT	3
macAddress	.symtab	0x42ae60	6	OBJECT	<unknown>	DEFAULT	16
main	.symtab	0x4054fc	3084	FUNC	<unknown>	DEFAULT	3
mainCommSock	.symtab	0x42ae50	4	OBJECT	<unknown>	DEFAULT	16
malloc	.symtab	0x408f7c	2764	FUNC	<unknown>	DEFAULT	3
malloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
malloc_trim	.symtab	0x40a010	84	FUNC	<unknown>	DEFAULT	3
memchr	.symtab	0x40fe40	260	FUNC	<unknown>	DEFAULT	3
memchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memcpy	.symtab	0x407e50	308	FUNC	<unknown>	DEFAULT	3
memmove	.symtab	0x40ff50	824	FUNC	<unknown>	DEFAULT	3
memmove.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mempcpy	.symtab	0x412360	76	FUNC	<unknown>	DEFAULT	3
mempcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memrchr	.symtab	0x410290	260	FUNC	<unknown>	DEFAULT	3
memrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset	.symtab	0x407f90	144	FUNC	<unknown>	DEFAULT	3
mmap	.symtab	0x40c840	112	FUNC	<unknown>	DEFAULT	3
mmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mremap	.symtab	0x411870	96	FUNC	<unknown>	DEFAULT	3
mremap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
munmap	.symtab	0x40cac0	60	FUNC	<unknown>	DEFAULT	3
munmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mylock	.symtab	0x42a6b0	24	OBJECT	<unknown>	DEFAULT	12
mylock	.symtab	0x42a6d0	24	OBJECT	<unknown>	DEFAULT	12
nanosleep	.symtab	0x40cb3c	200	FUNC	<unknown>	DEFAULT	3
nanosleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
next_start.1303	.symtab	0x42ee80	4	OBJECT	<unknown>	DEFAULT	16
nprocessors_onln	.symtab	0x40acb0	508	FUNC	<unknown>	DEFAULT	3
ntohl	.symtab	0x4086e0	8	FUNC	<unknown>	DEFAULT	3
ntohl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ntohs	.symtab	0x4086e8	8	FUNC	<unknown>	DEFAULT	3
ntop.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
numpids	.symtab	0x42ae58	8	OBJECT	<unknown>	DEFAULT	16
object.4798	.symtab	0x42ae34	24	OBJECT	<unknown>	DEFAULT	16
open	.symtab	0x40bc8c	192	FUNC	<unknown>	DEFAULT	3
opendir	.symtab	0x40cfb4	240	FUNC	<unknown>	DEFAULT	3
opendir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
opennameservers.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ourIP	.symtab	0x42ade4	4	OBJECT	<unknown>	DEFAULT	15
ovhl7	.symtab	0x402f38	4756	FUNC	<unknown>	DEFAULT	3
p.4784	.symtab	0x42a530	0	OBJECT	<unknown>	DEFAULT	12
parse_config.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
pids	.symtab	0x42ade8	4	OBJECT	<unknown>	DEFAULT	15
poll	.symtab	0x41475c	220	FUNC	<unknown>	DEFAULT	3
poll.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prefix.6318	.symtab	0x417bb0	12	OBJECT	<unknown>	DEFAULT	5
print	.symtab	0x4012f4	1460	FUNC	<unknown>	DEFAULT	3
printchar	.symtab	0x400d64	184	FUNC	<unknown>	DEFAULT	3
printi	.symtab	0x401058	668	FUNC	<unknown>	DEFAULT	3
prints	.symtab	0x400e1c	572	FUNC	<unknown>	DEFAULT	3
processCmd	.symtab	0x404204	4264	FUNC	<unknown>	DEFAULT	3
program_invocation_name	.symtab	0x42a7b8	4	OBJECT	<unknown>	DEFAULT	12
program_invocation_short_name	.symtab	0x42a7b4	4	OBJECT	<unknown>	DEFAULT	12
qual_chars.6326	.symtab	0x417bd0	20	OBJECT	<unknown>	DEFAULT	5
raise	.symtab	0x40b830	264	FUNC	<unknown>	DEFAULT	3
raise.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand	.symtab	0x40a210	28	FUNC	<unknown>	DEFAULT	3
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand_cmwc	.symtab	0x40046c	468	FUNC	<unknown>	DEFAULT	3
random	.symtab	0x40a230	164	FUNC	<unknown>	DEFAULT	3
random.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
random_poly_info	.symtab	0x418870	40	OBJECT	<unknown>	DEFAULT	5
random_r	.symtab	0x40a510	172	FUNC	<unknown>	DEFAULT	3
random_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
randtbl	.symtab	0x42a6e8	128	OBJECT	<unknown>	DEFAULT	12
rawmemchr	.symtab	0x4123b0	192	FUNC	<unknown>	DEFAULT	3
rawmemchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read	.symtab	0x40be8c	192	FUNC	<unknown>	DEFAULT	3
read_etc_hosts_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
readdir64	.symtab	0x40d190	272	FUNC	<unknown>	DEFAULT	3
readdir64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
realloc	.symtab	0x410e40	1152	FUNC	<unknown>	DEFAULT	3
realloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recv	.symtab	0x408aac	240	FUNC	<unknown>	DEFAULT	3
recv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recvLine	.symtab	0x401aa0	876	FUNC	<unknown>	DEFAULT	3
register-atfork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
resolv_conf_mtime.6599	.symtab	0x431b98	4	OBJECT	<unknown>	DEFAULT	16
rindex	.symtab	0x410530	160	FUNC	<unknown>	DEFAULT	3
sbrk	.symtab	0x40cc10	164	FUNC	<unknown>	DEFAULT	3
sbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
select	.symtab	0x4064c0	260	FUNC	<unknown>	DEFAULT	3
select.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
send	.symtab	0x408bdc	240	FUNC	<unknown>	DEFAULT	3
send.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setjmp_aux.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsid	.symtab	0x4065d0	60	FUNC	<unknown>	DEFAULT	3
setsid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsockopt	.symtab	0x408cd0	96	FUNC	<unknown>	DEFAULT	3
setsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setstate	.symtab	0x40a2d4	184	FUNC	<unknown>	DEFAULT	3
setstate_r	.symtab	0x40a878	272	FUNC	<unknown>	DEFAULT	3
sigaction	.symtab	0x40c8b0	28	FUNC	<unknown>	DEFAULT	3
sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigjmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
signal	.symtab	0x408d70	228	FUNC	<unknown>	DEFAULT	3
signal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigprocmask	.symtab	0x40ccc0	176	FUNC	<unknown>	DEFAULT	3
sigprocmask.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigsetops.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
skip_and_NUL_space	.symtab	0x413a08	104	FUNC	<unknown>	DEFAULT	3
skip_nospace	.symtab	0x4139a0	104	FUNC	<unknown>	DEFAULT	3
sleep	.symtab	0x40b940	404	FUNC	<unknown>	DEFAULT	3
sleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket	.symtab	0x408d30	60	FUNC	<unknown>	DEFAULT	3
socket.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket_connect	.symtab	0x4023e4	444	FUNC	<unknown>	DEFAULT	3
sockprintf	.symtab	0x4018a8	344	FUNC	<unknown>	DEFAULT	3
spec_and_mask.6325	.symtab	0x417be4	16	OBJECT	<unknown>	DEFAULT	5
spec_base.6317	.symtab	0x417bbc	7	OBJECT	<unknown>	DEFAULT	5
spec_chars.6322	.symtab	0x417c40	21	OBJECT	<unknown>	DEFAULT	5
spec_flags.6321	.symtab	0x417c58	8	OBJECT	<unknown>	DEFAULT	5
spec_or_mask.6324	.symtab	0x417bf4	16	OBJECT	<unknown>	DEFAULT	5
spec_ranges.6323	.symtab	0x417c04	9	OBJECT	<unknown>	DEFAULT	5
sprintf	.symtab	0x4066b0	80	FUNC	<unknown>	DEFAULT	3
sprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
srand	.symtab	0x40a45c	172	FUNC	<unknown>	DEFAULT	3
srandom	.symtab	0x40a45c	172	FUNC	<unknown>	DEFAULT	3
srandom_r	.symtab	0x40a5bc	400	FUNC	<unknown>	DEFAULT	3
stat	.symtab	0x414840	136	FUNC	<unknown>	DEFAULT	3
stat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
static_dtv	.symtab	0x431620	512	OBJECT	<unknown>	DEFAULT	16
static_map	.symtab	0x431b28	52	OBJECT	<unknown>	DEFAULT	16
static_slotinfo	.symtab	0x431820	776	OBJECT	<unknown>	DEFAULT	16
stderr	.symtab	0x42a7e8	4	OBJECT	<unknown>	DEFAULT	12
stdin	.symtab	0x42a7e0	4	OBJECT	<unknown>	DEFAULT	12
stdout	.symtab	0x42a7e4	4	OBJECT	<unknown>	DEFAULT	12
strcasecmp	.symtab	0x408650	108	FUNC	<unknown>	DEFAULT	3
strcasecmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchr	.symtab	0x408020	248	FUNC	<unknown>	DEFAULT	3
strchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchrnul	.symtab	0x4103a0	248	FUNC	<unknown>	DEFAULT	3
strchrnul.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcmp	.symtab	0x408120	44	FUNC	<unknown>	DEFAULT	3
strcmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcoll	.symtab	0x408120	44	FUNC	<unknown>	DEFAULT	3
strcpy	.symtab	0x408150	36	FUNC	<unknown>	DEFAULT	3
strcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcspn	.symtab	0x4104a0	144	FUNC	<unknown>	DEFAULT	3
strcspn.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strdup	.symtab	0x4149a0	140	FUNC	<unknown>	DEFAULT	3
strdup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strerror_r	.symtab	0x408490	380	FUNC	<unknown>	DEFAULT	3
strlen	.symtab	0x408180	184	FUNC	<unknown>	DEFAULT	3
strlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strncpy	.symtab	0x412470	188	FUNC	<unknown>	DEFAULT	3
strncpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strnlen	.symtab	0x408240	248	FUNC	<unknown>	DEFAULT	3
strnlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strpbrk	.symtab	0x4106f0	64	FUNC	<unknown>	DEFAULT	3
strpbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strrchr	.symtab	0x410530	160	FUNC	<unknown>	DEFAULT	3
strrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strspn	.symtab	0x4105d0	72	FUNC	<unknown>	DEFAULT	3
strspn.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strstr	.symtab	0x408340	256	FUNC	<unknown>	DEFAULT	3
strstr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok	.symtab	0x4086c0	32	FUNC	<unknown>	DEFAULT	3
strtok.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok_r	.symtab	0x410620	208	FUNC	<unknown>	DEFAULT	3
strtok_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtol	.symtab	0x40a9b0	28	FUNC	<unknown>	DEFAULT	3
strtol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sysconf	.symtab	0x40aeac	792	FUNC	<unknown>	DEFAULT	3
sysconf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcgetattr	.symtab	0x410770	176	FUNC	<unknown>	DEFAULT	3
tcgetattr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
time	.symtab	0x406610	16	FUNC	<unknown>	DEFAULT	3
time.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
toupper	.symtab	0x406650	60	FUNC	<unknown>	DEFAULT	3
toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
trim	.symtab	0x400b98	460	FUNC	<unknown>	DEFAULT	3
type_codes	.symtab	0x417c10	24	OBJECT	<unknown>	DEFAULT	5
type_sizes	.symtab	0x417c28	12	OBJECT	<unknown>	DEFAULT	5
uname	.symtab	0x4148d0	60	FUNC	<unknown>	DEFAULT	3
uname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
unknown.1327	.symtab	0x417ce0	14	OBJECT	<unknown>	DEFAULT	5
unsafe_state	.symtab	0x42a770	20	OBJECT	<unknown>	DEFAULT	12
useragents	.symtab	0x42a568	236	OBJECT	<unknown>	DEFAULT	12
vsnprintf	.symtab	0x406700	248	FUNC	<unknown>	DEFAULT	3
vsnprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
waitpid	.symtab	0x40bf8c	192	FUNC	<unknown>	DEFAULT	3
wcrtomb	.symtab	0x40d860	108	FUNC	<unknown>	DEFAULT	3
wcrtomb.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsnrtombs	.symtab	0x40d910	192	FUNC	<unknown>	DEFAULT	3
wcsnrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsrtombs	.symtab	0x40d8d0	64	FUNC	<unknown>	DEFAULT	3
wcsrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
write	.symtab	0x40bd8c	192	FUNC	<unknown>	DEFAULT	3
xdigits.4935	.symtab	0x419124	17	OBJECT	<unknown>	DEFAULT	5
xstatconv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
xtdcustom	.symtab	0x402850	536	FUNC	<unknown>	DEFAULT	3

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 22, 2024 16:11:15.830238104 CET	40076	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:15.952512026 CET	4258	40076	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:15.952605009 CET	40076	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:15.954583883 CET	40076	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:16.074491024 CET	4258	40076	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:17.157902002 CET	4258	40076	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:17.157938004 CET	4258	40076	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:17.158148050 CET	40076	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:17.158814907 CET	40076	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:17.159475088 CET	40078	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:17.282283068 CET	4258	40076	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:17.282743931 CET	4258	40078	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:17.283143044 CET	40078	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:17.283143044 CET	40078	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:17.402847052 CET	4258	40078	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:18.475775003 CET	4258	40078	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:18.475857019 CET	4258	40078	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:18.475908995 CET	40078	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:18.476011992 CET	40078	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:18.476788044 CET	40080	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:18.595719099 CET	4258	40078	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:18.596637011 CET	4258	40080	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:18.596726894 CET	40080	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:18.596726894 CET	40080	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:18.716733932 CET	4258	40080	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:19.744292021 CET	4258	40080	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:19.744395971 CET	4258	40080	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:19.744486094 CET	40080	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:19.744587898 CET	40080	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:19.745250940 CET	40082	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:19.864362955 CET	4258	40080	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:19.864912987 CET	4258	40082	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:19.865094900 CET	40082	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:19.865094900 CET	40082	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:19.985480070 CET	4258	40082	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:21.082967997 CET	4258	40082	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:21.083175898 CET	4258	40082	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:21.083260059 CET	40082	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:21.083303928 CET	40082	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:21.084039927 CET	40084	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:21.202972889 CET	4258	40082	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:21.203739882 CET	4258	40084	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:21.203950882 CET	40084	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:21.203950882 CET	40084	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:21.325217009 CET	4258	40084	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:22.419862032 CET	4258	40084	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:22.420022011 CET	4258	40084	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:22.420094013 CET	40084	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:22.420094013 CET	40084	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:22.420783043 CET	40086	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:22.540880919 CET	4258	40084	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:22.541224957 CET	4258	40086	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:22.541526079 CET	40086	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:22.541527033 CET	40086	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:22.661515951 CET	4258	40086	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:23.742367983 CET	4258	40086	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:23.742568970 CET	4258	40086	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:23.742913961 CET	40086	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:23.742914915 CET	40086	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:23.743937016 CET	40088	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:23.862854958 CET	4258	40086	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:23.863646030 CET	4258	40088	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:23.863914013 CET	40088	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:23.863914013 CET	40088	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:23.984473944 CET	4258	40088	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:25.087492943 CET	4258	40088	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:25.087642908 CET	4258	40088	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:25.087645054 CET	40088	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:25.087806940 CET	40088	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:25.088584900 CET	40090	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:25.212040901 CET	4258	40088	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:25.213007927 CET	4258	40090	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:25.213224888 CET	40090	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:25.213224888 CET	40090	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:25.336352110 CET	4258	40090	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:26.380809069 CET	4258	40090	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:26.380919933 CET	4258	40090	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:26.381136894 CET	40090	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:26.381169081 CET	40090	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:26.382157087 CET	40092	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:26.500828028 CET	4258	40090	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:26.501708031 CET	4258	40092	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:26.502032995 CET	40092	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:26.502032995 CET	40092	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:26.626486063 CET	4258	40092	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:27.663794994 CET	4258	40092	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:27.663839102 CET	4258	40092	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:27.664220095 CET	40092	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:27.664278984 CET	40092	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:27.665469885 CET	40094	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:27.786231995 CET	4258	40092	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:27.788036108 CET	4258	40094	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:27.788371086 CET	40094	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:27.788414001 CET	40094	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:27.911566973 CET	4258	40094	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:28.936321974 CET	4258	40094	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:28.936358929 CET	4258	40094	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:28.936574936 CET	40094	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:28.936842918 CET	40094	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:28.937778950 CET	40096	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:29.056504011 CET	4258	40094	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:29.057380915 CET	4258	40096	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:29.057591915 CET	40096	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:29.057591915 CET	40096	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:29.177258968 CET	4258	40096	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:30.225845098 CET	4258	40096	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:30.225928068 CET	4258	40096	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:30.226315975 CET	40096	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:30.226394892 CET	40096	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:30.227353096 CET	40098	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:30.346146107 CET	4258	40096	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:30.346993923 CET	4258	40098	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:30.347383976 CET	40098	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:30.347460032 CET	40098	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:30.467128992 CET	4258	40098	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:31.517184973 CET	4258	40098	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:31.517301083 CET	4258	40098	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:31.517682076 CET	40098	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:31.517683029 CET	40098	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:31.518454075 CET	40100	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:31.637561083 CET	4258	40098	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:31.638334990 CET	4258	40100	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:31.638603926 CET	40100	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:31.638605118 CET	40100	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:31.758979082 CET	4258	40100	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:32.815546989 CET	4258	40100	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:32.815713882 CET	4258	40100	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:32.815821886 CET	40100	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:32.815891027 CET	40100	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:32.816875935 CET	40102	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:32.935467958 CET	4258	40100	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:32.936429024 CET	4258	40102	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:32.936553955 CET	40102	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:32.936590910 CET	40102	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:33.059690952 CET	4258	40102	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:34.093035936 CET	4258	40102	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:34.093111038 CET	4258	40102	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:34.093266964 CET	40102	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:34.093307018 CET	40102	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:34.094286919 CET	40104	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:34.213109970 CET	4258	40102	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:34.214071989 CET	4258	40104	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:34.214188099 CET	40104	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:34.214272022 CET	40104	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:34.333761930 CET	4258	40104	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:35.361680984 CET	4258	40104	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:35.361810923 CET	4258	40104	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:35.361967087 CET	40104	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:35.362014055 CET	40104	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:35.363091946 CET	40106	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:35.484107971 CET	4258	40104	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:35.485574961 CET	4258	40106	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:35.485923052 CET	40106	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:35.486083984 CET	40106	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:35.606523991 CET	4258	40106	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:36.664313078 CET	4258	40106	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:36.664437056 CET	4258	40106	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:36.664729118 CET	40106	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:36.664798975 CET	40106	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:36.665594101 CET	40108	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:36.786267996 CET	4258	40106	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:36.786556959 CET	4258	40108	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:36.786679029 CET	40108	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:36.786943913 CET	40108	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:36.909356117 CET	4258	40108	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:37.972392082 CET	4258	40108	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:37.972543001 CET	40108	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:37.972809076 CET	4258	40108	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:37.972914934 CET	40108	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:37.973851919 CET	40110	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:38.092791080 CET	4258	40108	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:38.093656063 CET	4258	40110	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:38.093734980 CET	40110	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:38.094538927 CET	40110	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:38.214143991 CET	4258	40110	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:39.287744045 CET	4258	40110	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:39.288000107 CET	4258	40110	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:39.288042068 CET	40110	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:39.288233042 CET	40110	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:39.289180994 CET	40112	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:39.408003092 CET	4258	40110	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:39.408905029 CET	4258	40112	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:39.408989906 CET	40112	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:39.409096956 CET	40112	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:39.529740095 CET	4258	40112	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:40.580992937 CET	4258	40112	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:40.581123114 CET	4258	40112	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:40.581300020 CET	40112	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:40.581459045 CET	40112	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:40.582380056 CET	40114	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:40.701071024 CET	4258	40112	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:40.701910019 CET	4258	40114	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:40.702044964 CET	40114	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:40.702174902 CET	40114	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:40.822791100 CET	4258	40114	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:41.866101027 CET	4258	40114	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:41.866219997 CET	4258	40114	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:41.866241932 CET	40114	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:41.866398096 CET	40114	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:41.867228031 CET	40116	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:41.985886097 CET	4258	40114	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:41.986710072 CET	4258	40116	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:41.986978054 CET	40116	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:41.987109900 CET	40116	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:42.107112885 CET	4258	40116	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:43.166701078 CET	4258	40116	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:43.166791916 CET	4258	40116	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:43.166987896 CET	40116	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:43.167150974 CET	40116	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:43.168157101 CET	40118	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:43.286669016 CET	4258	40116	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:43.287617922 CET	4258	40118	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:43.287789106 CET	40118	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:43.287895918 CET	40118	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:43.407828093 CET	4258	40118	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:44.458662987 CET	4258	40118	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:44.458692074 CET	4258	40118	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:44.458954096 CET	40118	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:44.459007978 CET	40118	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:44.460033894 CET	40120	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:44.580229998 CET	4258	40118	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:44.581302881 CET	4258	40120	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:44.581419945 CET	40120	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:44.581638098 CET	40120	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:44.701209068 CET	4258	40120	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:45.729123116 CET	4258	40120	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:45.729151011 CET	4258	40120	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:45.729325056 CET	40120	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:45.729410887 CET	40120	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:45.730372906 CET	40122	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:45.849015951 CET	4258	40120	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:45.850023031 CET	4258	40122	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:45.850289106 CET	40122	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:45.850486040 CET	40122	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:45.969955921 CET	4258	40122	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:47.012923956 CET	4258	40122	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:47.012953043 CET	4258	40122	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:47.013118982 CET	40122	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:47.013267040 CET	40122	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:47.014224052 CET	40124	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:47.132747889 CET	4258	40122	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:47.133939028 CET	4258	40124	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:47.134071112 CET	40124	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:47.134181023 CET	40124	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:47.253664017 CET	4258	40124	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:48.290540934 CET	4258	40124	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:48.290580988 CET	4258	40124	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:48.290707111 CET	40124	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:48.290844917 CET	40124	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:48.291635036 CET	40126	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:48.410386086 CET	4258	40124	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:48.411166906 CET	4258	40126	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:48.411341906 CET	40126	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:48.411431074 CET	40126	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:48.534259081 CET	4258	40126	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:49.584101915 CET	4258	40126	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:49.584439993 CET	4258	40126	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:49.584450006 CET	40126	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:49.584583044 CET	40126	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:49.585612059 CET	40128	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:49.707839012 CET	4258	40126	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:49.709348917 CET	4258	40128	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:49.709464073 CET	40128	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:49.709585905 CET	40128	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:49.829181910 CET	4258	40128	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:50.866105080 CET	4258	40128	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:50.866183996 CET	4258	40128	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:50.866282940 CET	40128	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:50.866434097 CET	40128	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:50.867264032 CET	40130	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:50.992196083 CET	4258	40128	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:50.993079901 CET	4258	40130	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:50.993185043 CET	40130	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:50.993310928 CET	40130	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:51.112978935 CET	4258	40130	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:52.173511028 CET	4258	40130	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:52.173542023 CET	4258	40130	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:52.173729897 CET	40130	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:52.173974991 CET	40130	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:52.175209045 CET	40132	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:52.293486118 CET	4258	40130	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:52.294811010 CET	4258	40132	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:52.295056105 CET	40132	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:52.295159101 CET	40132	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:52.415092945 CET	4258	40132	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:53.462496996 CET	4258	40132	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:53.462655067 CET	40132	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:53.462917089 CET	4258	40132	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:53.463116884 CET	40132	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:53.463876963 CET	40134	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:53.582573891 CET	4258	40132	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:53.583370924 CET	4258	40134	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:53.583446980 CET	40134	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:53.583580017 CET	40134	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:53.702995062 CET	4258	40134	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:54.749265909 CET	4258	40134	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:54.749279022 CET	4258	40134	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:54.749389887 CET	40134	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:54.749425888 CET	40134	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:54.750134945 CET	40136	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:54.869781017 CET	4258	40134	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:54.870393038 CET	4258	40136	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:54.870466948 CET	40136	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:54.870490074 CET	40136	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:54.990027905 CET	4258	40136	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:56.060532093 CET	4258	40136	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:56.060558081 CET	4258	40136	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:56.060714006 CET	40136	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:56.060775995 CET	40136	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:56.061678886 CET	40138	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:56.180360079 CET	4258	40136	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:56.181366920 CET	4258	40138	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:56.181478977 CET	40138	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:56.181637049 CET	40138	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:56.303311110 CET	4258	40138	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:57.356848001 CET	4258	40138	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:57.356915951 CET	4258	40138	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:57.357028961 CET	40138	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:57.357028961 CET	40138	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:57.357841015 CET	40140	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:57.476764917 CET	4258	40138	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:57.477344990 CET	4258	40140	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:57.477488041 CET	40140	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:57.477513075 CET	40140	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:57.596976995 CET	4258	40140	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:58.686142921 CET	4258	40140	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:58.686279058 CET	40140	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:58.686347961 CET	4258	40140	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:58.686463118 CET	40140	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:58.687294006 CET	40142	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:58.806885958 CET	4258	40140	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:58.807823896 CET	4258	40142	185.216.71.152	192.168.2.13
Dec 22, 2024 16:11:58.807879925 CET	40142	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:58.807917118 CET	40142	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:11:58.928827047 CET	4258	40142	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:00.036905050 CET	4258	40142	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:00.036925077 CET	4258	40142	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:00.037089109 CET	40142	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:00.037204027 CET	40142	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:00.037971020 CET	40144	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:00.164717913 CET	4258	40142	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:00.164858103 CET	4258	40144	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:00.164937973 CET	40144	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:00.164938927 CET	40144	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:00.284508944 CET	4258	40144	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:01.388700962 CET	4258	40144	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:01.388725042 CET	4258	40144	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:01.388835907 CET	40144	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:01.388855934 CET	40144	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:01.389669895 CET	40146	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:01.508778095 CET	4258	40144	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:01.509509087 CET	4258	40146	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:01.509720087 CET	40146	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:01.509738922 CET	40146	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:01.630254984 CET	4258	40146	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:02.834567070 CET	4258	40146	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:02.834783077 CET	40146	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:02.837045908 CET	4258	40146	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:02.837115049 CET	40146	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:02.837728024 CET	40148	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:02.957894087 CET	4258	40146	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:02.958343029 CET	4258	40148	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:02.958475113 CET	40148	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:02.958476067 CET	40148	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:03.078733921 CET	4258	40148	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:04.216226101 CET	4258	40148	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:04.216289043 CET	4258	40148	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:04.216510057 CET	40148	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:04.216640949 CET	40148	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:04.217686892 CET	40150	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:04.339010000 CET	4258	40148	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:04.340711117 CET	4258	40150	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:04.340909004 CET	40150	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:04.340959072 CET	40150	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:04.460591078 CET	4258	40150	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:08.537230968 CET	4258	40150	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:08.537343979 CET	4258	40150	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:08.537450075 CET	40150	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:08.537564039 CET	40150	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:08.538708925 CET	40152	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:08.657080889 CET	4258	40150	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:08.658366919 CET	4258	40152	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:08.658498049 CET	40152	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:08.658539057 CET	40152	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:08.778060913 CET	4258	40152	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:09.959151983 CET	4258	40152	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:09.959194899 CET	4258	40152	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:09.959482908 CET	40152	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:09.959662914 CET	40152	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:09.961375952 CET	40154	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:10.083182096 CET	4258	40152	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:10.085232973 CET	4258	40154	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:10.085386038 CET	40154	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:10.085499048 CET	40154	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:10.210743904 CET	4258	40154	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:11.400600910 CET	4258	40154	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:11.400712967 CET	4258	40154	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:11.400887966 CET	40154	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:11.401046038 CET	40154	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:11.402054071 CET	40156	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:11.520720005 CET	4258	40154	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:11.521827936 CET	4258	40156	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:11.522167921 CET	40156	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:11.522258997 CET	40156	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:11.641762972 CET	4258	40156	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:12.975495100 CET	4258	40156	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:12.975688934 CET	40156	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:12.976522923 CET	40158	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:13.095655918 CET	4258	40156	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:13.096043110 CET	4258	40158	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:13.096122980 CET	40158	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:13.096168041 CET	40158	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:13.215820074 CET	4258	40158	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:17.397488117 CET	4258	40158	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:17.397520065 CET	4258	40158	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:17.397758961 CET	40158	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:17.397759914 CET	40158	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:17.398545980 CET	40160	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:17.518011093 CET	4258	40158	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:17.518640041 CET	4258	40160	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:17.518723965 CET	40160	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:17.518724918 CET	40160	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:17.638360023 CET	4258	40160	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:18.789103985 CET	4258	40160	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:18.789189100 CET	4258	40160	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:18.789341927 CET	40160	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:18.789378881 CET	40160	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:18.790371895 CET	40162	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:18.912245989 CET	4258	40160	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:18.913460016 CET	4258	40162	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:18.913593054 CET	40162	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:18.913649082 CET	40162	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:19.033231974 CET	4258	40162	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:23.176701069 CET	4258	40162	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:23.176820040 CET	4258	40162	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:23.176975012 CET	40162	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:23.177073002 CET	40162	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:23.178102970 CET	40164	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:23.299441099 CET	4258	40162	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:23.300537109 CET	4258	40164	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:23.300689936 CET	40164	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:23.300834894 CET	40164	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:23.425586939 CET	4258	40164	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:24.779475927 CET	4258	40164	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:24.779664993 CET	40164	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:24.780529976 CET	40166	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:24.899337053 CET	4258	40164	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:24.900140047 CET	4258	40166	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:24.900235891 CET	40166	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:24.900285959 CET	40166	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:25.019809008 CET	4258	40166	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:26.341965914 CET	4258	40166	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:26.342144012 CET	40166	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:26.342174053 CET	4258	40166	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:26.342291117 CET	40166	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:26.343384027 CET	40168	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:26.462300062 CET	4258	40166	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:26.463601112 CET	4258	40168	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:26.463898897 CET	40168	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:26.463948965 CET	40168	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:26.584136009 CET	4258	40168	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:27.710448027 CET	4258	40168	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:27.710467100 CET	4258	40168	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:27.710597992 CET	40168	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:27.710686922 CET	40168	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:27.711637020 CET	40170	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:27.830343962 CET	4258	40168	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:27.831196070 CET	4258	40170	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:27.831348896 CET	40170	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:27.831408978 CET	40170	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:27.951844931 CET	4258	40170	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:28.979846001 CET	4258	40170	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:28.980004072 CET	4258	40170	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:28.980035067 CET	40170	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:28.980191946 CET	40170	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:28.981077909 CET	40172	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:29.100049019 CET	4258	40170	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:29.100789070 CET	4258	40172	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:29.101079941 CET	40172	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:29.101166964 CET	40172	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:29.223970890 CET	4258	40172	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:30.279656887 CET	4258	40172	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:30.279706001 CET	4258	40172	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:30.280014992 CET	40172	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:30.280143976 CET	40172	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:30.281006098 CET	40174	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:30.399614096 CET	4258	40172	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:30.400618076 CET	4258	40174	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:30.400892973 CET	40174	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:30.400984049 CET	40174	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:30.520612955 CET	4258	40174	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:31.547957897 CET	4258	40174	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:31.548111916 CET	4258	40174	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:31.548177958 CET	40174	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:31.548305035 CET	40174	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:31.549171925 CET	40176	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:31.667838097 CET	4258	40174	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:31.668793917 CET	4258	40176	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:31.668920994 CET	40176	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:31.669027090 CET	40176	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:31.788682938 CET	4258	40176	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:32.823112965 CET	4258	40176	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:32.823153019 CET	4258	40176	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:32.823468924 CET	40176	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:32.823620081 CET	40176	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:32.824723959 CET	40178	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:32.945034981 CET	4258	40176	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:32.946280003 CET	4258	40178	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:32.946579933 CET	40178	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:32.946719885 CET	40178	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:33.066277981 CET	4258	40178	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:34.099266052 CET	4258	40178	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:34.099292040 CET	4258	40178	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:34.099529982 CET	40178	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:34.099667072 CET	40178	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:34.100697041 CET	40180	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:34.219259024 CET	4258	40178	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:34.220195055 CET	4258	40180	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:34.220320940 CET	40180	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:34.220429897 CET	40180	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:34.339986086 CET	4258	40180	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:35.389853001 CET	4258	40180	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:35.389992952 CET	4258	40180	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:35.390211105 CET	40180	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:35.390332937 CET	40180	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:35.391366959 CET	40182	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:35.511112928 CET	4258	40180	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:35.512259960 CET	4258	40182	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:35.512541056 CET	40182	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:35.512629986 CET	40182	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:35.634785891 CET	4258	40182	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:36.689300060 CET	4258	40182	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:36.689486027 CET	4258	40182	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:36.689486980 CET	40182	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:36.689755917 CET	40182	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:36.691680908 CET	40184	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:36.809792995 CET	4258	40182	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:36.811988115 CET	4258	40184	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:36.812108040 CET	40184	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:36.812407017 CET	40184	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:36.933355093 CET	4258	40184	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:37.977164984 CET	4258	40184	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:37.977293968 CET	4258	40184	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:37.977616072 CET	40184	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:37.977741957 CET	40184	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:37.978769064 CET	40186	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:38.097628117 CET	4258	40184	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:38.098634005 CET	4258	40186	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:38.098777056 CET	40186	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:38.098870993 CET	40186	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:38.218720913 CET	4258	40186	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:39.413705111 CET	4258	40186	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:39.413733006 CET	4258	40186	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:39.413894892 CET	40186	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:39.414024115 CET	40186	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:39.415079117 CET	40188	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:39.539031982 CET	4258	40186	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:39.540797949 CET	4258	40188	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:39.541102886 CET	40188	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:39.541193962 CET	40188	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:39.660744905 CET	4258	40188	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:40.778620958 CET	4258	40188	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:40.778645992 CET	4258	40188	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:40.778970003 CET	40188	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:40.779146910 CET	40188	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:40.780524015 CET	40190	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:40.899599075 CET	4258	40188	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:40.900844097 CET	4258	40190	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:40.900984049 CET	40190	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:40.901110888 CET	40190	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:41.020971060 CET	4258	40190	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:42.230940104 CET	4258	40190	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:42.231087923 CET	4258	40190	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:42.231149912 CET	40190	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:42.231298923 CET	40190	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:42.232420921 CET	40192	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:42.351388931 CET	4258	40190	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:42.352821112 CET	4258	40192	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:42.353137016 CET	40192	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:42.353250980 CET	40192	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:42.473750114 CET	4258	40192	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:43.643702030 CET	4258	40192	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:43.643805981 CET	4258	40192	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:43.643874884 CET	40192	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:43.643940926 CET	40192	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:43.644959927 CET	40194	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:43.763612986 CET	4258	40192	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:43.764533043 CET	4258	40194	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:43.764708996 CET	40194	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:43.764803886 CET	40194	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:43.886876106 CET	4258	40194	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:44.947510004 CET	4258	40194	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:44.947557926 CET	4258	40194	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:44.947724104 CET	40194	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:44.947947979 CET	40194	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:44.948982954 CET	40196	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:45.067779064 CET	4258	40194	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:45.070718050 CET	4258	40196	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:45.070969105 CET	40196	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:45.071044922 CET	40196	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:45.193392038 CET	4258	40196	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:46.513868093 CET	4258	40196	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:46.514120102 CET	40196	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:46.514859915 CET	40198	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:46.633841991 CET	4258	40196	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:46.634334087 CET	4258	40198	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:46.634485006 CET	40198	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:46.634540081 CET	40198	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:46.755088091 CET	4258	40198	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:47.906707048 CET	4258	40198	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:47.906752110 CET	4258	40198	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:47.907037020 CET	40198	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:47.907182932 CET	40198	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:47.908216953 CET	40200	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:48.026727915 CET	4258	40198	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:48.027946949 CET	4258	40200	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:48.028085947 CET	40200	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:48.028194904 CET	40200	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:48.148598909 CET	4258	40200	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:49.302520990 CET	4258	40200	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:49.302695990 CET	4258	40200	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:49.303005934 CET	40200	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:49.303107977 CET	40200	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:49.303870916 CET	40202	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:49.427426100 CET	4258	40200	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:49.428045988 CET	4258	40202	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:49.428399086 CET	40202	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:49.428499937 CET	40202	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:49.548261881 CET	4258	40202	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:50.632139921 CET	4258	40202	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:50.632162094 CET	4258	40202	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:50.632373095 CET	40202	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:50.632458925 CET	40202	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:50.633554935 CET	40204	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:50.754134893 CET	4258	40202	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:50.754834890 CET	4258	40204	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:50.755130053 CET	40204	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:50.755253077 CET	40204	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:50.876214981 CET	4258	40204	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:52.007220030 CET	4258	40204	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:52.007249117 CET	4258	40204	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:52.007405996 CET	40204	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:52.007462025 CET	40204	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:52.008208990 CET	40206	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:52.127481937 CET	4258	40204	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:52.128061056 CET	4258	40206	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:52.128175974 CET	40206	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:52.128381014 CET	40206	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:52.248778105 CET	4258	40206	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:54.160617113 CET	4258	40206	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:54.161202908 CET	40206	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:54.161828041 CET	40208	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:54.282150030 CET	4258	40206	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:54.282839060 CET	4258	40208	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:54.283010960 CET	40208	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:54.283230066 CET	40208	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:54.402671099 CET	4258	40208	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:55.587693930 CET	4258	40208	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:55.587721109 CET	4258	40208	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:55.588053942 CET	40208	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:55.588162899 CET	40208	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:55.589188099 CET	40210	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:55.707752943 CET	4258	40208	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:55.708678007 CET	4258	40210	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:55.708914995 CET	40210	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:55.709037066 CET	40210	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:55.828830004 CET	4258	40210	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:56.994801044 CET	4258	40210	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:56.994899035 CET	4258	40210	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:56.995141983 CET	40210	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:56.995301962 CET	40210	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:56.996345043 CET	40212	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:57.114778996 CET	4258	40210	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:57.116163015 CET	4258	40212	185.216.71.152	192.168.2.13
Dec 22, 2024 16:12:57.116277933 CET	40212	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:57.116420984 CET	40212	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:12:57.235939980 CET	4258	40212	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:01.312108040 CET	4258	40212	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:01.312163115 CET	4258	40212	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:01.312273026 CET	40212	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:01.312541008 CET	40212	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:01.313718081 CET	40214	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:01.432153940 CET	4258	40212	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:01.433413029 CET	4258	40214	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:01.433567047 CET	40214	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:01.433657885 CET	40214	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:01.553355932 CET	4258	40214	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:02.596838951 CET	4258	40214	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:02.596867085 CET	4258	40214	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:02.597004890 CET	40214	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:02.597091913 CET	40214	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:02.597868919 CET	40216	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:02.716643095 CET	4258	40214	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:02.717384100 CET	4258	40216	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:02.717479944 CET	40216	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:02.717552900 CET	40216	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:02.837327957 CET	4258	40216	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:03.895467997 CET	4258	40216	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:03.895490885 CET	4258	40216	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:03.895715952 CET	40216	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:03.895847082 CET	40216	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:03.896775007 CET	40218	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:04.015568972 CET	4258	40216	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:04.016508102 CET	4258	40218	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:04.016879082 CET	40218	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:04.016880035 CET	40218	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:04.136545897 CET	4258	40218	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:05.163717031 CET	4258	40218	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:05.163743973 CET	4258	40218	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:05.164051056 CET	40218	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:05.164275885 CET	40218	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:05.165380955 CET	40220	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:05.284198046 CET	4258	40218	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:05.285129070 CET	4258	40220	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:05.285434961 CET	40220	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:05.285536051 CET	40220	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:05.405337095 CET	4258	40220	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:06.451176882 CET	4258	40220	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:06.451380968 CET	40220	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:06.451472044 CET	4258	40220	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:06.451575994 CET	40220	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:06.452644110 CET	40222	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:06.571717024 CET	4258	40220	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:06.574467897 CET	4258	40222	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:06.574609995 CET	40222	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:06.574794054 CET	40222	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:06.698292017 CET	4258	40222	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:07.729074955 CET	4258	40222	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:07.729191065 CET	4258	40222	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:07.729350090 CET	40222	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:07.729504108 CET	40222	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:07.730578899 CET	40224	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:07.849176884 CET	4258	40222	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:07.850198984 CET	4258	40224	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:07.850383043 CET	40224	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:07.850533962 CET	40224	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:07.970274925 CET	4258	40224	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:09.015935898 CET	4258	40224	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:09.016068935 CET	4258	40224	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:09.016223907 CET	40224	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:09.016444921 CET	40224	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:09.017585993 CET	40226	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:09.136292934 CET	4258	40224	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:09.137063026 CET	4258	40226	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:09.137253046 CET	40226	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:09.137363911 CET	40226	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:09.256892920 CET	4258	40226	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:10.332951069 CET	4258	40226	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:10.332963943 CET	4258	40226	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:10.333245993 CET	40226	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:10.333417892 CET	40226	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:10.334503889 CET	40228	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:10.453054905 CET	4258	40226	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:10.454119921 CET	4258	40228	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:10.454241991 CET	40228	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:10.454379082 CET	40228	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:10.573956966 CET	4258	40228	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:11.616425037 CET	4258	40228	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:11.616529942 CET	4258	40228	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:11.616609097 CET	40228	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:11.616750002 CET	40228	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:11.617790937 CET	40230	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:11.736602068 CET	4258	40228	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:11.737348080 CET	4258	40230	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:11.737540960 CET	40230	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:11.737607002 CET	40230	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:11.857215881 CET	4258	40230	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:12.926783085 CET	4258	40230	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:12.926960945 CET	40230	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:12.927575111 CET	4258	40230	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:12.927678108 CET	40230	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:12.928682089 CET	40232	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:13.047383070 CET	4258	40230	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:13.048340082 CET	4258	40232	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:13.048466921 CET	40232	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:13.048574924 CET	40232	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:13.168467045 CET	4258	40232	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:14.225718021 CET	4258	40232	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:14.225898981 CET	4258	40232	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:14.225994110 CET	40232	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:14.226083040 CET	40232	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:14.226984978 CET	40234	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:14.345684052 CET	4258	40232	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:14.346491098 CET	4258	40234	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:14.346892118 CET	40234	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:14.346925974 CET	40234	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:14.467108011 CET	4258	40234	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:15.512232065 CET	4258	40234	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:15.512259960 CET	4258	40234	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:15.512392044 CET	40234	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:15.512650013 CET	40234	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:15.513464928 CET	40236	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:15.632591009 CET	4258	40234	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:15.633589029 CET	4258	40236	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:15.633734941 CET	40236	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:15.633846045 CET	40236	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:15.753643036 CET	4258	40236	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:16.798187017 CET	4258	40236	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:16.798311949 CET	4258	40236	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:16.798374891 CET	40236	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:16.798530102 CET	40236	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:16.799585104 CET	40238	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:16.918042898 CET	4258	40236	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:16.919055939 CET	4258	40238	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:16.919225931 CET	40238	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:16.919352055 CET	40238	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:17.038887978 CET	4258	40238	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:18.112102032 CET	4258	40238	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:18.112122059 CET	4258	40238	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:18.112402916 CET	40238	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:18.112488031 CET	40238	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:18.113311052 CET	40240	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:18.232449055 CET	4258	40238	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:18.233256102 CET	4258	40240	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:18.233366013 CET	40240	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:18.233496904 CET	40240	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:18.353626013 CET	4258	40240	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:19.410429955 CET	4258	40240	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:19.410454988 CET	4258	40240	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:19.410847902 CET	40240	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:19.410849094 CET	40240	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:19.411967993 CET	40242	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:19.530585051 CET	4258	40240	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:19.531697035 CET	4258	40242	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:19.531867981 CET	40242	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:19.531971931 CET	40242	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:19.651763916 CET	4258	40242	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:20.693355083 CET	4258	40242	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:20.693403959 CET	4258	40242	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:20.693557024 CET	40242	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:20.693701029 CET	40242	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:20.694819927 CET	40244	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:20.813316107 CET	4258	40242	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:20.814378023 CET	4258	40244	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:20.814632893 CET	40244	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:20.814740896 CET	40244	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:20.934225082 CET	4258	40244	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:21.971221924 CET	4258	40244	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:21.971395969 CET	40244	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:21.971689939 CET	4258	40244	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:21.971790075 CET	40244	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:21.972574949 CET	40246	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:22.091231108 CET	4258	40244	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:22.092269897 CET	4258	40246	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:22.092511892 CET	40246	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:22.092601061 CET	40246	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:22.212172985 CET	4258	40246	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:23.251889944 CET	4258	40246	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:23.252070904 CET	4258	40246	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:23.252091885 CET	40246	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:23.252217054 CET	40246	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:23.253283024 CET	40248	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:23.372216940 CET	4258	40246	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:23.373080015 CET	4258	40248	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:23.373204947 CET	40248	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:23.373307943 CET	40248	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:23.492923975 CET	4258	40248	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:24.537255049 CET	4258	40248	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:24.537383080 CET	4258	40248	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:24.537544966 CET	40248	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:24.537704945 CET	40248	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:24.538820028 CET	40250	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:24.657263994 CET	4258	40248	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:24.658440113 CET	4258	40250	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:24.658509970 CET	40250	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:24.658586979 CET	40250	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:24.778094053 CET	4258	40250	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:25.805788994 CET	4258	40250	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:25.805949926 CET	4258	40250	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:25.806267023 CET	40250	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:25.806267023 CET	40250	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:25.807921886 CET	40252	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:25.926003933 CET	4258	40250	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:25.927591085 CET	4258	40252	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:25.927872896 CET	40252	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:25.927998066 CET	40252	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:26.050409079 CET	4258	40252	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:27.105894089 CET	4258	40252	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:27.105953932 CET	4258	40252	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:27.106091976 CET	40252	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:27.106246948 CET	40252	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:27.107168913 CET	40254	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:27.225892067 CET	4258	40252	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:27.226774931 CET	4258	40254	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:27.226891041 CET	40254	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:27.226994991 CET	40254	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:27.347881079 CET	4258	40254	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:28.393076897 CET	4258	40254	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:28.393218040 CET	40254	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:28.393234015 CET	4258	40254	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:28.393445969 CET	40254	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:28.394499063 CET	40256	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:28.513010025 CET	4258	40254	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:28.513989925 CET	4258	40256	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:28.514066935 CET	40256	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:28.514199972 CET	40256	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:28.633626938 CET	4258	40256	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:29.664729118 CET	4258	40256	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:29.664864063 CET	40256	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:29.664940119 CET	4258	40256	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:29.665088892 CET	40256	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:29.666129112 CET	40258	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:29.784754038 CET	4258	40256	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:29.785948992 CET	4258	40258	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:29.786077023 CET	40258	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:29.786108017 CET	40258	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:29.909929037 CET	4258	40258	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:30.967118979 CET	4258	40258	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:30.967175961 CET	4258	40258	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:30.967283964 CET	40258	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:30.967412949 CET	40258	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:30.968139887 CET	40260	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:31.087073088 CET	4258	40258	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:31.087821007 CET	4258	40260	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:31.087990046 CET	40260	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:31.088114977 CET	40260	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:31.208765030 CET	4258	40260	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:32.274194956 CET	4258	40260	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:32.274398088 CET	40260	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:32.274533033 CET	4258	40260	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:32.274624109 CET	40260	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:32.275450945 CET	40262	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:32.394918919 CET	4258	40260	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:32.395762920 CET	4258	40262	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:32.396028996 CET	40262	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:32.396068096 CET	40262	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:32.515981913 CET	4258	40262	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:33.593090057 CET	4258	40262	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:33.593230009 CET	40262	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:33.593386889 CET	4258	40262	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:33.593455076 CET	40262	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:33.594288111 CET	40264	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:33.713009119 CET	4258	40262	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:33.713849068 CET	4258	40264	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:33.714052916 CET	40264	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:33.714389086 CET	40264	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:33.833947897 CET	4258	40264	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:34.878844023 CET	4258	40264	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:34.878964901 CET	4258	40264	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:34.879020929 CET	40264	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:34.879062891 CET	40264	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:34.879615068 CET	40266	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:35.000184059 CET	4258	40264	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:35.000536919 CET	4258	40266	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:35.000653028 CET	40266	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:35.000823975 CET	40266	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:35.120512962 CET	4258	40266	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:36.179233074 CET	4258	40266	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:36.179260969 CET	4258	40266	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:36.179383993 CET	40266	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:36.179428101 CET	40266	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:36.180339098 CET	40268	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:36.299087048 CET	4258	40266	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:36.299873114 CET	4258	40268	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:36.300026894 CET	40268	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:36.300179958 CET	40268	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:36.421164989 CET	4258	40268	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:37.498464108 CET	4258	40268	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:37.498491049 CET	4258	40268	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:37.498642921 CET	40268	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:37.498754978 CET	40268	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:37.499972105 CET	40270	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:37.618314028 CET	4258	40268	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:37.619708061 CET	4258	40270	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:37.619872093 CET	40270	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:37.619937897 CET	40270	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:37.739615917 CET	4258	40270	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:38.872829914 CET	4258	40270	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:38.872955084 CET	4258	40270	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:38.872996092 CET	40270	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:38.873228073 CET	40270	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:38.874236107 CET	40272	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:38.993043900 CET	4258	40270	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:38.994144917 CET	4258	40272	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:38.994358063 CET	40272	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:38.994358063 CET	40272	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:39.114123106 CET	4258	40272	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:40.186171055 CET	4258	40272	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:40.186350107 CET	4258	40272	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:40.186376095 CET	40272	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:40.186549902 CET	40272	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:40.187431097 CET	40274	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:40.306233883 CET	4258	40272	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:40.307018042 CET	4258	40274	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:40.307178020 CET	40274	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:40.307234049 CET	40274	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:40.427321911 CET	4258	40274	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:41.485984087 CET	4258	40274	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:41.486006021 CET	4258	40274	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:41.486255884 CET	40274	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:41.486315012 CET	40274	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:41.487154961 CET	40276	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:41.606348991 CET	4258	40274	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:41.607335091 CET	4258	40276	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:41.607543945 CET	40276	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:41.607544899 CET	40276	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:41.727387905 CET	4258	40276	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:42.763044119 CET	4258	40276	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:42.763056040 CET	4258	40276	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:42.763206005 CET	40276	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:42.763310909 CET	40276	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:42.764233112 CET	40278	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:42.888748884 CET	4258	40276	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:42.888762951 CET	4258	40278	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:42.889061928 CET	40278	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:42.889061928 CET	40278	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:43.008719921 CET	4258	40278	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:44.047806025 CET	4258	40278	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:44.047861099 CET	4258	40278	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:44.047962904 CET	40278	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:44.048068047 CET	40278	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:44.048649073 CET	40280	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:44.170794964 CET	4258	40278	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:44.171160936 CET	4258	40280	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:44.171261072 CET	40280	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:44.171482086 CET	40280	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:44.291100025 CET	4258	40280	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:45.331917048 CET	4258	40280	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:45.332004070 CET	4258	40280	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:45.332215071 CET	40280	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:45.332350969 CET	40280	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:45.333362103 CET	40282	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:45.453229904 CET	4258	40280	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:45.453898907 CET	4258	40282	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:45.453984976 CET	40282	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:45.454220057 CET	40282	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:45.575294971 CET	4258	40282	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:46.619421005 CET	4258	40282	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:46.619469881 CET	4258	40282	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:46.619595051 CET	40282	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:46.619595051 CET	40282	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:46.620589972 CET	40284	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:46.746010065 CET	4258	40282	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:46.746984005 CET	4258	40284	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:46.747200012 CET	40284	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:46.747332096 CET	40284	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:46.867033005 CET	4258	40284	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:47.909446955 CET	4258	40284	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:47.909609079 CET	4258	40284	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:47.909635067 CET	40284	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:47.909771919 CET	40284	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:47.910757065 CET	40286	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:48.031876087 CET	4258	40284	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:48.032951117 CET	4258	40286	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:48.033135891 CET	40286	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:48.033236980 CET	40286	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:48.154314041 CET	4258	40286	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:49.190953970 CET	4258	40286	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:49.191011906 CET	4258	40286	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:49.191090107 CET	40286	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:49.191147089 CET	40286	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:49.192183971 CET	40288	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:49.311548948 CET	4258	40286	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:49.312391043 CET	4258	40288	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:49.312522888 CET	40288	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:49.312522888 CET	40288	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:49.432573080 CET	4258	40288	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:50.459670067 CET	4258	40288	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:50.459749937 CET	4258	40288	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:50.459836960 CET	40288	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:50.459836960 CET	40288	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:50.460891008 CET	40290	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:50.584744930 CET	4258	40288	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:50.585982084 CET	4258	40290	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:50.586128950 CET	40290	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:50.586289883 CET	40290	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:50.706479073 CET	4258	40290	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:51.748413086 CET	4258	40290	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:51.748491049 CET	4258	40290	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:51.748790026 CET	40290	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:51.748915911 CET	40290	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:51.749875069 CET	40292	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:51.868499041 CET	4258	40290	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:51.869471073 CET	4258	40292	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:51.869762897 CET	40292	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:51.869762897 CET	40292	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:51.989377975 CET	4258	40292	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:53.036500931 CET	4258	40292	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:53.036648989 CET	4258	40292	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:53.036709070 CET	40292	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:53.036807060 CET	40292	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:53.037600040 CET	40294	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:53.156395912 CET	4258	40292	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:53.157275915 CET	4258	40294	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:53.157363892 CET	40294	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:53.157529116 CET	40294	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:53.277373075 CET	4258	40294	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:54.311539888 CET	4258	40294	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:54.311589003 CET	4258	40294	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:54.311738014 CET	40294	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:54.311857939 CET	40294	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:54.312693119 CET	40296	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:54.433793068 CET	4258	40294	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:54.434691906 CET	4258	40296	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:54.434860945 CET	40296	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:54.434860945 CET	40296	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:54.554600000 CET	4258	40296	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:55.598575115 CET	4258	40296	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:55.598679066 CET	4258	40296	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:55.599030972 CET	40296	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:55.599070072 CET	40296	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:55.599816084 CET	40298	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:55.722759008 CET	4258	40296	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:55.723602057 CET	4258	40298	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:55.723763943 CET	40298	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:55.723841906 CET	40298	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:55.844115019 CET	4258	40298	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:56.878403902 CET	4258	40298	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:56.878524065 CET	4258	40298	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:56.878586054 CET	40298	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:56.878726959 CET	40298	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:56.879992008 CET	40300	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:56.998223066 CET	4258	40298	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:57.002541065 CET	4258	40300	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:57.002676964 CET	40300	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:57.002764940 CET	40300	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:57.125792027 CET	4258	40300	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:58.173156023 CET	4258	40300	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:58.173206091 CET	4258	40300	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:58.173439980 CET	40300	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:58.173618078 CET	40300	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:58.174554110 CET	40302	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:58.297282934 CET	4258	40300	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:58.298110008 CET	4258	40302	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:58.298391104 CET	40302	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:58.298496962 CET	40302	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:58.418829918 CET	4258	40302	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:59.523556948 CET	4258	40302	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:59.523662090 CET	4258	40302	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:59.523785114 CET	40302	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:59.523940086 CET	40302	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:59.524923086 CET	40304	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:59.647418022 CET	4258	40302	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:59.648125887 CET	4258	40304	185.216.71.152	192.168.2.13
Dec 22, 2024 16:13:59.648298025 CET	40304	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:59.648397923 CET	40304	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:13:59.768049955 CET	4258	40304	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:00.518915892 CET	35032	53	192.168.2.13	8.8.8.8
Dec 22, 2024 16:14:00.638842106 CET	53	35032	8.8.8.8	192.168.2.13
Dec 22, 2024 16:14:00.638900042 CET	35032	53	192.168.2.13	8.8.8.8
Dec 22, 2024 16:14:00.638935089 CET	35032	53	192.168.2.13	8.8.8.8
Dec 22, 2024 16:14:00.638956070 CET	35032	53	192.168.2.13	8.8.8.8
Dec 22, 2024 16:14:00.760458946 CET	53	35032	8.8.8.8	192.168.2.13
Dec 22, 2024 16:14:00.760497093 CET	53	35032	8.8.8.8	192.168.2.13
Dec 22, 2024 16:14:00.819593906 CET	4258	40304	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:00.819655895 CET	40304	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:00.819756031 CET	4258	40304	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:00.819838047 CET	40304	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:00.820869923 CET	40308	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:00.942250013 CET	4258	40304	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:00.942975044 CET	4258	40308	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:00.943047047 CET	40308	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:00.943103075 CET	40308	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:01.064994097 CET	4258	40308	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:01.726191998 CET	53	35032	8.8.8.8	192.168.2.13
Dec 22, 2024 16:14:01.726341009 CET	35032	53	192.168.2.13	8.8.8.8
Dec 22, 2024 16:14:01.960026026 CET	53	35032	8.8.8.8	192.168.2.13
Dec 22, 2024 16:14:01.960120916 CET	35032	53	192.168.2.13	8.8.8.8
Dec 22, 2024 16:14:02.108465910 CET	4258	40308	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:02.108551979 CET	40308	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:02.108822107 CET	4258	40308	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:02.108915091 CET	40308	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:02.109477997 CET	40310	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:02.229124069 CET	4258	40308	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:02.229624987 CET	4258	40310	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:02.230123043 CET	40310	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:02.230123043 CET	40310	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:02.351159096 CET	4258	40310	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:03.393729925 CET	4258	40310	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:03.393940926 CET	4258	40310	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:03.394053936 CET	40310	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:03.394140005 CET	40310	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:03.394772053 CET	40312	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:03.514437914 CET	4258	40310	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:03.514473915 CET	4258	40312	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:03.514703989 CET	40312	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:03.514704943 CET	40312	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:03.634478092 CET	4258	40312	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:03.726391077 CET	53	35032	8.8.8.8	192.168.2.13
Dec 22, 2024 16:14:03.726671934 CET	35032	53	192.168.2.13	8.8.8.8
Dec 22, 2024 16:14:03.846411943 CET	53	35032	8.8.8.8	192.168.2.13
Dec 22, 2024 16:14:04.669004917 CET	4258	40312	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:04.669069052 CET	40312	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:04.669172049 CET	4258	40312	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:04.669239044 CET	40312	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:04.669601917 CET	40314	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:04.788897991 CET	4258	40312	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:04.789288998 CET	4258	40314	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:04.789396048 CET	40314	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:04.789582968 CET	40314	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:04.909809113 CET	4258	40314	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:05.946485996 CET	4258	40314	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:05.946656942 CET	40314	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:05.946695089 CET	4258	40314	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:05.946748018 CET	40314	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:05.947242022 CET	40316	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:06.066529036 CET	4258	40314	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:06.066900969 CET	4258	40316	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:06.067167044 CET	40316	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:06.067167044 CET	40316	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:06.186984062 CET	4258	40316	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:07.217986107 CET	4258	40316	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:07.218118906 CET	4258	40316	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:07.218306065 CET	40316	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:07.218307018 CET	40316	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:07.218875885 CET	40318	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:07.340195894 CET	4258	40316	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:07.340553999 CET	4258	40318	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:07.340737104 CET	40318	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:07.340980053 CET	40318	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:07.462620974 CET	4258	40318	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:08.489748955 CET	4258	40318	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:08.489907026 CET	4258	40318	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:08.489990950 CET	40318	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:08.490041018 CET	40318	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:08.490540981 CET	40320	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:08.610203981 CET	4258	40318	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:08.610740900 CET	4258	40320	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:08.610919952 CET	40320	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:08.610919952 CET	40320	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:08.730618000 CET	4258	40320	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:09.762188911 CET	4258	40320	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:09.762320042 CET	4258	40320	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:09.762538910 CET	40320	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:09.762538910 CET	40320	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:09.763032913 CET	40322	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:09.882361889 CET	4258	40320	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:09.882786036 CET	4258	40322	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:09.883161068 CET	40322	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:09.883161068 CET	40322	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:10.002998114 CET	4258	40322	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:11.037084103 CET	4258	40322	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:11.037120104 CET	4258	40322	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:11.037417889 CET	40322	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:11.037417889 CET	40322	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:11.038088083 CET	40324	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:11.157483101 CET	4258	40322	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:11.157870054 CET	4258	40324	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:11.158055067 CET	40324	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:11.158097982 CET	40324	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:11.277837992 CET	4258	40324	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:12.324512959 CET	4258	40324	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:12.324568987 CET	4258	40324	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:12.324671984 CET	40324	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:12.324776888 CET	40324	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:12.325368881 CET	40326	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:12.446863890 CET	4258	40324	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:12.447350025 CET	4258	40326	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:12.447505951 CET	40326	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:12.447554111 CET	40326	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:12.567270994 CET	4258	40326	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:13.603533983 CET	4258	40326	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:13.603691101 CET	4258	40326	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:13.604001045 CET	40326	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:13.604096889 CET	40326	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:13.604954958 CET	40328	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:13.724628925 CET	4258	40326	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:13.725377083 CET	4258	40328	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:13.725529909 CET	40328	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:13.725594997 CET	40328	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:13.845083952 CET	4258	40328	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:14.893698931 CET	4258	40328	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:14.893809080 CET	4258	40328	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:14.893853903 CET	40328	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:14.894028902 CET	40328	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:14.894802094 CET	40330	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:15.013756037 CET	4258	40328	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:15.014422894 CET	4258	40330	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:15.014659882 CET	40330	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:15.014786005 CET	40330	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:15.134315014 CET	4258	40330	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:16.192198992 CET	4258	40330	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:16.192316055 CET	4258	40330	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:16.192523956 CET	40330	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:16.192576885 CET	40330	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:16.193413019 CET	40332	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:16.312259912 CET	4258	40330	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:16.313039064 CET	4258	40332	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:16.313447952 CET	40332	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:16.313447952 CET	40332	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:16.434119940 CET	4258	40332	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:17.470257044 CET	4258	40332	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:17.470374107 CET	4258	40332	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:17.470592976 CET	40332	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:17.470696926 CET	40332	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:17.471575975 CET	40334	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:17.590221882 CET	4258	40332	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:17.591106892 CET	4258	40334	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:17.591371059 CET	40334	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:17.591464996 CET	40334	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:17.710963964 CET	4258	40334	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:18.767162085 CET	4258	40334	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:18.767374992 CET	4258	40334	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:18.767554998 CET	40334	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:18.767632008 CET	40334	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:18.768599987 CET	40336	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:18.887577057 CET	4258	40334	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:18.888417959 CET	4258	40336	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:18.888714075 CET	40336	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:18.888714075 CET	40336	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:19.008646011 CET	4258	40336	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:20.077920914 CET	4258	40336	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:20.078083992 CET	4258	40336	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:20.078234911 CET	40336	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:20.078429937 CET	40336	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:20.079339981 CET	40338	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:20.198262930 CET	4258	40336	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:20.198878050 CET	4258	40338	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:20.199171066 CET	40338	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:20.199275970 CET	40338	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:20.318986893 CET	4258	40338	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:21.464567900 CET	4258	40338	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:21.464873075 CET	4258	40338	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:21.465183973 CET	40338	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:21.465354919 CET	40338	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:21.466640949 CET	40340	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:21.585197926 CET	4258	40338	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:21.586379051 CET	4258	40340	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:21.586841106 CET	40340	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:21.586841106 CET	40340	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:21.706533909 CET	4258	40340	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:22.795984983 CET	4258	40340	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:22.796168089 CET	4258	40340	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:22.796435118 CET	40340	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:22.796675920 CET	40340	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:22.798279047 CET	40342	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:22.916230917 CET	4258	40340	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:22.917829990 CET	4258	40342	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:22.918040037 CET	40342	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:22.918322086 CET	40342	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:23.037867069 CET	4258	40342	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:24.177714109 CET	4258	40342	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:24.177759886 CET	4258	40342	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:24.177953959 CET	40342	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:24.178150892 CET	40342	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:24.179550886 CET	40344	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:24.299715042 CET	4258	40342	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:24.301270962 CET	4258	40344	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:24.301508904 CET	40344	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:24.301508904 CET	40344	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:24.421686888 CET	4258	40344	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:25.475426912 CET	4258	40344	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:25.475466967 CET	4258	40344	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:25.475771904 CET	40344	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:25.475930929 CET	40344	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:25.476774931 CET	40346	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:25.597193003 CET	4258	40344	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:25.597946882 CET	4258	40346	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:25.598052979 CET	40346	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:25.598150969 CET	40346	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:25.719310045 CET	4258	40346	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:26.803167105 CET	4258	40346	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:26.803292036 CET	40346	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:26.803463936 CET	4258	40346	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:26.803750038 CET	40346	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:26.804644108 CET	40348	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:26.923369884 CET	4258	40346	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:26.925868034 CET	4258	40348	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:26.926048994 CET	40348	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:26.926137924 CET	40348	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:27.046114922 CET	4258	40348	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:28.199624062 CET	4258	40348	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:28.199683905 CET	4258	40348	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:28.199822903 CET	40348	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:28.199908972 CET	40348	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:28.200735092 CET	40350	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:28.320044994 CET	4258	40348	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:28.321152925 CET	4258	40350	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:28.321357965 CET	40350	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:28.321357965 CET	40350	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:28.442699909 CET	4258	40350	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:32.668970108 CET	4258	40350	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:32.669193029 CET	40350	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:32.669265032 CET	4258	40350	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:32.669405937 CET	40350	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:32.670408010 CET	40352	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:32.788940907 CET	4258	40350	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:32.789957047 CET	4258	40352	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:32.790102959 CET	40352	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:32.790205956 CET	40352	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:32.909974098 CET	4258	40352	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:34.149703026 CET	4258	40352	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:34.149858952 CET	4258	40352	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:34.149859905 CET	40352	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:34.150016069 CET	40352	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:34.150716066 CET	40354	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:34.269648075 CET	4258	40352	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:34.270354033 CET	4258	40354	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:34.270499945 CET	40354	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:34.270720959 CET	40354	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:34.390531063 CET	4258	40354	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:35.648793936 CET	4258	40354	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:35.648875952 CET	4258	40354	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:35.649097919 CET	40354	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:35.649188042 CET	40354	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:35.650062084 CET	40356	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:35.769335985 CET	4258	40354	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:35.770359039 CET	4258	40356	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:35.770528078 CET	40356	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:35.770555019 CET	40356	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:35.894109011 CET	4258	40356	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:37.000042915 CET	4258	40356	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:37.000252008 CET	4258	40356	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:37.000315905 CET	40356	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:37.000340939 CET	40356	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:37.001111031 CET	40358	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:37.120284081 CET	4258	40356	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:37.120672941 CET	4258	40358	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:37.120873928 CET	40358	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:37.120874882 CET	40358	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:37.240483046 CET	4258	40358	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:38.464600086 CET	4258	40358	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:38.464818001 CET	4258	40358	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:38.464905977 CET	40358	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:38.465152025 CET	40358	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:38.466022968 CET	40360	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:38.584702969 CET	4258	40358	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:38.585633039 CET	4258	40360	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:38.585829020 CET	40360	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:38.585829020 CET	40360	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:38.705503941 CET	4258	40360	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:39.879235029 CET	4258	40360	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:39.879499912 CET	40360	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:39.879518986 CET	4258	40360	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:39.879658937 CET	40360	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:39.880662918 CET	40362	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:40.004836082 CET	4258	40360	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:40.005321980 CET	4258	40362	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:40.005495071 CET	40362	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:40.005536079 CET	40362	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:40.125138998 CET	4258	40362	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:41.282982111 CET	4258	40362	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:41.283049107 CET	4258	40362	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:41.283178091 CET	40362	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:41.283343077 CET	40362	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:41.284440994 CET	40364	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:41.403513908 CET	4258	40362	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:41.404762983 CET	4258	40364	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:41.404927015 CET	40364	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:41.405050993 CET	40364	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:41.525706053 CET	4258	40364	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:42.717262030 CET	4258	40364	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:42.717612028 CET	4258	40364	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:42.717691898 CET	40364	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:42.717942953 CET	40364	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:42.719078064 CET	40366	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:42.837580919 CET	4258	40364	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:42.838766098 CET	4258	40366	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:42.839112043 CET	40366	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:42.839112043 CET	40366	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:42.959181070 CET	4258	40366	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:44.076399088 CET	4258	40366	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:44.076497078 CET	4258	40366	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:44.076687098 CET	40366	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:44.076783895 CET	40366	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:44.078233004 CET	40368	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:44.198513985 CET	4258	40366	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:44.200043917 CET	4258	40368	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:44.200165033 CET	40368	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:44.200289965 CET	40368	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:44.319860935 CET	4258	40368	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:45.379879951 CET	4258	40368	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:45.379921913 CET	4258	40368	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:45.380037069 CET	40368	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:45.380132914 CET	40368	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:45.381165028 CET	40370	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:45.499772072 CET	4258	40368	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:45.500757933 CET	4258	40370	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:45.500973940 CET	40370	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:45.501102924 CET	40370	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:45.621855021 CET	4258	40370	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:46.661106110 CET	4258	40370	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:46.661139965 CET	4258	40370	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:46.661390066 CET	40370	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:46.661391020 CET	40370	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:46.662720919 CET	40372	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:46.781042099 CET	4258	40370	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:46.782258987 CET	4258	40372	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:46.782557964 CET	40372	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:46.782675028 CET	40372	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:46.902803898 CET	4258	40372	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:48.008948088 CET	4258	40372	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:48.009037018 CET	4258	40372	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:48.009198904 CET	40372	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:48.009332895 CET	40372	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:48.010364056 CET	40374	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:48.129497051 CET	4258	40372	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:48.130780935 CET	4258	40374	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:48.130887985 CET	40374	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:48.131052971 CET	40374	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:48.254007101 CET	4258	40374	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:49.336204052 CET	4258	40374	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:49.336402893 CET	4258	40374	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:49.336420059 CET	40374	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:49.336472988 CET	40374	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:49.337502003 CET	40376	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:49.456913948 CET	4258	40374	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:49.457643986 CET	4258	40376	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:49.457814932 CET	40376	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:49.457902908 CET	40376	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:49.577609062 CET	4258	40376	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:50.682282925 CET	4258	40376	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:50.682398081 CET	4258	40376	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:50.682512999 CET	40376	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:50.682668924 CET	40376	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:50.683509111 CET	40378	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:50.802242041 CET	4258	40376	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:50.803246021 CET	4258	40378	185.216.71.152	192.168.2.13
Dec 22, 2024 16:14:50.803323030 CET	40378	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:50.803421021 CET	40378	4258	192.168.2.13	185.216.71.152
Dec 22, 2024 16:14:50.923161983 CET	4258	40378	185.216.71.152	192.168.2.13

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 22, 2024 16:14:00.638935089 CET	192.168.2.13	8.8.8.8	0xf45b	Standard query (0)	daisy.ubuntu.com	A (IP address)	IN (0x0001)	false
Dec 22, 2024 16:14:00.638956070 CET	192.168.2.13	8.8.8.8	0x271c	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 22, 2024 16:14:01.726191998 CET	8.8.8.8	192.168.2.13	0xf45b	No error (0)	daisy.ubuntu.com		162.213.35.24	A (IP address)	IN (0x0001)	false
Dec 22, 2024 16:14:01.726191998 CET	8.8.8.8	192.168.2.13	0xf45b	No error (0)	daisy.ubuntu.com		162.213.35.25	A (IP address)	IN (0x0001)	false

System Behavior

Analysis Process: hidakibest.mips.elf PID: 5499, Parent PID: 5424

General

Start time (UTC):	15:11:15
Start date (UTC):	22/12/2024
Path:	/tmp/hidakibest.mips.elf
Arguments:	/tmp/hidakibest.mips.elf
File size:	5777432 bytes
MD5 hash:	0083f1f0e77be34ad27f849842bbb00c

Chronological Activities

Analysis Process: hidakibest.mips.elf PID: 5501, Parent PID: 5499

General

Start time (UTC):	15:11:15
Start date (UTC):	22/12/2024
Path:	/tmp/hidakibest.mips.elf
Arguments:	-
File size:	5777432 bytes
MD5 hash:	0083f1f0e77be34ad27f849842bbb00c

Chronological Activities

Analysis Process: hidakibest.mips.elf PID: 5503, Parent PID: 5501

General

Start time (UTC):	15:11:15
Start date (UTC):	22/12/2024
Path:	/tmp/hidakibest.mips.elf
Arguments:	-
File size:	5777432 bytes
MD5 hash:	0083f1f0e77be34ad27f849842bbb00c

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system. Functionality could exist within remote access tools to enable this, but utilities available on the operating system could also be used such as Ping or `net view` using Net .
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Network Traffic: Network Connection Creation, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may obfuscate command and control traffic to make it more difficult to detect. Command and control (C2) communications are hidden (but not necessarily encrypted) in an attempt to make the content more difficult to discover or decipher and to make the communication less conspicuous and hide commands from being seen. This encompasses many methods, such as adding junk data to protocol traffic, using steganography, or impersonating legitimate protocols.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report hidakibest.mips.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Threatname: Gafgyt

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/tmp/qemu-open.OQewv2 (deleted)

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Network Port Distribution

TCP Packets

DNS Queries

DNS Answers

System Behavior

Analysis Process: hidakibest.mips.elf PID: 5499, Parent PID: 5424

General

Chronological Activities

Analysis Process: hidakibest.mips.elf PID: 5501, Parent PID: 5499

General

Chronological Activities

Analysis Process: hidakibest.mips.elf PID: 5503, Parent PID: 5501

General

Chronological Activities

Linux Analysis Report
hidakibest.mips.elf