Edit tour

Linux Analysis Report
skid.sparc.elf

Overview

General Information

Sample name:	skid.sparc.elf
Analysis ID:	1674801
MD5:	5518fcf08734bb290e03e2da98305c7d
SHA1:	73dfa1c7b8b4e99b55ffebadca99f33c3692f104
SHA256:	2e541c4073eaf386fe0523877a47b02ef092cf9bbf41b028ce3e24c069063dc8
Tags:	elfuser-abuse_ch
Infos:

Detection

Gafgyt, Mirai

Score:	92
Range:	0 - 100

Signatures

Antivirus / Scanner detection for submitted sample

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Yara detected Gafgyt

Yara detected Mirai

Opens /proc/net/* files useful for finding connected devices and routers

Detected TCP or UDP traffic on non-standard ports

Sample contains strings that are user agent strings indicative of HTTP manipulation

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1674801
Start date and time:	2025-04-26 16:22:34 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 8s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	skid.sparc.elf
Detection:	MAL
Classification:	mal92.spre.troj.linELF@0/1@2/0

Warnings

VT rate limit hit for: 156.253.227.62:9999

Runtime Messages

Command:	/tmp/skid.sparc.elf
PID:	5563
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:

Process Tree

system is lnxubuntu20

skid.sparc.elf (PID: 5563, Parent: 5490, MD5: 7dc1c0e23cd5e102bb12e5c29403410e) Arguments: /tmp/skid.sparc.elf

skid.sparc.elf New Fork (PID: 5565, Parent: 5563)

skid.sparc.elf New Fork (PID: 5567, Parent: 5565)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
skid.sparc.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
skid.sparc.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
skid.sparc.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x10738:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1074c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10760:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10774:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10788:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1079c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x107b0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x107c4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x107d8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x107ec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10800:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10814:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10828:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1083c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10850:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10864:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10878:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1088c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x108a0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x108b4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x108c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
skid.sparc.elf	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x106e4:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64

Memory Dumps

Source	Rule	Description	Author	Strings
5565.1.00007f8d7c011000.00007f8d7c024000.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
5565.1.00007f8d7c011000.00007f8d7c024000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5565.1.00007f8d7c011000.00007f8d7c024000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x10738:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1074c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10760:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10774:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10788:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1079c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x107b0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x107c4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x107d8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x107ec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10800:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10814:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10828:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1083c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10850:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10864:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10878:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1088c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x108a0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x108b4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x108c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5565.1.00007f8d7c011000.00007f8d7c024000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x106e4:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
5563.1.00007f8d7c011000.00007f8d7c024000.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
5563.1.00007f8d7c011000.00007f8d7c024000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5563.1.00007f8d7c011000.00007f8d7c024000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x10738:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1074c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10760:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10774:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10788:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1079c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x107b0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x107c4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x107d8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x107ec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10800:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10814:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10828:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1083c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10850:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10864:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10878:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1088c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x108a0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x108b4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x108c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5563.1.00007f8d7c011000.00007f8d7c024000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x106e4:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: skid.sparc.elf PID: 5563	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: skid.sparc.elf PID: 5563	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x89fb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x8a0f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x8a23:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x8a37:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x8a4b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x8a5f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x8a73:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x8a87:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x8a9b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x8aaf:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x8ac3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x8ad7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x8aeb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x8aff:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x8b13:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x8b27:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x8b3b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x8b4f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x8b63:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x8b77:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x8b8b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: skid.sparc.elf PID: 5563	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x89ae:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64 0x8e20:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: skid.sparc.elf PID: 5565	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: skid.sparc.elf PID: 5565	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x2f0b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2f1f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2f33:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2f47:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2f5b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2f6f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2f83:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2f97:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2fab:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2fbf:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2fd3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2fe7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2ffb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x300f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3023:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3037:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x304b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x305f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3073:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3087:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x309b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: skid.sparc.elf PID: 5565	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x2ebe:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64 0x3330:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Click to see the 9 entries

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

• AV Detection
• Spreading
• Networking
• System Summary
• Malware Analysis System Evasion
• Stealing of Sensitive Information
• Remote Access Functionality

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: skid.sparc.elf

Avira: detected

Found malware configuration

Source: skid.sparc.elf

Malware Configuration Extractor: Gafgyt {"C2 url": "156.253.227.62:9999"}

Multi AV Scanner detection for submitted file

Source: skid.sparc.elf	Virustotal: Detection: 66%			Perma Link
Source: skid.sparc.elf	ReversingLabs: Detection: 63%

Spreading

Opens /proc/net/* files useful for finding connected devices and routers

Source: /tmp/skid.sparc.elf (PID: 5563)

Opens: /proc/net/route

Jump to behavior

Source: global traffic

TCP traffic: 192.168.2.15:38754 -> 156.253.227.62:9999

Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62
Source: unknown	TCP traffic detected without corresponding DNS query: 156.253.227.62

Source: global traffic

DNS traffic detected: DNS query: daisy.ubuntu.com

Source: skid.sparc.elf	String found in binary or memory: http://fast.no/support/crawler.asp)
Source: skid.sparc.elf	String found in binary or memory: http://feedback.redkolibri.com/
Source: skid.sparc.elf	String found in binary or memory: http://www.baidu.com/search/spider.htm)
Source: skid.sparc.elf	String found in binary or memory: http://www.baidu.com/search/spider.html)
Source: skid.sparc.elf	String found in binary or memory: http://www.billybobbot.com/crawler/)

System Summary

Malicious sample detected (through community Yara rule)

Source: skid.sparc.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: skid.sparc.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5565.1.00007f8d7c011000.00007f8d7c024000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5565.1.00007f8d7c011000.00007f8d7c024000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5563.1.00007f8d7c011000.00007f8d7c024000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5563.1.00007f8d7c011000.00007f8d7c024000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: skid.sparc.elf PID: 5563, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: skid.sparc.elf PID: 5563, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: skid.sparc.elf PID: 5565, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: skid.sparc.elf PID: 5565, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown

Source: skid.sparc.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: skid.sparc.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5565.1.00007f8d7c011000.00007f8d7c024000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5565.1.00007f8d7c011000.00007f8d7c024000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5563.1.00007f8d7c011000.00007f8d7c024000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5563.1.00007f8d7c011000.00007f8d7c024000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: skid.sparc.elf PID: 5563, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: skid.sparc.elf PID: 5563, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: skid.sparc.elf PID: 5565, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: skid.sparc.elf PID: 5565, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16

Source: classification engine

Classification label: mal92.spre.troj.linELF@0/1@2/0

Source: skid.sparc.elf	ELF static info symbol of initial sample: libc/string/sparc/memchr.S
Source: skid.sparc.elf	ELF static info symbol of initial sample: libc/string/sparc/memcpy.S
Source: skid.sparc.elf	ELF static info symbol of initial sample: libc/string/sparc/memset.S
Source: skid.sparc.elf	ELF static info symbol of initial sample: libc/string/sparc/strchr.S
Source: skid.sparc.elf	ELF static info symbol of initial sample: libc/string/sparc/strcmp.S
Source: skid.sparc.elf	ELF static info symbol of initial sample: libc/string/sparc/strcpy.S
Source: skid.sparc.elf	ELF static info symbol of initial sample: libc/string/sparc/strlen.S
Source: skid.sparc.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/sparc/crt1.S
Source: skid.sparc.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/sparc/crti.S
Source: skid.sparc.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/sparc/crtn.S
Source: skid.sparc.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/sparc/fork.S
Source: skid.sparc.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/sparc/udiv.S
Source: skid.sparc.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/sparc/umul.S
Source: skid.sparc.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/sparc/urem.S

Source: /tmp/skid.sparc.elf (PID: 5563)

Queries kernel information via 'uname':

Jump to behavior

Source: skid.sparc.elf, 5563.1.0000558e5b47b000.0000558e5b4e0000.rw-.sdmp, skid.sparc.elf, 5565.1.0000558e5b47b000.0000558e5b4e0000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/sparc
Source: skid.sparc.elf, 5563.1.00007fffe580f000.00007fffe5830000.rw-.sdmp, skid.sparc.elf, 5565.1.00007fffe580f000.00007fffe5830000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-sparc/tmp/skid.sparc.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/skid.sparc.elf
Source: skid.sparc.elf, 5563.1.00007fffe580f000.00007fffe5830000.rw-.sdmp	Binary or memory string: /tmp/qemu-open.hDZ3YO
Source: skid.sparc.elf, 5563.1.0000558e5b47b000.0000558e5b4e0000.rw-.sdmp, skid.sparc.elf, 5565.1.0000558e5b47b000.0000558e5b4e0000.rw-.sdmp	Binary or memory string: U!/etc/qemu-binfmt/sparc
Source: skid.sparc.elf, 5563.1.00007fffe580f000.00007fffe5830000.rw-.sdmp	Binary or memory string: U/tmp/qemu-open.hDZ3YO\T/
Source: skid.sparc.elf, 5563.1.00007fffe580f000.00007fffe5830000.rw-.sdmp, skid.sparc.elf, 5565.1.00007fffe580f000.00007fffe5830000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-sparc

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match	File source: skid.sparc.elf, type: SAMPLE
Source: Yara match	File source: 5565.1.00007f8d7c011000.00007f8d7c024000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5563.1.00007f8d7c011000.00007f8d7c024000.r-x.sdmp, type: MEMORY

Yara detected Mirai

Source: Yara match	File source: skid.sparc.elf, type: SAMPLE
Source: Yara match	File source: 5565.1.00007f8d7c011000.00007f8d7c024000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5563.1.00007f8d7c011000.00007f8d7c024000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: skid.sparc.elf PID: 5563, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: skid.sparc.elf PID: 5565, type: MEMORYSTR

Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36
Source: Initial sample	User agent string found: Opera/9.80 (X11; Linux i686; Ubuntu/14.10) Presto/2.12.388 Version/12.16
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows; U; Windows NT 6.1; rv:2.2) Gecko/20110201
Source: Initial sample	User agent string found: Opera/9.80 (Windows NT 5.2; U; ru) Presto/2.5.22 Version/10.51
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; AS; rv:11.0) like Gecko
Source: Initial sample	User agent string found: Mozilla/5.0 (Android; Linux armv7l; rv:9.0) Gecko/20111216 Firefox/9.0 Fennec/9.0
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/536.5 (KHTML, like Gecko) Chrome/19.0.1084.56 Safari/536.5
Source: Initial sample	User agent string found: Opera/9.80 (Windows NT 5.1; U; en) Presto/2.10.229 Version/11.60
Source: Initial sample	User agent string found: Mozilla/5.0 (iPad; U; CPU OS 5_1 like Mac OS X) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B367 Safari/531.21.10 UCBrowser/3.4.3.532
Source: Initial sample	User agent string found: Mozilla/5.0 (Nintendo WiiU) AppleWebKit/536.30 (KHTML, like Gecko) NX/3.0.4.2.12 NintendoBrowser/4.3.1.11264.US
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:25.0) Gecko/20100101 Firefox/25.0
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; pl) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; en) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; ja) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; cn) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; fr) Opera 11.00
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:12.0) Gecko/20100101 Firefox/12.0
Source: Initial sample	User agent string found: Mozilla/5.0 (X11; U; Linux x86_64; de; rv:1.9.2.8) Gecko/20100723 Ubuntu/10.04 (lucid) Firefox/3.6.8
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1; rv:13.0) Gecko/20100101 Firefox/13.0.1
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:11.0) Gecko/20100101 Firefox/11.0
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1
Source: Initial sample	User agent string found: Opera/9.80 (Windows NT 5.1; U; en) Presto/2.10.289 Version/12.01
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1; rv:5.0.1) Gecko/20100101 Firefox/5.0.1
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; rv:5.0) Gecko/20100101 Firefox/5.02
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.0) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.112 Safari/535.1
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36

Remote Access Functionality

Yara detected Gafgyt

Source: Yara match	File source: skid.sparc.elf, type: SAMPLE
Source: Yara match	File source: 5565.1.00007f8d7c011000.00007f8d7c024000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5563.1.00007f8d7c011000.00007f8d7c024000.r-x.sdmp, type: MEMORY

Yara detected Mirai

Source: Yara match	File source: skid.sparc.elf, type: SAMPLE
Source: Yara match	File source: 5565.1.00007f8d7c011000.00007f8d7c024000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5563.1.00007f8d7c011000.00007f8d7c024000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: skid.sparc.elf PID: 5563, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: skid.sparc.elf PID: 5565, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Data Obfuscation	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	1 Remote System Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Application Layer Protocol	Traffic Duplication	Data Destruction

Malware Configuration

Threatname: Gafgyt

{
  "C2 url": "156.253.227.62:9999"
}

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
skid.sparc.elf	67%	Virustotal		Browse
skid.sparc.elf	64%	ReversingLabs	Linux.Trojan.LnxGafgyt
skid.sparc.elf	100%	Avira	EXP/ELF.Mirai.Z.A

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
156.253.227.62:9999	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
daisy.ubuntu.com	162.213.35.24	true	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
156.253.227.62:9999	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://www.baidu.com/search/spider.html)	skid.sparc.elf	false	high
http://www.billybobbot.com/crawler/)	skid.sparc.elf	false	high
http://fast.no/support/crawler.asp)	skid.sparc.elf	false	high
http://feedback.redkolibri.com/	skid.sparc.elf	false	high
http://www.baidu.com/search/spider.htm)	skid.sparc.elf	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
156.253.227.62	unknown	Seychelles		132839	POWERLINE-AS-APPOWERLINEDATACENTERHK	true

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
156.253.227.62	8mips8.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	fuckjewishpeople.sparc.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	fuckjewishpeople.arm5.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	8spc8.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	fuckjewishpeople.arm6.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	8sh48.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	skid.mpsl.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	fuckjewishpeople.arm7.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	fuckjewishpeople.mpsl.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	skid.arm6.elf	Get hash	malicious	Gafgyt, Mirai	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
daisy.ubuntu.com	8mips8.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.24
	fuckjewishpeople.sparc.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	8spc8.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	fuckjewishpeople.arm6.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	8sh48.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	fuckjewishpeople.arm7.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.24
	fuckjewishpeople.mpsl.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.24
	skid.arm6.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	8arm68.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	8arm48.elf	Get hash	malicious	Mirai	Browse	162.213.35.25

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
POWERLINE-AS-APPOWERLINEDATACENTERHK	8mips8.elf	Get hash	malicious	Gafgyt, Mirai	Browse	156.253.227.62
	fuckjewishpeople.sparc.elf	Get hash	malicious	Gafgyt, Mirai	Browse	156.253.227.62
	fuckjewishpeople.arm5.elf	Get hash	malicious	Gafgyt, Mirai	Browse	156.253.227.62
	8spc8.elf	Get hash	malicious	Gafgyt, Mirai	Browse	156.253.227.62
	fuckjewishpeople.arm6.elf	Get hash	malicious	Gafgyt, Mirai	Browse	156.253.227.62
	8sh48.elf	Get hash	malicious	Gafgyt, Mirai	Browse	156.253.227.62
	skid.mpsl.elf	Get hash	malicious	Gafgyt, Mirai	Browse	156.253.227.62
	fuckjewishpeople.arm7.elf	Get hash	malicious	Gafgyt, Mirai	Browse	156.253.227.62
	fuckjewishpeople.mpsl.elf	Get hash	malicious	Gafgyt, Mirai	Browse	156.253.227.62
	skid.arm6.elf	Get hash	malicious	Gafgyt, Mirai	Browse	156.253.227.62

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

/tmp/qemu-open.hDZ3YO (deleted)

Download File

Process:	/tmp/skid.sparc.elf
File Type:	ASCII text
Category:	dropped
Size (bytes):	230
Entropy (8bit):	3.709552666863289
Encrypted:	false
SSDEEP:	6:iekrEcvwAsE5KlwSd4pzKaV6Lpms/a/1VCxGF:ur+m5MwSdIKaV6L1adVRF
MD5:	2E667F43AE18CD1FE3C108641708A82C
SHA1:	12B90DE2DA0FBCFE66F3D6130905E56C8D6A68D3
SHA-256:	6F721492E7A337C5B498A8F55F5EB7AC745AFF716D0B5B08EFF2C1B6B250F983
SHA-512:	D2A0EE2509154EC1098994F38BE172F98F4150399C534A04D5C675D7C05630802225019F19344CC9070C576BC465A4FEB382AC7712DE6BF25E9244B54A9DB830
Malicious:	false
Reputation:	high, very likely benign file
Preview:	Iface.Destination.Gateway .Flags.RefCnt.Use.Metric.Mask..MTU.Window.IRTT .ens160.00000000.c0a80201.0003.0.0.0.00000000.0.0.0.ens160.c0a80200.00000000.0001.0.0.0.ffffff00.0.0.0.

Static File Info

General

File type:	ELF 32-bit MSB executable, SPARC, version 1 (SYSV), statically linked, with debug_info, not stripped
Entropy (8bit):	6.052925585328359
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	skid.sparc.elf
File size:	101'398 bytes
MD5:	5518fcf08734bb290e03e2da98305c7d
SHA1:	73dfa1c7b8b4e99b55ffebadca99f33c3692f104
SHA256:	2e541c4073eaf386fe0523877a47b02ef092cf9bbf41b028ce3e24c069063dc8
SHA512:	c09fbd10c6b53a910e55abb0670a677b94058f51d1de8e46b4335c593266221d16f2f76a34c501688f066fabb90ff84b40a923b943efdba02bd7fbf5e412579f
SSDEEP:	1536:XBJ2MNM5oqtkUtnaphaK6igkvmQmF6OXj6ufeuTe:KMN8vQphaK62vmQmF6OXGufhTe
TLSH:	EBA33A377B130E23C0CA947111E31731BBB5D2DA39FA5243B9A16DE86F266843562FD4
File Content Preview:	.ELF...........................4..>......4. ...(..............................................*.......g.........dt.Q................................@..(....@.9P................#.....c`..`.....!....."...@.....".........`......$"..."...@...........`....

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, big endian
Version:	1 (current)
Machine:	Sparc
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x101a4
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	81632
Section Header Size:	40
Number of Section Headers:	24
Header String Table Index:	21

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x10094	0x94	0x1c	0x0	0x6	AX	0	0	4
.text	PROGBITS	0x100b0	0xb0	0xe578	0x0	0x6	AX	0	0	4
.fini	PROGBITS	0x1e628	0xe628	0x14	0x0	0x6	AX	0	0	4
.rodata	PROGBITS	0x1e640	0xe640	0x4490	0x0	0x2	A	0	0	8
.eh_frame	PROGBITS	0x22ad0	0x12ad0	0x4	0x0	0x2	A	0	0	4
.ctors	PROGBITS	0x32ad4	0x12ad4	0x8	0x0	0x3	WA	0	0	4
.dtors	PROGBITS	0x32adc	0x12adc	0x8	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x32ae4	0x12ae4	0x4	0x0	0x3	WA	0	0	4
.data	PROGBITS	0x32ae8	0x12ae8	0x474	0x0	0x3	WA	0	0	8
.bss	NOBITS	0x32f60	0x12f5c	0x6368	0x0	0x3	WA	0	0	8
.comment	PROGBITS	0x0	0x12f5c	0x9c6	0x0	0x0		0	0	1
.debug_aranges	PROGBITS	0x0	0x13922	0x20	0x0	0x0		0	0	1
.debug_pubnames	PROGBITS	0x0	0x13942	0x1f	0x0	0x0		0	0	1
.debug_info	PROGBITS	0x0	0x13961	0x16e	0x0	0x0		0	0	1
.debug_abbrev	PROGBITS	0x0	0x13acf	0xfb	0x0	0x0		0	0	1
.debug_line	PROGBITS	0x0	0x13bca	0x7c	0x0	0x0		0	0	1
.debug_frame	PROGBITS	0x0	0x13c48	0x28	0x0	0x0		0	0	4
.debug_str	PROGBITS	0x0	0x13c70	0x10b	0x1	0x30	MS	0	0	1
.debug_loc	PROGBITS	0x0	0x13d7b	0x6e	0x0	0x0		0	0	1
.debug_ranges	PROGBITS	0x0	0x13de9	0x18	0x0	0x0		0	0	1
.shstrtab	STRTAB	0x0	0x13e01	0xdc	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x142a0	0x2990	0x10	0x0		23	254	4
.strtab	STRTAB	0x0	0x16c30	0x1fe6	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x10000	0x10000	0x12ad4	0x12ad4	6.1192	0x5	R E	0x10000	.init .text .fini .rodata .eh_frame
LOAD	0x12ad4	0x32ad4	0x32ad4	0x488	0x67f4	3.3094	0x6	RW	0x10000	.ctors .dtors .jcr .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x10094	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x100b0	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x1e628	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x1e640	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x22ad0	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x32ad4	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x32adc	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x32ae4	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x32ae8	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x32f60	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	14
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	15
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	16
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	17
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	18
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	19
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	20
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	21
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	22
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	23
.udiv	.symtab	0x14c30	20	FUNC	<unknown>	DEFAULT	2
.umul	.symtab	0x14c44	12	FUNC	<unknown>	DEFAULT	2
.urem	.symtab	0x14c10	32	FUNC	<unknown>	DEFAULT	2
C.72.4749	.symtab	0x1fd98	104	OBJECT	<unknown>	DEFAULT	4
C.82.4860	.symtab	0x20e2c	1128	OBJECT	<unknown>	DEFAULT	4
Q	.symtab	0x32f98	16384	OBJECT	<unknown>	DEFAULT	10
Randhex	.symtab	0x12144	428	FUNC	<unknown>	DEFAULT	2
SendSTD	.symtab	0x11cd0	428	FUNC	<unknown>	DEFAULT	2
UDPRAW	.symtab	0x11fe0	356	FUNC	<unknown>	DEFAULT	2
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__CTOR_END__	.symtab	0x32ad8	0	OBJECT	<unknown>	DEFAULT	6
__CTOR_LIST__	.symtab	0x32ad4	0	OBJECT	<unknown>	DEFAULT	6
__C_ctype_b	.symtab	0x32bf4	4	OBJECT	<unknown>	DEFAULT	9
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x21360	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_tolower	.symtab	0x32f54	4	OBJECT	<unknown>	DEFAULT	9
__C_ctype_tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_tolower_data	.symtab	0x227d0	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_toupper	.symtab	0x32bfc	4	OBJECT	<unknown>	DEFAULT	9
__C_ctype_toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_toupper_data	.symtab	0x21660	768	OBJECT	<unknown>	DEFAULT	4
__DTOR_END__	.symtab	0x32ae0	0	OBJECT	<unknown>	DEFAULT	7
__DTOR_LIST__	.symtab	0x32adc	0	OBJECT	<unknown>	DEFAULT	7
__EH_FRAME_BEGIN__	.symtab	0x22ad0	0	OBJECT	<unknown>	DEFAULT	5
__FRAME_END__	.symtab	0x22ad0	0	OBJECT	<unknown>	DEFAULT	5
__GI___C_ctype_b	.symtab	0x32bf4	4	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_b_data	.symtab	0x21360	768	OBJECT	<unknown>	HIDDEN	4
__GI___C_ctype_tolower	.symtab	0x32f54	4	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_tolower_data	.symtab	0x227d0	768	OBJECT	<unknown>	HIDDEN	4
__GI___C_ctype_toupper	.symtab	0x32bfc	4	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_toupper_data	.symtab	0x21660	768	OBJECT	<unknown>	HIDDEN	4
__GI___ctype_b	.symtab	0x32bf8	4	OBJECT	<unknown>	HIDDEN	9
__GI___ctype_tolower	.symtab	0x32f58	4	OBJECT	<unknown>	HIDDEN	9
__GI___ctype_toupper	.symtab	0x32c00	4	OBJECT	<unknown>	HIDDEN	9
__GI___errno_location	.symtab	0x15144	12	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked	.symtab	0x1e154	328	FUNC	<unknown>	HIDDEN	2
__GI___glibc_strerror_r	.symtab	0x18950	32	FUNC	<unknown>	HIDDEN	2
__GI___h_errno_location	.symtab	0x1a5b4	12	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl	.symtab	0x14c50	136	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl64	.symtab	0x14cd8	100	FUNC	<unknown>	HIDDEN	2
__GI___libc_open	.symtab	0x14ef0	120	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini	.symtab	0x19f48	132	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init	.symtab	0x1a020	104	FUNC	<unknown>	HIDDEN	2
__GI___xpg_strerror_r	.symtab	0x18970	284	FUNC	<unknown>	HIDDEN	2
__GI__exit	.symtab	0x14d3c	64	FUNC	<unknown>	HIDDEN	2
__GI_abort	.symtab	0x1c3bc	316	FUNC	<unknown>	HIDDEN	2
__GI_atoi	.symtab	0x19b44	24	FUNC	<unknown>	HIDDEN	2
__GI_atol	.symtab	0x19b44	24	FUNC	<unknown>	HIDDEN	2
__GI_brk	.symtab	0x1c514	60	FUNC	<unknown>	HIDDEN	2
__GI_chdir	.symtab	0x14d7c	68	FUNC	<unknown>	HIDDEN	2
__GI_close	.symtab	0x14dc0	68	FUNC	<unknown>	HIDDEN	2
__GI_connect	.symtab	0x18f54	76	FUNC	<unknown>	HIDDEN	2
__GI_errno	.symtab	0x391cc	4	OBJECT	<unknown>	HIDDEN	10
__GI_exit	.symtab	0x19d1c	128	FUNC	<unknown>	HIDDEN	2
__GI_fclose	.symtab	0x1c5ec	324	FUNC	<unknown>	HIDDEN	2
__GI_fcntl	.symtab	0x14c50	136	FUNC	<unknown>	HIDDEN	2
__GI_fcntl64	.symtab	0x14cd8	100	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked	.symtab	0x1ce00	420	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked	.symtab	0x1e154	328	FUNC	<unknown>	HIDDEN	2
__GI_fgets	.symtab	0x1cc88	100	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked	.symtab	0x1cfa4	192	FUNC	<unknown>	HIDDEN	2
__GI_fopen	.symtab	0x1c730	24	FUNC	<unknown>	HIDDEN	2
__GI_fork	.symtab	0x14bdc	52	FUNC	<unknown>	HIDDEN	2
__GI_fputs_unlocked	.symtab	0x1630c	60	FUNC	<unknown>	HIDDEN	2
__GI_fseek	.symtab	0x1c748	36	FUNC	<unknown>	HIDDEN	2
__GI_fseeko64	.symtab	0x1c76c	272	FUNC	<unknown>	HIDDEN	2
__GI_fwrite_unlocked	.symtab	0x16348	176	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked	.symtab	0x1e154	328	FUNC	<unknown>	HIDDEN	2
__GI_getegid	.symtab	0x1a33c	64	FUNC	<unknown>	HIDDEN	2
__GI_geteuid	.symtab	0x1a37c	64	FUNC	<unknown>	HIDDEN	2
__GI_getgid	.symtab	0x1a3bc	64	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname	.symtab	0x18c18	60	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname_r	.symtab	0x18c54	768	FUNC	<unknown>	HIDDEN	2
__GI_getpid	.symtab	0x14e04	64	FUNC	<unknown>	HIDDEN	2
__GI_getsockname	.symtab	0x18fa0	76	FUNC	<unknown>	HIDDEN	2
__GI_getuid	.symtab	0x1a3fc	64	FUNC	<unknown>	HIDDEN	2
__GI_h_errno	.symtab	0x391d0	4	OBJECT	<unknown>	HIDDEN	10
__GI_inet_addr	.symtab	0x18bf0	40	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton	.symtab	0x1b7e4	220	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa	.symtab	0x18bcc	36	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa_r	.symtab	0x18b5c	112	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntop	.symtab	0x1d748	684	FUNC	<unknown>	HIDDEN	2
__GI_inet_pton	.symtab	0x1d384	544	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r	.symtab	0x19a60	228	FUNC	<unknown>	HIDDEN	2
__GI_ioctl	.symtab	0x14e44	100	FUNC	<unknown>	HIDDEN	2
__GI_isatty	.symtab	0x18aa4	32	FUNC	<unknown>	HIDDEN	2
__GI_kill	.symtab	0x14ea8	72	FUNC	<unknown>	HIDDEN	2
__GI_lseek64	.symtab	0x1e0c0	112	FUNC	<unknown>	HIDDEN	2
__GI_memchr	.symtab	0x1b3d8	280	FUNC	<unknown>	HIDDEN	2
__GI_memcpy	.symtab	0x16a24	4212	FUNC	<unknown>	HIDDEN	2
__GI_memmove	.symtab	0x16440	1508	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy	.symtab	0x1b4f0	32	FUNC	<unknown>	HIDDEN	2
__GI_memrchr	.symtab	0x1b510	272	FUNC	<unknown>	HIDDEN	2
__GI_memset	.symtab	0x17acc	416	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep	.symtab	0x1a43c	72	FUNC	<unknown>	HIDDEN	2
__GI_open	.symtab	0x14ef0	120	FUNC	<unknown>	HIDDEN	2
__GI_poll	.symtab	0x1c5a0	76	FUNC	<unknown>	HIDDEN	2
__GI_raise	.symtab	0x1e0a8	24	FUNC	<unknown>	HIDDEN	2
__GI_random	.symtab	0x19660	80	FUNC	<unknown>	HIDDEN	2
__GI_random_r	.symtab	0x198e0	156	FUNC	<unknown>	HIDDEN	2
__GI_rawmemchr	.symtab	0x1d064	204	FUNC	<unknown>	HIDDEN	2
__GI_read	.symtab	0x14f80	76	FUNC	<unknown>	HIDDEN	2
__GI_recv	.symtab	0x19040	32	FUNC	<unknown>	HIDDEN	2
__GI_sbrk	.symtab	0x1a484	84	FUNC	<unknown>	HIDDEN	2
__GI_select	.symtab	0x14fcc	84	FUNC	<unknown>	HIDDEN	2
__GI_send	.symtab	0x19060	32	FUNC	<unknown>	HIDDEN	2
__GI_setsid	.symtab	0x15020	64	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt	.symtab	0x19080	44	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r	.symtab	0x197bc	292	FUNC	<unknown>	HIDDEN	2
__GI_sigaction	.symtab	0x1c31c	160	FUNC	<unknown>	HIDDEN	2
__GI_signal	.symtab	0x190f8	188	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask	.symtab	0x1a4d8	140	FUNC	<unknown>	HIDDEN	2
__GI_sleep	.symtab	0x19d9c	428	FUNC	<unknown>	HIDDEN	2
__GI_socket	.symtab	0x190ac	76	FUNC	<unknown>	HIDDEN	2
__GI_sprintf	.symtab	0x15150	52	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r	.symtab	0x1997c	228	FUNC	<unknown>	HIDDEN	2
__GI_strcasecmp	.symtab	0x1e29c	92	FUNC	<unknown>	HIDDEN	2
__GI_strchr	.symtab	0x17ce0	524	FUNC	<unknown>	HIDDEN	2
__GI_strcmp	.symtab	0x18040	648	FUNC	<unknown>	HIDDEN	2
__GI_strcoll	.symtab	0x18040	648	FUNC	<unknown>	HIDDEN	2
__GI_strcpy	.symtab	0x18330	804	FUNC	<unknown>	HIDDEN	2
__GI_strdup	.symtab	0x1d280	56	FUNC	<unknown>	HIDDEN	2
__GI_strlen	.symtab	0x186bc	120	FUNC	<unknown>	HIDDEN	2
__GI_strncat	.symtab	0x1d130	224	FUNC	<unknown>	HIDDEN	2
__GI_strncpy	.symtab	0x1b620	248	FUNC	<unknown>	HIDDEN	2
__GI_strnlen	.symtab	0x18734	252	FUNC	<unknown>	HIDDEN	2
__GI_strpbrk	.symtab	0x1b794	80	FUNC	<unknown>	HIDDEN	2
__GI_strrchr	.symtab	0x17eec	192	FUNC	<unknown>	HIDDEN	2
__GI_strspn	.symtab	0x1d210	112	FUNC	<unknown>	HIDDEN	2
__GI_strstr	.symtab	0x18830	288	FUNC	<unknown>	HIDDEN	2
__GI_strtok	.symtab	0x18a8c	24	FUNC	<unknown>	HIDDEN	2
__GI_strtok_r	.symtab	0x1b718	124	FUNC	<unknown>	HIDDEN	2
__GI_strtol	.symtab	0x19b5c	20	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr	.symtab	0x18ac4	112	FUNC	<unknown>	HIDDEN	2
__GI_time	.symtab	0x15060	72	FUNC	<unknown>	HIDDEN	2
__GI_tolower	.symtab	0x1e130	36	FUNC	<unknown>	HIDDEN	2
__GI_toupper	.symtab	0x15120	36	FUNC	<unknown>	HIDDEN	2
__GI_vsnprintf	.symtab	0x15184	156	FUNC	<unknown>	HIDDEN	2
__GI_wait4	.symtab	0x1a564	80	FUNC	<unknown>	HIDDEN	2
__GI_waitpid	.symtab	0x150a8	20	FUNC	<unknown>	HIDDEN	2
__GI_wcrtomb	.symtab	0x1a5c0	72	FUNC	<unknown>	HIDDEN	2
__GI_wcsnrtombs	.symtab	0x1a624	188	FUNC	<unknown>	HIDDEN	2
__GI_wcsrtombs	.symtab	0x1a608	28	FUNC	<unknown>	HIDDEN	2
__GI_write	.symtab	0x150bc	76	FUNC	<unknown>	HIDDEN	2
__JCR_END__	.symtab	0x32ae4	0	OBJECT	<unknown>	DEFAULT	8
__JCR_LIST__	.symtab	0x32ae4	0	OBJECT	<unknown>	DEFAULT	8
__app_fini	.symtab	0x391c0	4	OBJECT	<unknown>	HIDDEN	10
__atexit_lock	.symtab	0x32f04	24	OBJECT	<unknown>	DEFAULT	9
__bsd_signal	.symtab	0x190f8	188	FUNC	<unknown>	HIDDEN	2
__bss_start	.symtab	0x32f5c	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x19fdc	68	FUNC	<unknown>	DEFAULT	2
__ctype_b	.symtab	0x32bf8	4	OBJECT	<unknown>	DEFAULT	9
__ctype_tolower	.symtab	0x32f58	4	OBJECT	<unknown>	DEFAULT	9
__ctype_toupper	.symtab	0x32c00	4	OBJECT	<unknown>	DEFAULT	9
__curbrk	.symtab	0x391f4	4	OBJECT	<unknown>	HIDDEN	10
__data_start	.symtab	0x32af0	0	NOTYPE	<unknown>	DEFAULT	9
__decode_answer	.symtab	0x1dc7c	240	FUNC	<unknown>	HIDDEN	2
__decode_dotted	.symtab	0x1e39c	196	FUNC	<unknown>	HIDDEN	2
__decode_header	.symtab	0x1db10	208	FUNC	<unknown>	HIDDEN	2
__deregister_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__dns_lookup	.symtab	0x1b8c0	1852	FUNC	<unknown>	HIDDEN	2
__do_global_ctors_aux	.symtab	0x1e5e0	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux	.symtab	0x100b0	0	FUNC	<unknown>	DEFAULT	2
__dso_handle	.symtab	0x32ae8	0	OBJECT	<unknown>	HIDDEN	9
__encode_dotted	.symtab	0x1e2f8	164	FUNC	<unknown>	HIDDEN	2
__encode_header	.symtab	0x1d9f4	284	FUNC	<unknown>	HIDDEN	2
__encode_question	.symtab	0x1dbe0	120	FUNC	<unknown>	HIDDEN	2
__environ	.symtab	0x391b8	4	OBJECT	<unknown>	DEFAULT	10
__errno_location	.symtab	0x15144	12	FUNC	<unknown>	DEFAULT	2
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x391b0	4	OBJECT	<unknown>	HIDDEN	10
__fgetc_unlocked	.symtab	0x1e154	328	FUNC	<unknown>	DEFAULT	2
__fini_array_end	.symtab	0x32ad4	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__fini_array_start	.symtab	0x32ad4	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__get_hosts_byname_r	.symtab	0x1c2e4	56	FUNC	<unknown>	HIDDEN	2
__glibc_strerror_r	.symtab	0x18950	32	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__h_errno_location	.symtab	0x1a5b4	12	FUNC	<unknown>	DEFAULT	2
__h_errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__heap_alloc	.symtab	0x1945c	160	FUNC	<unknown>	DEFAULT	2
__heap_free	.symtab	0x19544	268	FUNC	<unknown>	DEFAULT	2
__heap_link_free_area	.symtab	0x194fc	48	FUNC	<unknown>	DEFAULT	2
__heap_link_free_area_after	.symtab	0x1952c	24	FUNC	<unknown>	DEFAULT	2
__init_array_end	.symtab	0x32ad4	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__init_array_start	.symtab	0x32ad4	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__length_dotted	.symtab	0x1e460	72	FUNC	<unknown>	HIDDEN	2
__length_question	.symtab	0x1dc58	36	FUNC	<unknown>	HIDDEN	2
__libc_close	.symtab	0x14dc0	68	FUNC	<unknown>	DEFAULT	2
__libc_connect	.symtab	0x18f54	76	FUNC	<unknown>	DEFAULT	2
__libc_creat	.symtab	0x14f68	24	FUNC	<unknown>	DEFAULT	2
__libc_fcntl	.symtab	0x14c50	136	FUNC	<unknown>	DEFAULT	2
__libc_fcntl64	.symtab	0x14cd8	100	FUNC	<unknown>	DEFAULT	2
__libc_fork	.symtab	0x14bdc	52	FUNC	<unknown>	DEFAULT	2
__libc_getpid	.symtab	0x14e04	64	FUNC	<unknown>	DEFAULT	2
__libc_lseek64	.symtab	0x1e0c0	112	FUNC	<unknown>	DEFAULT	2
__libc_nanosleep	.symtab	0x1a43c	72	FUNC	<unknown>	DEFAULT	2
__libc_open	.symtab	0x14ef0	120	FUNC	<unknown>	DEFAULT	2
__libc_poll	.symtab	0x1c5a0	76	FUNC	<unknown>	DEFAULT	2
__libc_read	.symtab	0x14f80	76	FUNC	<unknown>	DEFAULT	2
__libc_recv	.symtab	0x19040	32	FUNC	<unknown>	DEFAULT	2
__libc_select	.symtab	0x14fcc	84	FUNC	<unknown>	DEFAULT	2
__libc_send	.symtab	0x19060	32	FUNC	<unknown>	DEFAULT	2
__libc_sigaction	.symtab	0x1c31c	160	FUNC	<unknown>	DEFAULT	2
__libc_stack_end	.symtab	0x391b4	4	OBJECT	<unknown>	DEFAULT	10
__libc_waitpid	.symtab	0x150a8	20	FUNC	<unknown>	DEFAULT	2
__libc_write	.symtab	0x150bc	76	FUNC	<unknown>	DEFAULT	2
__malloc_heap	.symtab	0x32d40	4	OBJECT	<unknown>	DEFAULT	9
__malloc_heap_lock	.symtab	0x39198	24	OBJECT	<unknown>	DEFAULT	10
__malloc_sbrk_lock	.symtab	0x39280	24	OBJECT	<unknown>	DEFAULT	10
__muldi3	.symtab	0x14b08	212	FUNC	<unknown>	DEFAULT	2
__nameserver	.symtab	0x392a8	12	OBJECT	<unknown>	HIDDEN	10
__nameservers	.symtab	0x392b4	4	OBJECT	<unknown>	HIDDEN	10
__open_etc_hosts	.symtab	0x1dd6c	56	FUNC	<unknown>	HIDDEN	2
__open_nameservers	.symtab	0x1bffc	744	FUNC	<unknown>	HIDDEN	2
__pagesize	.symtab	0x391bc	4	OBJECT	<unknown>	DEFAULT	10
__preinit_array_end	.symtab	0x32ad4	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__preinit_array_start	.symtab	0x32ad4	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__pthread_initialize_minimal	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__pthread_mutex_init	.symtab	0x19fcc	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock	.symtab	0x19fcc	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock	.symtab	0x19fcc	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock	.symtab	0x19fcc	8	FUNC	<unknown>	DEFAULT	2
__pthread_return_0	.symtab	0x19fcc	8	FUNC	<unknown>	DEFAULT	2
__pthread_return_void	.symtab	0x19fd4	8	FUNC	<unknown>	DEFAULT	2
__raise	.symtab	0x1e0a8	24	FUNC	<unknown>	HIDDEN	2
__read_etc_hosts_r	.symtab	0x1dda4	772	FUNC	<unknown>	HIDDEN	2
__register_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__resolv_lock	.symtab	0x32f24	24	OBJECT	<unknown>	DEFAULT	9
__rtld_fini	.symtab	0x391c4	4	OBJECT	<unknown>	HIDDEN	10
__searchdomain	.symtab	0x39298	16	OBJECT	<unknown>	HIDDEN	10
__searchdomains	.symtab	0x392b8	4	OBJECT	<unknown>	HIDDEN	10
__sigaddset	.symtab	0x191dc	44	FUNC	<unknown>	DEFAULT	2
__sigdelset	.symtab	0x19208	44	FUNC	<unknown>	DEFAULT	2
__sigismember	.symtab	0x191b4	40	FUNC	<unknown>	DEFAULT	2
__socketcall	.symtab	0x1a2f4	72	FUNC	<unknown>	HIDDEN	2
__socketcall.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__stdin	.symtab	0x32c10	4	OBJECT	<unknown>	DEFAULT	9
__stdio_READ	.symtab	0x1e4a8	104	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE	.symtab	0x1a6e0	196	FUNC	<unknown>	HIDDEN	2
__stdio_adjust_position	.symtab	0x1c87c	252	FUNC	<unknown>	HIDDEN	2
__stdio_fwrite	.symtab	0x1a7a4	320	FUNC	<unknown>	HIDDEN	2
__stdio_init_mutex	.symtab	0x15280	28	FUNC	<unknown>	HIDDEN	2
__stdio_mutex_initializer.3860	.symtab	0x21960	24	OBJECT	<unknown>	DEFAULT	4
__stdio_rfill	.symtab	0x1e510	56	FUNC	<unknown>	HIDDEN	2
__stdio_seek	.symtab	0x1cc54	52	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o	.symtab	0x1e548	152	FUNC	<unknown>	HIDDEN	2
__stdio_trans2w_o	.symtab	0x1a8e4	252	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit	.symtab	0x1534c	56	FUNC	<unknown>	HIDDEN	2
__stdout	.symtab	0x32c14	4	OBJECT	<unknown>	DEFAULT	9
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fcntl64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_rt_sigaction	.symtab	0x1c550	80	FUNC	<unknown>	HIDDEN	2
__syscall_rt_sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uClibc_fini	.symtab	0x19f48	132	FUNC	<unknown>	DEFAULT	2
__uClibc_init	.symtab	0x1a020	104	FUNC	<unknown>	DEFAULT	2
__uClibc_main	.symtab	0x1a088	620	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__ubp_memchr	.symtab	0x1b3d8	280	FUNC	<unknown>	DEFAULT	2
__uclibc_progname	.symtab	0x32f1c	4	OBJECT	<unknown>	HIDDEN	9
__xpg_strerror_r	.symtab	0x18970	284	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_adjust_pos.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_charpad	.symtab	0x15384	60	FUNC	<unknown>	DEFAULT	2
_cs_funcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_dl_aux_init	.symtab	0x1c4f8	28	FUNC	<unknown>	DEFAULT	2
_dl_phdr	.symtab	0x392bc	4	OBJECT	<unknown>	DEFAULT	10
_dl_phnum	.symtab	0x392c0	4	OBJECT	<unknown>	DEFAULT	10
_edata	.symtab	0x32f5c	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x392c8	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_errno	.symtab	0x391cc	4	OBJECT	<unknown>	DEFAULT	10
_exit	.symtab	0x14d3c	64	FUNC	<unknown>	DEFAULT	2
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fini	.symtab	0x1e628	8	FUNC	<unknown>	DEFAULT	3
_fixed_buffers	.symtab	0x36fa0	8192	OBJECT	<unknown>	DEFAULT	10
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow	.symtab	0x153c0	128	FUNC	<unknown>	DEFAULT	2
_fpmaxtostr	.symtab	0x1abe4	1908	FUNC	<unknown>	HIDDEN	2
_fpmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_h_errno	.symtab	0x391d0	4	OBJECT	<unknown>	DEFAULT	10
_init	.symtab	0x10094	8	FUNC	<unknown>	DEFAULT	1
_load_inttype	.symtab	0x1a9e0	144	FUNC	<unknown>	HIDDEN	2
_load_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_init	.symtab	0x15abc	164	FUNC	<unknown>	HIDDEN	2
_ppfs_init.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec	.symtab	0x15dc4	1352	FUNC	<unknown>	HIDDEN	2
_ppfs_parsespec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs	.symtab	0x15b60	60	FUNC	<unknown>	HIDDEN	2
_ppfs_prepargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs	.symtab	0x15b9c	480	FUNC	<unknown>	HIDDEN	2
_ppfs_setargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size	.symtab	0x15d7c	72	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_pop_restore	.symtab	0x19fd4	8	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_push_defer	.symtab	0x19fd4	8	FUNC	<unknown>	DEFAULT	2
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_sigintr	.symtab	0x39200	128	OBJECT	<unknown>	HIDDEN	10
_start	.symtab	0x101a4	56	FUNC	<unknown>	DEFAULT	2
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x1c978	732	FUNC	<unknown>	HIDDEN	2
_stdio_init	.symtab	0x15220	96	FUNC	<unknown>	HIDDEN	2
_stdio_openlist	.symtab	0x32c18	4	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_add_lock	.symtab	0x32c1c	24	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_dec_use	.symtab	0x1ccec	276	FUNC	<unknown>	DEFAULT	2
_stdio_openlist_del_count	.symtab	0x36f9c	4	OBJECT	<unknown>	DEFAULT	10
_stdio_openlist_del_lock	.symtab	0x32c34	24	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_use_count	.symtab	0x36f98	4	OBJECT	<unknown>	DEFAULT	10
_stdio_streams	.symtab	0x32c50	240	OBJECT	<unknown>	DEFAULT	9
_stdio_term	.symtab	0x1529c	176	FUNC	<unknown>	HIDDEN	2
_stdio_user_locking	.symtab	0x32c4c	4	OBJECT	<unknown>	DEFAULT	9
_stdlib_strto_l	.symtab	0x19b70	428	FUNC	<unknown>	HIDDEN	2
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_store_inttype	.symtab	0x1aa70	60	FUNC	<unknown>	HIDDEN	2
_store_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_string_syserrmsgs	.symtab	0x21ac0	2934	OBJECT	<unknown>	HIDDEN	4
_string_syserrmsgs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr	.symtab	0x1aaac	312	FUNC	<unknown>	HIDDEN	2
_uintmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal	.symtab	0x15440	1660	FUNC	<unknown>	HIDDEN	2
_vfprintf_internal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0x1c3bc	316	FUNC	<unknown>	DEFAULT	2
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
atoi	.symtab	0x19b44	24	FUNC	<unknown>	DEFAULT	2
atol	.symtab	0x19b44	24	FUNC	<unknown>	DEFAULT	2
atol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bcopy	.symtab	0x16434	12	FUNC	<unknown>	DEFAULT	2
been_there_done_that	.symtab	0x391f0	4	OBJECT	<unknown>	DEFAULT	10
been_there_done_that.2818	.symtab	0x391c8	4	OBJECT	<unknown>	DEFAULT	10
bot.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
brk	.symtab	0x1c514	60	FUNC	<unknown>	DEFAULT	2
brk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bsd_signal	.symtab	0x190f8	188	FUNC	<unknown>	DEFAULT	2
buf.2628	.symtab	0x38fa8	16	OBJECT	<unknown>	DEFAULT	10
buf.4861	.symtab	0x38fb8	460	OBJECT	<unknown>	DEFAULT	10
bzero	.symtab	0x17a98	52	FUNC	<unknown>	DEFAULT	2
c	.symtab	0x32bec	4	OBJECT	<unknown>	DEFAULT	9
call___do_global_ctors_aux	.symtab	0x1e61c	0	FUNC	<unknown>	DEFAULT	2
call___do_global_dtors_aux	.symtab	0x1012c	0	FUNC	<unknown>	DEFAULT	2
call_frame_dummy	.symtab	0x10198	0	FUNC	<unknown>	DEFAULT	2
chdir	.symtab	0x14d7c	68	FUNC	<unknown>	DEFAULT	2
chdir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0x14dc0	68	FUNC	<unknown>	DEFAULT	2
close.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
commServer	.symtab	0x32af4	4	OBJECT	<unknown>	DEFAULT	9
completed.2248	.symtab	0x32f60	1	OBJECT	<unknown>	DEFAULT	10
connect	.symtab	0x18f54	76	FUNC	<unknown>	DEFAULT	2
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
connectTimeout	.symtab	0x11734	672	FUNC	<unknown>	DEFAULT	2
creat	.symtab	0x14f68	24	FUNC	<unknown>	DEFAULT	2
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
currentServer	.symtab	0x32be8	4	OBJECT	<unknown>	DEFAULT	9
data_start	.symtab	0x32af0	0	NOTYPE	<unknown>	DEFAULT	9
decodea.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dns	.symtab	0x32af8	4	OBJECT	<unknown>	DEFAULT	9
dnslookup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
environ	.symtab	0x391b8	4	OBJECT	<unknown>	DEFAULT	10
errno	.symtab	0x391cc	4	OBJECT	<unknown>	DEFAULT	10
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
estridx	.symtab	0x21a30	126	OBJECT	<unknown>	DEFAULT	4
exit	.symtab	0x19d1c	128	FUNC	<unknown>	DEFAULT	2
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exp10_table	.symtab	0x226c8	72	OBJECT	<unknown>	DEFAULT	4
fclose	.symtab	0x1c5ec	324	FUNC	<unknown>	DEFAULT	2
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0x14c50	136	FUNC	<unknown>	DEFAULT	2
fcntl64	.symtab	0x14cd8	100	FUNC	<unknown>	DEFAULT	2
fdgets	.symtab	0x10484	224	FUNC	<unknown>	DEFAULT	2
fflush_unlocked	.symtab	0x1ce00	420	FUNC	<unknown>	DEFAULT	2
fflush_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked	.symtab	0x1e154	328	FUNC	<unknown>	DEFAULT	2
fgetc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets	.symtab	0x1cc88	100	FUNC	<unknown>	DEFAULT	2
fgets.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked	.symtab	0x1cfa4	192	FUNC	<unknown>	DEFAULT	2
fgets_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fmt	.symtab	0x226b0	20	OBJECT	<unknown>	DEFAULT	4
fopen	.symtab	0x1c730	24	FUNC	<unknown>	DEFAULT	2
fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork	.symtab	0x14bdc	52	FUNC	<unknown>	DEFAULT	2
fputs_unlocked	.symtab	0x1630c	60	FUNC	<unknown>	DEFAULT	2
fputs_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
frame_dummy	.symtab	0x10138	0	FUNC	<unknown>	DEFAULT	2
free	.symtab	0x19374	232	FUNC	<unknown>	DEFAULT	2
free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseek	.symtab	0x1c748	36	FUNC	<unknown>	DEFAULT	2
fseeko	.symtab	0x1c748	36	FUNC	<unknown>	DEFAULT	2
fseeko.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseeko64	.symtab	0x1c76c	272	FUNC	<unknown>	DEFAULT	2
fseeko64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fwrite_unlocked	.symtab	0x16348	176	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getArch	.symtab	0x13088	28	FUNC	<unknown>	DEFAULT	2
getHost	.symtab	0x113e0	100	FUNC	<unknown>	DEFAULT	2
getOurIP	.symtab	0x10564	892	FUNC	<unknown>	DEFAULT	2
getRandomIP	.symtab	0x10424	96	FUNC	<unknown>	DEFAULT	2
get_hosts_byname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getc_unlocked	.symtab	0x1e154	328	FUNC	<unknown>	DEFAULT	2
getegid	.symtab	0x1a33c	64	FUNC	<unknown>	DEFAULT	2
getegid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid	.symtab	0x1a37c	64	FUNC	<unknown>	DEFAULT	2
geteuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid	.symtab	0x1a3bc	64	FUNC	<unknown>	DEFAULT	2
getgid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname	.symtab	0x18c18	60	FUNC	<unknown>	DEFAULT	2
gethostbyname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname_r	.symtab	0x18c54	768	FUNC	<unknown>	DEFAULT	2
gethostbyname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid	.symtab	0x14e04	64	FUNC	<unknown>	DEFAULT	2
getpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockname	.symtab	0x18fa0	76	FUNC	<unknown>	DEFAULT	2
getsockname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt	.symtab	0x18fec	84	FUNC	<unknown>	DEFAULT	2
getsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid	.symtab	0x1a3fc	64	FUNC	<unknown>	DEFAULT	2
getuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
h.4860	.symtab	0x39184	20	OBJECT	<unknown>	DEFAULT	10
h_errno	.symtab	0x391d0	4	OBJECT	<unknown>	DEFAULT	10
heap_alloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
heap_free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
htonl	.symtab	0x18b48	8	FUNC	<unknown>	DEFAULT	2
htons	.symtab	0x18b50	12	FUNC	<unknown>	DEFAULT	2
i.4140	.symtab	0x32bf0	4	OBJECT	<unknown>	DEFAULT	9
index	.symtab	0x17ce0	524	FUNC	<unknown>	DEFAULT	2
inet_addr	.symtab	0x18bf0	40	FUNC	<unknown>	DEFAULT	2
inet_aton	.symtab	0x1b7e4	220	FUNC	<unknown>	DEFAULT	2
inet_aton.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa	.symtab	0x18bcc	36	FUNC	<unknown>	DEFAULT	2
inet_ntoa.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa_r	.symtab	0x18b5c	112	FUNC	<unknown>	DEFAULT	2
inet_ntop	.symtab	0x1d748	684	FUNC	<unknown>	DEFAULT	2
inet_ntop4	.symtab	0x1d5a4	420	FUNC	<unknown>	DEFAULT	2
inet_pton	.symtab	0x1d384	544	FUNC	<unknown>	DEFAULT	2
inet_pton4	.symtab	0x1d2b8	204	FUNC	<unknown>	DEFAULT	2
initConnection	.symtab	0x13ef0	468	FUNC	<unknown>	DEFAULT	2
init_rand	.symtab	0x101dc	228	FUNC	<unknown>	DEFAULT	2
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initial_fa	.symtab	0x32d48	264	OBJECT	<unknown>	DEFAULT	9
initstate	.symtab	0x19710	96	FUNC	<unknown>	DEFAULT	2
initstate_r	.symtab	0x19a60	228	FUNC	<unknown>	DEFAULT	2
ioctl	.symtab	0x14e44	100	FUNC	<unknown>	DEFAULT	2
ioctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isatty	.symtab	0x18aa4	32	FUNC	<unknown>	DEFAULT	2
isatty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isspace	.symtab	0x15108	24	FUNC	<unknown>	DEFAULT	2
isspace.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill	.symtab	0x14ea8	72	FUNC	<unknown>	DEFAULT	2
kill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lengthd.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lengthq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/sparc/memchr.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/sparc/memcpy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/sparc/memset.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/sparc/strchr.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/sparc/strcmp.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/sparc/strcpy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/sparc/strlen.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/sparc/crt1.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/sparc/crti.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/sparc/crtn.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/sparc/fork.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/sparc/udiv.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/sparc/umul.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/sparc/urem.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libgcc2.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
listFork	.symtab	0x119d4	432	FUNC	<unknown>	DEFAULT	2
llseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lseek64	.symtab	0x1e0c0	112	FUNC	<unknown>	DEFAULT	2
macAddress	.symtab	0x32f90	6	OBJECT	<unknown>	DEFAULT	10
main	.symtab	0x140c4	2628	FUNC	<unknown>	DEFAULT	2
mainCommSock	.symtab	0x32f80	4	OBJECT	<unknown>	DEFAULT	10
malloc	.symtab	0x19234	320	FUNC	<unknown>	DEFAULT	2
malloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memchr	.symtab	0x1b3d8	280	FUNC	<unknown>	DEFAULT	2
memcpy	.symtab	0x16a24	4212	FUNC	<unknown>	DEFAULT	2
memmove	.symtab	0x16440	1508	FUNC	<unknown>	DEFAULT	2
mempcpy	.symtab	0x1b4f0	32	FUNC	<unknown>	DEFAULT	2
mempcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memrchr	.symtab	0x1b510	272	FUNC	<unknown>	DEFAULT	2
memrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset	.symtab	0x17acc	416	FUNC	<unknown>	DEFAULT	2
mylock	.symtab	0x32e50	24	OBJECT	<unknown>	DEFAULT	9
mylock	.symtab	0x391d4	24	OBJECT	<unknown>	DEFAULT	10
mylock	.symtab	0x32f3c	24	OBJECT	<unknown>	DEFAULT	9
nanosleep	.symtab	0x1a43c	72	FUNC	<unknown>	DEFAULT	2
nanosleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
next_start.1092	.symtab	0x38fa0	4	OBJECT	<unknown>	DEFAULT	10
ntohl	.symtab	0x18b34	8	FUNC	<unknown>	DEFAULT	2
ntohl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ntohs	.symtab	0x18b3c	12	FUNC	<unknown>	DEFAULT	2
ntop.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
numpids	.symtab	0x32f88	8	OBJECT	<unknown>	DEFAULT	10
object.2329	.symtab	0x32f64	24	OBJECT	<unknown>	DEFAULT	10
open	.symtab	0x14ef0	120	FUNC	<unknown>	DEFAULT	2
open.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
opennameservers.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ourIP	.symtab	0x391f8	4	OBJECT	<unknown>	DEFAULT	10
ovhl7	.symtab	0x122f0	3480	FUNC	<unknown>	DEFAULT	2
p.2246	.symtab	0x32aec	0	OBJECT	<unknown>	DEFAULT	9
pids	.symtab	0x391fc	4	OBJECT	<unknown>	DEFAULT	10
poll	.symtab	0x1c5a0	76	FUNC	<unknown>	DEFAULT	2
poll.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prefix.4072	.symtab	0x21988	12	OBJECT	<unknown>	DEFAULT	4
print	.symtab	0x10e78	1144	FUNC	<unknown>	DEFAULT	2
printchar	.symtab	0x10a38	108	FUNC	<unknown>	DEFAULT	2
printi	.symtab	0x10c60	536	FUNC	<unknown>	DEFAULT	2
prints	.symtab	0x10aa4	444	FUNC	<unknown>	DEFAULT	2
processCmd	.symtab	0x130a4	3660	FUNC	<unknown>	DEFAULT	2
qual_chars.4078	.symtab	0x219a0	20	OBJECT	<unknown>	DEFAULT	4
raise	.symtab	0x1e0a8	24	FUNC	<unknown>	DEFAULT	2
raise.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand	.symtab	0x19650	16	FUNC	<unknown>	DEFAULT	2
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand_cmwc	.symtab	0x102c0	356	FUNC	<unknown>	DEFAULT	2
random	.symtab	0x19660	80	FUNC	<unknown>	DEFAULT	2
random.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
random_poly_info	.symtab	0x22638	40	OBJECT	<unknown>	DEFAULT	4
random_r	.symtab	0x198e0	156	FUNC	<unknown>	DEFAULT	2
random_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
randtbl	.symtab	0x32e84	128	OBJECT	<unknown>	DEFAULT	9
rawmemchr	.symtab	0x1d064	204	FUNC	<unknown>	DEFAULT	2
rawmemchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read	.symtab	0x14f80	76	FUNC	<unknown>	DEFAULT	2
read.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read_etc_hosts_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recv	.symtab	0x19040	32	FUNC	<unknown>	DEFAULT	2
recv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recvLine	.symtab	0x11444	752	FUNC	<unknown>	DEFAULT	2
rindex	.symtab	0x17eec	192	FUNC	<unknown>	DEFAULT	2
sbrk	.symtab	0x1a484	84	FUNC	<unknown>	DEFAULT	2
sbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
select	.symtab	0x14fcc	84	FUNC	<unknown>	DEFAULT	2
select.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
send	.symtab	0x19060	32	FUNC	<unknown>	DEFAULT	2
send.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsid	.symtab	0x15020	64	FUNC	<unknown>	DEFAULT	2
setsid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsockopt	.symtab	0x19080	44	FUNC	<unknown>	DEFAULT	2
setsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setstate	.symtab	0x196b0	96	FUNC	<unknown>	DEFAULT	2
setstate_r	.symtab	0x197bc	292	FUNC	<unknown>	DEFAULT	2
sigaction	.symtab	0x1c31c	160	FUNC	<unknown>	DEFAULT	2
sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
signal	.symtab	0x190f8	188	FUNC	<unknown>	DEFAULT	2
signal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigprocmask	.symtab	0x1a4d8	140	FUNC	<unknown>	DEFAULT	2
sigprocmask.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigsetops.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sleep	.symtab	0x19d9c	428	FUNC	<unknown>	DEFAULT	2
sleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket	.symtab	0x190ac	76	FUNC	<unknown>	DEFAULT	2
socket.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket_connect	.symtab	0x11b84	332	FUNC	<unknown>	DEFAULT	2
sockprintf	.symtab	0x112f0	240	FUNC	<unknown>	DEFAULT	2
spec_and_mask.4077	.symtab	0x219b4	16	OBJECT	<unknown>	DEFAULT	4
spec_base.4071	.symtab	0x21998	7	OBJECT	<unknown>	DEFAULT	4
spec_chars.4074	.symtab	0x219e8	21	OBJECT	<unknown>	DEFAULT	4
spec_flags.4073	.symtab	0x21a00	8	OBJECT	<unknown>	DEFAULT	4
spec_or_mask.4076	.symtab	0x219c4	16	OBJECT	<unknown>	DEFAULT	4
spec_ranges.4075	.symtab	0x219d8	9	OBJECT	<unknown>	DEFAULT	4
sprintf	.symtab	0x15150	52	FUNC	<unknown>	DEFAULT	2
sprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
srand	.symtab	0x19770	76	FUNC	<unknown>	DEFAULT	2
srandom	.symtab	0x19770	76	FUNC	<unknown>	DEFAULT	2
srandom_r	.symtab	0x1997c	228	FUNC	<unknown>	DEFAULT	2
static_id	.symtab	0x32f20	2	OBJECT	<unknown>	DEFAULT	9
static_ns	.symtab	0x391ec	4	OBJECT	<unknown>	DEFAULT	10
stderr	.symtab	0x32c0c	4	OBJECT	<unknown>	DEFAULT	9
stdin	.symtab	0x32c04	4	OBJECT	<unknown>	DEFAULT	9
stdout	.symtab	0x32c08	4	OBJECT	<unknown>	DEFAULT	9
strcasecmp	.symtab	0x1e29c	92	FUNC	<unknown>	DEFAULT	2
strcasecmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchr	.symtab	0x17ce0	524	FUNC	<unknown>	DEFAULT	2
strcmp	.symtab	0x18040	648	FUNC	<unknown>	DEFAULT	2
strcoll	.symtab	0x18040	648	FUNC	<unknown>	DEFAULT	2
strcpy	.symtab	0x18330	804	FUNC	<unknown>	DEFAULT	2
strdup	.symtab	0x1d280	56	FUNC	<unknown>	DEFAULT	2
strdup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strerror_r	.symtab	0x18970	284	FUNC	<unknown>	DEFAULT	2
strlen	.symtab	0x186bc	120	FUNC	<unknown>	DEFAULT	2
strncat	.symtab	0x1d130	224	FUNC	<unknown>	DEFAULT	2
strncat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strncpy	.symtab	0x1b620	248	FUNC	<unknown>	DEFAULT	2
strncpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strnlen	.symtab	0x18734	252	FUNC	<unknown>	DEFAULT	2
strnlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strpbrk	.symtab	0x1b794	80	FUNC	<unknown>	DEFAULT	2
strpbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strrchr	.symtab	0x17eec	192	FUNC	<unknown>	DEFAULT	2
strspn	.symtab	0x1d210	112	FUNC	<unknown>	DEFAULT	2
strspn.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strstr	.symtab	0x18830	288	FUNC	<unknown>	DEFAULT	2
strstr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok	.symtab	0x18a8c	24	FUNC	<unknown>	DEFAULT	2
strtok.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok_r	.symtab	0x1b718	124	FUNC	<unknown>	DEFAULT	2
strtok_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtol	.symtab	0x19b5c	20	FUNC	<unknown>	DEFAULT	2
strtol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcgetattr	.symtab	0x18ac4	112	FUNC	<unknown>	DEFAULT	2
tcgetattr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
time	.symtab	0x15060	72	FUNC	<unknown>	DEFAULT	2
time.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tolower	.symtab	0x1e130	36	FUNC	<unknown>	DEFAULT	2
tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
toupper	.symtab	0x15120	36	FUNC	<unknown>	DEFAULT	2
toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
trim	.symtab	0x108e0	344	FUNC	<unknown>	DEFAULT	2
type_codes	.symtab	0x21a08	24	OBJECT	<unknown>	DEFAULT	4
type_sizes	.symtab	0x21a20	12	OBJECT	<unknown>	DEFAULT	4
unknown.1115	.symtab	0x21ab0	14	OBJECT	<unknown>	DEFAULT	4
unsafe_state	.symtab	0x32e68	28	OBJECT	<unknown>	DEFAULT	9
useragents	.symtab	0x32afc	236	OBJECT	<unknown>	DEFAULT	9
vsnprintf	.symtab	0x15184	156	FUNC	<unknown>	DEFAULT	2
vsnprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wait4	.symtab	0x1a564	80	FUNC	<unknown>	DEFAULT	2
wait4.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
waitpid	.symtab	0x150a8	20	FUNC	<unknown>	DEFAULT	2
waitpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcrtomb	.symtab	0x1a5c0	72	FUNC	<unknown>	DEFAULT	2
wcrtomb.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsnrtombs	.symtab	0x1a624	188	FUNC	<unknown>	DEFAULT	2
wcsnrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsrtombs	.symtab	0x1a608	28	FUNC	<unknown>	DEFAULT	2
wcsrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
write	.symtab	0x150bc	76	FUNC	<unknown>	DEFAULT	2
write.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
xdigits.3071	.symtab	0x22788	17	OBJECT	<unknown>	DEFAULT	4
xtdcustom	.symtab	0x11e7c	356	FUNC	<unknown>	DEFAULT	2

Network Behavior

Download Network PCAP: filtered – full

Network Port Distribution

Total Packets: 788
• 9999 undefined
• 53 (DNS)

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 26, 2025 16:23:31.335716009 CEST	38754	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:31.606921911 CEST	9999	38754	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:31.607831001 CEST	38756	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:31.879734039 CEST	9999	38756	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:31.880186081 CEST	38758	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:32.151572943 CEST	9999	38758	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:32.152251005 CEST	38760	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:32.423484087 CEST	9999	38760	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:32.424072981 CEST	38762	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:32.695333958 CEST	9999	38762	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:32.695813894 CEST	38764	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:32.967437029 CEST	9999	38764	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:32.968327999 CEST	38766	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:33.239706993 CEST	9999	38766	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:33.242587090 CEST	38768	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:33.514044046 CEST	9999	38768	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:33.514554977 CEST	38770	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:33.785954952 CEST	9999	38770	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:33.786407948 CEST	38772	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:34.057723045 CEST	9999	38772	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:34.058195114 CEST	38774	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:34.329474926 CEST	9999	38774	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:34.329962969 CEST	38776	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:34.601761103 CEST	9999	38776	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:34.602211952 CEST	38778	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:34.873749971 CEST	9999	38778	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:34.874391079 CEST	38780	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:35.145706892 CEST	9999	38780	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:35.146289110 CEST	38782	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:35.417612076 CEST	9999	38782	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:35.418096066 CEST	38784	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:35.690212011 CEST	9999	38784	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:35.690768003 CEST	38786	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:35.961987019 CEST	9999	38786	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:35.962646008 CEST	38788	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:36.234143019 CEST	9999	38788	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:36.234750032 CEST	38790	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:36.506668091 CEST	9999	38790	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:36.507308006 CEST	38792	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:36.778490067 CEST	9999	38792	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:36.779036999 CEST	38794	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:37.050239086 CEST	9999	38794	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:37.050724030 CEST	38796	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:37.322179079 CEST	9999	38796	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:37.322776079 CEST	38798	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:37.596997976 CEST	9999	38798	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:37.597527981 CEST	38800	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:37.869452000 CEST	9999	38800	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:37.870258093 CEST	38802	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:38.141693115 CEST	9999	38802	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:38.142358065 CEST	38804	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:38.413646936 CEST	9999	38804	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:38.414333105 CEST	38806	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:38.685700893 CEST	9999	38806	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:38.686306000 CEST	38808	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:38.957793951 CEST	9999	38808	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:38.958709955 CEST	38810	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:39.230201006 CEST	9999	38810	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:39.231080055 CEST	38812	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:39.502176046 CEST	9999	38812	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:39.503015041 CEST	38814	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:39.774688959 CEST	9999	38814	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:39.775511980 CEST	38816	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:40.046857119 CEST	9999	38816	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:40.047888041 CEST	38818	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:40.319505930 CEST	9999	38818	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:40.320331097 CEST	38820	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:40.591705084 CEST	9999	38820	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:40.593029022 CEST	38822	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:40.864286900 CEST	9999	38822	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:40.865340948 CEST	38824	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:41.136821032 CEST	9999	38824	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:41.137731075 CEST	38826	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:41.409169912 CEST	9999	38826	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:41.410273075 CEST	38828	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:41.681443930 CEST	9999	38828	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:41.682487011 CEST	38830	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:41.954247952 CEST	9999	38830	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:41.954905033 CEST	38832	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:42.226520061 CEST	9999	38832	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:42.227520943 CEST	38834	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:42.498796940 CEST	9999	38834	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:42.499696016 CEST	38836	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:42.771115065 CEST	9999	38836	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:42.772248983 CEST	38838	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:43.043669939 CEST	9999	38838	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:43.044831038 CEST	38840	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:43.315952063 CEST	9999	38840	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:43.316687107 CEST	38842	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:43.587882042 CEST	9999	38842	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:43.588843107 CEST	38844	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:43.860409975 CEST	9999	38844	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:43.861438036 CEST	38846	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:44.133862019 CEST	9999	38846	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:44.134862900 CEST	38848	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:44.406059980 CEST	9999	38848	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:44.407116890 CEST	38850	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:44.678456068 CEST	9999	38850	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:44.679392099 CEST	38852	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:44.950980902 CEST	9999	38852	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:44.952297926 CEST	38854	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:45.223726034 CEST	9999	38854	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:45.224507093 CEST	38856	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:45.496596098 CEST	9999	38856	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:45.497538090 CEST	38858	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:45.768743992 CEST	9999	38858	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:45.769540071 CEST	38860	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:46.041076899 CEST	9999	38860	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:46.041996956 CEST	38862	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:46.313349009 CEST	9999	38862	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:46.314040899 CEST	38864	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:46.585478067 CEST	9999	38864	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:46.585983992 CEST	38866	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:46.857426882 CEST	9999	38866	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:46.858017921 CEST	38868	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:47.129281998 CEST	9999	38868	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:47.129941940 CEST	38870	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:47.401113987 CEST	9999	38870	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:47.402271032 CEST	38872	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:47.673702002 CEST	9999	38872	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:47.674227953 CEST	38874	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:47.945703030 CEST	9999	38874	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:47.946332932 CEST	38876	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:48.217516899 CEST	9999	38876	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:48.218071938 CEST	38878	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:48.489229918 CEST	9999	38878	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:48.489945889 CEST	38880	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:48.761384964 CEST	9999	38880	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:48.761986971 CEST	38882	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:49.033417940 CEST	9999	38882	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:49.034049034 CEST	38884	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:49.305497885 CEST	9999	38884	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:49.306063890 CEST	38886	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:49.577375889 CEST	9999	38886	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:49.577795029 CEST	38888	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:49.851306915 CEST	9999	38888	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:49.851735115 CEST	38890	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:50.123050928 CEST	9999	38890	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:50.123622894 CEST	38892	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:50.394681931 CEST	9999	38892	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:50.395138979 CEST	38894	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:50.666282892 CEST	9999	38894	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:50.666799068 CEST	38896	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:50.938585043 CEST	9999	38896	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:50.939686060 CEST	38898	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:51.211230040 CEST	9999	38898	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:51.212315083 CEST	38900	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:51.483844042 CEST	9999	38900	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:51.484740973 CEST	38902	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:51.756412983 CEST	9999	38902	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:51.757461071 CEST	38904	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:52.028652906 CEST	9999	38904	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:52.029572010 CEST	38906	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:52.300750971 CEST	9999	38906	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:52.301712036 CEST	38908	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:52.573257923 CEST	9999	38908	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:52.574196100 CEST	38910	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:52.845693111 CEST	9999	38910	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:52.846523046 CEST	38912	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:53.119003057 CEST	9999	38912	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:53.119961023 CEST	38914	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:53.391416073 CEST	9999	38914	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:53.392309904 CEST	38916	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:53.663547039 CEST	9999	38916	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:53.664581060 CEST	38918	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:53.935899973 CEST	9999	38918	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:53.936825037 CEST	38920	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:54.209994078 CEST	9999	38920	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:54.210712910 CEST	38922	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:54.482660055 CEST	9999	38922	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:54.483617067 CEST	38924	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:54.754777908 CEST	9999	38924	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:54.755733013 CEST	38926	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:55.028274059 CEST	9999	38926	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:55.029249907 CEST	38928	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:55.300640106 CEST	9999	38928	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:55.301440001 CEST	38930	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:55.573055983 CEST	9999	38930	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:55.573916912 CEST	38932	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:55.845843077 CEST	9999	38932	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:55.846715927 CEST	38934	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:56.118915081 CEST	9999	38934	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:56.120100021 CEST	38936	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:56.391350985 CEST	9999	38936	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:56.392323017 CEST	38938	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:56.663718939 CEST	9999	38938	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:56.664700031 CEST	38940	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:56.936115980 CEST	9999	38940	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:56.936744928 CEST	38942	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:57.208276987 CEST	9999	38942	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:57.209160089 CEST	38944	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:57.480838060 CEST	9999	38944	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:57.481748104 CEST	38946	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:57.753051996 CEST	9999	38946	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:57.753968000 CEST	38948	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:58.025700092 CEST	9999	38948	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:58.026493073 CEST	38950	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:58.298094034 CEST	9999	38950	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:58.298680067 CEST	38952	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:58.569919109 CEST	9999	38952	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:58.571019888 CEST	38954	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:58.842247963 CEST	9999	38954	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:58.843441010 CEST	38956	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:59.115041018 CEST	9999	38956	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:59.116100073 CEST	38958	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:59.387650013 CEST	9999	38958	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:59.388586998 CEST	38960	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:59.660021067 CEST	9999	38960	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:59.661150932 CEST	38962	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:23:59.932636023 CEST	9999	38962	156.253.227.62	192.168.2.15
Apr 26, 2025 16:23:59.933545113 CEST	38964	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:00.204839945 CEST	9999	38964	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:00.205651045 CEST	38966	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:00.476963997 CEST	9999	38966	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:00.477922916 CEST	38968	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:00.749397993 CEST	9999	38968	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:00.750149012 CEST	38970	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:01.021647930 CEST	9999	38970	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:01.022291899 CEST	38972	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:01.293730974 CEST	9999	38972	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:01.294382095 CEST	38974	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:01.565634012 CEST	9999	38974	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:01.566513062 CEST	38976	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:01.837945938 CEST	9999	38976	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:01.838793993 CEST	38978	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:02.110286951 CEST	9999	38978	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:02.111080885 CEST	38980	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:02.382397890 CEST	9999	38980	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:02.383526087 CEST	38982	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:02.654772043 CEST	9999	38982	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:02.655462027 CEST	38984	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:02.926953077 CEST	9999	38984	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:02.927769899 CEST	38986	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:03.199352026 CEST	9999	38986	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:03.200146914 CEST	38988	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:03.471847057 CEST	9999	38988	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:03.473181963 CEST	38990	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:03.744518042 CEST	9999	38990	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:03.745287895 CEST	38992	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:04.016601086 CEST	9999	38992	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:04.017421961 CEST	38994	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:04.288903952 CEST	9999	38994	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:04.290019989 CEST	38996	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:04.561573029 CEST	9999	38996	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:04.562736034 CEST	38998	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:04.834249020 CEST	9999	38998	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:04.835133076 CEST	39000	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:05.106431007 CEST	9999	39000	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:05.107382059 CEST	39002	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:05.378837109 CEST	9999	39002	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:05.379807949 CEST	39004	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:05.651370049 CEST	9999	39004	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:05.651957989 CEST	39006	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:05.923376083 CEST	9999	39006	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:05.924606085 CEST	39008	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:06.195836067 CEST	9999	39008	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:06.196614027 CEST	39010	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:06.468310118 CEST	9999	39010	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:06.468991995 CEST	39012	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:06.740478039 CEST	9999	39012	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:06.741570950 CEST	39014	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:07.013185978 CEST	9999	39014	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:07.014061928 CEST	39016	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:07.285295010 CEST	9999	39016	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:07.286147118 CEST	39018	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:07.557425022 CEST	9999	39018	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:07.558475018 CEST	39020	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:07.829940081 CEST	9999	39020	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:07.830984116 CEST	39022	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:08.102437973 CEST	9999	39022	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:08.103609085 CEST	39024	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:08.374980927 CEST	9999	39024	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:08.376512051 CEST	39026	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:08.647929907 CEST	9999	39026	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:08.649033070 CEST	39028	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:08.920897007 CEST	9999	39028	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:08.922102928 CEST	39030	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:09.193696022 CEST	9999	39030	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:09.194896936 CEST	39032	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:09.466494083 CEST	9999	39032	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:09.467603922 CEST	39034	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:09.739056110 CEST	9999	39034	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:09.740149975 CEST	39036	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:10.011445999 CEST	9999	39036	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:10.012188911 CEST	39038	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:10.283492088 CEST	9999	39038	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:10.284348011 CEST	39040	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:10.555547953 CEST	9999	39040	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:10.556557894 CEST	39042	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:10.827913046 CEST	9999	39042	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:10.828701019 CEST	39044	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:11.100301027 CEST	9999	39044	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:11.101106882 CEST	39046	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:11.372581005 CEST	9999	39046	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:11.373230934 CEST	39048	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:11.644366026 CEST	9999	39048	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:11.645163059 CEST	39050	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:11.917150021 CEST	9999	39050	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:11.918401003 CEST	39052	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:12.189871073 CEST	9999	39052	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:12.190660000 CEST	39054	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:12.462064981 CEST	9999	39054	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:12.462869883 CEST	39056	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:12.734358072 CEST	9999	39056	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:12.735233068 CEST	39058	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:13.007234097 CEST	9999	39058	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:13.008228064 CEST	39060	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:13.281199932 CEST	9999	39060	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:13.281971931 CEST	39062	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:13.556381941 CEST	9999	39062	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:13.557121038 CEST	39064	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:13.828540087 CEST	9999	39064	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:13.829382896 CEST	39066	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:14.101058960 CEST	9999	39066	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:14.101927042 CEST	39068	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:14.373193026 CEST	9999	39068	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:14.373878002 CEST	39070	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:14.645194054 CEST	9999	39070	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:14.646017075 CEST	39072	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:14.917486906 CEST	9999	39072	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:14.918343067 CEST	39074	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:15.189898968 CEST	9999	39074	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:15.190490007 CEST	39076	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:15.461775064 CEST	9999	39076	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:15.462672949 CEST	39078	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:15.733894110 CEST	9999	39078	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:15.734591961 CEST	39080	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:16.006122112 CEST	9999	39080	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:16.006833076 CEST	39082	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:16.278407097 CEST	9999	39082	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:16.278950930 CEST	39084	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:16.550263882 CEST	9999	39084	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:16.550756931 CEST	39086	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:16.822005033 CEST	9999	39086	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:16.822509050 CEST	39088	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:17.093671083 CEST	9999	39088	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:17.094505072 CEST	39090	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:17.365742922 CEST	9999	39090	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:17.366329908 CEST	39092	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:17.637864113 CEST	9999	39092	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:17.638448954 CEST	39094	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:17.909940004 CEST	9999	39094	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:17.910716057 CEST	39096	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:18.181915045 CEST	9999	39096	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:18.182845116 CEST	39098	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:18.454229116 CEST	9999	39098	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:18.454899073 CEST	39100	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:18.726413012 CEST	9999	39100	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:18.726995945 CEST	39102	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:18.998524904 CEST	9999	39102	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:18.999526024 CEST	39104	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:19.271219015 CEST	9999	39104	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:19.271826982 CEST	39106	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:19.544620037 CEST	9999	39106	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:19.545212030 CEST	39108	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:19.816653967 CEST	9999	39108	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:19.817625046 CEST	39110	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:20.089117050 CEST	9999	39110	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:20.090035915 CEST	39112	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:20.361414909 CEST	9999	39112	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:20.361917973 CEST	39114	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:20.633316040 CEST	9999	39114	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:20.633869886 CEST	39116	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:20.905356884 CEST	9999	39116	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:20.906112909 CEST	39118	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:21.177537918 CEST	9999	39118	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:21.178076029 CEST	39120	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:21.449531078 CEST	9999	39120	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:21.450050116 CEST	39122	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:21.721581936 CEST	9999	39122	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:21.722192049 CEST	39124	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:21.993474007 CEST	9999	39124	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:21.994038105 CEST	39126	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:22.265338898 CEST	9999	39126	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:22.265927076 CEST	39128	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:22.537503004 CEST	9999	39128	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:22.538120985 CEST	39130	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:22.809739113 CEST	9999	39130	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:22.810262918 CEST	39132	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:23.081738949 CEST	9999	39132	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:23.082763910 CEST	39134	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:23.353961945 CEST	9999	39134	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:23.354748964 CEST	39136	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:23.626322031 CEST	9999	39136	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:23.627290964 CEST	39138	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:23.898765087 CEST	9999	39138	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:23.899323940 CEST	39140	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:24.170644045 CEST	9999	39140	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:24.171159029 CEST	39142	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:24.442399979 CEST	9999	39142	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:24.443042040 CEST	39144	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:24.714597940 CEST	9999	39144	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:24.715261936 CEST	39146	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:24.986901045 CEST	9999	39146	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:24.987420082 CEST	39148	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:25.258758068 CEST	9999	39148	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:25.259382963 CEST	39150	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:25.530858040 CEST	9999	39150	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:25.531327963 CEST	39152	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:25.802664042 CEST	9999	39152	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:25.803041935 CEST	39154	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:26.074635029 CEST	9999	39154	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:26.075022936 CEST	39156	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:26.346498966 CEST	9999	39156	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:26.347049952 CEST	39158	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:26.618556976 CEST	9999	39158	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:26.619211912 CEST	39160	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:26.890465021 CEST	9999	39160	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:26.891004086 CEST	39162	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:27.162249088 CEST	9999	39162	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:27.162795067 CEST	39164	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:27.434180021 CEST	9999	39164	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:27.434669018 CEST	39166	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:27.706175089 CEST	9999	39166	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:27.706758976 CEST	39168	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:27.978343010 CEST	9999	39168	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:27.978914022 CEST	39170	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:28.250411034 CEST	9999	39170	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:28.250983000 CEST	39172	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:28.522375107 CEST	9999	39172	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:28.522877932 CEST	39174	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:28.796262980 CEST	9999	39174	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:28.796803951 CEST	39176	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:29.068238020 CEST	9999	39176	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:29.068823099 CEST	39178	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:29.340404034 CEST	9999	39178	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:29.341142893 CEST	39180	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:29.612500906 CEST	9999	39180	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:29.613013983 CEST	39182	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:29.884239912 CEST	9999	39182	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:29.884711027 CEST	39184	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:30.155908108 CEST	9999	39184	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:30.156431913 CEST	39186	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:30.427704096 CEST	9999	39186	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:30.428102016 CEST	39188	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:30.699629068 CEST	9999	39188	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:30.699990988 CEST	39190	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:30.971410990 CEST	9999	39190	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:30.972312927 CEST	39192	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:31.243499994 CEST	9999	39192	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:31.243930101 CEST	39194	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:31.515136003 CEST	9999	39194	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:31.515913010 CEST	39196	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:31.787412882 CEST	9999	39196	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:31.788276911 CEST	39198	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:32.059698105 CEST	9999	39198	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:32.060571909 CEST	39200	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:32.332499981 CEST	9999	39200	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:32.333014965 CEST	39202	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:32.604151964 CEST	9999	39202	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:32.604954004 CEST	39204	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:32.876467943 CEST	9999	39204	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:32.877635956 CEST	39206	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:33.149158001 CEST	9999	39206	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:33.149861097 CEST	39208	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:33.421129942 CEST	9999	39208	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:33.421642065 CEST	39210	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:33.693052053 CEST	9999	39210	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:33.693579912 CEST	39212	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:33.965049982 CEST	9999	39212	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:33.965832949 CEST	39214	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:34.238518953 CEST	9999	39214	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:34.239027977 CEST	39216	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:34.510435104 CEST	9999	39216	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:34.511045933 CEST	39218	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:34.782485008 CEST	9999	39218	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:34.783206940 CEST	39220	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:35.054605007 CEST	9999	39220	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:35.055749893 CEST	39222	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:35.326994896 CEST	9999	39222	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:35.327758074 CEST	39224	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:35.599132061 CEST	9999	39224	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:35.599663973 CEST	39226	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:35.871098995 CEST	9999	39226	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:35.871661901 CEST	39228	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:36.142851114 CEST	9999	39228	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:36.144028902 CEST	39230	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:36.415290117 CEST	9999	39230	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:36.415941000 CEST	39232	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:36.687501907 CEST	9999	39232	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:36.688138962 CEST	39234	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:36.959582090 CEST	9999	39234	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:36.960144043 CEST	39236	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:37.231498003 CEST	9999	39236	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:37.232070923 CEST	39238	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:37.503269911 CEST	9999	39238	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:37.504014015 CEST	39240	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:37.775511980 CEST	9999	39240	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:37.776026011 CEST	39242	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:38.047554016 CEST	9999	39242	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:38.048198938 CEST	39244	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:38.319580078 CEST	9999	39244	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:38.320163012 CEST	39246	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:38.591669083 CEST	9999	39246	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:38.592257977 CEST	39248	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:38.863501072 CEST	9999	39248	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:38.864105940 CEST	39250	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:39.135545015 CEST	9999	39250	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:39.136408091 CEST	39252	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:39.407783985 CEST	9999	39252	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:39.408400059 CEST	39254	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:39.679972887 CEST	9999	39254	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:39.680543900 CEST	39256	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:39.951719046 CEST	9999	39256	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:39.952363968 CEST	39258	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:40.223587036 CEST	9999	39258	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:40.224370003 CEST	39260	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:40.496684074 CEST	9999	39260	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:40.497423887 CEST	39262	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:40.769226074 CEST	9999	39262	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:40.769714117 CEST	39264	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:41.044636965 CEST	9999	39264	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:41.045392990 CEST	39266	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:41.316543102 CEST	9999	39266	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:41.317223072 CEST	39268	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:41.588778019 CEST	9999	39268	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:41.589288950 CEST	39270	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:41.860892057 CEST	9999	39270	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:41.861392975 CEST	39272	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:42.132628918 CEST	9999	39272	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:42.133081913 CEST	39274	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:42.404475927 CEST	9999	39274	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:42.404985905 CEST	39276	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:42.676620960 CEST	9999	39276	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:42.677068949 CEST	39278	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:42.948450089 CEST	9999	39278	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:42.948834896 CEST	39280	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:43.220189095 CEST	9999	39280	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:43.220684052 CEST	39282	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:43.498008966 CEST	9999	39282	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:43.498459101 CEST	39284	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:43.772665024 CEST	9999	39284	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:43.773135900 CEST	39286	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:44.044836044 CEST	9999	39286	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:44.045311928 CEST	39288	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:44.317037106 CEST	9999	39288	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:44.317624092 CEST	39290	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:44.589236975 CEST	9999	39290	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:44.590364933 CEST	39292	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:44.861923933 CEST	9999	39292	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:44.862551928 CEST	39294	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:45.133817911 CEST	9999	39294	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:45.134944916 CEST	39296	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:45.406244040 CEST	9999	39296	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:45.407397985 CEST	39298	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:45.678747892 CEST	9999	39298	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:45.679678917 CEST	39300	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:45.951349974 CEST	9999	39300	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:45.952469110 CEST	39302	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:46.223798037 CEST	9999	39302	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:46.224814892 CEST	39304	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:46.496072054 CEST	9999	39304	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:46.497013092 CEST	39306	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:46.768398046 CEST	9999	39306	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:46.769356966 CEST	39308	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:47.040859938 CEST	9999	39308	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:47.041327000 CEST	39310	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:47.312972069 CEST	9999	39310	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:47.313879013 CEST	39312	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:47.588345051 CEST	9999	39312	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:47.589023113 CEST	39314	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:47.860690117 CEST	9999	39314	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:47.861371994 CEST	39316	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:48.132564068 CEST	9999	39316	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:48.133281946 CEST	39318	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:48.404581070 CEST	9999	39318	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:48.405242920 CEST	39320	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:48.676796913 CEST	9999	39320	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:48.677689075 CEST	39322	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:48.949259996 CEST	9999	39322	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:48.950232983 CEST	39324	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:49.221630096 CEST	9999	39324	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:49.222672939 CEST	39326	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:49.494031906 CEST	9999	39326	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:49.494945049 CEST	39328	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:49.766412020 CEST	9999	39328	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:49.767524958 CEST	39330	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:50.039005041 CEST	9999	39330	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:50.039702892 CEST	39332	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:50.311069965 CEST	9999	39332	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:50.311973095 CEST	39334	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:50.583561897 CEST	9999	39334	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:50.584462881 CEST	39336	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:50.855874062 CEST	9999	39336	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:50.856462955 CEST	39338	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:51.127928019 CEST	9999	39338	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:51.128698111 CEST	39340	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:51.400046110 CEST	9999	39340	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:51.400693893 CEST	39342	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:51.671967030 CEST	9999	39342	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:51.672586918 CEST	39344	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:51.943861961 CEST	9999	39344	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:51.944618940 CEST	39346	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:52.215975046 CEST	9999	39346	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:52.216574907 CEST	39348	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:52.488099098 CEST	9999	39348	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:52.488815069 CEST	39350	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:52.760315895 CEST	9999	39350	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:52.760890961 CEST	39352	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:53.032100916 CEST	9999	39352	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:53.032794952 CEST	39354	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:53.303999901 CEST	9999	39354	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:53.304744005 CEST	39356	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:53.576114893 CEST	9999	39356	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:53.577088118 CEST	39358	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:53.848732948 CEST	9999	39358	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:53.849486113 CEST	39360	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:54.120820045 CEST	9999	39360	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:54.121305943 CEST	39362	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:54.392529964 CEST	9999	39362	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:54.392954111 CEST	39364	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:54.664608002 CEST	9999	39364	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:54.665220022 CEST	39366	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:54.936800003 CEST	9999	39366	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:54.937330961 CEST	39368	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:55.208559036 CEST	9999	39368	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:55.209049940 CEST	39370	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:55.480745077 CEST	9999	39370	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:55.481194973 CEST	39372	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:55.752695084 CEST	9999	39372	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:55.753233910 CEST	39374	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:56.024838924 CEST	9999	39374	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:56.025434017 CEST	39376	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:56.297009945 CEST	9999	39376	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:56.297532082 CEST	39378	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:56.569050074 CEST	9999	39378	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:56.569654942 CEST	39380	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:56.841109037 CEST	9999	39380	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:56.841739893 CEST	39382	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:57.112910986 CEST	9999	39382	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:57.113472939 CEST	39384	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:57.384864092 CEST	9999	39384	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:57.385381937 CEST	39386	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:57.656819105 CEST	9999	39386	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:57.657393932 CEST	39388	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:57.928936005 CEST	9999	39388	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:57.929405928 CEST	39390	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:58.200577021 CEST	9999	39390	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:58.201176882 CEST	39392	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:58.472606897 CEST	9999	39392	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:58.473062992 CEST	39394	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:58.744851112 CEST	9999	39394	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:58.745349884 CEST	39396	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:59.016623974 CEST	9999	39396	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:59.017175913 CEST	39398	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:59.288531065 CEST	9999	39398	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:59.289017916 CEST	39400	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:59.560769081 CEST	9999	39400	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:59.561353922 CEST	39402	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:24:59.832921028 CEST	9999	39402	156.253.227.62	192.168.2.15
Apr 26, 2025 16:24:59.833487988 CEST	39404	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:00.104880095 CEST	9999	39404	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:00.105428934 CEST	39406	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:00.376703978 CEST	9999	39406	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:00.377334118 CEST	39408	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:00.648610115 CEST	9999	39408	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:00.649174929 CEST	39410	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:00.920603991 CEST	9999	39410	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:00.921370983 CEST	39412	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:01.192965031 CEST	9999	39412	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:01.193587065 CEST	39414	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:01.465184927 CEST	9999	39414	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:01.465922117 CEST	39416	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:01.737284899 CEST	9999	39416	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:01.737982035 CEST	39418	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:02.009313107 CEST	9999	39418	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:02.009795904 CEST	39420	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:02.281390905 CEST	9999	39420	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:02.282069921 CEST	39422	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:02.553590059 CEST	9999	39422	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:02.554090023 CEST	39424	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:02.825696945 CEST	9999	39424	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:02.826397896 CEST	39426	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:03.098536015 CEST	9999	39426	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:03.099220991 CEST	39428	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:03.370668888 CEST	9999	39428	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:03.371332884 CEST	39430	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:03.642569065 CEST	9999	39430	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:03.643070936 CEST	39432	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:03.914535999 CEST	9999	39432	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:03.915172100 CEST	39434	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:04.186733961 CEST	9999	39434	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:04.187653065 CEST	39436	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:04.458864927 CEST	9999	39436	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:04.459599972 CEST	39438	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:04.731017113 CEST	9999	39438	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:04.731749058 CEST	39440	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:05.003057957 CEST	9999	39440	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:05.004066944 CEST	39442	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:05.275505066 CEST	9999	39442	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:05.276571989 CEST	39444	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:05.548125029 CEST	9999	39444	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:05.549043894 CEST	39446	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:05.820712090 CEST	9999	39446	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:05.821680069 CEST	39448	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:06.093065977 CEST	9999	39448	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:06.093900919 CEST	39450	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:06.365391016 CEST	9999	39450	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:06.366058111 CEST	39452	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:06.637480974 CEST	9999	39452	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:06.638163090 CEST	39454	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:06.910355091 CEST	9999	39454	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:06.911228895 CEST	39456	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:07.182621002 CEST	9999	39456	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:07.183183908 CEST	39458	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:07.454638958 CEST	9999	39458	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:07.455740929 CEST	39460	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:07.728344917 CEST	9999	39460	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:07.729140043 CEST	39462	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:08.000814915 CEST	9999	39462	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:08.001789093 CEST	39464	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:08.273122072 CEST	9999	39464	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:08.274193048 CEST	39466	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:08.545717001 CEST	9999	39466	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:08.546650887 CEST	39468	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:08.818232059 CEST	9999	39468	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:08.818922043 CEST	39470	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:09.090616941 CEST	9999	39470	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:09.091465950 CEST	39472	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:09.363023043 CEST	9999	39472	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:09.363765955 CEST	39474	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:09.635375977 CEST	9999	39474	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:09.636035919 CEST	39476	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:09.907351017 CEST	9999	39476	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:09.908058882 CEST	39478	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:10.179481983 CEST	9999	39478	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:10.180540085 CEST	39480	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:10.452090025 CEST	9999	39480	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:10.452965021 CEST	39482	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:10.724936008 CEST	9999	39482	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:10.725728035 CEST	39484	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:10.996969938 CEST	9999	39484	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:10.997669935 CEST	39486	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:11.268855095 CEST	9999	39486	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:11.269668102 CEST	39488	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:11.541064024 CEST	9999	39488	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:11.541606903 CEST	39490	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:11.813035965 CEST	9999	39490	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:11.813668966 CEST	39492	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:12.084863901 CEST	9999	39492	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:12.085769892 CEST	39494	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:12.357009888 CEST	9999	39494	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:12.358062983 CEST	39496	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:12.629487991 CEST	9999	39496	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:12.630395889 CEST	39498	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:12.901890039 CEST	9999	39498	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:12.902879000 CEST	39500	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:13.174153090 CEST	9999	39500	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:13.175175905 CEST	39502	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:13.446492910 CEST	9999	39502	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:13.447381973 CEST	39504	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:13.718724012 CEST	9999	39504	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:13.719616890 CEST	39506	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:13.990977049 CEST	9999	39506	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:13.991873980 CEST	39508	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:14.263358116 CEST	9999	39508	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:14.264221907 CEST	39510	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:14.535783052 CEST	9999	39510	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:14.536806107 CEST	39512	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:14.808732033 CEST	9999	39512	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:14.809587002 CEST	39514	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:15.080892086 CEST	9999	39514	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:15.081834078 CEST	39516	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:15.353353024 CEST	9999	39516	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:15.354480028 CEST	39518	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:15.626075029 CEST	9999	39518	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:15.627053022 CEST	39520	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:15.898658991 CEST	9999	39520	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:15.899724960 CEST	39522	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:16.171092987 CEST	9999	39522	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:16.172034025 CEST	39524	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:16.443509102 CEST	9999	39524	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:16.444613934 CEST	39526	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:16.716001987 CEST	9999	39526	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:16.717010975 CEST	39528	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:16.988285065 CEST	9999	39528	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:16.989315987 CEST	39530	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:17.260510921 CEST	9999	39530	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:17.261446953 CEST	39532	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:17.532958031 CEST	9999	39532	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:17.533926010 CEST	39534	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:17.805474043 CEST	9999	39534	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:17.806268930 CEST	39536	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:18.077831984 CEST	9999	39536	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:18.079036951 CEST	39538	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:18.350522041 CEST	9999	39538	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:18.351636887 CEST	39540	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:18.622956991 CEST	9999	39540	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:18.623779058 CEST	39542	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:18.895066023 CEST	9999	39542	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:18.896116972 CEST	39544	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:19.168803930 CEST	9999	39544	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:19.169811964 CEST	39546	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:19.441323996 CEST	9999	39546	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:19.442354918 CEST	39548	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:19.713671923 CEST	9999	39548	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:19.714550018 CEST	39550	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:19.985815048 CEST	9999	39550	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:19.986696005 CEST	39552	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:20.257858038 CEST	9999	39552	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:20.258920908 CEST	39554	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:20.530235052 CEST	9999	39554	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:20.531307936 CEST	39556	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:20.802800894 CEST	9999	39556	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:20.803591013 CEST	39558	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:21.075104952 CEST	9999	39558	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:21.076009035 CEST	39560	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:21.347306967 CEST	9999	39560	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:21.348397017 CEST	39562	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:21.619611025 CEST	9999	39562	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:21.620646000 CEST	39564	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:21.892090082 CEST	9999	39564	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:21.893013954 CEST	39566	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:22.164522886 CEST	9999	39566	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:22.165478945 CEST	39568	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:22.437033892 CEST	9999	39568	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:22.437988043 CEST	39570	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:22.709538937 CEST	9999	39570	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:22.710176945 CEST	39572	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:22.981527090 CEST	9999	39572	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:22.982516050 CEST	39574	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:23.254060030 CEST	9999	39574	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:23.255095005 CEST	39576	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:23.526746035 CEST	9999	39576	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:23.527683020 CEST	39578	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:23.799264908 CEST	9999	39578	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:23.800121069 CEST	39580	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:24.071470976 CEST	9999	39580	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:24.072400093 CEST	39582	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:24.343792915 CEST	9999	39582	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:24.344683886 CEST	39584	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:24.616127968 CEST	9999	39584	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:24.616925955 CEST	39586	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:24.888442039 CEST	9999	39586	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:24.889313936 CEST	39588	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:25.160702944 CEST	9999	39588	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:25.161376953 CEST	39590	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:25.432678938 CEST	9999	39590	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:25.433522940 CEST	39592	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:25.705053091 CEST	9999	39592	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:25.705734015 CEST	39594	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:25.977154016 CEST	9999	39594	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:25.978087902 CEST	39596	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:26.249558926 CEST	9999	39596	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:26.250710964 CEST	39598	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:26.522078991 CEST	9999	39598	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:26.523051023 CEST	39600	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:26.794387102 CEST	9999	39600	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:26.794914961 CEST	39602	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:27.066199064 CEST	9999	39602	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:27.066719055 CEST	39604	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:27.338284969 CEST	9999	39604	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:27.339010000 CEST	39606	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:27.610582113 CEST	9999	39606	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:27.611289978 CEST	39608	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:27.882508993 CEST	9999	39608	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:27.883090019 CEST	39610	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:28.154369116 CEST	9999	39610	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:28.154982090 CEST	39612	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:28.426521063 CEST	9999	39612	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:28.427246094 CEST	39614	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:28.698776007 CEST	9999	39614	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:28.699683905 CEST	39616	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:28.971129894 CEST	9999	39616	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:28.971594095 CEST	39618	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:29.243105888 CEST	9999	39618	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:29.243649006 CEST	39620	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:29.515170097 CEST	9999	39620	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:29.515780926 CEST	39622	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:29.787224054 CEST	9999	39622	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:29.787688017 CEST	39624	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:30.058881044 CEST	9999	39624	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:30.059261084 CEST	39626	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:30.330475092 CEST	9999	39626	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:30.330831051 CEST	39628	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:30.603359938 CEST	9999	39628	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:30.603910923 CEST	39630	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:30.875391006 CEST	9999	39630	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:30.875904083 CEST	39632	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:31.147430897 CEST	9999	39632	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:31.147808075 CEST	39634	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:31.419246912 CEST	9999	39634	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:31.419636965 CEST	39636	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:31.690946102 CEST	9999	39636	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:31.691406965 CEST	39638	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:31.962770939 CEST	9999	39638	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:31.963397026 CEST	39640	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:32.234899998 CEST	9999	39640	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:32.235568047 CEST	39642	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:32.507038116 CEST	9999	39642	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:32.507569075 CEST	39644	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:32.778883934 CEST	9999	39644	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:32.779362917 CEST	39646	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:33.050925016 CEST	9999	39646	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:33.051757097 CEST	39648	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:33.323441029 CEST	9999	39648	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:33.324151039 CEST	39650	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:33.595715046 CEST	9999	39650	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:33.596534014 CEST	39652	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:33.867922068 CEST	9999	39652	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:33.868544102 CEST	39654	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:34.140028954 CEST	9999	39654	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:34.140579939 CEST	39656	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:34.412127972 CEST	9999	39656	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:34.412825108 CEST	39658	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:34.684365988 CEST	9999	39658	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:34.685071945 CEST	39660	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:34.956423998 CEST	9999	39660	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:34.956875086 CEST	39662	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:35.228158951 CEST	9999	39662	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:35.228858948 CEST	39664	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:35.500315905 CEST	9999	39664	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:35.500935078 CEST	39666	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:35.772758961 CEST	9999	39666	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:35.773399115 CEST	39668	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:36.045067072 CEST	9999	39668	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:36.046109915 CEST	39670	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:36.317709923 CEST	9999	39670	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:36.318211079 CEST	39672	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:36.589534044 CEST	9999	39672	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:36.590548992 CEST	39674	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:36.862061024 CEST	9999	39674	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:36.863106966 CEST	39676	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:37.134639025 CEST	9999	39676	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:37.135596991 CEST	39678	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:37.407018900 CEST	9999	39678	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:37.407721043 CEST	39680	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:37.679148912 CEST	9999	39680	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:37.679580927 CEST	39682	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:37.951168060 CEST	9999	39682	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:37.951605082 CEST	39684	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:38.223045111 CEST	9999	39684	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:38.223534107 CEST	39686	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:38.494942904 CEST	9999	39686	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:38.495630980 CEST	39688	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:38.767060995 CEST	9999	39688	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:38.767688036 CEST	39690	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:39.039210081 CEST	9999	39690	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:39.039851904 CEST	39692	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:39.311166048 CEST	9999	39692	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:39.311777115 CEST	39694	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:39.583764076 CEST	9999	39694	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:39.584635019 CEST	39696	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:39.855757952 CEST	9999	39696	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:39.856309891 CEST	39698	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:40.127504110 CEST	9999	39698	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:40.128110886 CEST	39700	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:40.399534941 CEST	9999	39700	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:40.400350094 CEST	39702	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:40.671746016 CEST	9999	39702	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:40.672923088 CEST	39704	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:40.944153070 CEST	9999	39704	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:40.944827080 CEST	39706	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:41.216176987 CEST	9999	39706	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:41.217283010 CEST	39708	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:41.488802910 CEST	9999	39708	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:41.489727974 CEST	39710	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:41.761243105 CEST	9999	39710	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:41.761931896 CEST	39712	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:42.033330917 CEST	9999	39712	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:42.033799887 CEST	39714	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:42.304996014 CEST	9999	39714	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:42.306052923 CEST	39716	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:42.577570915 CEST	9999	39716	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:42.578476906 CEST	39718	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:42.849910021 CEST	9999	39718	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:42.850841999 CEST	39720	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:43.121977091 CEST	9999	39720	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:43.123153925 CEST	39722	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:43.396486044 CEST	9999	39722	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:43.397747993 CEST	39724	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:43.669460058 CEST	9999	39724	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:43.670388937 CEST	39726	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:43.942048073 CEST	9999	39726	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:43.943047047 CEST	39728	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:44.214571953 CEST	9999	39728	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:44.215791941 CEST	39730	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:44.487497091 CEST	9999	39730	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:44.488296032 CEST	39732	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:44.759660959 CEST	9999	39732	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:44.760341883 CEST	39734	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:45.031596899 CEST	9999	39734	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:45.032386065 CEST	39736	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:45.303950071 CEST	9999	39736	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:45.304578066 CEST	39738	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:45.575987101 CEST	9999	39738	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:45.576785088 CEST	39740	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:45.848115921 CEST	9999	39740	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:45.848696947 CEST	39742	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:46.119848967 CEST	9999	39742	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:46.120367050 CEST	39744	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:46.391766071 CEST	9999	39744	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:46.392292976 CEST	39746	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:46.664017916 CEST	9999	39746	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:46.664570093 CEST	39748	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:46.935928106 CEST	9999	39748	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:46.936383009 CEST	39750	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:47.207536936 CEST	9999	39750	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:47.207905054 CEST	39752	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:47.479425907 CEST	9999	39752	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:47.479842901 CEST	39754	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:47.751621962 CEST	9999	39754	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:47.752043962 CEST	39756	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:48.023231030 CEST	9999	39756	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:48.023691893 CEST	39758	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:48.295836926 CEST	9999	39758	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:48.296201944 CEST	39760	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:48.567522049 CEST	9999	39760	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:48.567950964 CEST	39762	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:48.839442015 CEST	9999	39762	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:48.839950085 CEST	39764	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:49.111584902 CEST	9999	39764	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:49.112045050 CEST	39766	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:49.383676052 CEST	9999	39766	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:49.384542942 CEST	39768	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:49.655936003 CEST	9999	39768	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:49.656501055 CEST	39770	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:49.927803993 CEST	9999	39770	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:49.928406954 CEST	39772	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:50.200057030 CEST	9999	39772	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:50.200478077 CEST	39774	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:50.472017050 CEST	9999	39774	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:50.472457886 CEST	39776	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:50.743727922 CEST	9999	39776	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:50.744149923 CEST	39778	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:51.015778065 CEST	9999	39778	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:51.016273975 CEST	39780	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:51.287758112 CEST	9999	39780	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:51.288161039 CEST	39782	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:51.559752941 CEST	9999	39782	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:51.560245037 CEST	39784	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:51.831614971 CEST	9999	39784	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:51.832045078 CEST	39786	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:52.103276014 CEST	9999	39786	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:52.103673935 CEST	39788	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:52.375113010 CEST	9999	39788	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:52.375642061 CEST	39790	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:52.647114992 CEST	9999	39790	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:52.647561073 CEST	39792	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:52.919339895 CEST	9999	39792	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:52.919836998 CEST	39794	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:53.191380978 CEST	9999	39794	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:53.191776991 CEST	39796	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:53.463252068 CEST	9999	39796	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:53.463793039 CEST	39798	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:53.735081911 CEST	9999	39798	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:53.735519886 CEST	39800	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:54.007106066 CEST	9999	39800	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:54.007600069 CEST	39802	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:54.279285908 CEST	9999	39802	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:54.279652119 CEST	39804	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:54.550915956 CEST	9999	39804	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:54.551497936 CEST	39806	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:54.822952986 CEST	9999	39806	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:54.823610067 CEST	39808	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:55.095000982 CEST	9999	39808	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:55.095483065 CEST	39810	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:55.366771936 CEST	9999	39810	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:55.367320061 CEST	39812	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:55.641591072 CEST	9999	39812	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:55.642338991 CEST	39814	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:55.914238930 CEST	9999	39814	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:55.914952993 CEST	39816	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:56.187964916 CEST	9999	39816	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:56.188550949 CEST	39818	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:56.459933996 CEST	9999	39818	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:56.460649014 CEST	39820	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:56.732038975 CEST	9999	39820	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:56.733191967 CEST	39822	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:57.005484104 CEST	9999	39822	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:57.006381035 CEST	39824	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:57.278145075 CEST	9999	39824	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:57.279056072 CEST	39826	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:57.550581932 CEST	9999	39826	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:57.551558971 CEST	39828	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:57.822925091 CEST	9999	39828	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:57.823873043 CEST	39830	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:58.095231056 CEST	9999	39830	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:58.095971107 CEST	39832	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:58.367427111 CEST	9999	39832	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:58.367765903 CEST	39834	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:58.639444113 CEST	9999	39834	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:58.639806986 CEST	39836	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:58.911115885 CEST	9999	39836	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:58.911592007 CEST	39838	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:59.182950020 CEST	9999	39838	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:59.183615923 CEST	39840	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:59.455230951 CEST	9999	39840	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:59.455777884 CEST	39842	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:59.727277994 CEST	9999	39842	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:59.727849007 CEST	39844	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:25:59.999197960 CEST	9999	39844	156.253.227.62	192.168.2.15
Apr 26, 2025 16:25:59.999665976 CEST	39846	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:00.271012068 CEST	9999	39846	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:00.271657944 CEST	39848	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:00.543368101 CEST	9999	39848	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:00.544210911 CEST	39850	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:00.815684080 CEST	9999	39850	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:00.816498995 CEST	39852	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:01.087865114 CEST	9999	39852	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:01.088371038 CEST	39854	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:01.359647989 CEST	9999	39854	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:01.360109091 CEST	39856	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:01.631407022 CEST	9999	39856	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:01.632005930 CEST	39858	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:01.903554916 CEST	9999	39858	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:01.904181004 CEST	39860	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:02.175810099 CEST	9999	39860	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:02.176287889 CEST	39862	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:02.447894096 CEST	9999	39862	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:02.448379040 CEST	39864	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:02.719575882 CEST	9999	39864	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:02.720027924 CEST	39866	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:02.991374016 CEST	9999	39866	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:02.992213011 CEST	39868	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:03.263711929 CEST	9999	39868	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:03.264278889 CEST	39870	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:03.535917997 CEST	9999	39870	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:03.536482096 CEST	39872	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:03.807892084 CEST	9999	39872	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:03.808656931 CEST	39874	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:04.080003023 CEST	9999	39874	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:04.080991030 CEST	39876	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:04.352890015 CEST	9999	39876	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:04.353451014 CEST	39878	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:04.624988079 CEST	9999	39878	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:04.625492096 CEST	39880	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:04.896779060 CEST	9999	39880	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:04.897418976 CEST	39882	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:05.168888092 CEST	9999	39882	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:05.169436932 CEST	39884	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:05.440999031 CEST	9999	39884	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:05.441556931 CEST	39886	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:05.712990046 CEST	9999	39886	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:05.713757038 CEST	39888	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:05.985285044 CEST	9999	39888	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:05.986090899 CEST	39890	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:06.257653952 CEST	9999	39890	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:06.258490086 CEST	39892	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:06.529783964 CEST	9999	39892	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:06.530781984 CEST	39894	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:06.802035093 CEST	9999	39894	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:06.802948952 CEST	39896	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:07.074554920 CEST	9999	39896	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:07.075073004 CEST	39898	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:07.346594095 CEST	9999	39898	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:07.347068071 CEST	39900	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:07.618325949 CEST	9999	39900	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:07.618841887 CEST	39902	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:07.890161037 CEST	9999	39902	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:07.890697002 CEST	39904	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:08.162220001 CEST	9999	39904	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:08.162779093 CEST	39906	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:08.434310913 CEST	9999	39906	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:08.434952021 CEST	39908	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:08.706211090 CEST	9999	39908	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:08.706999063 CEST	39910	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:08.978363991 CEST	9999	39910	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:08.979384899 CEST	39912	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:09.250930071 CEST	9999	39912	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:09.251796961 CEST	39914	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:09.523258924 CEST	9999	39914	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:09.524136066 CEST	39916	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:09.795357943 CEST	9999	39916	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:09.796108961 CEST	39918	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:10.067404032 CEST	9999	39918	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:10.067974091 CEST	39920	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:10.339342117 CEST	9999	39920	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:10.340151072 CEST	39922	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:10.611462116 CEST	9999	39922	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:10.612502098 CEST	39924	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:10.883963108 CEST	9999	39924	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:10.884768963 CEST	39926	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:11.156295061 CEST	9999	39926	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:11.157200098 CEST	39928	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:11.428658009 CEST	9999	39928	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:11.429497004 CEST	39930	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:11.700800896 CEST	9999	39930	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:11.701699972 CEST	39932	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:11.973160028 CEST	9999	39932	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:11.974163055 CEST	39934	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:12.245594978 CEST	9999	39934	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:12.246567965 CEST	39936	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:12.518178940 CEST	9999	39936	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:12.518666029 CEST	39938	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:12.790225029 CEST	9999	39938	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:12.790951014 CEST	39940	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:13.062340021 CEST	9999	39940	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:13.062908888 CEST	39942	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:13.334247112 CEST	9999	39942	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:13.334882975 CEST	39944	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:13.606370926 CEST	9999	39944	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:13.607157946 CEST	39946	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:13.878719091 CEST	9999	39946	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:13.879512072 CEST	39948	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:14.150779963 CEST	9999	39948	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:14.151539087 CEST	39950	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:14.423178911 CEST	9999	39950	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:14.423815966 CEST	39952	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:14.695158958 CEST	9999	39952	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:14.695581913 CEST	39954	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:14.966865063 CEST	9999	39954	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:14.967745066 CEST	39956	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:15.239314079 CEST	9999	39956	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:15.240240097 CEST	39958	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:15.511946917 CEST	9999	39958	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:15.512974977 CEST	39960	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:15.784332991 CEST	9999	39960	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:15.785218954 CEST	39962	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:16.056579113 CEST	9999	39962	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:16.057230949 CEST	39964	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:16.328722954 CEST	9999	39964	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:16.329246998 CEST	39966	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:16.600929022 CEST	9999	39966	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:16.601514101 CEST	39968	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:16.872705936 CEST	9999	39968	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:16.873461008 CEST	39970	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:17.144743919 CEST	9999	39970	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:17.145334005 CEST	39972	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:17.416830063 CEST	9999	39972	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:17.417395115 CEST	39974	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:17.688846111 CEST	9999	39974	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:17.689395905 CEST	39976	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:17.960581064 CEST	9999	39976	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:17.961395979 CEST	39978	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:18.232626915 CEST	9999	39978	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:18.233532906 CEST	39980	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:18.505060911 CEST	9999	39980	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:18.506007910 CEST	39982	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:18.777466059 CEST	9999	39982	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:18.778112888 CEST	39984	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:19.049726009 CEST	9999	39984	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:19.098210096 CEST	39986	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:19.369710922 CEST	9999	39986	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:19.371457100 CEST	39988	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:19.642772913 CEST	9999	39988	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:19.643490076 CEST	39990	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:19.914843082 CEST	9999	39990	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:19.915488958 CEST	39992	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:20.187024117 CEST	9999	39992	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:20.187880993 CEST	39994	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:20.459264040 CEST	9999	39994	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:20.460097075 CEST	39996	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:20.731420040 CEST	9999	39996	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:20.732218027 CEST	39998	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:21.003715038 CEST	9999	39998	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:21.004398108 CEST	40000	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:21.275887012 CEST	9999	40000	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:21.276474953 CEST	40002	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:21.547862053 CEST	9999	40002	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:21.548480988 CEST	40004	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:21.819683075 CEST	9999	40004	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:21.820235968 CEST	40006	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:22.091417074 CEST	9999	40006	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:22.091916084 CEST	40008	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:22.363387108 CEST	9999	40008	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:22.363914013 CEST	40010	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:22.635992050 CEST	9999	40010	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:22.636589050 CEST	40012	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:22.907984972 CEST	9999	40012	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:22.908770084 CEST	40014	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:23.180229902 CEST	9999	40014	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:23.180831909 CEST	40016	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:23.452028036 CEST	9999	40016	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:23.452661037 CEST	40018	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:23.723848104 CEST	9999	40018	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:23.724534035 CEST	40020	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:23.996006966 CEST	9999	40020	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:23.996748924 CEST	40022	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:24.268280983 CEST	9999	40022	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:24.268735886 CEST	40024	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:24.540179014 CEST	9999	40024	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:24.540879965 CEST	40026	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:24.812184095 CEST	9999	40026	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:24.812974930 CEST	40028	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:25.084512949 CEST	9999	40028	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:25.085330963 CEST	40030	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:25.356856108 CEST	9999	40030	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:25.357620001 CEST	40032	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:25.629360914 CEST	9999	40032	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:25.629981995 CEST	40034	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:25.901551962 CEST	9999	40034	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:25.902343988 CEST	40036	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:26.173851967 CEST	9999	40036	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:26.174576044 CEST	40038	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:26.446572065 CEST	9999	40038	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:26.447388887 CEST	40040	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:26.718822002 CEST	9999	40040	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:26.719541073 CEST	40042	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:26.990912914 CEST	9999	40042	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:26.991646051 CEST	40044	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:27.263293982 CEST	9999	40044	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:27.263878107 CEST	40046	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:27.535351038 CEST	9999	40046	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:27.535948038 CEST	40048	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:27.807516098 CEST	9999	40048	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:27.808089018 CEST	40050	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:28.079608917 CEST	9999	40050	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:28.080188036 CEST	40052	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:28.351843119 CEST	9999	40052	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:28.352360964 CEST	40054	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:28.623723984 CEST	9999	40054	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:28.624408960 CEST	40056	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:28.895903111 CEST	9999	40056	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:28.896406889 CEST	40058	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:29.168081045 CEST	9999	40058	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:29.168700933 CEST	40060	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:29.439893961 CEST	9999	40060	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:29.440557957 CEST	40062	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:29.711858988 CEST	9999	40062	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:29.712399960 CEST	40064	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:29.984311104 CEST	9999	40064	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:29.984914064 CEST	40066	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:30.256103992 CEST	9999	40066	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:30.256664038 CEST	40068	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:30.529005051 CEST	9999	40068	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:30.529664040 CEST	40070	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:30.801033974 CEST	9999	40070	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:30.801645041 CEST	40072	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:31.073002100 CEST	9999	40072	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:31.073581934 CEST	40074	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:31.345129013 CEST	9999	40074	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:31.345695019 CEST	40076	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:31.617129087 CEST	9999	40076	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:31.617671013 CEST	40078	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:31.890116930 CEST	9999	40078	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:31.890702963 CEST	40080	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:32.162260056 CEST	9999	40080	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:32.162883997 CEST	40082	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:32.434426069 CEST	9999	40082	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:32.434993982 CEST	40084	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:32.706330061 CEST	9999	40084	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:32.706935883 CEST	40086	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:32.978389978 CEST	9999	40086	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:32.979304075 CEST	40088	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:33.250900984 CEST	9999	40088	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:33.251575947 CEST	40090	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:33.523386002 CEST	9999	40090	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:33.524008036 CEST	40092	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:33.795290947 CEST	9999	40092	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:33.795964956 CEST	40094	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:34.067436934 CEST	9999	40094	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:34.068372965 CEST	40096	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:34.339971066 CEST	9999	40096	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:34.340593100 CEST	40098	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:34.612051964 CEST	9999	40098	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:34.612683058 CEST	40100	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:34.883903980 CEST	9999	40100	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:34.884615898 CEST	40102	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:35.155981064 CEST	9999	40102	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:35.156558037 CEST	40104	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:35.428128958 CEST	9999	40104	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:35.428759098 CEST	40106	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:35.700278997 CEST	9999	40106	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:35.700918913 CEST	40108	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:35.972445011 CEST	9999	40108	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:35.973153114 CEST	40110	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:36.244621992 CEST	9999	40110	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:36.245390892 CEST	40112	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:36.516771078 CEST	9999	40112	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:36.517476082 CEST	40114	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:36.788728952 CEST	9999	40114	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:36.789495945 CEST	40116	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:37.061105967 CEST	9999	40116	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:37.061953068 CEST	40118	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:37.333446026 CEST	9999	40118	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:37.334054947 CEST	40120	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:37.605326891 CEST	9999	40120	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:37.605999947 CEST	40122	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:37.877464056 CEST	9999	40122	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:37.878249884 CEST	40124	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:38.149679899 CEST	9999	40124	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:38.150295019 CEST	40126	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:38.421924114 CEST	9999	40126	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:38.422653913 CEST	40128	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:38.693943977 CEST	9999	40128	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:38.694670916 CEST	40130	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:38.967259884 CEST	9999	40130	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:38.967922926 CEST	40132	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:39.240360022 CEST	9999	40132	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:39.241252899 CEST	40134	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:39.515789986 CEST	9999	40134	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:39.516464949 CEST	40136	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:39.787806988 CEST	9999	40136	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:39.788563013 CEST	40138	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:40.059820890 CEST	9999	40138	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:40.060419083 CEST	40140	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:40.331851006 CEST	9999	40140	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:40.332592964 CEST	40142	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:40.605938911 CEST	9999	40142	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:40.606842041 CEST	40144	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:40.878227949 CEST	9999	40144	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:40.879416943 CEST	40146	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:41.153748989 CEST	9999	40146	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:41.154907942 CEST	40148	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:41.426075935 CEST	9999	40148	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:41.426909924 CEST	40150	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:41.700284958 CEST	9999	40150	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:41.701256037 CEST	40152	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:41.972831011 CEST	9999	40152	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:41.973467112 CEST	40154	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:42.244919062 CEST	9999	40154	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:42.245707035 CEST	40156	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:42.517100096 CEST	9999	40156	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:42.518119097 CEST	40158	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:42.789360046 CEST	9999	40158	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:42.790441990 CEST	40160	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:43.062073946 CEST	9999	40160	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:43.062741995 CEST	40162	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:43.334441900 CEST	9999	40162	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:43.335082054 CEST	40164	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:43.607177019 CEST	9999	40164	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:43.607953072 CEST	40166	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:43.882497072 CEST	9999	40166	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:43.883172989 CEST	40168	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:44.154706955 CEST	9999	40168	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:44.155628920 CEST	40170	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:44.427213907 CEST	9999	40170	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:44.427915096 CEST	40172	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:44.699302912 CEST	9999	40172	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:44.699898005 CEST	40174	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:44.971368074 CEST	9999	40174	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:44.972165108 CEST	40176	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:45.243573904 CEST	9999	40176	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:45.244349957 CEST	40178	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:45.516287088 CEST	9999	40178	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:45.516983986 CEST	40180	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:45.789335012 CEST	9999	40180	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:45.790138006 CEST	40182	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:46.061628103 CEST	9999	40182	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:46.062633038 CEST	40184	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:46.333841085 CEST	9999	40184	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:46.334563971 CEST	40186	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:46.605987072 CEST	9999	40186	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:46.606729031 CEST	40188	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:46.878129959 CEST	9999	40188	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:46.878717899 CEST	40190	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:47.150268078 CEST	9999	40190	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:47.151108980 CEST	40192	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:47.422569990 CEST	9999	40192	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:47.423254013 CEST	40194	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:47.694791079 CEST	9999	40194	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:47.695616007 CEST	40196	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:47.966866016 CEST	9999	40196	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:47.967674971 CEST	40198	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:48.238985062 CEST	9999	40198	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:48.239844084 CEST	40200	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:48.511364937 CEST	9999	40200	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:48.512305975 CEST	40202	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:48.783874989 CEST	9999	40202	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:48.784780025 CEST	40204	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:49.056267977 CEST	9999	40204	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:49.056869030 CEST	40206	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:49.328176975 CEST	9999	40206	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:49.328782082 CEST	40208	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:49.600059986 CEST	9999	40208	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:49.600900888 CEST	40210	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:49.872354984 CEST	9999	40210	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:49.873191118 CEST	40212	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:50.144871950 CEST	9999	40212	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:50.145765066 CEST	40214	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:50.417303085 CEST	9999	40214	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:50.418006897 CEST	40216	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:50.689291000 CEST	9999	40216	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:50.690177917 CEST	40218	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:50.961570024 CEST	9999	40218	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:50.962527990 CEST	40220	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:51.234128952 CEST	9999	40220	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:51.234963894 CEST	40222	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:51.507175922 CEST	9999	40222	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:51.507919073 CEST	40224	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:51.779315948 CEST	9999	40224	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:51.780224085 CEST	40226	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:52.053422928 CEST	9999	40226	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:52.054166079 CEST	40228	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:52.326014042 CEST	9999	40228	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:52.326729059 CEST	40230	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:52.598270893 CEST	9999	40230	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:52.599215984 CEST	40232	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:52.870832920 CEST	9999	40232	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:52.871670961 CEST	40234	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:53.143086910 CEST	9999	40234	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:53.143970013 CEST	40236	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:53.415618896 CEST	9999	40236	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:53.416481018 CEST	40238	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:53.688189030 CEST	9999	40238	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:53.689055920 CEST	40240	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:53.960685968 CEST	9999	40240	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:53.961703062 CEST	40242	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:54.233275890 CEST	9999	40242	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:54.234142065 CEST	40244	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:54.505662918 CEST	9999	40244	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:54.506664038 CEST	40246	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:54.777965069 CEST	9999	40246	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:54.779011011 CEST	40248	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:55.050576925 CEST	9999	40248	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:55.051350117 CEST	40250	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:55.322865009 CEST	9999	40250	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:55.323894978 CEST	40252	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:55.596498013 CEST	9999	40252	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:55.597357035 CEST	40254	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:55.868727922 CEST	9999	40254	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:55.869579077 CEST	40256	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:56.141192913 CEST	9999	40256	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:56.142288923 CEST	40258	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:56.413803101 CEST	9999	40258	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:56.414906025 CEST	40260	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:56.686243057 CEST	9999	40260	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:56.687357903 CEST	40262	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:56.958925962 CEST	9999	40262	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:56.960088968 CEST	40264	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:57.231965065 CEST	9999	40264	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:57.233196974 CEST	40266	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:57.504940033 CEST	9999	40266	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:57.505922079 CEST	40268	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:57.777345896 CEST	9999	40268	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:57.778675079 CEST	40270	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:58.049921989 CEST	9999	40270	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:58.051059961 CEST	40272	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:58.322297096 CEST	9999	40272	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:58.323426962 CEST	40274	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:58.595017910 CEST	9999	40274	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:58.596250057 CEST	40276	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:58.867897034 CEST	9999	40276	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:58.869077921 CEST	40278	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:59.140676975 CEST	9999	40278	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:59.141638041 CEST	40280	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:59.412962914 CEST	9999	40280	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:59.414164066 CEST	40282	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:59.685785055 CEST	9999	40282	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:59.686764956 CEST	40284	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:26:59.958403111 CEST	9999	40284	156.253.227.62	192.168.2.15
Apr 26, 2025 16:26:59.959805012 CEST	40286	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:27:00.231506109 CEST	9999	40286	156.253.227.62	192.168.2.15
Apr 26, 2025 16:27:00.232450008 CEST	40288	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:27:00.503843069 CEST	9999	40288	156.253.227.62	192.168.2.15
Apr 26, 2025 16:27:00.504913092 CEST	40290	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:27:00.776248932 CEST	9999	40290	156.253.227.62	192.168.2.15
Apr 26, 2025 16:27:00.777290106 CEST	40292	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:27:01.048834085 CEST	9999	40292	156.253.227.62	192.168.2.15
Apr 26, 2025 16:27:01.049654961 CEST	40294	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:27:01.321095943 CEST	9999	40294	156.253.227.62	192.168.2.15
Apr 26, 2025 16:27:01.322086096 CEST	40296	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:27:01.593472958 CEST	9999	40296	156.253.227.62	192.168.2.15
Apr 26, 2025 16:27:01.594517946 CEST	40298	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:27:01.865875959 CEST	9999	40298	156.253.227.62	192.168.2.15
Apr 26, 2025 16:27:01.866457939 CEST	40300	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:27:02.137967110 CEST	9999	40300	156.253.227.62	192.168.2.15
Apr 26, 2025 16:27:02.138959885 CEST	40302	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:27:02.410444975 CEST	9999	40302	156.253.227.62	192.168.2.15
Apr 26, 2025 16:27:02.410969973 CEST	40304	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:27:02.682502985 CEST	9999	40304	156.253.227.62	192.168.2.15
Apr 26, 2025 16:27:02.683265924 CEST	40306	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:27:02.955213070 CEST	9999	40306	156.253.227.62	192.168.2.15
Apr 26, 2025 16:27:02.956069946 CEST	40308	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:27:03.227440119 CEST	9999	40308	156.253.227.62	192.168.2.15
Apr 26, 2025 16:27:03.228065014 CEST	40310	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:27:03.499382973 CEST	9999	40310	156.253.227.62	192.168.2.15
Apr 26, 2025 16:27:03.499902964 CEST	40312	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:27:03.771400928 CEST	9999	40312	156.253.227.62	192.168.2.15
Apr 26, 2025 16:27:03.771889925 CEST	40314	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:27:04.043570995 CEST	9999	40314	156.253.227.62	192.168.2.15
Apr 26, 2025 16:27:04.044162035 CEST	40316	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:27:04.315968990 CEST	9999	40316	156.253.227.62	192.168.2.15
Apr 26, 2025 16:27:04.316499949 CEST	40318	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:27:04.587909937 CEST	9999	40318	156.253.227.62	192.168.2.15
Apr 26, 2025 16:27:04.588418961 CEST	40320	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:27:04.859795094 CEST	9999	40320	156.253.227.62	192.168.2.15
Apr 26, 2025 16:27:04.860472918 CEST	40322	9999	192.168.2.15	156.253.227.62
Apr 26, 2025 16:27:05.131689072 CEST	9999	40322	156.253.227.62	192.168.2.15
Apr 26, 2025 16:27:05.132240057 CEST	40324	9999	192.168.2.15	156.253.227.62

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 26, 2025 16:26:18.306466103 CEST	42100	53	192.168.2.15	8.8.8.8
Apr 26, 2025 16:26:18.306520939 CEST	41668	53	192.168.2.15	8.8.8.8
Apr 26, 2025 16:26:18.454365015 CEST	53	41668	8.8.8.8	192.168.2.15
Apr 26, 2025 16:26:18.463159084 CEST	53	42100	8.8.8.8	192.168.2.15

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 26, 2025 16:26:18.306466103 CEST	192.168.2.15	8.8.8.8	0x6843	Standard query (0)	daisy.ubuntu.com	A (IP address)	IN (0x0001)	false
Apr 26, 2025 16:26:18.306520939 CEST	192.168.2.15	8.8.8.8	0x3a5d	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 26, 2025 16:26:18.463159084 CEST	8.8.8.8	192.168.2.15	0x6843	No error (0)	daisy.ubuntu.com		162.213.35.24	A (IP address)	IN (0x0001)	false
Apr 26, 2025 16:26:18.463159084 CEST	8.8.8.8	192.168.2.15	0x6843	No error (0)	daisy.ubuntu.com		162.213.35.25	A (IP address)	IN (0x0001)	false

System Behavior

Analysis Process: skid.sparc.elf PID: 5563, Parent PID: 5490

General

Start time (UTC):	14:23:30
Start date (UTC):	26/04/2025
Path:	/tmp/skid.sparc.elf
Arguments:	/tmp/skid.sparc.elf
File size:	4379400 bytes
MD5 hash:	7dc1c0e23cd5e102bb12e5c29403410e

File Activities

File Opened

File Deleted

File Read

File Written

Process Activities

Process Forked

Thread Sleep

System Activities

Query System Information (uname)

Network Activities

Socket Connecting

Chronological Activities

Analysis Process: skid.sparc.elf PID: 5565, Parent PID: 5563

General

Start time (UTC):	14:23:30
Start date (UTC):	26/04/2025
Path:	/tmp/skid.sparc.elf
Arguments:	-
File size:	4379400 bytes
MD5 hash:	7dc1c0e23cd5e102bb12e5c29403410e

Process Activities

Process Forked

Thread Sleep

Chronological Activities

Analysis Process: skid.sparc.elf PID: 5567, Parent PID: 5565

General

Start time (UTC):	14:23:30
Start date (UTC):	26/04/2025
Path:	/tmp/skid.sparc.elf
Arguments:	-
File size:	4379400 bytes
MD5 hash:	7dc1c0e23cd5e102bb12e5c29403410e

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system. Functionality could exist within remote access tools to enable this, but utilities available on the operating system could also be used such as Ping or `net view` using Net .
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Network Traffic: Network Connection Creation, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may obfuscate command and control traffic to make it more difficult to detect. Command and control (C2) communications are hidden (but not necessarily encrypted) in an attempt to make the content more difficult to discover or decipher and to make the communication less conspicuous and hide commands from being seen. This encompasses many methods, such as adding junk data to protocol traffic, using steganography, or impersonating legitimate protocols.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report skid.sparc.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Threatname: Gafgyt

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/tmp/qemu-open.hDZ3YO (deleted)

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

System Behavior

Analysis Process: skid.sparc.elf PID: 5563, Parent PID: 5490

General

File Activities

File Opened

File Deleted

File Read

File Written

Process Activities

Process Forked

Thread Sleep

System Activities

Query System Information (uname)

Network Activities

Linux Analysis Report
skid.sparc.elf