Edit tour

Linux Analysis Report
hidakibest.ppc.elf

Overview

General Information

Sample name:	hidakibest.ppc.elf
Analysis ID:	1579501
MD5:	979d87091312ded0b303fe1b3de82d9f
SHA1:	d612907b9f9a99f325eb7a4ad0d7d814bd1bc582
SHA256:	5717b3649f41abe801fe89c1728e383010bdd7d9f48576bdc3487f80964e2d01
Tags:	elfuser-abuse_ch
Infos:

Detection

Gafgyt, Mirai

Score:	92
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Yara detected Gafgyt

Yara detected Mirai

Opens /proc/net/* files useful for finding connected devices and routers

Detected TCP or UDP traffic on non-standard ports

Executes the "rm" command used to delete files or directories

Sample contains strings that are user agent strings indicative of HTTP manipulation

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1579501
Start date and time:	2024-12-22 16:12:35 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 36s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	hidakibest.ppc.elf
Detection:	MAL
Classification:	mal92.spre.troj.linELF@0/1@0/0

Warnings

VT rate limit hit for: 185.216.71.152:4258

Runtime Messages

Command:	/tmp/hidakibest.ppc.elf
PID:	6261
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:

Process Tree

system is lnxubuntu20

hidakibest.ppc.elf (PID: 6261, Parent: 6185, MD5: ae65271c943d3451b7f026d1fadccea6) Arguments: /tmp/hidakibest.ppc.elf

hidakibest.ppc.elf New Fork (PID: 6263, Parent: 6261)

hidakibest.ppc.elf New Fork (PID: 6265, Parent: 6263)

dash New Fork (PID: 6276, Parent: 4336)

rm (PID: 6276, Parent: 4336, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.e58dinjxne /tmp/tmp.aWXPyC2wk1 /tmp/tmp.S91J8FmDcC

dash New Fork (PID: 6277, Parent: 4336)

rm (PID: 6277, Parent: 4336, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.e58dinjxne /tmp/tmp.aWXPyC2wk1 /tmp/tmp.S91J8FmDcC

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
hidakibest.ppc.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
hidakibest.ppc.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
hidakibest.ppc.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x11788:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1179c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x117b0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x117c4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x117d8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x117ec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11800:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11814:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11828:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1183c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11850:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11864:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11878:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1188c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x118a0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x118b4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x118c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x118dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x118f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11904:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11918:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
hidakibest.ppc.elf	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x11738:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64

Memory Dumps

Source	Rule	Description	Author	Strings
6263.1.00007f4cb4001000.00007f4cb4015000.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
6263.1.00007f4cb4001000.00007f4cb4015000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6263.1.00007f4cb4001000.00007f4cb4015000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x11788:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1179c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x117b0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x117c4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x117d8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x117ec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11800:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11814:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11828:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1183c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11850:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11864:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11878:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1188c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x118a0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x118b4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x118c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x118dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x118f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11904:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11918:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
6263.1.00007f4cb4001000.00007f4cb4015000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x11738:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
6261.1.00007f4cb4001000.00007f4cb4015000.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
6261.1.00007f4cb4001000.00007f4cb4015000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6261.1.00007f4cb4001000.00007f4cb4015000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x11788:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1179c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x117b0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x117c4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x117d8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x117ec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11800:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11814:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11828:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1183c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11850:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11864:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11878:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1188c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x118a0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x118b4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x118c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x118dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x118f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11904:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11918:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
6261.1.00007f4cb4001000.00007f4cb4015000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x11738:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: hidakibest.ppc.elf PID: 6261	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: hidakibest.ppc.elf PID: 6261	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x5287:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x529b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x52af:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x52c3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x52d7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x52eb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x52ff:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5313:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5327:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x533b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x534f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5363:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5377:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x538b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x539f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x53b3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x53c7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x53db:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x53ef:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5403:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x5417:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: hidakibest.ppc.elf PID: 6261	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x523a:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64 0x56ac:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: hidakibest.ppc.elf PID: 6263	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: hidakibest.ppc.elf PID: 6263	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x70b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x70cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x70e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x70f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7108:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x711c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7130:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7144:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7158:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x716c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7180:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7194:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x71a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x71bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x71d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x71e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x71f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x720c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7220:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7234:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7248:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: hidakibest.ppc.elf PID: 6263	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x706b:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64 0x74dd:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Click to see the 9 entries

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: hidakibest.ppc.elf

Avira: detected

Found malware configuration

Source: hidakibest.ppc.elf

Malware Configuration Extractor: Gafgyt {"C2 url": "185.216.71.152:4258"}

Multi AV Scanner detection for submitted file

Source: hidakibest.ppc.elf	Virustotal: Detection: 63%			Perma Link
Source: hidakibest.ppc.elf	ReversingLabs: Detection: 65%

Spreading

Opens /proc/net/* files useful for finding connected devices and routers

Source: /tmp/hidakibest.ppc.elf (PID: 6261)

Opens: /proc/net/route

Jump to behavior

Source: global traffic

TCP traffic: 192.168.2.23:52128 -> 185.216.71.152:4258

Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152
Source: unknown	TCP traffic detected without corresponding DNS query: 185.216.71.152

Source: hidakibest.ppc.elf	String found in binary or memory: http://fast.no/support/crawler.asp)
Source: hidakibest.ppc.elf	String found in binary or memory: http://feedback.redkolibri.com/
Source: hidakibest.ppc.elf	String found in binary or memory: http://www.baidu.com/search/spider.htm)
Source: hidakibest.ppc.elf	String found in binary or memory: http://www.baidu.com/search/spider.html)
Source: hidakibest.ppc.elf	String found in binary or memory: http://www.billybobbot.com/crawler/)

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 39256
Source: unknown	Network traffic detected: HTTP traffic on port 39256 -> 443

System Summary

Malicious sample detected (through community Yara rule)

Source: hidakibest.ppc.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: hidakibest.ppc.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 6263.1.00007f4cb4001000.00007f4cb4015000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 6263.1.00007f4cb4001000.00007f4cb4015000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 6261.1.00007f4cb4001000.00007f4cb4015000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 6261.1.00007f4cb4001000.00007f4cb4015000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: hidakibest.ppc.elf PID: 6261, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: hidakibest.ppc.elf PID: 6261, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: hidakibest.ppc.elf PID: 6263, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: hidakibest.ppc.elf PID: 6263, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown

Source: hidakibest.ppc.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: hidakibest.ppc.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 6263.1.00007f4cb4001000.00007f4cb4015000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 6263.1.00007f4cb4001000.00007f4cb4015000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 6261.1.00007f4cb4001000.00007f4cb4015000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 6261.1.00007f4cb4001000.00007f4cb4015000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: hidakibest.ppc.elf PID: 6261, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: hidakibest.ppc.elf PID: 6261, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: hidakibest.ppc.elf PID: 6263, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: hidakibest.ppc.elf PID: 6263, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16

Source: classification engine

Classification label: mal92.spre.troj.linELF@0/1@0/0

Source: /usr/bin/dash (PID: 6276)	Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.e58dinjxne /tmp/tmp.aWXPyC2wk1 /tmp/tmp.S91J8FmDcC			Jump to behavior
Source: /usr/bin/dash (PID: 6277)	Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.e58dinjxne /tmp/tmp.aWXPyC2wk1 /tmp/tmp.S91J8FmDcC			Jump to behavior

Source: /tmp/hidakibest.ppc.elf (PID: 6261)

Queries kernel information via 'uname':

Jump to behavior

Source: hidakibest.ppc.elf, 6261.1.00007ffce38d9000.00007ffce38fa000.rw-.sdmp	Binary or memory string: U/tmp/qemu-open.BE0WvE\
Source: hidakibest.ppc.elf, 6261.1.000055de451a5000.000055de45255000.rw-.sdmp, hidakibest.ppc.elf, 6263.1.000055de451a5000.000055de45255000.rw-.sdmp	Binary or memory string: !/etc/qemu-binfmt/ppc11!hotpluggableq
Source: hidakibest.ppc.elf, 6261.1.000055de451a5000.000055de45255000.rw-.sdmp, hidakibest.ppc.elf, 6263.1.000055de451a5000.000055de45255000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/ppc
Source: hidakibest.ppc.elf, 6261.1.00007ffce38d9000.00007ffce38fa000.rw-.sdmp, hidakibest.ppc.elf, 6263.1.00007ffce38d9000.00007ffce38fa000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-ppc
Source: hidakibest.ppc.elf, 6261.1.00007ffce38d9000.00007ffce38fa000.rw-.sdmp	Binary or memory string: /tmp/qemu-open.BE0WvE
Source: hidakibest.ppc.elf, 6261.1.00007ffce38d9000.00007ffce38fa000.rw-.sdmp, hidakibest.ppc.elf, 6263.1.00007ffce38d9000.00007ffce38fa000.rw-.sdmp	Binary or memory string: 6x86_64/usr/bin/qemu-ppc/tmp/hidakibest.ppc.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/hidakibest.ppc.elf

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match	File source: hidakibest.ppc.elf, type: SAMPLE
Source: Yara match	File source: 6263.1.00007f4cb4001000.00007f4cb4015000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6261.1.00007f4cb4001000.00007f4cb4015000.r-x.sdmp, type: MEMORY

Yara detected Mirai

Source: Yara match	File source: hidakibest.ppc.elf, type: SAMPLE
Source: Yara match	File source: 6263.1.00007f4cb4001000.00007f4cb4015000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6261.1.00007f4cb4001000.00007f4cb4015000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: hidakibest.ppc.elf PID: 6261, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: hidakibest.ppc.elf PID: 6263, type: MEMORYSTR

Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36
Source: Initial sample	User agent string found: Opera/9.80 (X11; Linux i686; Ubuntu/14.10) Presto/2.12.388 Version/12.16
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows; U; Windows NT 6.1; rv:2.2) Gecko/20110201
Source: Initial sample	User agent string found: Opera/9.80 (Windows NT 5.2; U; ru) Presto/2.5.22 Version/10.51
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; AS; rv:11.0) like Gecko
Source: Initial sample	User agent string found: Mozilla/5.0 (Android; Linux armv7l; rv:9.0) Gecko/20111216 Firefox/9.0 Fennec/9.0
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/536.5 (KHTML, like Gecko) Chrome/19.0.1084.56 Safari/536.5
Source: Initial sample	User agent string found: Opera/9.80 (Windows NT 5.1; U; en) Presto/2.10.229 Version/11.60
Source: Initial sample	User agent string found: Mozilla/5.0 (iPad; U; CPU OS 5_1 like Mac OS X) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B367 Safari/531.21.10 UCBrowser/3.4.3.532
Source: Initial sample	User agent string found: Mozilla/5.0 (Nintendo WiiU) AppleWebKit/536.30 (KHTML, like Gecko) NX/3.0.4.2.12 NintendoBrowser/4.3.1.11264.US
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:25.0) Gecko/20100101 Firefox/25.0
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; pl) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; en) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; ja) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; cn) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; fr) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:12.0) Gecko/20100101 Firefox/12.0
Source: Initial sample	User agent string found: Mozilla/5.0 (X11; U; Linux x86_64; de; rv:1.9.2.8) Gecko/20100723 Ubuntu/10.04 (lucid) Firefox/3.6.8
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1; rv:13.0) Gecko/20100101 Firefox/13.0.1
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:11.0) Gecko/20100101 Firefox/11.0
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1
Source: Initial sample	User agent string found: Opera/9.80 (Windows NT 5.1; U; en) Presto/2.10.289 Version/12.01
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1; rv:5.0.1) Gecko/20100101 Firefox/5.0.1
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; rv:5.0) Gecko/20100101 Firefox/5.02
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.0) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.112 Safari/535.1
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36

Remote Access Functionality

Yara detected Gafgyt

Source: Yara match	File source: hidakibest.ppc.elf, type: SAMPLE
Source: Yara match	File source: 6263.1.00007f4cb4001000.00007f4cb4015000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6261.1.00007f4cb4001000.00007f4cb4015000.r-x.sdmp, type: MEMORY

Yara detected Mirai

Source: Yara match	File source: hidakibest.ppc.elf, type: SAMPLE
Source: Yara match	File source: 6263.1.00007f4cb4001000.00007f4cb4015000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6261.1.00007f4cb4001000.00007f4cb4015000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: hidakibest.ppc.elf PID: 6261, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: hidakibest.ppc.elf PID: 6263, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	1 File Deletion	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Data Obfuscation	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	1 Remote System Discovery	Remote Desktop Protocol	Data from Removable Media	1 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Standard Port	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Application Layer Protocol	Traffic Duplication	Data Destruction

Malware Configuration

Threatname: Gafgyt

{"C2 url": "185.216.71.152:4258"}

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
hidakibest.ppc.elf	63%	Virustotal		Browse
hidakibest.ppc.elf	66%	ReversingLabs	Linux.Trojan.Mirai
hidakibest.ppc.elf	100%	Avira	EXP/ELF.Mirai.Z.A

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

⊘No contacted domains info

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
185.216.71.152:4258	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://www.baidu.com/search/spider.html)	hidakibest.ppc.elf	false	high
http://www.billybobbot.com/crawler/)	hidakibest.ppc.elf	false	high
http://fast.no/support/crawler.asp)	hidakibest.ppc.elf	false	high
http://feedback.redkolibri.com/	hidakibest.ppc.elf	false	high
http://www.baidu.com/search/spider.htm)	hidakibest.ppc.elf	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
34.249.145.219	unknown	United States	16509	AMAZON-02US	false
109.202.202.202	unknown	Switzerland	13030	INIT7CH	false
91.189.91.42	unknown	United Kingdom	41231	CANONICAL-ASGB	false
185.216.71.152	unknown	Germany	43659	CLOUDCOMPUTINGDE	true

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
34.249.145.219	hidakibest.arm6.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	main_mips.elf	Get hash	malicious	Mirai	Browse
	powerpc.elf	Get hash	malicious	Mirai	Browse
	main_arm6.elf	Get hash	malicious	Mirai	Browse
	main_x86.elf	Get hash	malicious	Mirai	Browse
	main_m68k.elf	Get hash	malicious	Mirai	Browse
	Space.mips.elf	Get hash	malicious	Mirai	Browse
	hmips.elf	Get hash	malicious	Unknown	Browse
	armv4l.elf	Get hash	malicious	Unknown	Browse
	arm6.nn.elf	Get hash	malicious	Mirai, Okiru	Browse
109.202.202.202	kpLwzBouH4.elf	Get hash	malicious	Unknown	Browse	ch.archive.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_92.0%2bbuild3-0ubuntu0.20.04.1_amd64.deb
91.189.91.42	hidakibest.arm7.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	hidakibest.arm6.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	hidakibest.arm4.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	Space.arm7.elf	Get hash	malicious	Mirai	Browse
	Space.arm.elf	Get hash	malicious	Mirai	Browse
	Space.sh4.elf	Get hash	malicious	Mirai	Browse
	Space.x86.elf	Get hash	malicious	Mirai	Browse
	byte.x86.elf	Get hash	malicious	Mirai, Okiru	Browse
	nn.elf	Get hash	malicious	Nanominer, Xmrig	Browse
	arm6.nn.elf	Get hash	malicious	Mirai, Okiru	Browse
185.216.71.152	hidakibest.mips.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	hidakibest.x86.elf	Get hash	malicious	Mirai, Gafgyt	Browse
	hidakibest.arm5.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	hidakibest.arm4.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	hidakibest.mpsl.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	hidakibest.arm7.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	hidakibest.sparc.elf	Get hash	malicious	Gafgyt, Mirai	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CANONICAL-ASGB	hidakibest.arm7.elf	Get hash	malicious	Gafgyt, Mirai	Browse	91.189.91.42
	hidakibest.arm5.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.125.190.26
	hidakibest.arm6.elf	Get hash	malicious	Gafgyt, Mirai	Browse	91.189.91.42
	hidakibest.arm4.elf	Get hash	malicious	Gafgyt, Mirai	Browse	91.189.91.42
	Space.arm7.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	Space.arm.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	Space.sh4.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	Space.x86.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	byte.x86.elf	Get hash	malicious	Mirai, Okiru	Browse	91.189.91.42
	nn.elf	Get hash	malicious	Nanominer, Xmrig	Browse	91.189.91.42
CLOUDCOMPUTINGDE	hidakibest.mips.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.216.71.152
	hidakibest.x86.elf	Get hash	malicious	Mirai, Gafgyt	Browse	185.216.71.152
	hidakibest.arm5.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.216.71.152
	hidakibest.arm4.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.216.71.152
	hidakibest.mpsl.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.216.71.152
	hidakibest.arm7.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.216.71.152
	hidakibest.sparc.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.216.71.152
	https://www.google.gr/url?url=https://pniuvlpkjqhdwff&exox=rvhqtix&eaydny=ysf&gzfds=lqrwiz&nci=qtwmzch&iccvb=yhwtsp&vtqs=avtajyu&oagvzgp=irlq&mvdoc=embwrj&yylmwei=tmn&mntt=qqcvuhkd&lkydbjfiod=izjcgyubqc&q=amp/anre6g6.j%c2%adh%c2%adhn%c2%adt%c2%addd%c2%adsm%c2%ado%c2%admcw%c2%adw%c2%adgu%c2%adno.com%e2%80%8b/99twfh3p8&gcyx=ncgobia&yfevoul=wtloixvv&hukl=qfkmtky&nlhwnbr=bwkoiopy&eqfw=bmcpntp&vlvegw=zdbpajeyq&ghrv=kcdfwrl&kyddme=myxsnvtxf&asco=mgumegd&dvvibf=hzfexefeg&osme=bdyguyp&njtjvd=bkelfwmxg&bxrb=ltpyjsv&girpat=lswjchrwc&qapj=wwwowde&vahefc=ghseyzgyf&ahaj=zfqmkuo&pfsfeu=ttucmtamu&sffs=oxaajjo&hbwhgy=mgfzglmmo&bdwl=oifsufx&befsmv=jskhtmnps&sfjy=powmsnr&zixjqp=jyttdwbmu&fzkp=hztiqjm&jmzuvc=ufyoeqgfi&zujr=jxtbdtg&plvxoh=fxumxxddw&nkin=ykbzrdh&lghzli=agvbttfta&suag=ioudcjc&zpptpx=dxacgdnox&hmfz=yueoymp&fnshpz=wgayslegy&gjtg=qcjjozv&rymask=thcxzfpca&zcgn=ywtonnx&kqrpog=kgfvcqswk&imwa=wlvocxf&ggqznt=budaflbgp&zjhr=zscgach&esrhmq=qjdngljnl&ppoz=nhwzlik&zejsqg=vnvpaymyl&dnqb=kjswpyt&kunwbg=pzauoqliz&bqlz=qabnsnu&dlfnsr=dakxdfzen&uffg=uwnswdr&ywjevz=bnvkfavcb&rrob=celdmvn&czdusr=sjfjazfqw&ipgr=exylggn&fltcvh=sdfsricvf&byfs=apntxot&javhwh=nyphchiee&owbh=haflpez&mbyvqw=pdzpxeedx&ejov=taakkyw&oylsfz=qnzuplrnz&hxrq=ovegslq&duqjcc=pjwdpyvec&uoec=pjouxrb&eiezwk=okbkttiao&knji=kcmfaqe&qmathj=vymnqrvxa&gajs=riewukz&czxhiu=uysriqpma&avwe=gssbenk&jnwgpb=iqkroelwx&sjyt=zhxfzpx&liqoqs=bbajxgpxm&dqqu=ztzooam&haagcu=gkijlwgjy&mnsq=uervedi&yckhpb=ngqrbrqpc&pkne=nwisdfz&eqsiqu=mlrhvpuav	Get hash	malicious	Unknown	Browse	85.31.47.165
	6G4au3vWsI.lnk	Get hash	malicious	Unknown	Browse	80.76.51.231
	tegga.hta	Get hash	malicious	Xmrig	Browse	185.216.68.189
INIT7CH	hidakibest.arm7.elf	Get hash	malicious	Gafgyt, Mirai	Browse	109.202.202.202
	hidakibest.arm6.elf	Get hash	malicious	Gafgyt, Mirai	Browse	109.202.202.202
	hidakibest.arm4.elf	Get hash	malicious	Gafgyt, Mirai	Browse	109.202.202.202
	Space.arm7.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	Space.arm.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	Space.sh4.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	Space.x86.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	byte.x86.elf	Get hash	malicious	Mirai, Okiru	Browse	109.202.202.202
	nn.elf	Get hash	malicious	Nanominer, Xmrig	Browse	109.202.202.202
	arm6.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	109.202.202.202
AMAZON-02US	hidakibest.arm7.elf	Get hash	malicious	Gafgyt, Mirai	Browse	54.171.230.55
	hidakibest.arm6.elf	Get hash	malicious	Gafgyt, Mirai	Browse	34.249.145.219
	Space.x86.elf	Get hash	malicious	Mirai	Browse	54.171.230.55
	nn.elf	Get hash	malicious	Nanominer, Xmrig	Browse	54.171.230.55
	arm.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	34.252.132.197
	arm6.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	54.171.230.55
	arm5.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	13.236.254.247
	powerpc.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	54.154.131.169
	sparc.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	108.154.170.136
	3.elf	Get hash	malicious	Unknown	Browse	54.97.133.72

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

/tmp/qemu-open.BE0WvE (deleted)

Download File

Process:	/tmp/hidakibest.ppc.elf
File Type:	ASCII text
Category:	dropped
Size (bytes):	230
Entropy (8bit):	3.709552666863289
Encrypted:	false
SSDEEP:	6:iekrEcvwAsE5KlwSd4pzKaV6Lpms/a/1VCxGF:ur+m5MwSdIKaV6L1adVRF
MD5:	2E667F43AE18CD1FE3C108641708A82C
SHA1:	12B90DE2DA0FBCFE66F3D6130905E56C8D6A68D3
SHA-256:	6F721492E7A337C5B498A8F55F5EB7AC745AFF716D0B5B08EFF2C1B6B250F983
SHA-512:	D2A0EE2509154EC1098994F38BE172F98F4150399C534A04D5C675D7C05630802225019F19344CC9070C576BC465A4FEB382AC7712DE6BF25E9244B54A9DB830
Malicious:	false
Reputation:	high, very likely benign file
Preview:	Iface.Destination.Gateway .Flags.RefCnt.Use.Metric.Mask..MTU.Window.IRTT .ens160.00000000.c0a80201.0003.0.0.0.00000000.0.0.0.ens160.c0a80200.00000000.0001.0.0.0.ffffff00.0.0.0.

Static File Info

General

File type:	ELF 32-bit MSB executable, PowerPC or cisco 4500, version 1 (SYSV), statically linked, not stripped
Entropy (8bit):	6.152494443024298
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	hidakibest.ppc.elf
File size:	108'983 bytes
MD5:	979d87091312ded0b303fe1b3de82d9f
SHA1:	d612907b9f9a99f325eb7a4ad0d7d814bd1bc582
SHA256:	5717b3649f41abe801fe89c1728e383010bdd7d9f48576bdc3487f80964e2d01
SHA512:	66d130c497f6378e1ba9c472ab29afb28148a2fd5a8ea5c06f0e22a74839abb9efafc8a920926a5d9ac516043042f2d7a104a43b1f6ac9a1a4f0cb2951c72a5e
SSDEEP:	3072:gQiBqcL95J6qEWLE3So5h7wLYm7ArEfT3n:gQiBClWLU5hkEm7ArEfT3n
TLSH:	54B34C03A3190F43D5CB49B02DEB27F143AAE9E112B36182A61EAF9457B37791153FC6
File Content Preview:	.ELF...........................4..O......4. ...(......................>h..>h..............@...@...@.......t...............@T..@T..@T................dt.Q.............................!..\|......$H...H......$8!. \|...N.. .!..\|.......?.........D,..../...@..`= .

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, big endian
Version:	1 (current)
Machine:	PowerPC
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x10000218
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	4
Section Header Offset:	85932
Section Header Size:	40
Number of Section Headers:	19
Header String Table Index:	16

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x100000b4	0xb4	0x24	0x0	0x6	AX	0	0	4
.text	PROGBITS	0x100000d8	0xd8	0xfa1c	0x0	0x6	AX	0	0	4
.fini	PROGBITS	0x1000faf4	0xfaf4	0x20	0x0	0x6	AX	0	0	4
.rodata	PROGBITS	0x1000fb18	0xfb18	0x4350	0x0	0x2	A	0	0	8
.eh_frame	PROGBITS	0x10024000	0x14000	0x54	0x0	0x3	WA	0	0	4
.tbss	NOBITS	0x10024054	0x14054	0x8	0x0	0x403	WAT	0	0	4
.ctors	PROGBITS	0x10024054	0x14054	0x8	0x0	0x3	WA	0	0	4
.dtors	PROGBITS	0x1002405c	0x1405c	0x8	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x10024064	0x14064	0x4	0x0	0x3	WA	0	0	4
.data	PROGBITS	0x10024068	0x14068	0x2c2	0x0	0x3	WA	0	0	4
.got	PROGBITS	0x1002432c	0x1432c	0x10	0x4	0x7	WAX	0	0	4
.sdata	PROGBITS	0x1002433c	0x1433c	0x56	0x0	0x3	WA	0	0	4
.sbss	NOBITS	0x10024398	0x14392	0x94	0x0	0x3	WA	0	0	8
.bss	NOBITS	0x1002442c	0x14392	0x708c	0x0	0x3	WA	0	0	4
.comment	PROGBITS	0x0	0x14392	0xb9a	0x0	0x0		0	0	1
.shstrtab	STRTAB	0x0	0x14f2c	0x7e	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x152a4	0x30e0	0x10	0x0		18	281	4
.strtab	STRTAB	0x0	0x18384	0x2633	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x10000000	0x10000000	0x13e68	0x13e68	6.2419	0x5	R E	0x10000	.init .text .fini .rodata
LOAD	0x14000	0x10024000	0x10024000	0x392	0x74b8	4.5409	0x7	RWE	0x10000	.eh_frame .tbss .ctors .dtors .jcr .data .got .sdata .sbss .bss
TLS	0x14054	0x10024054	0x10024054	0x0	0x8	0.0000	0x4	R	0x4	.tbss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x100000b4	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x100000d8	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x1000faf4	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x1000fb18	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x10024000	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x10024054	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x10024054	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x1002405c	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x10024064	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x10024068	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x1002432c	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x1002433c	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x10024398	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x1002442c	0	SECTION	<unknown>	DEFAULT	14
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	15
C.3.5322	.symtab	0x100139dc	12	OBJECT	<unknown>	DEFAULT	4
C.3.6030	.symtab	0x10012980	12	OBJECT	<unknown>	DEFAULT	4
C.3.6052	.symtab	0x10013d24	12	OBJECT	<unknown>	DEFAULT	4
C.3.6106	.symtab	0x10013d18	12	OBJECT	<unknown>	DEFAULT	4
C.4.5416	.symtab	0x10013d00	24	OBJECT	<unknown>	DEFAULT	4
C.4.6053	.symtab	0x10013d30	12	OBJECT	<unknown>	DEFAULT	4
C.6.6061	.symtab	0x10013d3c	12	OBJECT	<unknown>	DEFAULT	4
C.69.5522	.symtab	0x100111e0	104	OBJECT	<unknown>	DEFAULT	4
C.7.5462	.symtab	0x100139e8	12	OBJECT	<unknown>	DEFAULT	4
C.76.5621	.symtab	0x10011e74	1128	OBJECT	<unknown>	DEFAULT	4
Q	.symtab	0x10024448	16384	OBJECT	<unknown>	DEFAULT	14
Randhex	.symtab	0x100022a4	424	FUNC	<unknown>	DEFAULT	2
SendSTD	.symtab	0x10001e64	424	FUNC	<unknown>	DEFAULT	2
UDPRAW	.symtab	0x10002158	332	FUNC	<unknown>	DEFAULT	2
_Exit	.symtab	0x100047b8	92	FUNC	<unknown>	DEFAULT	2
_GLOBAL_OFFSET_TABLE_	.symtab	0x10024330	0	OBJECT	<unknown>	HIDDEN	11
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_SDA_BASE_	.symtab	0x1002c33c	0	NOTYPE	<unknown>	DEFAULT	12
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__CTOR_END__	.symtab	0x10024058	0	OBJECT	<unknown>	DEFAULT	7
__CTOR_LIST__	.symtab	0x10024054	0	OBJECT	<unknown>	DEFAULT	7
__C_ctype_b	.symtab	0x10024348	4	OBJECT	<unknown>	DEFAULT	12
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x10012380	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_tolower	.symtab	0x10024368	4	OBJECT	<unknown>	DEFAULT	12
__C_ctype_tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_tolower_data	.symtab	0x100139fe	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_toupper	.symtab	0x10024350	4	OBJECT	<unknown>	DEFAULT	12
__C_ctype_toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_toupper_data	.symtab	0x10012680	768	OBJECT	<unknown>	DEFAULT	4
__DTOR_END__	.symtab	0x10024060	0	OBJECT	<unknown>	DEFAULT	8
__DTOR_LIST__	.symtab	0x1002405c	0	OBJECT	<unknown>	DEFAULT	8
__EH_FRAME_BEGIN__	.symtab	0x10024000	0	OBJECT	<unknown>	DEFAULT	5
__FRAME_END__	.symtab	0x10024050	0	OBJECT	<unknown>	DEFAULT	5
__GI___C_ctype_b	.symtab	0x10024348	4	OBJECT	<unknown>	HIDDEN	12
__GI___C_ctype_tolower	.symtab	0x10024368	4	OBJECT	<unknown>	HIDDEN	12
__GI___C_ctype_toupper	.symtab	0x10024350	4	OBJECT	<unknown>	HIDDEN	12
__GI___close	.symtab	0x10008da8	116	FUNC	<unknown>	HIDDEN	2
__GI___close_nocancel	.symtab	0x10008db4	16	FUNC	<unknown>	HIDDEN	2
__GI___ctype_b	.symtab	0x1002434c	4	OBJECT	<unknown>	HIDDEN	12
__GI___ctype_tolower	.symtab	0x1002436c	4	OBJECT	<unknown>	HIDDEN	12
__GI___ctype_toupper	.symtab	0x10024354	4	OBJECT	<unknown>	HIDDEN	12
__GI___errno_location	.symtab	0x100049b4	20	FUNC	<unknown>	HIDDEN	2
__GI___fcntl_nocancel	.symtab	0x10004658	116	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked	.symtab	0x1000bcc0	312	FUNC	<unknown>	HIDDEN	2
__GI___glibc_strerror_r	.symtab	0x100062c4	48	FUNC	<unknown>	HIDDEN	2
__GI___libc_close	.symtab	0x10008da8	116	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl	.symtab	0x100046cc	236	FUNC	<unknown>	HIDDEN	2
__GI___libc_open	.symtab	0x10008e1c	132	FUNC	<unknown>	HIDDEN	2
__GI___libc_read	.symtab	0x10008f24	132	FUNC	<unknown>	HIDDEN	2
__GI___libc_waitpid	.symtab	0x10008fa8	132	FUNC	<unknown>	HIDDEN	2
__GI___libc_write	.symtab	0x10008ea0	132	FUNC	<unknown>	HIDDEN	2
__GI___open	.symtab	0x10008e1c	132	FUNC	<unknown>	HIDDEN	2
__GI___open_nocancel	.symtab	0x10008e28	16	FUNC	<unknown>	HIDDEN	2
__GI___read	.symtab	0x10008f24	132	FUNC	<unknown>	HIDDEN	2
__GI___read_nocancel	.symtab	0x10008f30	16	FUNC	<unknown>	HIDDEN	2
__GI___register_atfork	.symtab	0x100089dc	356	FUNC	<unknown>	HIDDEN	2
__GI___sigaddset	.symtab	0x10006bac	40	FUNC	<unknown>	HIDDEN	2
__GI___sigdelset	.symtab	0x10006bd4	40	FUNC	<unknown>	HIDDEN	2
__GI___sigismember	.symtab	0x10006b84	40	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini	.symtab	0x100091a8	144	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init	.symtab	0x10009298	100	FUNC	<unknown>	HIDDEN	2
__GI___waitpid	.symtab	0x10008fa8	132	FUNC	<unknown>	HIDDEN	2
__GI___write	.symtab	0x10008ea0	132	FUNC	<unknown>	HIDDEN	2
__GI___write_nocancel	.symtab	0x10008eac	16	FUNC	<unknown>	HIDDEN	2
__GI___xpg_strerror_r	.symtab	0x100062f4	284	FUNC	<unknown>	HIDDEN	2
__GI__exit	.symtab	0x100047b8	92	FUNC	<unknown>	HIDDEN	2
__GI_abort	.symtab	0x10007a4c	248	FUNC	<unknown>	HIDDEN	2
__GI_atoi	.symtab	0x10008064	12	FUNC	<unknown>	HIDDEN	2
__GI_brk	.symtab	0x1000d06c	52	FUNC	<unknown>	HIDDEN	2
__GI_chdir	.symtab	0x10004814	52	FUNC	<unknown>	HIDDEN	2
__GI_close	.symtab	0x10008da8	116	FUNC	<unknown>	HIDDEN	2
__GI_closedir	.symtab	0x10009928	212	FUNC	<unknown>	HIDDEN	2
__GI_config_close	.symtab	0x1000a034	80	FUNC	<unknown>	HIDDEN	2
__GI_config_open	.symtab	0x1000a084	84	FUNC	<unknown>	HIDDEN	2
__GI_config_read	.symtab	0x10009d00	820	FUNC	<unknown>	HIDDEN	2
__GI_connect	.symtab	0x10006814	120	FUNC	<unknown>	HIDDEN	2
__GI_exit	.symtab	0x10008230	136	FUNC	<unknown>	HIDDEN	2
__GI_fclose	.symtab	0x1000a200	640	FUNC	<unknown>	HIDDEN	2
__GI_fcntl	.symtab	0x100046cc	236	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked	.symtab	0x1000b9d8	744	FUNC	<unknown>	HIDDEN	2
__GI_fgetc	.symtab	0x1000b598	304	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked	.symtab	0x1000bcc0	312	FUNC	<unknown>	HIDDEN	2
__GI_fgets	.symtab	0x1000b6c8	244	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked	.symtab	0x1000bdf8	196	FUNC	<unknown>	HIDDEN	2
__GI_fopen	.symtab	0x1000a480	12	FUNC	<unknown>	HIDDEN	2
__GI_fork	.symtab	0x10008670	824	FUNC	<unknown>	HIDDEN	2
__GI_fputs_unlocked	.symtab	0x10005cac	92	FUNC	<unknown>	HIDDEN	2
__GI_fseek	.symtab	0x1000d48c	16	FUNC	<unknown>	HIDDEN	2
__GI_fseeko64	.symtab	0x1000d49c	404	FUNC	<unknown>	HIDDEN	2
__GI_fstat	.symtab	0x1000d0d4	124	FUNC	<unknown>	HIDDEN	2
__GI_fwrite_unlocked	.symtab	0x10005d08	192	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked	.symtab	0x1000bcc0	312	FUNC	<unknown>	HIDDEN	2
__GI_getdtablesize	.symtab	0x10009668	56	FUNC	<unknown>	HIDDEN	2
__GI_getegid	.symtab	0x100096a0	16	FUNC	<unknown>	HIDDEN	2
__GI_geteuid	.symtab	0x100096b0	16	FUNC	<unknown>	HIDDEN	2
__GI_getgid	.symtab	0x100096c0	16	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname	.symtab	0x10006790	8	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname2	.symtab	0x10006798	72	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname2_r	.symtab	0x1000c574	664	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname_r	.symtab	0x1000ef7c	748	FUNC	<unknown>	HIDDEN	2
__GI_gethostname	.symtab	0x1000f2c0	136	FUNC	<unknown>	HIDDEN	2
__GI_getpagesize	.symtab	0x100096d0	28	FUNC	<unknown>	HIDDEN	2
__GI_getpid	.symtab	0x10008b40	56	FUNC	<unknown>	HIDDEN	2
__GI_getrlimit	.symtab	0x100096ec	52	FUNC	<unknown>	HIDDEN	2
__GI_getsockname	.symtab	0x1000688c	52	FUNC	<unknown>	HIDDEN	2
__GI_getuid	.symtab	0x10009720	16	FUNC	<unknown>	HIDDEN	2
__GI_htonl	.symtab	0x100066a4	4	FUNC	<unknown>	HIDDEN	2
__GI_htons	.symtab	0x100066a8	4	FUNC	<unknown>	HIDDEN	2
__GI_inet_addr	.symtab	0x1000675c	52	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton	.symtab	0x1000c4a4	208	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa	.symtab	0x10006728	52	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa_r	.symtab	0x100066ac	124	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntop	.symtab	0x1000df84	728	FUNC	<unknown>	HIDDEN	2
__GI_inet_pton	.symtab	0x1000dc24	524	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r	.symtab	0x10007e98	236	FUNC	<unknown>	HIDDEN	2
__GI_ioctl	.symtab	0x10004574	228	FUNC	<unknown>	HIDDEN	2
__GI_isatty	.symtab	0x1000c478	44	FUNC	<unknown>	HIDDEN	2
__GI_isspace	.symtab	0x1000497c	24	FUNC	<unknown>	HIDDEN	2
__GI_kill	.symtab	0x10004848	52	FUNC	<unknown>	HIDDEN	2
__GI_lseek64	.symtab	0x1000f4a4	112	FUNC	<unknown>	HIDDEN	2
__GI_memchr	.symtab	0x1000bf60	264	FUNC	<unknown>	HIDDEN	2
__GI_memcpy	.symtab	0x10005dc8	156	FUNC	<unknown>	HIDDEN	2
__GI_memmove	.symtab	0x1000bebc	164	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy	.symtab	0x1000c068	52	FUNC	<unknown>	HIDDEN	2
__GI_memrchr	.symtab	0x1000c09c	244	FUNC	<unknown>	HIDDEN	2
__GI_memset	.symtab	0x10005e64	144	FUNC	<unknown>	HIDDEN	2
__GI_mmap	.symtab	0x10009730	52	FUNC	<unknown>	HIDDEN	2
__GI_mremap	.symtab	0x1000d150	52	FUNC	<unknown>	HIDDEN	2
__GI_munmap	.symtab	0x10009764	52	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep	.symtab	0x100097cc	112	FUNC	<unknown>	HIDDEN	2
__GI_ntohl	.symtab	0x1000669c	4	FUNC	<unknown>	HIDDEN	2
__GI_ntohs	.symtab	0x100066a0	4	FUNC	<unknown>	HIDDEN	2
__GI_open	.symtab	0x10008e1c	132	FUNC	<unknown>	HIDDEN	2
__GI_opendir	.symtab	0x10009ab4	208	FUNC	<unknown>	HIDDEN	2
__GI_poll	.symtab	0x1000f37c	120	FUNC	<unknown>	HIDDEN	2
__GI_raise	.symtab	0x10008b78	148	FUNC	<unknown>	HIDDEN	2
__GI_random	.symtab	0x10007b48	104	FUNC	<unknown>	HIDDEN	2
__GI_random_r	.symtab	0x10007d18	140	FUNC	<unknown>	HIDDEN	2
__GI_rawmemchr	.symtab	0x1000d9d4	184	FUNC	<unknown>	HIDDEN	2
__GI_read	.symtab	0x10008f24	132	FUNC	<unknown>	HIDDEN	2
__GI_readdir64	.symtab	0x10009c3c	196	FUNC	<unknown>	HIDDEN	2
__GI_recv	.symtab	0x10006928	128	FUNC	<unknown>	HIDDEN	2
__GI_sbrk	.symtab	0x1000983c	116	FUNC	<unknown>	HIDDEN	2
__GI_select	.symtab	0x100048b0	136	FUNC	<unknown>	HIDDEN	2
__GI_send	.symtab	0x100069dc	128	FUNC	<unknown>	HIDDEN	2
__GI_setsid	.symtab	0x10004938	52	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt	.symtab	0x10006a5c	52	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r	.symtab	0x10007f84	224	FUNC	<unknown>	HIDDEN	2
__GI_sigaction	.symtab	0x1000c80c	36	FUNC	<unknown>	HIDDEN	2
__GI_signal	.symtab	0x10006ac4	192	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask	.symtab	0x100098b0	120	FUNC	<unknown>	HIDDEN	2
__GI_sleep	.symtab	0x10008c0c	292	FUNC	<unknown>	HIDDEN	2
__GI_socket	.symtab	0x10006a90	52	FUNC	<unknown>	HIDDEN	2
__GI_sprintf	.symtab	0x100049c8	136	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r	.symtab	0x10007da4	244	FUNC	<unknown>	HIDDEN	2
__GI_stat	.symtab	0x1000f3f4	124	FUNC	<unknown>	HIDDEN	2
__GI_strcasecmp	.symtab	0x1000642c	80	FUNC	<unknown>	HIDDEN	2
__GI_strchr	.symtab	0x10005ef4	256	FUNC	<unknown>	HIDDEN	2
__GI_strchrnul	.symtab	0x1000c190	248	FUNC	<unknown>	HIDDEN	2
__GI_strcmp	.symtab	0x10005ff4	52	FUNC	<unknown>	HIDDEN	2
__GI_strcoll	.symtab	0x10005ff4	52	FUNC	<unknown>	HIDDEN	2
__GI_strcpy	.symtab	0x10006028	32	FUNC	<unknown>	HIDDEN	2
__GI_strcspn	.symtab	0x1000c288	96	FUNC	<unknown>	HIDDEN	2
__GI_strdup	.symtab	0x1000f514	80	FUNC	<unknown>	HIDDEN	2
__GI_strlen	.symtab	0x10006048	160	FUNC	<unknown>	HIDDEN	2
__GI_strncpy	.symtab	0x1000da8c	188	FUNC	<unknown>	HIDDEN	2
__GI_strnlen	.symtab	0x100060e8	236	FUNC	<unknown>	HIDDEN	2
__GI_strpbrk	.symtab	0x1000c43c	60	FUNC	<unknown>	HIDDEN	2
__GI_strrchr	.symtab	0x1000c2e8	112	FUNC	<unknown>	HIDDEN	2
__GI_strspn	.symtab	0x1000c358	72	FUNC	<unknown>	HIDDEN	2
__GI_strstr	.symtab	0x100061d4	240	FUNC	<unknown>	HIDDEN	2
__GI_strtok	.symtab	0x1000647c	12	FUNC	<unknown>	HIDDEN	2
__GI_strtok_r	.symtab	0x1000c3a0	156	FUNC	<unknown>	HIDDEN	2
__GI_strtol	.symtab	0x10008070	8	FUNC	<unknown>	HIDDEN	2
__GI_sysconf	.symtab	0x10008400	624	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr	.symtab	0x10006488	156	FUNC	<unknown>	HIDDEN	2
__GI_tcsetattr	.symtab	0x10006524	376	FUNC	<unknown>	HIDDEN	2
__GI_time	.symtab	0x1000496c	16	FUNC	<unknown>	HIDDEN	2
__GI_toupper	.symtab	0x10004994	32	FUNC	<unknown>	HIDDEN	2
__GI_uname	.symtab	0x1000f470	52	FUNC	<unknown>	HIDDEN	2
__GI_vsnprintf	.symtab	0x10004a50	224	FUNC	<unknown>	HIDDEN	2
__GI_waitpid	.symtab	0x10008fa8	132	FUNC	<unknown>	HIDDEN	2
__GI_wcrtomb	.symtab	0x1000a0d8	92	FUNC	<unknown>	HIDDEN	2
__GI_wcsnrtombs	.symtab	0x1000a144	188	FUNC	<unknown>	HIDDEN	2
__GI_wcsrtombs	.symtab	0x1000a134	16	FUNC	<unknown>	HIDDEN	2
__GI_write	.symtab	0x10008ea0	132	FUNC	<unknown>	HIDDEN	2
__JCR_END__	.symtab	0x10024064	0	OBJECT	<unknown>	DEFAULT	9
__JCR_LIST__	.symtab	0x10024064	0	OBJECT	<unknown>	DEFAULT	9
__app_fini	.symtab	0x100243dc	4	OBJECT	<unknown>	HIDDEN	13
__atexit_lock	.symtab	0x10024244	24	OBJECT	<unknown>	DEFAULT	10
__bss_start	.symtab	0x10024392	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x10009238	96	FUNC	<unknown>	DEFAULT	2
__close	.symtab	0x10008da8	116	FUNC	<unknown>	DEFAULT	2
__close_nameservers	.symtab	0x1000ee94	144	FUNC	<unknown>	HIDDEN	2
__close_nocancel	.symtab	0x10008db4	16	FUNC	<unknown>	DEFAULT	2
__ctype_b	.symtab	0x1002434c	4	OBJECT	<unknown>	DEFAULT	12
__ctype_tolower	.symtab	0x1002436c	4	OBJECT	<unknown>	DEFAULT	12
__ctype_toupper	.symtab	0x10024354	4	OBJECT	<unknown>	DEFAULT	12
__curbrk	.symtab	0x10024414	4	OBJECT	<unknown>	DEFAULT	13
__data_start	.symtab	0x10024070	0	NOTYPE	<unknown>	DEFAULT	10
__decode_dotted	.symtab	0x1000e25c	280	FUNC	<unknown>	HIDDEN	2
__decode_header	.symtab	0x1000f64c	188	FUNC	<unknown>	HIDDEN	2
__deregister_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__dns_lookup	.symtab	0x1000e374	1672	FUNC	<unknown>	HIDDEN	2
__do_global_ctors_aux	.symtab	0x1000fa88	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux	.symtab	0x100000d8	0	FUNC	<unknown>	DEFAULT	2
__dso_handle	.symtab	0x10024068	0	OBJECT	<unknown>	HIDDEN	10
__encode_dotted	.symtab	0x1000f9bc	204	FUNC	<unknown>	HIDDEN	2
__encode_header	.symtab	0x1000f564	232	FUNC	<unknown>	HIDDEN	2
__encode_question	.symtab	0x1000f708	124	FUNC	<unknown>	HIDDEN	2
__environ	.symtab	0x100243d4	4	OBJECT	<unknown>	DEFAULT	13
__errno_location	.symtab	0x100049b4	20	FUNC	<unknown>	DEFAULT	2
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x100243c0	4	OBJECT	<unknown>	HIDDEN	13
__fcntl_nocancel	.symtab	0x10004658	116	FUNC	<unknown>	DEFAULT	2
__fgetc_unlocked	.symtab	0x1000bcc0	312	FUNC	<unknown>	DEFAULT	2
__fini_array_end	.symtab	0x10024054	0	NOTYPE	<unknown>	HIDDEN	6
__fini_array_start	.symtab	0x10024054	0	NOTYPE	<unknown>	HIDDEN	6
__fork	.symtab	0x10008670	824	FUNC	<unknown>	DEFAULT	2
__fork_generation_pointer	.symtab	0x100243c4	4	OBJECT	<unknown>	HIDDEN	13
__fork_handlers	.symtab	0x100243c8	4	OBJECT	<unknown>	HIDDEN	13
__fork_lock	.symtab	0x100243cc	4	OBJECT	<unknown>	HIDDEN	13
__get_hosts_byname_r	.symtab	0x1000ef24	88	FUNC	<unknown>	HIDDEN	2
__getdents64	.symtab	0x1000d334	344	FUNC	<unknown>	HIDDEN	2
__getpagesize	.symtab	0x100096d0	28	FUNC	<unknown>	DEFAULT	2
__getpid	.symtab	0x10008b40	56	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r	.symtab	0x100062c4	48	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__h_errno_location	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__init_array_end	.symtab	0x10024054	0	NOTYPE	<unknown>	HIDDEN	6
__init_array_start	.symtab	0x10024054	0	NOTYPE	<unknown>	HIDDEN	6
__libc_close	.symtab	0x10008da8	116	FUNC	<unknown>	DEFAULT	2
__libc_connect	.symtab	0x10006814	120	FUNC	<unknown>	DEFAULT	2
__libc_disable_asynccancel	.symtab	0x1000902c	124	FUNC	<unknown>	HIDDEN	2
__libc_enable_asynccancel	.symtab	0x100090a8	172	FUNC	<unknown>	HIDDEN	2
__libc_errno	.symtab	0x0	4	TLS	<unknown>	HIDDEN	6
__libc_fcntl	.symtab	0x100046cc	236	FUNC	<unknown>	DEFAULT	2
__libc_fork	.symtab	0x10008670	824	FUNC	<unknown>	DEFAULT	2
__libc_h_errno	.symtab	0x4	4	TLS	<unknown>	HIDDEN	6
__libc_nanosleep	.symtab	0x100097cc	112	FUNC	<unknown>	DEFAULT	2
__libc_open	.symtab	0x10008e1c	132	FUNC	<unknown>	DEFAULT	2
__libc_read	.symtab	0x10008f24	132	FUNC	<unknown>	DEFAULT	2
__libc_recv	.symtab	0x10006928	128	FUNC	<unknown>	DEFAULT	2
__libc_select	.symtab	0x100048b0	136	FUNC	<unknown>	DEFAULT	2
__libc_send	.symtab	0x100069dc	128	FUNC	<unknown>	DEFAULT	2
__libc_setup_tls	.symtab	0x1000cd5c	464	FUNC	<unknown>	DEFAULT	2
__libc_sigaction	.symtab	0x1000c80c	36	FUNC	<unknown>	DEFAULT	2
__libc_stack_end	.symtab	0x100243d0	4	OBJECT	<unknown>	DEFAULT	13
__libc_waitpid	.symtab	0x10008fa8	132	FUNC	<unknown>	DEFAULT	2
__libc_write	.symtab	0x10008ea0	132	FUNC	<unknown>	DEFAULT	2
__linkin_atfork	.symtab	0x100089a8	52	FUNC	<unknown>	HIDDEN	2
__lll_lock_wait_private	.symtab	0x10008d30	120	FUNC	<unknown>	HIDDEN	2
__local_nameserver	.symtab	0x10013df0	16	OBJECT	<unknown>	HIDDEN	4
__malloc_consolidate	.symtab	0x10007634	460	FUNC	<unknown>	HIDDEN	2
__malloc_largebin_index	.symtab	0x10006bfc	112	FUNC	<unknown>	DEFAULT	2
__malloc_lock	.symtab	0x10024168	24	OBJECT	<unknown>	DEFAULT	10
__malloc_state	.symtab	0x1002b140	888	OBJECT	<unknown>	DEFAULT	14
__malloc_trim	.symtab	0x1000757c	184	FUNC	<unknown>	DEFAULT	2
__nameserver	.symtab	0x10024420	4	OBJECT	<unknown>	HIDDEN	13
__nameservers	.symtab	0x10024424	4	OBJECT	<unknown>	HIDDEN	13
__nptl_deallocate_tsd	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__nptl_nthreads	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__open	.symtab	0x10008e1c	132	FUNC	<unknown>	DEFAULT	2
__open_etc_hosts	.symtab	0x1000f784	12	FUNC	<unknown>	HIDDEN	2
__open_nameservers	.symtab	0x1000ea80	1044	FUNC	<unknown>	HIDDEN	2
__open_nocancel	.symtab	0x10008e28	16	FUNC	<unknown>	DEFAULT	2
__pagesize	.symtab	0x100243d8	4	OBJECT	<unknown>	DEFAULT	13
__preinit_array_end	.symtab	0x10024054	0	NOTYPE	<unknown>	HIDDEN	6
__preinit_array_start	.symtab	0x10024054	0	NOTYPE	<unknown>	HIDDEN	6
__progname	.symtab	0x10024360	4	OBJECT	<unknown>	DEFAULT	12
__progname_full	.symtab	0x10024364	4	OBJECT	<unknown>	DEFAULT	12
__pthread_initialize_minimal	.symtab	0x1000cf2c	12	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_init	.symtab	0x1000915c	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock	.symtab	0x10009154	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock	.symtab	0x10009154	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock	.symtab	0x10009154	8	FUNC	<unknown>	DEFAULT	2
__pthread_return_0	.symtab	0x10009154	8	FUNC	<unknown>	DEFAULT	2
__pthread_unwind	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__read	.symtab	0x10008f24	132	FUNC	<unknown>	DEFAULT	2
__read_etc_hosts_r	.symtab	0x1000f790	556	FUNC	<unknown>	HIDDEN	2
__read_nocancel	.symtab	0x10008f30	16	FUNC	<unknown>	DEFAULT	2
__register_atfork	.symtab	0x100089dc	356	FUNC	<unknown>	DEFAULT	2
__register_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__res_sync	.symtab	0x10024418	4	OBJECT	<unknown>	HIDDEN	13
__resolv_attempts	.symtab	0x10024391	1	OBJECT	<unknown>	HIDDEN	12
__resolv_lock	.symtab	0x1002b0d8	24	OBJECT	<unknown>	DEFAULT	14
__resolv_timeout	.symtab	0x10024390	1	OBJECT	<unknown>	HIDDEN	12
__rtld_fini	.symtab	0x100243e0	4	OBJECT	<unknown>	HIDDEN	13
__searchdomain	.symtab	0x1002441c	4	OBJECT	<unknown>	HIDDEN	13
__searchdomains	.symtab	0x10024428	4	OBJECT	<unknown>	HIDDEN	13
__sigaddset	.symtab	0x10006bac	40	FUNC	<unknown>	DEFAULT	2
__sigdelset	.symtab	0x10006bd4	40	FUNC	<unknown>	DEFAULT	2
__sigismember	.symtab	0x10006b84	40	FUNC	<unknown>	DEFAULT	2
__sigjmp_save	.symtab	0x1000f268	88	FUNC	<unknown>	HIDDEN	2
__sigsetjmp	.symtab	0x1000cfc0	172	FUNC	<unknown>	DEFAULT	2
__stdin	.symtab	0x1002437c	4	OBJECT	<unknown>	DEFAULT	12
__stdio_READ	.symtab	0x1000d630	120	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE	.symtab	0x1000d6a8	264	FUNC	<unknown>	HIDDEN	2
__stdio_adjust_position	.symtab	0x1000d7b0	212	FUNC	<unknown>	HIDDEN	2
__stdio_fwrite	.symtab	0x1000a874	364	FUNC	<unknown>	HIDDEN	2
__stdio_rfill	.symtab	0x1000d884	72	FUNC	<unknown>	HIDDEN	2
__stdio_seek	.symtab	0x1000d97c	88	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o	.symtab	0x1000d8cc	176	FUNC	<unknown>	HIDDEN	2
__stdio_trans2w_o	.symtab	0x1000ab9c	260	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit	.symtab	0x1000aca0	76	FUNC	<unknown>	HIDDEN	2
__stdout	.symtab	0x10024380	4	OBJECT	<unknown>	DEFAULT	12
__sys_connect	.symtab	0x100067e0	52	FUNC	<unknown>	DEFAULT	2
__sys_recv	.symtab	0x100068f4	52	FUNC	<unknown>	DEFAULT	2
__sys_send	.symtab	0x100069a8	52	FUNC	<unknown>	DEFAULT	2
__syscall_error	.symtab	0x10009644	28	FUNC	<unknown>	HIDDEN	2
__syscall_error.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_nanosleep	.symtab	0x10009798	52	FUNC	<unknown>	DEFAULT	2
__syscall_poll	.symtab	0x1000f348	52	FUNC	<unknown>	DEFAULT	2
__syscall_rt_sigaction	.symtab	0x1000d0a0	52	FUNC	<unknown>	DEFAULT	2
__syscall_rt_sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_select	.symtab	0x1000487c	52	FUNC	<unknown>	DEFAULT	2
__uClibc_fini	.symtab	0x100091a8	144	FUNC	<unknown>	DEFAULT	2
__uClibc_init	.symtab	0x10009298	100	FUNC	<unknown>	DEFAULT	2
__uClibc_main	.symtab	0x100092fc	840	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x1002435c	4	OBJECT	<unknown>	HIDDEN	12
__waitpid	.symtab	0x10008fa8	132	FUNC	<unknown>	DEFAULT	2
__waitpid_nocancel	.symtab	0x10008fb4	16	FUNC	<unknown>	DEFAULT	2
__write	.symtab	0x10008ea0	132	FUNC	<unknown>	DEFAULT	2
__write_nocancel	.symtab	0x10008eac	16	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r	.symtab	0x100062f4	284	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__xstat32_conv	.symtab	0x1000d268	204	FUNC	<unknown>	HIDDEN	2
__xstat64_conv	.symtab	0x1000d184	228	FUNC	<unknown>	HIDDEN	2
_adjust_pos.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_bss_custom_printf_spec	.symtab	0x10028448	10	OBJECT	<unknown>	DEFAULT	14
_charpad	.symtab	0x10004b30	100	FUNC	<unknown>	DEFAULT	2
_cs_funcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_custom_printf_arginfo	.symtab	0x1002b0f0	40	OBJECT	<unknown>	HIDDEN	14
_custom_printf_handler	.symtab	0x1002b118	40	OBJECT	<unknown>	HIDDEN	14
_custom_printf_spec	.symtab	0x10024358	4	OBJECT	<unknown>	HIDDEN	12
_dl_aux_init	.symtab	0x1000cf38	28	FUNC	<unknown>	DEFAULT	2
_dl_init_static_tls	.symtab	0x1002438c	4	OBJECT	<unknown>	DEFAULT	12
_dl_nothread_init_static_tls	.symtab	0x1000cf54	108	FUNC	<unknown>	HIDDEN	2
_dl_phdr	.symtab	0x1002440c	4	OBJECT	<unknown>	DEFAULT	13
_dl_phnum	.symtab	0x10024410	4	OBJECT	<unknown>	DEFAULT	13
_dl_tls_dtv_gaps	.symtab	0x10024400	1	OBJECT	<unknown>	DEFAULT	13
_dl_tls_dtv_slotinfo_list	.symtab	0x100243fc	4	OBJECT	<unknown>	DEFAULT	13
_dl_tls_generation	.symtab	0x10024404	4	OBJECT	<unknown>	DEFAULT	13
_dl_tls_max_dtv_idx	.symtab	0x100243f4	4	OBJECT	<unknown>	DEFAULT	13
_dl_tls_setup	.symtab	0x1000cd0c	80	FUNC	<unknown>	DEFAULT	2
_dl_tls_static_align	.symtab	0x100243f0	4	OBJECT	<unknown>	DEFAULT	13
_dl_tls_static_nelem	.symtab	0x10024408	4	OBJECT	<unknown>	DEFAULT	13
_dl_tls_static_size	.symtab	0x100243f8	4	OBJECT	<unknown>	DEFAULT	13
_dl_tls_static_used	.symtab	0x100243ec	4	OBJECT	<unknown>	DEFAULT	13
_edata	.symtab	0x10024392	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x1002b4b8	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_exit	.symtab	0x100047b8	92	FUNC	<unknown>	DEFAULT	2
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fini	.symtab	0x1000faf4	0	FUNC	<unknown>	DEFAULT	3
_fixed_buffers	.symtab	0x10028b94	8192	OBJECT	<unknown>	DEFAULT	14
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow	.symtab	0x10004b94	152	FUNC	<unknown>	DEFAULT	2
_fpmaxtostr	.symtab	0x1000aea0	1784	FUNC	<unknown>	HIDDEN	2
_fpmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_init	.symtab	0x100000b4	0	FUNC	<unknown>	DEFAULT	1
_load_inttype	.symtab	0x1000acec	128	FUNC	<unknown>	HIDDEN	2
_load_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_init	.symtab	0x10005324	188	FUNC	<unknown>	HIDDEN	2
_ppfs_init.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec	.symtab	0x100056dc	1488	FUNC	<unknown>	HIDDEN	2
_ppfs_parsespec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs	.symtab	0x100053e0	92	FUNC	<unknown>	HIDDEN	2
_ppfs_prepargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs	.symtab	0x1000543c	608	FUNC	<unknown>	HIDDEN	2
_ppfs_setargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size	.symtab	0x1000569c	64	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_pop_restore	.symtab	0x10009170	56	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_push_defer	.symtab	0x10009164	12	FUNC	<unknown>	DEFAULT	2
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_setjmp	.symtab	0x10009660	8	FUNC	<unknown>	DEFAULT	2
_sigintr	.symtab	0x100243b8	8	OBJECT	<unknown>	HIDDEN	13
_start	.symtab	0x10000218	72	FUNC	<unknown>	DEFAULT	2
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x1000a48c	1000	FUNC	<unknown>	HIDDEN	2
_stdio_init	.symtab	0x1000a9e0	128	FUNC	<unknown>	HIDDEN	2
_stdio_openlist	.symtab	0x10024384	4	OBJECT	<unknown>	DEFAULT	12
_stdio_openlist_add_lock	.symtab	0x10028b7c	12	OBJECT	<unknown>	DEFAULT	14
_stdio_openlist_dec_use	.symtab	0x1000b7bc	540	FUNC	<unknown>	HIDDEN	2
_stdio_openlist_del_count	.symtab	0x100243e8	4	OBJECT	<unknown>	DEFAULT	13
_stdio_openlist_del_lock	.symtab	0x10028b88	12	OBJECT	<unknown>	DEFAULT	14
_stdio_openlist_use_count	.symtab	0x100243e4	4	OBJECT	<unknown>	DEFAULT	13
_stdio_streams	.symtab	0x1002425c	204	OBJECT	<unknown>	DEFAULT	10
_stdio_term	.symtab	0x1000aa60	316	FUNC	<unknown>	HIDDEN	2
_stdio_user_locking	.symtab	0x10024388	4	OBJECT	<unknown>	DEFAULT	12
_stdlib_strto_l	.symtab	0x10008078	440	FUNC	<unknown>	HIDDEN	2
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_store_inttype	.symtab	0x1000ad6c	60	FUNC	<unknown>	HIDDEN	2
_store_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_string_syserrmsgs	.symtab	0x10012a4c	2906	OBJECT	<unknown>	HIDDEN	4
_string_syserrmsgs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr	.symtab	0x1000ada8	248	FUNC	<unknown>	HIDDEN	2
_uintmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal	.symtab	0x10004c2c	1784	FUNC	<unknown>	HIDDEN	2
_vfprintf_internal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0x10007a4c	248	FUNC	<unknown>	DEFAULT	2
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
atoi	.symtab	0x10008064	12	FUNC	<unknown>	DEFAULT	2
atol	.symtab	0x10008064	12	FUNC	<unknown>	DEFAULT	2
atol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bcopy	.symtab	0x10006410	16	FUNC	<unknown>	DEFAULT	2
bcopy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
been_there_done_that	.symtab	0x10028634	4	OBJECT	<unknown>	DEFAULT	14
bot.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
brk	.symtab	0x1000d06c	52	FUNC	<unknown>	DEFAULT	2
bsd_signal	.symtab	0x10006ac4	192	FUNC	<unknown>	DEFAULT	2
buf.4826	.symtab	0x10028458	16	OBJECT	<unknown>	DEFAULT	14
buf.6501	.symtab	0x1002847c	440	OBJECT	<unknown>	DEFAULT	14
bzero	.symtab	0x10006420	12	FUNC	<unknown>	DEFAULT	2
bzero.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
c	.symtab	0x10024160	4	OBJECT	<unknown>	DEFAULT	10
call___do_global_ctors_aux	.symtab	0x1000fad8	0	FUNC	<unknown>	DEFAULT	2
call___do_global_dtors_aux	.symtab	0x10000170	0	FUNC	<unknown>	DEFAULT	2
call_frame_dummy	.symtab	0x100001fc	0	FUNC	<unknown>	DEFAULT	2
calloc	.symtab	0x1000c830	264	FUNC	<unknown>	DEFAULT	2
calloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
chdir	.symtab	0x10004814	52	FUNC	<unknown>	DEFAULT	2
chdir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0x10008da8	116	FUNC	<unknown>	DEFAULT	2
closedir	.symtab	0x10009928	212	FUNC	<unknown>	DEFAULT	2
closedir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
closenameservers.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
commServer	.symtab	0x1002433c	4	OBJECT	<unknown>	DEFAULT	12
completed.5580	.symtab	0x1002442c	0	OBJECT	<unknown>	DEFAULT	14
connect	.symtab	0x10006814	120	FUNC	<unknown>	DEFAULT	2
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
connectTimeout	.symtab	0x100018c0	656	FUNC	<unknown>	DEFAULT	2
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
currentServer	.symtab	0x10024344	4	OBJECT	<unknown>	DEFAULT	12
data_start	.symtab	0x10024070	0	NOTYPE	<unknown>	DEFAULT	10
decoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dns	.symtab	0x10024340	4	OBJECT	<unknown>	DEFAULT	12
dnslookup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
environ	.symtab	0x100243d4	4	OBJECT	<unknown>	DEFAULT	13
errno	.symtab	0x0	4	TLS	<unknown>	DEFAULT	6
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exit	.symtab	0x10008230	136	FUNC	<unknown>	DEFAULT	2
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exp10_table	.symtab	0x10013d60	72	OBJECT	<unknown>	DEFAULT	4
fclose	.symtab	0x1000a200	640	FUNC	<unknown>	DEFAULT	2
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0x100046cc	236	FUNC	<unknown>	DEFAULT	2
fd_to_DIR	.symtab	0x100099fc	184	FUNC	<unknown>	DEFAULT	2
fdgets	.symtab	0x10000510	232	FUNC	<unknown>	DEFAULT	2
fdopendir	.symtab	0x10009b84	184	FUNC	<unknown>	DEFAULT	2
fflush_unlocked	.symtab	0x1000b9d8	744	FUNC	<unknown>	DEFAULT	2
fflush_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc	.symtab	0x1000b598	304	FUNC	<unknown>	DEFAULT	2
fgetc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked	.symtab	0x1000bcc0	312	FUNC	<unknown>	DEFAULT	2
fgetc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets	.symtab	0x1000b6c8	244	FUNC	<unknown>	DEFAULT	2
fgets.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked	.symtab	0x1000bdf8	196	FUNC	<unknown>	DEFAULT	2
fgets_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fmt	.symtab	0x10013d48	20	OBJECT	<unknown>	DEFAULT	4
fopen	.symtab	0x1000a480	12	FUNC	<unknown>	DEFAULT	2
fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork	.symtab	0x10008670	824	FUNC	<unknown>	DEFAULT	2
fork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork_handler_pool	.symtab	0x10028638	1348	OBJECT	<unknown>	DEFAULT	14
fputs_unlocked	.symtab	0x10005cac	92	FUNC	<unknown>	DEFAULT	2
fputs_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
frame_dummy	.symtab	0x1000018c	0	FUNC	<unknown>	DEFAULT	2
free	.symtab	0x10007800	524	FUNC	<unknown>	DEFAULT	2
free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseek	.symtab	0x1000d48c	16	FUNC	<unknown>	DEFAULT	2
fseeko	.symtab	0x1000d48c	16	FUNC	<unknown>	DEFAULT	2
fseeko.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseeko64	.symtab	0x1000d49c	404	FUNC	<unknown>	DEFAULT	2
fseeko64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fstat	.symtab	0x1000d0d4	124	FUNC	<unknown>	DEFAULT	2
fstat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fwrite_unlocked	.symtab	0x10005d08	192	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getArch	.symtab	0x100031b8	40	FUNC	<unknown>	DEFAULT	2
getHost	.symtab	0x10001550	124	FUNC	<unknown>	DEFAULT	2
getOurIP	.symtab	0x100005f8	648	FUNC	<unknown>	DEFAULT	2
getRandomIP	.symtab	0x100004a0	112	FUNC	<unknown>	DEFAULT	2
get_hosts_byname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getc	.symtab	0x1000b598	304	FUNC	<unknown>	DEFAULT	2
getc_unlocked	.symtab	0x1000bcc0	312	FUNC	<unknown>	DEFAULT	2
getdents64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getdtablesize	.symtab	0x10009668	56	FUNC	<unknown>	DEFAULT	2
getdtablesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getegid	.symtab	0x100096a0	16	FUNC	<unknown>	DEFAULT	2
getegid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid	.symtab	0x100096b0	16	FUNC	<unknown>	DEFAULT	2
geteuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid	.symtab	0x100096c0	16	FUNC	<unknown>	DEFAULT	2
getgid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname	.symtab	0x10006790	8	FUNC	<unknown>	DEFAULT	2
gethostbyname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname2	.symtab	0x10006798	72	FUNC	<unknown>	DEFAULT	2
gethostbyname2.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname2_r	.symtab	0x1000c574	664	FUNC	<unknown>	DEFAULT	2
gethostbyname2_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname_r	.symtab	0x1000ef7c	748	FUNC	<unknown>	DEFAULT	2
gethostbyname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostname	.symtab	0x1000f2c0	136	FUNC	<unknown>	DEFAULT	2
gethostname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpagesize	.symtab	0x100096d0	28	FUNC	<unknown>	DEFAULT	2
getpagesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid	.symtab	0x10008b40	56	FUNC	<unknown>	DEFAULT	2
getpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getrlimit	.symtab	0x100096ec	52	FUNC	<unknown>	DEFAULT	2
getrlimit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockname	.symtab	0x1000688c	52	FUNC	<unknown>	DEFAULT	2
getsockname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt	.symtab	0x100068c0	52	FUNC	<unknown>	DEFAULT	2
getsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid	.symtab	0x10009720	16	FUNC	<unknown>	DEFAULT	2
getuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
h_errno	.symtab	0x4	4	TLS	<unknown>	DEFAULT	6
hoste.6500	.symtab	0x10028468	20	OBJECT	<unknown>	DEFAULT	14
htonl	.symtab	0x100066a4	4	FUNC	<unknown>	DEFAULT	2
htons	.symtab	0x100066a8	4	FUNC	<unknown>	DEFAULT	2
i.4865	.symtab	0x10024164	4	OBJECT	<unknown>	DEFAULT	10
index	.symtab	0x10005ef4	256	FUNC	<unknown>	DEFAULT	2
inet_addr	.symtab	0x1000675c	52	FUNC	<unknown>	DEFAULT	2
inet_aton	.symtab	0x1000c4a4	208	FUNC	<unknown>	DEFAULT	2
inet_aton.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa	.symtab	0x10006728	52	FUNC	<unknown>	DEFAULT	2
inet_ntoa.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa_r	.symtab	0x100066ac	124	FUNC	<unknown>	DEFAULT	2
inet_ntop	.symtab	0x1000df84	728	FUNC	<unknown>	DEFAULT	2
inet_ntop4	.symtab	0x1000de30	340	FUNC	<unknown>	DEFAULT	2
inet_pton	.symtab	0x1000dc24	524	FUNC	<unknown>	DEFAULT	2
inet_pton4	.symtab	0x1000db48	220	FUNC	<unknown>	DEFAULT	2
initConnection	.symtab	0x10003bd0	412	FUNC	<unknown>	DEFAULT	2
init_rand	.symtab	0x10000260	232	FUNC	<unknown>	DEFAULT	2
init_static_tls	.symtab	0x1000ccd0	60	FUNC	<unknown>	DEFAULT	2
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initstate	.symtab	0x10007c2c	132	FUNC	<unknown>	DEFAULT	2
initstate_r	.symtab	0x10007e98	236	FUNC	<unknown>	DEFAULT	2
ioctl	.symtab	0x10004574	228	FUNC	<unknown>	DEFAULT	2
ioctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isatty	.symtab	0x1000c478	44	FUNC	<unknown>	DEFAULT	2
isatty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isspace	.symtab	0x1000497c	24	FUNC	<unknown>	DEFAULT	2
isspace.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill	.symtab	0x10004848	52	FUNC	<unknown>	DEFAULT	2
kill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
last_id.6558	.symtab	0x10024328	2	OBJECT	<unknown>	DEFAULT	10
last_ns_num.6557	.symtab	0x1002b0d0	4	OBJECT	<unknown>	DEFAULT	14
libc-cancellation.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc-lowlevellock.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc-tls.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
listFork	.symtab	0x10001b50	460	FUNC	<unknown>	DEFAULT	2
llseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lseek64	.symtab	0x1000f4a4	112	FUNC	<unknown>	DEFAULT	2
macAddress	.symtab	0x100243a8	6	OBJECT	<unknown>	DEFAULT	13
main	.symtab	0x10003d6c	2056	FUNC	<unknown>	DEFAULT	2
mainCommSock	.symtab	0x10024398	4	OBJECT	<unknown>	DEFAULT	13
malloc	.symtab	0x10006c6c	2320	FUNC	<unknown>	DEFAULT	2
malloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
malloc_trim	.symtab	0x10007a0c	64	FUNC	<unknown>	DEFAULT	2
memchr	.symtab	0x1000bf60	264	FUNC	<unknown>	DEFAULT	2
memchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memcpy	.symtab	0x10005dc8	156	FUNC	<unknown>	DEFAULT	2
memcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memmove	.symtab	0x1000bebc	164	FUNC	<unknown>	DEFAULT	2
memmove.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mempcpy	.symtab	0x1000c068	52	FUNC	<unknown>	DEFAULT	2
mempcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memrchr	.symtab	0x1000c09c	244	FUNC	<unknown>	DEFAULT	2
memrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset	.symtab	0x10005e64	144	FUNC	<unknown>	DEFAULT	2
memset.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mmap	.symtab	0x10009730	52	FUNC	<unknown>	DEFAULT	2
mmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mremap	.symtab	0x1000d150	52	FUNC	<unknown>	DEFAULT	2
mremap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
munmap	.symtab	0x10009764	52	FUNC	<unknown>	DEFAULT	2
munmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mylock	.symtab	0x10024180	24	OBJECT	<unknown>	DEFAULT	10
mylock	.symtab	0x10024198	24	OBJECT	<unknown>	DEFAULT	10
nanosleep	.symtab	0x100097cc	112	FUNC	<unknown>	DEFAULT	2
nanosleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
next_start.1347	.symtab	0x10028454	4	OBJECT	<unknown>	DEFAULT	14
nprocessors_onln	.symtab	0x100082b8	328	FUNC	<unknown>	DEFAULT	2
ntohl	.symtab	0x1000669c	4	FUNC	<unknown>	DEFAULT	2
ntohl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ntohs	.symtab	0x100066a0	4	FUNC	<unknown>	DEFAULT	2
ntop.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
numpids	.symtab	0x100243a0	8	OBJECT	<unknown>	DEFAULT	13
object.5595	.symtab	0x10024430	0	OBJECT	<unknown>	DEFAULT	14
open	.symtab	0x10008e1c	132	FUNC	<unknown>	DEFAULT	2
opendir	.symtab	0x10009ab4	208	FUNC	<unknown>	DEFAULT	2
opendir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
opennameservers.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ourIP	.symtab	0x100243b0	4	OBJECT	<unknown>	DEFAULT	13
ovhl7	.symtab	0x1000244c	3436	FUNC	<unknown>	DEFAULT	2
p.5578	.symtab	0x1002406c	0	OBJECT	<unknown>	DEFAULT	10
parse_config.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
pids	.symtab	0x100243b4	4	OBJECT	<unknown>	DEFAULT	13
poll	.symtab	0x1000f37c	120	FUNC	<unknown>	DEFAULT	2
poll.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prefix.6256	.symtab	0x10012994	12	OBJECT	<unknown>	DEFAULT	4
print	.symtab	0x10000e00	1568	FUNC	<unknown>	DEFAULT	2
printchar	.symtab	0x100009dc	128	FUNC	<unknown>	DEFAULT	2
printi	.symtab	0x10000c00	512	FUNC	<unknown>	DEFAULT	2
prints	.symtab	0x10000a5c	420	FUNC	<unknown>	DEFAULT	2
processCmd	.symtab	0x100031e0	2544	FUNC	<unknown>	DEFAULT	2
program_invocation_name	.symtab	0x10024364	4	OBJECT	<unknown>	DEFAULT	12
program_invocation_short_name	.symtab	0x10024360	4	OBJECT	<unknown>	DEFAULT	12
qual_chars.6264	.symtab	0x100129dc	20	OBJECT	<unknown>	DEFAULT	4
raise	.symtab	0x10008b78	148	FUNC	<unknown>	DEFAULT	2
raise.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand	.symtab	0x10007b44	4	FUNC	<unknown>	DEFAULT	2
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand_cmwc	.symtab	0x10000348	344	FUNC	<unknown>	DEFAULT	2
random	.symtab	0x10007b48	104	FUNC	<unknown>	DEFAULT	2
random.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
random_poly_info	.symtab	0x100135a8	40	OBJECT	<unknown>	DEFAULT	4
random_r	.symtab	0x10007d18	140	FUNC	<unknown>	DEFAULT	2
random_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
randtbl	.symtab	0x100241c4	128	OBJECT	<unknown>	DEFAULT	10
rawmemchr	.symtab	0x1000d9d4	184	FUNC	<unknown>	DEFAULT	2
rawmemchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read	.symtab	0x10008f24	132	FUNC	<unknown>	DEFAULT	2
read_etc_hosts_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
readdir64	.symtab	0x10009c3c	196	FUNC	<unknown>	DEFAULT	2
readdir64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
realloc	.symtab	0x1000c938	920	FUNC	<unknown>	DEFAULT	2
realloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recv	.symtab	0x10006928	128	FUNC	<unknown>	DEFAULT	2
recv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recvLine	.symtab	0x100015cc	756	FUNC	<unknown>	DEFAULT	2
register-atfork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
resolv_conf_mtime.6540	.symtab	0x1002b0d4	4	OBJECT	<unknown>	DEFAULT	14
rindex	.symtab	0x1000c2e8	112	FUNC	<unknown>	DEFAULT	2
sbrk	.symtab	0x1000983c	116	FUNC	<unknown>	DEFAULT	2
sbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
select	.symtab	0x100048b0	136	FUNC	<unknown>	DEFAULT	2
select.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
send	.symtab	0x100069dc	128	FUNC	<unknown>	DEFAULT	2
send.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsid	.symtab	0x10004938	52	FUNC	<unknown>	DEFAULT	2
setsid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsockopt	.symtab	0x10006a5c	52	FUNC	<unknown>	DEFAULT	2
setsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setstate	.symtab	0x10007bb0	124	FUNC	<unknown>	DEFAULT	2
setstate_r	.symtab	0x10007f84	224	FUNC	<unknown>	DEFAULT	2
sigaction	.symtab	0x1000c80c	36	FUNC	<unknown>	DEFAULT	2
sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigjmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
signal	.symtab	0x10006ac4	192	FUNC	<unknown>	DEFAULT	2
signal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigprocmask	.symtab	0x100098b0	120	FUNC	<unknown>	DEFAULT	2
sigprocmask.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigsetops.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
skip_and_NUL_space	.symtab	0x1000ea3c	68	FUNC	<unknown>	DEFAULT	2
skip_nospace	.symtab	0x1000e9fc	64	FUNC	<unknown>	DEFAULT	2
sleep	.symtab	0x10008c0c	292	FUNC	<unknown>	DEFAULT	2
sleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket	.symtab	0x10006a90	52	FUNC	<unknown>	DEFAULT	2
socket.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket_connect	.symtab	0x10001d1c	328	FUNC	<unknown>	DEFAULT	2
sockprintf	.symtab	0x10001420	304	FUNC	<unknown>	DEFAULT	2
spec_and_mask.6263	.symtab	0x10012a0a	16	OBJECT	<unknown>	DEFAULT	4
spec_base.6255	.symtab	0x1001298c	7	OBJECT	<unknown>	DEFAULT	4
spec_chars.6260	.symtab	0x10012a1c	21	OBJECT	<unknown>	DEFAULT	4
spec_flags.6259	.symtab	0x10012a34	8	OBJECT	<unknown>	DEFAULT	4
spec_or_mask.6262	.symtab	0x100129fa	16	OBJECT	<unknown>	DEFAULT	4
spec_ranges.6261	.symtab	0x100129f0	9	OBJECT	<unknown>	DEFAULT	4
sprintf	.symtab	0x100049c8	136	FUNC	<unknown>	DEFAULT	2
sprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
srand	.symtab	0x10007cb0	104	FUNC	<unknown>	DEFAULT	2
srandom	.symtab	0x10007cb0	104	FUNC	<unknown>	DEFAULT	2
srandom_r	.symtab	0x10007da4	244	FUNC	<unknown>	DEFAULT	2
stat	.symtab	0x1000f3f4	124	FUNC	<unknown>	DEFAULT	2
stat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
static_dtv	.symtab	0x1002ae9c	512	OBJECT	<unknown>	DEFAULT	14
static_map	.symtab	0x1002b09c	52	OBJECT	<unknown>	DEFAULT	14
static_slotinfo	.symtab	0x1002ab94	776	OBJECT	<unknown>	DEFAULT	14
stderr	.symtab	0x10024378	4	OBJECT	<unknown>	DEFAULT	12
stdin	.symtab	0x10024370	4	OBJECT	<unknown>	DEFAULT	12
stdout	.symtab	0x10024374	4	OBJECT	<unknown>	DEFAULT	12
strcasecmp	.symtab	0x1000642c	80	FUNC	<unknown>	DEFAULT	2
strcasecmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchr	.symtab	0x10005ef4	256	FUNC	<unknown>	DEFAULT	2
strchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchrnul	.symtab	0x1000c190	248	FUNC	<unknown>	DEFAULT	2
strchrnul.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcmp	.symtab	0x10005ff4	52	FUNC	<unknown>	DEFAULT	2
strcmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcoll	.symtab	0x10005ff4	52	FUNC	<unknown>	DEFAULT	2
strcpy	.symtab	0x10006028	32	FUNC	<unknown>	DEFAULT	2
strcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcspn	.symtab	0x1000c288	96	FUNC	<unknown>	DEFAULT	2
strcspn.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strdup	.symtab	0x1000f514	80	FUNC	<unknown>	DEFAULT	2
strdup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strerror_r	.symtab	0x100062f4	284	FUNC	<unknown>	DEFAULT	2
strlen	.symtab	0x10006048	160	FUNC	<unknown>	DEFAULT	2
strlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strncpy	.symtab	0x1000da8c	188	FUNC	<unknown>	DEFAULT	2
strncpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strnlen	.symtab	0x100060e8	236	FUNC	<unknown>	DEFAULT	2
strnlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strpbrk	.symtab	0x1000c43c	60	FUNC	<unknown>	DEFAULT	2
strpbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strrchr	.symtab	0x1000c2e8	112	FUNC	<unknown>	DEFAULT	2
strrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strspn	.symtab	0x1000c358	72	FUNC	<unknown>	DEFAULT	2
strspn.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strstr	.symtab	0x100061d4	240	FUNC	<unknown>	DEFAULT	2
strstr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok	.symtab	0x1000647c	12	FUNC	<unknown>	DEFAULT	2
strtok.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok_r	.symtab	0x1000c3a0	156	FUNC	<unknown>	DEFAULT	2
strtok_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtol	.symtab	0x10008070	8	FUNC	<unknown>	DEFAULT	2
strtol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sysconf	.symtab	0x10008400	624	FUNC	<unknown>	DEFAULT	2
sysconf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcgetattr	.symtab	0x10006488	156	FUNC	<unknown>	DEFAULT	2
tcgetattr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcsetattr	.symtab	0x10006524	376	FUNC	<unknown>	DEFAULT	2
tcsetattr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
time	.symtab	0x1000496c	16	FUNC	<unknown>	DEFAULT	2
time.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
toupper	.symtab	0x10004994	32	FUNC	<unknown>	DEFAULT	2
toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
trim	.symtab	0x10000880	348	FUNC	<unknown>	DEFAULT	2
type_codes	.symtab	0x100129b8	24	OBJECT	<unknown>	DEFAULT	4
type_sizes	.symtab	0x100129d0	12	OBJECT	<unknown>	DEFAULT	4
uname	.symtab	0x1000f470	52	FUNC	<unknown>	DEFAULT	2
uname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
unknown.1370	.symtab	0x10012a3c	14	OBJECT	<unknown>	DEFAULT	4
unsafe_state	.symtab	0x100241b0	20	OBJECT	<unknown>	DEFAULT	10
useragents	.symtab	0x10024074	236	OBJECT	<unknown>	DEFAULT	10
vsnprintf	.symtab	0x10004a50	224	FUNC	<unknown>	DEFAULT	2
vsnprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
waitpid	.symtab	0x10008fa8	132	FUNC	<unknown>	DEFAULT	2
wcrtomb	.symtab	0x1000a0d8	92	FUNC	<unknown>	DEFAULT	2
wcrtomb.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsnrtombs	.symtab	0x1000a144	188	FUNC	<unknown>	DEFAULT	2
wcsnrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsrtombs	.symtab	0x1000a134	16	FUNC	<unknown>	DEFAULT	2
wcsrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
write	.symtab	0x10008ea0	132	FUNC	<unknown>	DEFAULT	2
xdigits.5264	.symtab	0x10013dd4	17	OBJECT	<unknown>	DEFAULT	4
xstatconv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
xtdcustom	.symtab	0x1000200c	332	FUNC	<unknown>	DEFAULT	2

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 22, 2024 16:13:50.320960045 CET	43928	443	192.168.2.23	91.189.91.42
Dec 22, 2024 16:13:50.539596081 CET	52128	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:13:50.659966946 CET	4258	52128	185.216.71.152	192.168.2.23
Dec 22, 2024 16:13:50.660068035 CET	52128	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:13:50.661427975 CET	52128	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:13:50.782032013 CET	4258	52128	185.216.71.152	192.168.2.23
Dec 22, 2024 16:13:51.829535961 CET	4258	52128	185.216.71.152	192.168.2.23
Dec 22, 2024 16:13:51.829776049 CET	4258	52128	185.216.71.152	192.168.2.23
Dec 22, 2024 16:13:51.829894066 CET	52128	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:13:51.830773115 CET	52128	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:13:51.831244946 CET	52130	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:13:51.950309992 CET	4258	52128	185.216.71.152	192.168.2.23
Dec 22, 2024 16:13:51.950731993 CET	4258	52130	185.216.71.152	192.168.2.23
Dec 22, 2024 16:13:51.950851917 CET	52130	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:13:51.951102972 CET	52130	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:13:52.070641994 CET	4258	52130	185.216.71.152	192.168.2.23
Dec 22, 2024 16:13:53.106080055 CET	4258	52130	185.216.71.152	192.168.2.23
Dec 22, 2024 16:13:53.106178999 CET	4258	52130	185.216.71.152	192.168.2.23
Dec 22, 2024 16:13:53.106390953 CET	52130	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:13:53.106482983 CET	52130	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:13:53.106971979 CET	52132	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:13:53.226010084 CET	4258	52130	185.216.71.152	192.168.2.23
Dec 22, 2024 16:13:53.226634979 CET	4258	52132	185.216.71.152	192.168.2.23
Dec 22, 2024 16:13:53.226767063 CET	52132	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:13:53.226839066 CET	52132	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:13:53.346615076 CET	4258	52132	185.216.71.152	192.168.2.23
Dec 22, 2024 16:13:54.406223059 CET	4258	52132	185.216.71.152	192.168.2.23
Dec 22, 2024 16:13:54.406256914 CET	4258	52132	185.216.71.152	192.168.2.23
Dec 22, 2024 16:13:54.406429052 CET	52132	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:13:54.406512022 CET	52132	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:13:54.407035112 CET	52134	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:13:54.528884888 CET	4258	52132	185.216.71.152	192.168.2.23
Dec 22, 2024 16:13:54.529392004 CET	4258	52134	185.216.71.152	192.168.2.23
Dec 22, 2024 16:13:54.529463053 CET	52134	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:13:54.529520035 CET	52134	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:13:54.649517059 CET	4258	52134	185.216.71.152	192.168.2.23
Dec 22, 2024 16:13:55.690527916 CET	4258	52134	185.216.71.152	192.168.2.23
Dec 22, 2024 16:13:55.690634966 CET	4258	52134	185.216.71.152	192.168.2.23
Dec 22, 2024 16:13:55.690789938 CET	52134	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:13:55.690789938 CET	52134	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:13:55.691239119 CET	52136	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:13:55.811280012 CET	4258	52134	185.216.71.152	192.168.2.23
Dec 22, 2024 16:13:55.811467886 CET	4258	52136	185.216.71.152	192.168.2.23
Dec 22, 2024 16:13:55.811655998 CET	52136	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:13:55.811655998 CET	52136	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:13:55.932478905 CET	4258	52136	185.216.71.152	192.168.2.23
Dec 22, 2024 16:13:56.972443104 CET	4258	52136	185.216.71.152	192.168.2.23
Dec 22, 2024 16:13:56.972522020 CET	4258	52136	185.216.71.152	192.168.2.23
Dec 22, 2024 16:13:56.972739935 CET	52136	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:13:56.972872019 CET	52136	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:13:56.973450899 CET	52138	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:13:57.094258070 CET	4258	52136	185.216.71.152	192.168.2.23
Dec 22, 2024 16:13:57.095237017 CET	4258	52138	185.216.71.152	192.168.2.23
Dec 22, 2024 16:13:57.095451117 CET	52138	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:13:57.095451117 CET	52138	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:13:57.217453003 CET	4258	52138	185.216.71.152	192.168.2.23
Dec 22, 2024 16:13:58.242928982 CET	4258	52138	185.216.71.152	192.168.2.23
Dec 22, 2024 16:13:58.242995024 CET	4258	52138	185.216.71.152	192.168.2.23
Dec 22, 2024 16:13:58.243292093 CET	52138	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:13:58.243330002 CET	52138	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:13:58.244074106 CET	52140	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:13:58.367634058 CET	4258	52138	185.216.71.152	192.168.2.23
Dec 22, 2024 16:13:58.368403912 CET	4258	52140	185.216.71.152	192.168.2.23
Dec 22, 2024 16:13:58.368561029 CET	52140	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:13:58.368635893 CET	52140	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:13:58.488745928 CET	4258	52140	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:00.012564898 CET	4258	52140	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:00.012698889 CET	52140	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:00.012846947 CET	4258	52140	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:00.012949944 CET	52140	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:00.013473988 CET	52142	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:00.132761002 CET	4258	52140	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:00.133166075 CET	4258	52142	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:00.133316994 CET	52142	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:00.133414984 CET	52142	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:00.253536940 CET	4258	52142	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:01.282690048 CET	4258	52142	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:01.282721996 CET	4258	52142	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:01.282958984 CET	52142	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:01.283032894 CET	52142	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:01.283684969 CET	52144	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:01.402940035 CET	4258	52142	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:01.403599977 CET	4258	52144	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:01.403726101 CET	52144	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:01.403821945 CET	52144	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:01.523629904 CET	4258	52144	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:02.569276094 CET	4258	52144	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:02.569294930 CET	4258	52144	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:02.569639921 CET	52144	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:02.569730043 CET	52144	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:02.570493937 CET	52146	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:02.690350056 CET	4258	52144	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:02.691111088 CET	4258	52146	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:02.691375971 CET	52146	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:02.691518068 CET	52146	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:02.811067104 CET	4258	52146	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:03.854882002 CET	4258	52146	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:03.855123997 CET	4258	52146	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:03.855387926 CET	52146	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:03.855482101 CET	52146	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:03.856178999 CET	52148	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:03.975169897 CET	4258	52146	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:03.975749016 CET	4258	52148	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:03.975876093 CET	52148	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:03.976056099 CET	52148	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:04.092967987 CET	443	39256	34.249.145.219	192.168.2.23
Dec 22, 2024 16:14:04.093569040 CET	39256	443	192.168.2.23	34.249.145.219
Dec 22, 2024 16:14:04.101883888 CET	4258	52148	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:04.215787888 CET	443	39256	34.249.145.219	192.168.2.23
Dec 22, 2024 16:14:05.147433043 CET	4258	52148	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:05.147653103 CET	4258	52148	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:05.147716045 CET	52148	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:05.147775888 CET	52148	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:05.148464918 CET	52150	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:05.267431021 CET	4258	52148	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:05.268116951 CET	4258	52150	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:05.268232107 CET	52150	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:05.268448114 CET	52150	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:05.390361071 CET	4258	52150	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:06.437056065 CET	4258	52150	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:06.437201023 CET	4258	52150	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:06.437448978 CET	52150	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:06.437474012 CET	52150	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:06.438296080 CET	52152	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:06.557095051 CET	4258	52150	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:06.557934046 CET	4258	52152	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:06.558105946 CET	52152	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:06.558393955 CET	52152	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:06.678019047 CET	4258	52152	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:07.470662117 CET	42516	80	192.168.2.23	109.202.202.202
Dec 22, 2024 16:14:07.733952999 CET	4258	52152	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:07.733999968 CET	4258	52152	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:07.734163046 CET	52152	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:07.734246969 CET	52152	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:07.734899044 CET	52154	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:07.853861094 CET	4258	52152	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:07.854521990 CET	4258	52154	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:07.854690075 CET	52154	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:07.854933023 CET	52154	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:07.974509954 CET	4258	52154	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:09.016076088 CET	4258	52154	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:09.016242027 CET	52154	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:09.016344070 CET	4258	52154	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:09.016539097 CET	52154	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:09.017237902 CET	52156	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:09.136209011 CET	4258	52154	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:09.136837959 CET	4258	52156	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:09.136955023 CET	52156	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:09.137234926 CET	52156	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:09.256777048 CET	4258	52156	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:10.314223051 CET	4258	52156	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:10.314344883 CET	4258	52156	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:10.314486027 CET	52156	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:10.314618111 CET	52156	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:10.315373898 CET	52158	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:10.434351921 CET	4258	52156	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:10.435287952 CET	4258	52158	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:10.435547113 CET	52158	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:10.435547113 CET	52158	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:10.556238890 CET	4258	52158	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:11.566188097 CET	43928	443	192.168.2.23	91.189.91.42
Dec 22, 2024 16:14:11.617295027 CET	4258	52158	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:11.617388964 CET	4258	52158	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:11.617721081 CET	52158	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:11.617927074 CET	52158	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:11.618849993 CET	52160	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:11.737477064 CET	4258	52158	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:11.738409996 CET	4258	52160	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:11.738581896 CET	52160	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:11.738770962 CET	52160	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:11.858405113 CET	4258	52160	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:12.899544001 CET	4258	52160	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:12.899715900 CET	4258	52160	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:12.899772882 CET	52160	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:12.899772882 CET	52160	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:12.900326967 CET	52162	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:13.024537086 CET	4258	52160	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:13.025068045 CET	4258	52162	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:13.025278091 CET	52162	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:13.025278091 CET	52162	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:13.151281118 CET	4258	52162	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:14.208406925 CET	4258	52162	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:14.208491087 CET	4258	52162	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:14.208642960 CET	52162	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:14.208699942 CET	52162	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:14.209477901 CET	52164	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:14.328293085 CET	4258	52162	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:14.329055071 CET	4258	52164	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:14.329121113 CET	52164	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:14.329159021 CET	52164	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:14.448815107 CET	4258	52164	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:15.487251043 CET	4258	52164	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:15.487286091 CET	4258	52164	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:15.487588882 CET	52164	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:15.487607002 CET	52164	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:15.488384962 CET	52166	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:15.608726025 CET	4258	52164	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:15.609297991 CET	4258	52166	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:15.609664917 CET	52166	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:15.609664917 CET	52166	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:15.729326963 CET	4258	52166	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:16.773242950 CET	4258	52166	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:16.773274899 CET	4258	52166	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:16.773586988 CET	52166	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:16.773665905 CET	52166	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:16.774549961 CET	52168	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:16.893241882 CET	4258	52166	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:16.894227028 CET	4258	52168	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:16.894596100 CET	52168	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:16.894596100 CET	52168	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:17.014556885 CET	4258	52168	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:18.049242020 CET	4258	52168	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:18.049503088 CET	4258	52168	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:18.049598932 CET	52168	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:18.049695969 CET	52168	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:18.050390005 CET	52170	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:18.169469118 CET	4258	52168	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:18.169914961 CET	4258	52170	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:18.170170069 CET	52170	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:18.170258045 CET	52170	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:18.290159941 CET	4258	52170	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:22.391992092 CET	4258	52170	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:22.392086029 CET	4258	52170	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:22.392560005 CET	52170	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:22.392560959 CET	52170	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:22.394013882 CET	52172	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:22.512561083 CET	4258	52170	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:22.513623953 CET	4258	52172	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:22.513994932 CET	52172	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:22.514022112 CET	52172	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:22.633615017 CET	4258	52172	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:23.723046064 CET	4258	52172	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:23.723078012 CET	4258	52172	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:23.723381996 CET	52172	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:23.723381996 CET	52172	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:23.724534988 CET	52174	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:23.843611002 CET	4258	52172	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:23.844281912 CET	4258	52174	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:23.844548941 CET	52174	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:23.844656944 CET	52174	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:23.965307951 CET	4258	52174	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:25.027329922 CET	4258	52174	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:25.027362108 CET	4258	52174	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:25.027546883 CET	52174	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:25.027681112 CET	52174	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:25.028656006 CET	52176	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:25.147352934 CET	4258	52174	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:25.148307085 CET	4258	52176	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:25.148447037 CET	52176	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:25.148555040 CET	52176	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:25.268409967 CET	4258	52176	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:26.507783890 CET	4258	52176	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:26.508200884 CET	52176	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:26.509061098 CET	52178	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:26.627732992 CET	4258	52176	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:26.628597975 CET	4258	52178	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:26.628715038 CET	52178	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:26.628779888 CET	52178	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:26.753952026 CET	4258	52178	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:30.932951927 CET	4258	52178	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:30.933125973 CET	52178	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:30.933275938 CET	4258	52178	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:30.933377981 CET	52178	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:30.934176922 CET	52180	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:31.053757906 CET	4258	52178	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:31.054641008 CET	4258	52180	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:31.054747105 CET	52180	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:31.054924965 CET	52180	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:31.176450014 CET	4258	52180	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:32.410830975 CET	4258	52180	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:32.410955906 CET	4258	52180	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:32.411057949 CET	52180	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:32.411238909 CET	52180	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:32.412146091 CET	52182	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:32.530761003 CET	4258	52180	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:32.531765938 CET	4258	52182	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:32.531860113 CET	52182	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:32.531958103 CET	52182	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:32.651909113 CET	4258	52182	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:36.791578054 CET	4258	52182	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:36.791773081 CET	52182	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:36.791898966 CET	4258	52182	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:36.792064905 CET	52182	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:36.792906046 CET	52184	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:36.911696911 CET	4258	52182	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:36.912501097 CET	4258	52184	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:36.912646055 CET	52184	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:36.912848949 CET	52184	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:37.032639980 CET	4258	52184	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:38.275866985 CET	4258	52184	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:38.276052952 CET	52184	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:38.276134014 CET	4258	52184	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:38.276287079 CET	52184	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:38.277184010 CET	52186	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:38.396075010 CET	4258	52184	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:38.397001028 CET	4258	52186	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:38.397111893 CET	52186	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:38.397175074 CET	52186	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:38.516755104 CET	4258	52186	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:39.647417068 CET	4258	52186	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:39.647593021 CET	52186	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:39.647927046 CET	4258	52186	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:39.648077011 CET	52186	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:39.648953915 CET	52188	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:39.768805981 CET	4258	52186	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:39.769741058 CET	4258	52188	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:39.769872904 CET	52188	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:39.769963026 CET	52188	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:39.897439003 CET	4258	52188	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:49.955591917 CET	4258	52188	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:49.955770969 CET	4258	52188	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:49.955775976 CET	52188	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:49.956150055 CET	52188	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:49.957201958 CET	52190	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:50.075707912 CET	4258	52188	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:50.076778889 CET	4258	52190	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:50.076867104 CET	52190	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:50.077119112 CET	52190	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:50.201395988 CET	4258	52190	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:51.277873993 CET	4258	52190	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:51.277901888 CET	4258	52190	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:51.278036118 CET	52190	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:51.278291941 CET	52190	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:51.279126883 CET	52192	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:51.399476051 CET	4258	52190	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:51.399986029 CET	4258	52192	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:51.400068998 CET	52192	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:51.400302887 CET	52192	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:51.520065069 CET	4258	52192	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:52.520581961 CET	43928	443	192.168.2.23	91.189.91.42
Dec 22, 2024 16:14:52.592628956 CET	4258	52192	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:52.592765093 CET	4258	52192	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:52.592849016 CET	52192	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:52.593041897 CET	52192	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:52.594017982 CET	52194	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:52.712829113 CET	4258	52192	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:52.713958025 CET	4258	52194	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:52.714051962 CET	52194	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:52.714148045 CET	52194	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:52.833764076 CET	4258	52194	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:53.868366957 CET	4258	52194	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:53.868405104 CET	4258	52194	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:53.868522882 CET	52194	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:53.868590117 CET	52194	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:53.869586945 CET	52196	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:53.989769936 CET	4258	52194	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:53.989804029 CET	4258	52196	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:53.989895105 CET	52196	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:53.990025997 CET	52196	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:54.109664917 CET	4258	52196	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:55.167468071 CET	4258	52196	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:55.167622089 CET	4258	52196	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:55.167659998 CET	52196	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:55.167798042 CET	52196	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:55.168531895 CET	52198	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:55.287888050 CET	4258	52196	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:55.288809061 CET	4258	52198	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:55.288985014 CET	52198	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:55.289242983 CET	52198	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:55.408751965 CET	4258	52198	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:56.460979939 CET	4258	52198	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:56.461118937 CET	52198	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:56.461474895 CET	4258	52198	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:56.461642027 CET	52198	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:56.462661982 CET	52200	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:56.582160950 CET	4258	52198	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:56.583230972 CET	4258	52200	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:56.583302021 CET	52200	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:56.583445072 CET	52200	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:56.703464031 CET	4258	52200	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:57.743705988 CET	4258	52200	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:57.743730068 CET	4258	52200	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:57.743833065 CET	52200	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:57.743982077 CET	52200	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:57.745042086 CET	52202	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:57.863596916 CET	4258	52200	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:57.867666006 CET	4258	52202	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:57.867784977 CET	52202	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:57.867897034 CET	52202	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:57.988745928 CET	4258	52202	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:59.031091928 CET	4258	52202	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:59.031119108 CET	4258	52202	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:59.031281948 CET	52202	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:59.031378984 CET	52202	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:59.032365084 CET	52204	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:59.151511908 CET	4258	52202	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:59.152549982 CET	4258	52204	185.216.71.152	192.168.2.23
Dec 22, 2024 16:14:59.152678967 CET	52204	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:59.152720928 CET	52204	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:14:59.273679972 CET	4258	52204	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:00.398829937 CET	4258	52204	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:00.398858070 CET	4258	52204	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:00.398972034 CET	52204	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:00.399171114 CET	52204	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:00.400223970 CET	52206	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:00.518750906 CET	4258	52204	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:00.520111084 CET	4258	52206	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:00.520231009 CET	52206	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:00.520322084 CET	52206	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:00.639997959 CET	4258	52206	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:01.825155020 CET	4258	52206	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:01.825356007 CET	4258	52206	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:01.825356960 CET	52206	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:01.825474024 CET	52206	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:01.826309919 CET	52208	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:01.945389032 CET	4258	52206	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:01.945935011 CET	4258	52208	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:01.946062088 CET	52208	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:01.946165085 CET	52208	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:02.065804005 CET	4258	52208	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:03.216414928 CET	4258	52208	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:03.216475010 CET	4258	52208	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:03.216541052 CET	52208	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:03.216664076 CET	52208	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:03.217740059 CET	52210	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:03.337244987 CET	4258	52208	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:03.338093996 CET	4258	52210	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:03.338202000 CET	52210	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:03.338324070 CET	52210	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:03.457786083 CET	4258	52210	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:04.776115894 CET	4258	52210	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:04.776510954 CET	52210	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:04.777462006 CET	52212	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:04.896156073 CET	4258	52210	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:04.897053957 CET	4258	52212	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:04.897160053 CET	52212	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:04.897212982 CET	52212	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:05.017520905 CET	4258	52212	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:06.052577019 CET	4258	52212	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:06.052697897 CET	4258	52212	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:06.052701950 CET	52212	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:06.052776098 CET	52212	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:06.053411007 CET	52214	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:06.173382044 CET	4258	52212	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:06.173401117 CET	4258	52214	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:06.173506975 CET	52214	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:06.173697948 CET	52214	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:06.293273926 CET	4258	52214	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:07.340095043 CET	4258	52214	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:07.340117931 CET	4258	52214	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:07.340281010 CET	52214	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:07.340327024 CET	52214	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:07.341661930 CET	52216	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:07.464238882 CET	4258	52214	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:07.465297937 CET	4258	52216	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:07.465476036 CET	52216	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:07.465687037 CET	52216	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:07.585408926 CET	4258	52216	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:08.630314112 CET	4258	52216	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:08.630368948 CET	4258	52216	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:08.630470037 CET	52216	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:08.630570889 CET	52216	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:08.631361961 CET	52218	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:08.750724077 CET	4258	52216	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:08.751737118 CET	4258	52218	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:08.751857042 CET	52218	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:08.751913071 CET	52218	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:08.871500015 CET	4258	52218	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:09.940790892 CET	4258	52218	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:09.940856934 CET	4258	52218	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:09.940956116 CET	52218	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:09.941087008 CET	52218	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:09.942181110 CET	52220	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:10.062804937 CET	4258	52218	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:10.063875914 CET	4258	52220	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:10.063961029 CET	52220	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:10.064238071 CET	52220	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:10.183856964 CET	4258	52220	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:11.239489079 CET	4258	52220	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:11.239523888 CET	4258	52220	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:11.239658117 CET	52220	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:11.240000963 CET	52220	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:11.241050959 CET	52222	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:11.359486103 CET	4258	52220	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:11.360661983 CET	4258	52222	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:11.360877037 CET	52222	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:11.360877037 CET	52222	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:11.480726004 CET	4258	52222	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:12.539077997 CET	4258	52222	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:12.539161921 CET	4258	52222	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:12.539385080 CET	52222	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:12.539613962 CET	52222	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:12.540718079 CET	52224	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:12.659527063 CET	4258	52222	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:12.660407066 CET	4258	52224	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:12.660547972 CET	52224	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:12.660767078 CET	52224	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:12.780685902 CET	4258	52224	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:13.831655979 CET	4258	52224	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:13.831904888 CET	4258	52224	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:13.831897020 CET	52224	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:13.832052946 CET	52224	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:13.833030939 CET	52226	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:13.951636076 CET	4258	52224	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:13.952613115 CET	4258	52226	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:13.952749014 CET	52226	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:13.952955008 CET	52226	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:14.072729111 CET	4258	52226	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:15.107170105 CET	4258	52226	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:15.107280016 CET	52226	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:15.107367992 CET	4258	52226	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:15.107548952 CET	52226	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:15.108681917 CET	52228	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:15.227442026 CET	4258	52226	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:15.228638887 CET	4258	52228	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:15.228714943 CET	52228	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:15.228965998 CET	52228	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:15.350672007 CET	4258	52228	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:16.395581007 CET	4258	52228	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:16.395699024 CET	4258	52228	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:16.395895004 CET	52228	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:16.395997047 CET	52228	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:16.397234917 CET	52230	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:16.515893936 CET	4258	52228	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:16.516890049 CET	4258	52230	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:16.517152071 CET	52230	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:16.517250061 CET	52230	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:16.637798071 CET	4258	52230	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:17.664589882 CET	4258	52230	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:17.664625883 CET	4258	52230	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:17.664779902 CET	52230	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:17.665074110 CET	52230	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:17.665860891 CET	52232	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:17.784712076 CET	4258	52230	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:17.785449028 CET	4258	52232	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:17.785554886 CET	52232	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:17.785845995 CET	52232	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:17.905306101 CET	4258	52232	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:18.950664997 CET	4258	52232	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:18.950828075 CET	4258	52232	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:18.950964928 CET	52232	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:18.951086998 CET	52232	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:18.952261925 CET	52234	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:19.070724964 CET	4258	52232	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:19.071887016 CET	4258	52234	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:19.072000980 CET	52234	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:19.072128057 CET	52234	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:19.192730904 CET	4258	52234	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:20.251138926 CET	4258	52234	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:20.251265049 CET	4258	52234	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:20.251307011 CET	52234	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:20.251425028 CET	52234	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:20.252270937 CET	52236	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:20.372917891 CET	4258	52234	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:20.373244047 CET	4258	52236	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:20.373347998 CET	52236	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:20.373404026 CET	52236	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:20.493253946 CET	4258	52236	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:21.555949926 CET	4258	52236	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:21.556087971 CET	52236	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:21.556224108 CET	4258	52236	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:21.556411982 CET	52236	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:21.557195902 CET	52238	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:21.678709984 CET	4258	52236	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:21.679657936 CET	4258	52238	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:21.679841042 CET	52238	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:21.679891109 CET	52238	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:21.799776077 CET	4258	52238	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:22.827600002 CET	4258	52238	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:22.827835083 CET	52238	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:22.827841043 CET	4258	52238	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:22.827974081 CET	52238	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:22.828712940 CET	52240	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:22.948492050 CET	4258	52238	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:22.949148893 CET	4258	52240	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:22.949368954 CET	52240	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:22.949443102 CET	52240	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:23.072932005 CET	4258	52240	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:24.124404907 CET	4258	52240	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:24.124440908 CET	4258	52240	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:24.124589920 CET	52240	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:24.124756098 CET	52240	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:24.125778913 CET	52242	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:24.244678974 CET	4258	52240	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:24.245503902 CET	4258	52242	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:24.245600939 CET	52242	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:24.245672941 CET	52242	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:24.365477085 CET	4258	52242	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:25.394253016 CET	4258	52242	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:25.394311905 CET	4258	52242	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:25.394505978 CET	52242	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:25.394649029 CET	52242	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:25.395695925 CET	52244	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:25.514470100 CET	4258	52242	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:25.515387058 CET	4258	52244	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:25.515516043 CET	52244	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:25.515623093 CET	52244	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:25.635421038 CET	4258	52244	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:26.719352961 CET	4258	52244	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:26.719412088 CET	4258	52244	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:26.719588041 CET	52244	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:26.719747066 CET	52244	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:26.720932007 CET	52246	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:26.839405060 CET	4258	52244	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:26.840759039 CET	4258	52246	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:26.840924978 CET	52246	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:26.841036081 CET	52246	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:26.961200953 CET	4258	52246	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:27.993659973 CET	4258	52246	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:27.993771076 CET	4258	52246	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:27.993815899 CET	52246	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:27.993875980 CET	52246	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:27.994716883 CET	52248	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:28.113564014 CET	4258	52246	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:28.114371061 CET	4258	52248	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:28.114629030 CET	52248	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:28.114732981 CET	52248	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:28.234338999 CET	4258	52248	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:29.281147957 CET	4258	52248	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:29.281212091 CET	4258	52248	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:29.281424046 CET	52248	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:29.281493902 CET	52248	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:29.282516956 CET	52250	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:29.401345968 CET	4258	52248	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:29.402228117 CET	4258	52250	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:29.402431965 CET	52250	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:29.402497053 CET	52250	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:29.522288084 CET	4258	52250	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:30.559050083 CET	4258	52250	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:30.559078932 CET	4258	52250	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:30.559293985 CET	52250	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:30.559431076 CET	52250	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:30.560342073 CET	52252	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:30.679532051 CET	4258	52250	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:30.680238962 CET	4258	52252	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:30.680409908 CET	52252	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:30.680438995 CET	52252	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:30.800174952 CET	4258	52252	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:31.872262955 CET	4258	52252	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:31.872323990 CET	4258	52252	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:31.872469902 CET	52252	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:31.872620106 CET	52252	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:31.873780012 CET	52254	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:31.992433071 CET	4258	52252	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:31.993386984 CET	4258	52254	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:31.993480921 CET	52254	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:31.993551970 CET	52254	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:32.113188028 CET	4258	52254	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:33.150111914 CET	4258	52254	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:33.150279999 CET	4258	52254	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:33.150429010 CET	52254	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:33.150485992 CET	52254	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:33.151537895 CET	52256	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:33.271569014 CET	4258	52254	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:33.272737980 CET	4258	52256	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:33.272891998 CET	52256	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:33.272942066 CET	52256	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:33.392812014 CET	4258	52256	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:34.437891960 CET	4258	52256	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:34.438158035 CET	4258	52256	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:34.438165903 CET	52256	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:34.438317060 CET	52256	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:34.439657927 CET	52258	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:34.557775974 CET	4258	52256	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:34.559222937 CET	4258	52258	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:34.559391022 CET	52258	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:34.559391022 CET	52258	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:34.678886890 CET	4258	52258	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:35.740345001 CET	4258	52258	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:35.740526915 CET	52258	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:35.740576982 CET	4258	52258	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:35.740648985 CET	52258	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:35.741362095 CET	52260	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:35.866694927 CET	4258	52258	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:35.866738081 CET	4258	52260	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:35.867017984 CET	52260	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:35.867077112 CET	52260	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:35.986540079 CET	4258	52260	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:37.030697107 CET	4258	52260	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:37.030906916 CET	52260	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:37.030915022 CET	4258	52260	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:37.031001091 CET	52260	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:37.032164097 CET	52262	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:37.150598049 CET	4258	52260	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:37.151669025 CET	4258	52262	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:37.151778936 CET	52262	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:37.152040958 CET	52262	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:37.271511078 CET	4258	52262	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:38.324569941 CET	4258	52262	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:38.324711084 CET	52262	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:38.324714899 CET	4258	52262	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:38.324834108 CET	52262	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:38.325680971 CET	52264	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:38.444890022 CET	4258	52262	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:38.445699930 CET	4258	52264	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:38.445781946 CET	52264	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:38.445835114 CET	52264	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:38.565439939 CET	4258	52264	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:39.600240946 CET	4258	52264	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:39.600260973 CET	4258	52264	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:39.600394964 CET	52264	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:39.600646973 CET	52264	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:39.601569891 CET	52266	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:39.720160961 CET	4258	52264	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:39.721019030 CET	4258	52266	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:39.721148968 CET	52266	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:39.721263885 CET	52266	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:39.840802908 CET	4258	52266	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:40.869883060 CET	4258	52266	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:40.870070934 CET	52266	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:40.870280981 CET	4258	52266	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:40.870395899 CET	52266	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:40.871440887 CET	52268	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:40.990559101 CET	4258	52266	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:40.991735935 CET	4258	52268	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:40.991873026 CET	52268	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:40.991991043 CET	52268	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:41.116805077 CET	4258	52268	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:42.181740046 CET	4258	52268	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:42.181803942 CET	4258	52268	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:42.181952000 CET	52268	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:42.182149887 CET	52268	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:42.183372021 CET	52270	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:42.301769018 CET	4258	52268	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:42.303489923 CET	4258	52270	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:42.303560019 CET	52270	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:42.303793907 CET	52270	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:42.423418999 CET	4258	52270	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:43.481667042 CET	4258	52270	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:43.481862068 CET	4258	52270	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:43.481988907 CET	52270	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:43.482083082 CET	52270	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:43.483282089 CET	52272	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:43.603621006 CET	4258	52270	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:43.604618073 CET	4258	52272	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:43.604904890 CET	52272	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:43.605046034 CET	52272	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:43.724523067 CET	4258	52272	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:44.763216019 CET	4258	52272	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:44.763254881 CET	4258	52272	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:44.763559103 CET	52272	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:44.763717890 CET	52272	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:44.764935017 CET	52274	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:44.883335114 CET	4258	52272	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:44.884464025 CET	4258	52274	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:44.884619951 CET	52274	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:44.884759903 CET	52274	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:45.004316092 CET	4258	52274	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:46.032572031 CET	4258	52274	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:46.032629967 CET	4258	52274	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:46.032756090 CET	52274	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:46.032912016 CET	52274	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:46.033932924 CET	52276	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:46.154958010 CET	4258	52274	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:46.155951023 CET	4258	52276	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:46.156066895 CET	52276	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:46.156177044 CET	52276	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:46.275753975 CET	4258	52276	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:47.350547075 CET	4258	52276	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:47.350667953 CET	4258	52276	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:47.350855112 CET	52276	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:47.351015091 CET	52276	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:47.352169991 CET	52278	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:47.470474958 CET	4258	52276	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:47.471647024 CET	4258	52278	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:47.471801996 CET	52278	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:47.471884966 CET	52278	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:47.591648102 CET	4258	52278	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:48.634465933 CET	4258	52278	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:48.634485960 CET	4258	52278	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:48.634668112 CET	52278	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:48.634782076 CET	52278	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:48.636125088 CET	52280	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:48.754323006 CET	4258	52278	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:48.755655050 CET	4258	52280	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:48.755780935 CET	52280	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:48.755883932 CET	52280	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:48.875592947 CET	4258	52280	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:49.924478054 CET	4258	52280	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:49.924541950 CET	4258	52280	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:49.924685001 CET	52280	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:49.924848080 CET	52280	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:49.925966978 CET	52282	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:50.044241905 CET	4258	52280	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:50.045430899 CET	4258	52282	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:50.045548916 CET	52282	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:50.045624018 CET	52282	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:50.165018082 CET	4258	52282	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:51.193443060 CET	4258	52282	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:51.193461895 CET	4258	52282	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:51.193615913 CET	52282	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:51.193733931 CET	52282	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:51.194909096 CET	52284	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:51.315073967 CET	4258	52282	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:51.316284895 CET	4258	52284	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:51.316406012 CET	52284	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:51.316476107 CET	52284	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:51.436031103 CET	4258	52284	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:52.845215082 CET	4258	52284	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:52.845252037 CET	4258	52284	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:52.845319033 CET	4258	52284	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:52.845494986 CET	52284	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:52.845494986 CET	52284	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:52.845664024 CET	52284	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:52.846729994 CET	52286	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:52.965408087 CET	4258	52284	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:53.084664106 CET	4258	52286	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:53.084831953 CET	52286	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:53.084913015 CET	52286	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:53.204505920 CET	4258	52286	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:54.249696970 CET	4258	52286	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:54.249804020 CET	4258	52286	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:54.249886036 CET	52286	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:54.249995947 CET	52286	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:54.250900030 CET	52288	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:54.370089054 CET	4258	52286	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:54.370790958 CET	4258	52288	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:54.371023893 CET	52288	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:54.371089935 CET	52288	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:54.496315002 CET	4258	52288	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:55.546267986 CET	4258	52288	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:55.546392918 CET	4258	52288	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:55.546446085 CET	52288	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:55.546567917 CET	52288	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:55.547424078 CET	52290	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:55.667057037 CET	4258	52288	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:55.668020010 CET	4258	52290	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:55.668143034 CET	52290	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:55.668230057 CET	52290	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:55.788335085 CET	4258	52290	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:56.872694016 CET	4258	52290	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:56.872756004 CET	4258	52290	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:56.872828007 CET	52290	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:56.872873068 CET	52290	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:56.873960018 CET	52292	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:56.992374897 CET	4258	52290	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:56.993444920 CET	4258	52292	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:56.993622065 CET	52292	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:56.993622065 CET	52292	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:57.114551067 CET	4258	52292	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:58.151576042 CET	4258	52292	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:58.151588917 CET	4258	52292	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:58.151787996 CET	52292	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:58.151848078 CET	52292	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:58.152960062 CET	52294	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:58.271369934 CET	4258	52292	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:58.272428989 CET	4258	52294	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:58.272553921 CET	52294	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:58.272553921 CET	52294	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:58.392143011 CET	4258	52294	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:59.465790987 CET	4258	52294	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:59.465903997 CET	4258	52294	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:59.466034889 CET	52294	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:59.466083050 CET	52294	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:59.467152119 CET	52296	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:59.585673094 CET	4258	52294	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:59.586663008 CET	4258	52296	185.216.71.152	192.168.2.23
Dec 22, 2024 16:15:59.586760044 CET	52296	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:59.586760044 CET	52296	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:15:59.709722042 CET	4258	52296	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:00.758403063 CET	4258	52296	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:00.758512020 CET	4258	52296	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:00.758513927 CET	52296	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:00.758588076 CET	52296	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:00.759421110 CET	52298	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:00.878240108 CET	4258	52296	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:00.878917933 CET	4258	52298	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:00.878997087 CET	52298	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:00.879025936 CET	52298	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:00.998529911 CET	4258	52298	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:02.044308901 CET	4258	52298	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:02.044380903 CET	4258	52298	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:02.044522047 CET	52298	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:02.044584990 CET	52298	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:02.045494080 CET	52300	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:02.164262056 CET	4258	52298	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:02.165045977 CET	4258	52300	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:02.165117025 CET	52300	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:02.165201902 CET	52300	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:02.285998106 CET	4258	52300	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:03.331670046 CET	4258	52300	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:03.331696033 CET	4258	52300	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:03.331789970 CET	52300	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:03.331855059 CET	52300	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:03.332540989 CET	52302	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:03.451391935 CET	4258	52300	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:03.452047110 CET	4258	52302	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:03.452259064 CET	52302	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:03.452259064 CET	52302	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:03.572107077 CET	4258	52302	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:04.618621111 CET	4258	52302	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:04.618673086 CET	4258	52302	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:04.618987083 CET	52302	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:04.618987083 CET	52302	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:04.619971991 CET	52304	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:04.738502026 CET	4258	52302	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:04.739490032 CET	4258	52304	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:04.739589930 CET	52304	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:04.739589930 CET	52304	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:04.859225035 CET	4258	52304	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:05.908140898 CET	4258	52304	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:05.908194065 CET	4258	52304	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:05.908369064 CET	52304	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:05.908369064 CET	52304	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:05.909284115 CET	52306	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:06.028389931 CET	4258	52304	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:06.029285908 CET	4258	52306	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:06.029422998 CET	52306	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:06.029508114 CET	52306	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:06.149166107 CET	4258	52306	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:07.202723980 CET	4258	52306	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:07.202764988 CET	4258	52306	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:07.203022003 CET	52306	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:07.203104973 CET	52306	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:07.204186916 CET	52308	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:07.329483032 CET	4258	52306	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:07.330522060 CET	4258	52308	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:07.330635071 CET	52308	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:07.330842972 CET	52308	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:07.454087019 CET	4258	52308	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:08.492628098 CET	4258	52308	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:08.492702961 CET	4258	52308	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:08.492809057 CET	52308	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:08.492809057 CET	52308	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:08.493841887 CET	52310	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:08.613070965 CET	4258	52308	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:08.613877058 CET	4258	52310	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:08.614002943 CET	52310	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:08.614162922 CET	52310	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:08.734769106 CET	4258	52310	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:09.761337042 CET	4258	52310	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:09.761535883 CET	4258	52310	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:09.761703014 CET	52310	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:09.761822939 CET	52310	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:09.762964964 CET	52312	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:09.881519079 CET	4258	52310	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:09.882630110 CET	4258	52312	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:09.882776022 CET	52312	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:09.882880926 CET	52312	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:10.003834963 CET	4258	52312	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:11.044948101 CET	4258	52312	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:11.045144081 CET	52312	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:11.045183897 CET	4258	52312	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:11.045514107 CET	52312	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:11.046494007 CET	52314	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:11.164974928 CET	4258	52312	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:11.165957928 CET	4258	52314	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:11.166085958 CET	52314	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:11.166126013 CET	52314	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:11.286194086 CET	4258	52314	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:12.329245090 CET	4258	52314	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:12.329349995 CET	52314	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:12.329906940 CET	4258	52314	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:12.330050945 CET	52314	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:12.331018925 CET	52316	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:12.450299025 CET	4258	52314	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:12.451224089 CET	4258	52316	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:12.451359034 CET	52316	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:12.451452017 CET	52316	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:12.572134972 CET	4258	52316	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:13.609898090 CET	4258	52316	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:13.609941959 CET	4258	52316	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:13.610078096 CET	52316	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:13.610207081 CET	52316	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:13.611267090 CET	52318	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:13.729927063 CET	4258	52316	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:13.731009960 CET	4258	52318	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:13.731142998 CET	52318	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:13.731219053 CET	52318	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:13.851136923 CET	4258	52318	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:14.893083096 CET	4258	52318	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:14.893197060 CET	4258	52318	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:14.893239021 CET	52318	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:14.893337965 CET	52318	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:14.894298077 CET	52320	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:15.013101101 CET	4258	52318	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:15.014206886 CET	4258	52320	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:15.014389038 CET	52320	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:15.014484882 CET	52320	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:15.134269953 CET	4258	52320	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:16.205236912 CET	4258	52320	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:16.205286980 CET	4258	52320	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:16.205404997 CET	52320	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:16.205554962 CET	52320	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:16.206684113 CET	52322	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:16.325115919 CET	4258	52320	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:16.326286077 CET	4258	52322	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:16.326400042 CET	52322	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:16.326487064 CET	52322	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:16.446367025 CET	4258	52322	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:17.482615948 CET	4258	52322	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:17.482685089 CET	4258	52322	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:17.482785940 CET	52322	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:17.482867956 CET	52322	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:17.483726025 CET	52324	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:17.602500916 CET	4258	52322	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:17.603338957 CET	4258	52324	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:17.603425026 CET	52324	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:17.603472948 CET	52324	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:17.724334955 CET	4258	52324	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:18.766529083 CET	4258	52324	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:18.766633987 CET	4258	52324	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:18.766755104 CET	52324	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:18.766894102 CET	52324	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:18.767703056 CET	52326	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:18.891566992 CET	4258	52324	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:18.892410994 CET	4258	52326	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:18.892524004 CET	52326	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:18.892678022 CET	52326	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:19.018353939 CET	4258	52326	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:20.056657076 CET	4258	52326	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:20.056699991 CET	4258	52326	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:20.056759119 CET	52326	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:20.056849957 CET	52326	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:20.057393074 CET	52328	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:20.176799059 CET	4258	52326	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:20.177098989 CET	4258	52328	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:20.177216053 CET	52328	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:20.177287102 CET	52328	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:20.297077894 CET	4258	52328	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:21.354877949 CET	4258	52328	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:21.354918957 CET	4258	52328	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:21.355026007 CET	52328	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:21.355102062 CET	52328	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:21.355989933 CET	52330	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:21.477304935 CET	4258	52328	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:21.478199959 CET	4258	52330	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:21.478313923 CET	52330	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:21.478358984 CET	52330	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:21.600476980 CET	4258	52330	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:22.643228054 CET	4258	52330	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:22.643336058 CET	4258	52330	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:22.643542051 CET	52330	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:22.643691063 CET	52330	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:22.644736052 CET	52332	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:22.763470888 CET	4258	52330	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:22.764578104 CET	4258	52332	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:22.764712095 CET	52332	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:22.764813900 CET	52332	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:22.885200977 CET	4258	52332	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:23.912060976 CET	4258	52332	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:23.912121058 CET	4258	52332	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:23.912421942 CET	52332	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:23.912540913 CET	52332	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:23.913388014 CET	52334	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:24.035438061 CET	4258	52332	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:24.036318064 CET	4258	52334	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:24.036504984 CET	52334	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:24.036505938 CET	52334	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:24.156594992 CET	4258	52334	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:25.183775902 CET	4258	52334	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:25.183837891 CET	4258	52334	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:25.184068918 CET	52334	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:25.184149981 CET	52334	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:25.184868097 CET	52336	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:25.305176973 CET	4258	52334	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:25.305875063 CET	4258	52336	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:25.306008101 CET	52336	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:25.306138039 CET	52336	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:25.426409006 CET	4258	52336	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:26.474292040 CET	4258	52336	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:26.474503040 CET	52336	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:26.474531889 CET	4258	52336	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:26.474648952 CET	52336	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:26.475686073 CET	52338	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:26.843595982 CET	52336	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:26.961779118 CET	4258	52336	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:26.961977959 CET	52336	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:26.962192059 CET	4258	52336	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:26.962229013 CET	4258	52338	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:26.962321043 CET	52338	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:26.962379932 CET	52338	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:26.964448929 CET	4258	52336	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:26.964570045 CET	52336	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:27.082228899 CET	4258	52338	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:28.143822908 CET	4258	52338	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:28.143888950 CET	4258	52338	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:28.143989086 CET	52338	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:28.144149065 CET	52338	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:28.145222902 CET	52340	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:28.263839960 CET	4258	52338	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:28.265213966 CET	4258	52340	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:28.265342951 CET	52340	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:28.265414953 CET	52340	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:28.385375977 CET	4258	52340	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:29.443742990 CET	4258	52340	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:29.443804026 CET	4258	52340	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:29.443939924 CET	52340	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:29.444065094 CET	52340	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:29.444873095 CET	52342	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:29.563544035 CET	4258	52340	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:29.564462900 CET	4258	52342	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:29.564558983 CET	52342	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:29.564676046 CET	52342	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:29.684140921 CET	4258	52342	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:30.727884054 CET	4258	52342	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:30.728029013 CET	4258	52342	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:30.728089094 CET	52342	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:30.728157043 CET	52342	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:30.728880882 CET	52344	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:30.847919941 CET	4258	52342	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:30.848391056 CET	4258	52344	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:30.848495007 CET	52344	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:30.848515034 CET	52344	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:30.969424963 CET	4258	52344	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:32.034723043 CET	4258	52344	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:32.034921885 CET	52344	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:32.034970045 CET	4258	52344	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:32.035120010 CET	52344	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:32.035923958 CET	52346	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:32.154731035 CET	4258	52344	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:32.155467033 CET	4258	52346	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:32.155586004 CET	52346	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:32.155673981 CET	52346	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:32.275496006 CET	4258	52346	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:33.317945957 CET	4258	52346	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:33.318015099 CET	4258	52346	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:33.318129063 CET	52346	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:33.318244934 CET	52346	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:33.319067955 CET	52348	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:33.438087940 CET	4258	52346	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:33.438740969 CET	4258	52348	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:33.438852072 CET	52348	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:33.438942909 CET	52348	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:33.763964891 CET	4258	52348	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:34.796619892 CET	4258	52348	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:34.796681881 CET	4258	52348	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:34.796753883 CET	52348	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:34.796806097 CET	52348	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:34.797580957 CET	52350	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:34.916444063 CET	4258	52348	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:34.917154074 CET	4258	52350	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:34.917256117 CET	52350	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:34.917316914 CET	52350	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:35.037273884 CET	4258	52350	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:36.090854883 CET	4258	52350	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:36.090924978 CET	4258	52350	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:36.090945959 CET	52350	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:36.091017008 CET	52350	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:36.091427088 CET	52352	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:36.212873936 CET	4258	52350	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:36.213430882 CET	4258	52352	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:36.213498116 CET	52352	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:36.213541031 CET	52352	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:36.333384991 CET	4258	52352	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:37.378184080 CET	4258	52352	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:37.378236055 CET	4258	52352	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:37.378597975 CET	52352	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:37.378598928 CET	52352	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:37.379122972 CET	52354	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:37.499615908 CET	4258	52352	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:37.499651909 CET	4258	52354	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:37.499892950 CET	52354	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:37.499892950 CET	52354	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:37.619697094 CET	4258	52354	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:38.757646084 CET	4258	52354	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:38.757683039 CET	4258	52354	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:38.757847071 CET	52354	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:38.758019924 CET	52354	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:38.758626938 CET	52356	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:38.877481937 CET	4258	52354	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:38.878154993 CET	4258	52356	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:38.878299952 CET	52356	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:38.878350019 CET	52356	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:38.998526096 CET	4258	52356	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:40.090421915 CET	4258	52356	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:40.090508938 CET	4258	52356	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:40.090523005 CET	52356	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:40.090579033 CET	52356	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:40.091005087 CET	52358	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:40.210282087 CET	4258	52356	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:40.210560083 CET	4258	52358	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:40.210764885 CET	52358	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:40.210764885 CET	52358	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:40.335161924 CET	4258	52358	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:41.461246967 CET	4258	52358	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:41.461402893 CET	52358	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:41.461482048 CET	4258	52358	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:41.461571932 CET	52358	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:41.462069035 CET	52360	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:41.581679106 CET	4258	52358	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:41.582096100 CET	4258	52360	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:41.582174063 CET	52360	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:41.582252026 CET	52360	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:42.041656971 CET	52360	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:42.599733114 CET	4258	52360	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:42.599946022 CET	52360	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:42.649425030 CET	52360	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:42.716738939 CET	4258	52360	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:42.716751099 CET	4258	52360	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:42.836057901 CET	4258	52360	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:46.873717070 CET	4258	52360	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:46.873737097 CET	4258	52360	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:46.873950005 CET	52360	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:46.874109030 CET	52360	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:46.874691010 CET	52362	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:46.993731022 CET	4258	52360	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:46.994152069 CET	4258	52362	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:46.994270086 CET	52362	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:46.994375944 CET	52362	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:47.114142895 CET	4258	52362	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:51.342291117 CET	4258	52362	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:51.342544079 CET	4258	52362	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:51.342648983 CET	52362	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:51.342801094 CET	52362	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:51.343518019 CET	52364	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:51.462433100 CET	4258	52362	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:51.463587999 CET	4258	52364	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:51.463828087 CET	52364	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:51.463828087 CET	52364	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:51.584769964 CET	4258	52364	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:52.726954937 CET	4258	52364	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:52.727004051 CET	4258	52364	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:52.727246046 CET	52364	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:52.727277040 CET	52364	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:52.728197098 CET	52366	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:52.846867085 CET	4258	52364	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:52.847664118 CET	4258	52366	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:52.847917080 CET	52366	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:52.848027945 CET	52366	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:52.967452049 CET	4258	52366	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:54.134337902 CET	4258	52366	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:54.134373903 CET	4258	52366	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:54.134593964 CET	52366	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:54.134767056 CET	52366	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:54.135539055 CET	52368	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:54.254302979 CET	4258	52366	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:54.255148888 CET	4258	52368	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:54.255346060 CET	52368	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:54.255362988 CET	52368	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:54.375061989 CET	4258	52368	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:55.503150940 CET	4258	52368	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:55.503176928 CET	4258	52368	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:55.503267050 CET	52368	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:55.503321886 CET	52368	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:55.503782988 CET	52370	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:55.622968912 CET	4258	52368	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:55.623435974 CET	4258	52370	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:55.623506069 CET	52370	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:55.623533010 CET	52370	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:55.743232012 CET	4258	52370	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:59.820075989 CET	4258	52370	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:59.820105076 CET	4258	52370	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:59.820353031 CET	52370	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:59.820353031 CET	52370	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:59.821281910 CET	52372	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:59.942018986 CET	4258	52370	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:59.942039967 CET	4258	52372	185.216.71.152	192.168.2.23
Dec 22, 2024 16:16:59.942286015 CET	52372	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:16:59.942286968 CET	52372	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:17:00.062767982 CET	4258	52372	185.216.71.152	192.168.2.23
Dec 22, 2024 16:17:01.239725113 CET	4258	52372	185.216.71.152	192.168.2.23
Dec 22, 2024 16:17:01.239995956 CET	52372	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:17:01.240533113 CET	4258	52372	185.216.71.152	192.168.2.23
Dec 22, 2024 16:17:01.240752935 CET	52372	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:17:01.241600990 CET	52374	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:17:01.360569000 CET	4258	52372	185.216.71.152	192.168.2.23
Dec 22, 2024 16:17:01.361280918 CET	4258	52374	185.216.71.152	192.168.2.23
Dec 22, 2024 16:17:01.361500978 CET	52374	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:17:01.361501932 CET	52374	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:17:01.481838942 CET	4258	52374	185.216.71.152	192.168.2.23
Dec 22, 2024 16:17:02.562690020 CET	4258	52374	185.216.71.152	192.168.2.23
Dec 22, 2024 16:17:02.562722921 CET	4258	52374	185.216.71.152	192.168.2.23
Dec 22, 2024 16:17:02.562854052 CET	52374	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:17:02.562958956 CET	52374	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:17:02.563672066 CET	52376	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:17:02.684170961 CET	4258	52374	185.216.71.152	192.168.2.23
Dec 22, 2024 16:17:02.684628010 CET	4258	52376	185.216.71.152	192.168.2.23
Dec 22, 2024 16:17:02.684712887 CET	52376	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:17:02.684766054 CET	52376	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:17:02.804570913 CET	4258	52376	185.216.71.152	192.168.2.23
Dec 22, 2024 16:17:03.845575094 CET	4258	52376	185.216.71.152	192.168.2.23
Dec 22, 2024 16:17:03.845746040 CET	52376	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:17:03.845853090 CET	4258	52376	185.216.71.152	192.168.2.23
Dec 22, 2024 16:17:03.846005917 CET	52376	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:17:03.846544027 CET	52378	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:17:03.965732098 CET	4258	52376	185.216.71.152	192.168.2.23
Dec 22, 2024 16:17:03.966124058 CET	4258	52378	185.216.71.152	192.168.2.23
Dec 22, 2024 16:17:03.966191053 CET	52378	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:17:03.966238976 CET	52378	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:17:04.086185932 CET	4258	52378	185.216.71.152	192.168.2.23
Dec 22, 2024 16:17:05.162663937 CET	4258	52378	185.216.71.152	192.168.2.23
Dec 22, 2024 16:17:05.162695885 CET	4258	52378	185.216.71.152	192.168.2.23
Dec 22, 2024 16:17:05.162911892 CET	52378	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:17:05.163203001 CET	52378	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:17:05.163825035 CET	52380	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:17:05.284096956 CET	4258	52378	185.216.71.152	192.168.2.23
Dec 22, 2024 16:17:05.284117937 CET	4258	52380	185.216.71.152	192.168.2.23
Dec 22, 2024 16:17:05.284343004 CET	52380	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:17:05.284343004 CET	52380	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:17:05.404660940 CET	4258	52380	185.216.71.152	192.168.2.23
Dec 22, 2024 16:17:07.307045937 CET	4258	52380	185.216.71.152	192.168.2.23
Dec 22, 2024 16:17:07.307337046 CET	52380	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:17:07.307815075 CET	52382	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:17:07.427920103 CET	4258	52380	185.216.71.152	192.168.2.23
Dec 22, 2024 16:17:07.428437948 CET	4258	52382	185.216.71.152	192.168.2.23
Dec 22, 2024 16:17:07.428503990 CET	52382	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:17:07.428564072 CET	52382	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:17:07.548357010 CET	4258	52382	185.216.71.152	192.168.2.23
Dec 22, 2024 16:17:08.702827930 CET	4258	52382	185.216.71.152	192.168.2.23
Dec 22, 2024 16:17:08.703150988 CET	52382	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:17:08.703283072 CET	4258	52382	185.216.71.152	192.168.2.23
Dec 22, 2024 16:17:08.703512907 CET	52382	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:17:08.703881025 CET	52384	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:17:08.823029995 CET	4258	52382	185.216.71.152	192.168.2.23
Dec 22, 2024 16:17:08.823405981 CET	4258	52384	185.216.71.152	192.168.2.23
Dec 22, 2024 16:17:08.823699951 CET	52384	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:17:08.823781013 CET	52384	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:17:08.943630934 CET	4258	52384	185.216.71.152	192.168.2.23
Dec 22, 2024 16:17:10.087953091 CET	4258	52384	185.216.71.152	192.168.2.23
Dec 22, 2024 16:17:10.088069916 CET	4258	52384	185.216.71.152	192.168.2.23
Dec 22, 2024 16:17:10.088126898 CET	52384	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:17:10.088408947 CET	52384	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:17:10.089453936 CET	52386	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:17:10.208415985 CET	4258	52384	185.216.71.152	192.168.2.23
Dec 22, 2024 16:17:10.209306002 CET	4258	52386	185.216.71.152	192.168.2.23
Dec 22, 2024 16:17:10.209388018 CET	52386	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:17:10.209506035 CET	52386	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:17:10.329093933 CET	4258	52386	185.216.71.152	192.168.2.23
Dec 22, 2024 16:17:11.539870024 CET	4258	52386	185.216.71.152	192.168.2.23
Dec 22, 2024 16:17:11.539894104 CET	4258	52386	185.216.71.152	192.168.2.23
Dec 22, 2024 16:17:11.540224075 CET	52386	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:17:11.540513992 CET	52386	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:17:11.541964054 CET	52388	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:17:11.660387039 CET	4258	52386	185.216.71.152	192.168.2.23
Dec 22, 2024 16:17:11.661483049 CET	4258	52388	185.216.71.152	192.168.2.23
Dec 22, 2024 16:17:11.662043095 CET	52388	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:17:11.662399054 CET	52388	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:17:11.782185078 CET	4258	52388	185.216.71.152	192.168.2.23
Dec 22, 2024 16:17:13.178370953 CET	4258	52388	185.216.71.152	192.168.2.23
Dec 22, 2024 16:17:13.178987980 CET	52388	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:17:13.179894924 CET	52390	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:17:13.298775911 CET	4258	52388	185.216.71.152	192.168.2.23
Dec 22, 2024 16:17:13.299617052 CET	4258	52390	185.216.71.152	192.168.2.23
Dec 22, 2024 16:17:13.299951077 CET	52390	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:17:13.300044060 CET	52390	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:17:13.420151949 CET	4258	52390	185.216.71.152	192.168.2.23
Dec 22, 2024 16:17:18.181044102 CET	4258	52390	185.216.71.152	192.168.2.23
Dec 22, 2024 16:17:18.181298971 CET	52390	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:17:18.181881905 CET	52392	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:17:18.301106930 CET	4258	52390	185.216.71.152	192.168.2.23
Dec 22, 2024 16:17:18.301434994 CET	4258	52392	185.216.71.152	192.168.2.23
Dec 22, 2024 16:17:18.301668882 CET	52392	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:17:18.301891088 CET	52392	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:17:18.421694040 CET	4258	52392	185.216.71.152	192.168.2.23
Dec 22, 2024 16:17:22.529391050 CET	4258	52392	185.216.71.152	192.168.2.23
Dec 22, 2024 16:17:22.529548883 CET	4258	52392	185.216.71.152	192.168.2.23
Dec 22, 2024 16:17:22.529596090 CET	52392	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:17:22.529673100 CET	52392	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:17:22.530395031 CET	52394	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:17:22.649211884 CET	4258	52392	185.216.71.152	192.168.2.23
Dec 22, 2024 16:17:22.649919033 CET	4258	52394	185.216.71.152	192.168.2.23
Dec 22, 2024 16:17:22.650052071 CET	52394	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:17:22.650149107 CET	52394	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:17:22.773444891 CET	4258	52394	185.216.71.152	192.168.2.23
Dec 22, 2024 16:17:23.906960964 CET	4258	52394	185.216.71.152	192.168.2.23
Dec 22, 2024 16:17:23.907032013 CET	4258	52394	185.216.71.152	192.168.2.23
Dec 22, 2024 16:17:23.907200098 CET	52394	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:17:23.907402039 CET	52394	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:17:23.908152103 CET	52396	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:17:24.029436111 CET	4258	52394	185.216.71.152	192.168.2.23
Dec 22, 2024 16:17:24.029499054 CET	4258	52396	185.216.71.152	192.168.2.23
Dec 22, 2024 16:17:24.029743910 CET	52396	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:17:24.029911041 CET	52396	4258	192.168.2.23	185.216.71.152
Dec 22, 2024 16:17:24.149481058 CET	4258	52396	185.216.71.152	192.168.2.23

System Behavior

Analysis Process: hidakibest.ppc.elf PID: 6261, Parent PID: 6185

General

Start time (UTC):	15:13:49
Start date (UTC):	22/12/2024
Path:	/tmp/hidakibest.ppc.elf
Arguments:	/tmp/hidakibest.ppc.elf
File size:	5388968 bytes
MD5 hash:	ae65271c943d3451b7f026d1fadccea6

Chronological Activities

Analysis Process: hidakibest.ppc.elf PID: 6263, Parent PID: 6261

General

Start time (UTC):	15:13:49
Start date (UTC):	22/12/2024
Path:	/tmp/hidakibest.ppc.elf
Arguments:	-
File size:	5388968 bytes
MD5 hash:	ae65271c943d3451b7f026d1fadccea6

Chronological Activities

Analysis Process: hidakibest.ppc.elf PID: 6265, Parent PID: 6263

General

Start time (UTC):	15:13:49
Start date (UTC):	22/12/2024
Path:	/tmp/hidakibest.ppc.elf
Arguments:	-
File size:	5388968 bytes
MD5 hash:	ae65271c943d3451b7f026d1fadccea6

Chronological Activities

Analysis Process: dash PID: 6276, Parent PID: 4336

General

Start time (UTC):	15:14:03
Start date (UTC):	22/12/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: rm PID: 6276, Parent PID: 4336

General

Start time (UTC):	15:14:03
Start date (UTC):	22/12/2024
Path:	/usr/bin/rm
Arguments:	rm -f /tmp/tmp.e58dinjxne /tmp/tmp.aWXPyC2wk1 /tmp/tmp.S91J8FmDcC
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Chronological Activities

Analysis Process: dash PID: 6277, Parent PID: 4336

General

Start time (UTC):	15:14:03
Start date (UTC):	22/12/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Chronological Activities

Analysis Process: rm PID: 6277, Parent PID: 4336

General

Start time (UTC):	15:14:03
Start date (UTC):	22/12/2024
Path:	/usr/bin/rm
Arguments:	rm -f /tmp/tmp.e58dinjxne /tmp/tmp.aWXPyC2wk1 /tmp/tmp.S91J8FmDcC
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system. Functionality could exist within remote access tools to enable this, but utilities available on the operating system could also be used such as Ping or `net view` using Net .
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Network Traffic: Network Connection Creation, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may obfuscate command and control traffic to make it more difficult to detect. Command and control (C2) communications are hidden (but not necessarily encrypted) in an attempt to make the content more difficult to discover or decipher and to make the communication less conspicuous and hide commands from being seen. This encompasses many methods, such as adding junk data to protocol traffic, using steganography, or impersonating legitimate protocols.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report hidakibest.ppc.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Persistence and Installation Behavior

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Threatname: Gafgyt

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/tmp/qemu-open.BE0WvE (deleted)

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Network Port Distribution

TCP Packets

System Behavior

Analysis Process: hidakibest.ppc.elf PID: 6261, Parent PID: 6185

General

Chronological Activities

Analysis Process: hidakibest.ppc.elf PID: 6263, Parent PID: 6261

General

Chronological Activities

Analysis Process: hidakibest.ppc.elf PID: 6265, Parent PID: 6263

General

Chronological Activities

Analysis Process: dash PID: 6276, Parent PID: 4336

General

Chronological Activities

Analysis Process: rm PID: 6276, Parent PID: 4336

Linux Analysis Report
hidakibest.ppc.elf