Edit tour

Windows Analysis Report
ziTLBa3N50.exe

Overview

General Information

Sample name:	ziTLBa3N50.exe renamed because original name is a hash value
Original sample name:	a3826b6c05674ce99890e7919c6daeb2.exe
Analysis ID:	1384047
MD5:	a3826b6c05674ce99890e7919c6daeb2
SHA1:	256f7be76b479fa8ad83a08e61fadbc679261417
SHA256:	5c4661e1393f0927e1c5b123db7dc1ecbf5fbf6169d46ee691d392dd85a7578c
Tags:	exenjratRAT
Infos:

Detection

Njrat

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for submitted file

Snort IDS alert for network traffic

Yara detected Njrat

.NET source code contains potential unpacker

C2 URLs / IPs found in malware configuration

Machine Learning detection for sample

Modifies the windows firewall

Uses netsh to modify the Windows network and firewall settings

Abnormal high CPU Usage

Allocates memory with a write watch (potentially for evading sandboxes)

Detected TCP or UDP traffic on non-standard ports

Enables debug privileges

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

May infect USB drives

May sleep (evasive loops) to hinder dynamic analysis

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Tries to load missing DLLs

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Yara signature match

Classification

Process Tree

System is w10x64

ziTLBa3N50.exe (PID: 5576 cmdline: C:\Users\user\Desktop\ziTLBa3N50.exe MD5: A3826B6C05674CE99890E7919C6DAEB2)

netsh.exe (PID: 7460 cmdline: netsh firewall add allowedprogram "C:\Users\user\Desktop\ziTLBa3N50.exe" "ziTLBa3N50.exe" ENABLE MD5: 4E89A1A088BE715D6C946E55AB07C7DF)

conhost.exe (PID: 7476 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
NjRAT	RedPacket Security describes NJRat as "a remote access trojan (RAT) has capabilities to log keystrokes, access the victim's camera, steal credentials stored in browsers, open a reverse shell, upload/download files, view the victim's desktop, perform process, file, and registry manipulations, and capabilities to let the attacker update, uninstall, restart, close, disconnect the RAT and rename its campaign ID. Through the Command & Control (CnC) server software, the attacker has capabilities to create and configure the malware to spread through USB drives."It is supposedly popular with actors in the Middle East. Similar to other RATs, many leaked builders may be backdoored.	AQUATIC PANDA Earth Lusca Operation C-Major The Gorgon Group	http://blog.trendmicro.com/trendlabs-security-intelligence/new-rats-emerge-from-leaked-njw0rm-source-code/ http://blogs.360.cn/post/analysis-of-apt-c-37.html http://threatgeek.typepad.com/files/fta-1009---njrat-uncovered-1.pdf https://about.fb.com/news/2021/04/taking-action-against-hackers-in-palestine/ https://asec.ahnlab.com/1369	https://malpedia.caad.fkie.fraunhofer.de/details/win.njrat

Malware Configuration

Threatname: Njrat

{"Host": "6.tcp.eu.ngrok.io", "Port": "15520", "Version": "im523", "Campaign ID": "HacKed", "Install Name": "server.exe", "Install Dir": "TEMP"}

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
ziTLBa3N50.exe	JoeSecurity_Njrat	Yara detected Njrat	Joe Security
ziTLBa3N50.exe	Windows_Trojan_Njrat_30f3c220	unknown	unknown	0x702e:$a1: get_Registry 0x7b20:$a3: Download ERROR 0x7e12:$a5: netsh firewall delete allowedprogram "
ziTLBa3N50.exe	njrat1	Identify njRat	Brian Wallace @botnet_hunter	0x7d08:$a1: netsh firewall add allowedprogram 0x7f02:$b1: [TAP] 0x7ea8:$b2: & exit 0x7e74:$c1: md.exe /k ping 0 & del
ziTLBa3N50.exe	MALWARE_Win_NjRAT	Detects NjRAT / Bladabindi	ditekSHen	0x7e12:$s1: netsh firewall delete allowedprogram 0x7d08:$s2: netsh firewall add allowedprogram 0x7e72:$s3: 63 00 6D 00 64 00 2E 00 65 00 78 00 65 00 20 00 2F 00 6B 00 20 00 70 00 69 00 6E 00 67 0x7afc:$s4: Execute ERROR 0x7b5c:$s4: Execute ERROR 0x7b20:$s5: Download ERROR 0x7eb8:$s6: [kl]

Memory Dumps

Source	Rule	Description	Author	Strings
00000001.00000000.1248679370.0000000000172000.00000002.00000001.01000000.00000003.sdmp	JoeSecurity_Njrat	Yara detected Njrat	Joe Security
00000001.00000000.1248679370.0000000000172000.00000002.00000001.01000000.00000003.sdmp	Windows_Trojan_Njrat_30f3c220	unknown	unknown	0x6e2e:$a1: get_Registry 0x7920:$a3: Download ERROR 0x7c12:$a5: netsh firewall delete allowedprogram "
00000001.00000000.1248679370.0000000000172000.00000002.00000001.01000000.00000003.sdmp	njrat1	Identify njRat	Brian Wallace @botnet_hunter	0x7b08:$a1: netsh firewall add allowedprogram 0x7d02:$b1: [TAP] 0x7ca8:$b2: & exit 0x7c74:$c1: md.exe /k ping 0 & del
Process Memory Space: ziTLBa3N50.exe PID: 5576	JoeSecurity_Njrat	Yara detected Njrat	Joe Security

Unpacked PEs

Source	Rule	Description	Author	Strings
1.0.ziTLBa3N50.exe.170000.0.unpack	JoeSecurity_Njrat	Yara detected Njrat	Joe Security
1.0.ziTLBa3N50.exe.170000.0.unpack	Windows_Trojan_Njrat_30f3c220	unknown	unknown	0x702e:$a1: get_Registry 0x7b20:$a3: Download ERROR 0x7e12:$a5: netsh firewall delete allowedprogram "
1.0.ziTLBa3N50.exe.170000.0.unpack	njrat1	Identify njRat	Brian Wallace @botnet_hunter	0x7d08:$a1: netsh firewall add allowedprogram 0x7f02:$b1: [TAP] 0x7ea8:$b2: & exit 0x7e74:$c1: md.exe /k ping 0 & del
1.0.ziTLBa3N50.exe.170000.0.unpack	MALWARE_Win_NjRAT	Detects NjRAT / Bladabindi	ditekSHen	0x7e12:$s1: netsh firewall delete allowedprogram 0x7d08:$s2: netsh firewall add allowedprogram 0x7e72:$s3: 63 00 6D 00 64 00 2E 00 65 00 78 00 65 00 20 00 2F 00 6B 00 20 00 70 00 69 00 6E 00 67 0x7afc:$s4: Execute ERROR 0x7b5c:$s4: Execute ERROR 0x7b20:$s5: Download ERROR 0x7eb8:$s6: [kl]

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849762155202814856 01/31/24-13:45:40.570669
SID:	2814856
Source Port:	49762
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849763155202814856 01/31/24-13:45:41.224839
SID:	2814856
Source Port:	49763
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849767155202814856 01/31/24-13:45:43.705102
SID:	2814856
Source Port:	49767
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849997155202814856 01/31/24-13:47:30.256512
SID:	2814856
Source Port:	49997
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849996155202814856 01/31/24-13:47:29.848833
SID:	2814856
Source Port:	49996
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849768155202814856 01/31/24-13:45:44.300228
SID:	2814856
Source Port:	49768
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849995155202814856 01/31/24-13:47:29.444723
SID:	2814856
Source Port:	49995
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849761155202814856 01/31/24-13:45:39.911797
SID:	2814856
Source Port:	49761
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849769155202814856 01/31/24-13:45:44.870856
SID:	2814856
Source Port:	49769
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849794155202033132 01/31/24-13:45:57.521029
SID:	2033132
Source Port:	49794
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849793155202033132 01/31/24-13:45:57.036626
SID:	2033132
Source Port:	49793
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849795155202033132 01/31/24-13:45:58.012819
SID:	2033132
Source Port:	49795
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849790155202033132 01/31/24-13:45:55.580697
SID:	2033132
Source Port:	49790
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849791155202033132 01/31/24-13:45:56.063734
SID:	2033132
Source Port:	49791
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849766155202814856 01/31/24-13:45:43.097765
SID:	2814856
Source Port:	49766
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849792155202033132 01/31/24-13:45:56.558458
SID:	2033132
Source Port:	49792
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849770155202814860 01/31/24-13:45:45.589498
SID:	2814860
Source Port:	49770
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849765155202814856 01/31/24-13:45:42.491988
SID:	2814856
Source Port:	49765
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849996155202814860 01/31/24-13:47:29.849435
SID:	2814860
Source Port:	49996
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849999155202814860 01/31/24-13:47:31.071732
SID:	2814860
Source Port:	49999
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849770155202814856 01/31/24-13:45:45.445161
SID:	2814856
Source Port:	49770
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849753155202814856 01/31/24-13:45:33.936480
SID:	2814856
Source Port:	49753
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849773155202814856 01/31/24-13:45:47.117691
SID:	2814856
Source Port:	49773
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849775155202814856 01/31/24-13:45:48.197897
SID:	2814856
Source Port:	49775
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849752155202814856 01/31/24-13:45:33.101147
SID:	2814856
Source Port:	49752
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849756155202814856 01/31/24-13:45:36.336566
SID:	2814856
Source Port:	49756
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849774155202814856 01/31/24-13:45:47.650383
SID:	2814856
Source Port:	49774
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849757155202814856 01/31/24-13:45:37.081248
SID:	2814856
Source Port:	49757
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849778155202814856 01/31/24-13:45:49.777327
SID:	2814856
Source Port:	49778
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849779155202814856 01/31/24-13:45:50.294535
SID:	2814856
Source Port:	49779
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849771155202814856 01/31/24-13:45:46.010488
SID:	2814856
Source Port:	49771
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849751155202814856 01/31/24-13:45:32.201796
SID:	2814856
Source Port:	49751
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849759155202814856 01/31/24-13:45:38.522647
SID:	2814856
Source Port:	49759
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849750155202814856 01/31/24-13:45:30.534004
SID:	2814856
Source Port:	49750
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849758155202814856 01/31/24-13:45:37.811818
SID:	2814856
Source Port:	49758
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849772155202814856 01/31/24-13:45:46.557352
SID:	2814856
Source Port:	49772
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849782155202033132 01/31/24-13:45:51.596602
SID:	2033132
Source Port:	49782
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849784155202033132 01/31/24-13:45:52.616349
SID:	2033132
Source Port:	49784
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849783155202033132 01/31/24-13:45:52.107131
SID:	2033132
Source Port:	49783
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849777155202814856 01/31/24-13:45:49.268594
SID:	2814856
Source Port:	49777
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849780155202033132 01/31/24-13:45:50.594771
SID:	2033132
Source Port:	49780
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849755155202814856 01/31/24-13:45:35.559272
SID:	2814856
Source Port:	49755
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849776155202814856 01/31/24-13:45:48.746773
SID:	2814856
Source Port:	49776
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849754155202814856 01/31/24-13:45:34.762162
SID:	2814856
Source Port:	49754
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849781155202033132 01/31/24-13:45:51.096168
SID:	2033132
Source Port:	49781
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849771155202814860 01/31/24-13:45:46.151994
SID:	2814860
Source Port:	49771
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849772155202814860 01/31/24-13:45:46.698800
SID:	2814860
Source Port:	49772
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849775155202814860 01/31/24-13:45:48.324382
SID:	2814860
Source Port:	49775
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849786155202033132 01/31/24-13:45:53.597911
SID:	2033132
Source Port:	49786
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849773155202814860 01/31/24-13:45:47.245712
SID:	2814860
Source Port:	49773
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849774155202814860 01/31/24-13:45:47.777024
SID:	2814860
Source Port:	49774
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849785155202033132 01/31/24-13:45:53.109081
SID:	2033132
Source Port:	49785
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849993155202814856 01/31/24-13:47:28.619271
SID:	2814856
Source Port:	49993
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849778155202814860 01/31/24-13:45:49.886504
SID:	2814860
Source Port:	49778
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849779155202814860 01/31/24-13:45:50.386375
SID:	2814860
Source Port:	49779
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849992155202814856 01/31/24-13:47:28.201764
SID:	2814856
Source Port:	49992
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849994155202814856 01/31/24-13:47:29.030024
SID:	2814856
Source Port:	49994
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849776155202814860 01/31/24-13:45:48.857825
SID:	2814860
Source Port:	49776
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849787155202033132 01/31/24-13:45:54.094507
SID:	2033132
Source Port:	49787
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849990155202814856 01/31/24-13:47:26.374958
SID:	2814856
Source Port:	49990
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849788155202033132 01/31/24-13:45:54.586774
SID:	2033132
Source Port:	49788
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849991155202814856 01/31/24-13:47:27.771988
SID:	2814856
Source Port:	49991
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849777155202814860 01/31/24-13:45:49.370664
SID:	2814860
Source Port:	49777
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849789155202033132 01/31/24-13:45:55.086954
SID:	2033132
Source Port:	49789
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849785155202814856 01/31/24-13:45:53.309420
SID:	2814856
Source Port:	49785
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849743155202814856 01/31/24-13:45:24.249667
SID:	2814856
Source Port:	49743
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849741155202814856 01/31/24-13:45:21.556899
SID:	2814856
Source Port:	49741
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849745155202814856 01/31/24-13:45:26.417768
SID:	2814856
Source Port:	49745
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849781155202814856 01/31/24-13:45:51.298918
SID:	2814856
Source Port:	49781
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849789155202814856 01/31/24-13:45:55.294477
SID:	2814856
Source Port:	49789
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849783155202814856 01/31/24-13:45:52.314422
SID:	2814856
Source Port:	49783
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849974155202814856 01/31/24-13:47:19.803790
SID:	2814856
Source Port:	49974
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849773155202033132 01/31/24-13:45:46.912901
SID:	2033132
Source Port:	49773
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849976155202814856 01/31/24-13:47:20.621315
SID:	2814856
Source Port:	49976
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849771155202033132 01/31/24-13:45:45.804788
SID:	2033132
Source Port:	49771
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849787155202814856 01/31/24-13:45:54.300287
SID:	2814856
Source Port:	49787
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849978155202814856 01/31/24-13:47:21.443127
SID:	2814856
Source Port:	49978
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849790155202814860 01/31/24-13:45:55.855361
SID:	2814860
Source Port:	49790
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849978155202814860 01/31/24-13:47:21.443343
SID:	2814860
Source Port:	49978
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849790155202814856 01/31/24-13:45:55.779555
SID:	2814856
Source Port:	49790
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849992155202033132 01/31/24-13:47:27.997449
SID:	2033132
Source Port:	49992
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849968155202814856 01/31/24-13:47:17.316176
SID:	2814856
Source Port:	49968
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849996155202033132 01/31/24-13:47:29.654158
SID:	2033132
Source Port:	49996
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849985155202814856 01/31/24-13:47:24.309547
SID:	2814856
Source Port:	49985
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849990155202033132 01/31/24-13:47:26.173196
SID:	2033132
Source Port:	49990
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849998155202033132 01/31/24-13:47:30.467960
SID:	2033132
Source Port:	49998
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849989155202814856 01/31/24-13:47:25.964919
SID:	2814856
Source Port:	49989
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849994155202033132 01/31/24-13:47:28.832945
SID:	2033132
Source Port:	49994
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849781155202814860 01/31/24-13:45:51.388930
SID:	2814860
Source Port:	49781
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849758155202033132 01/31/24-13:45:37.606701
SID:	2033132
Source Port:	49758
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849783155202814860 01/31/24-13:45:52.401950
SID:	2814860
Source Port:	49783
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849764155202814860 01/31/24-13:45:42.073885
SID:	2814860
Source Port:	49764
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849785155202814860 01/31/24-13:45:53.386398
SID:	2814860
Source Port:	49785
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849775155202033132 01/31/24-13:45:47.991049
SID:	2033132
Source Port:	49775
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849796155202033132 01/31/24-13:45:58.495812
SID:	2033132
Source Port:	49796
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849768155202814860 01/31/24-13:45:44.464487
SID:	2814860
Source Port:	49768
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849789155202814860 01/31/24-13:45:55.370759
SID:	2814860
Source Port:	49789
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849983155202814856 01/31/24-13:47:23.499110
SID:	2814856
Source Port:	49983
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849749155202814856 01/31/24-13:45:29.423347
SID:	2814856
Source Port:	49749
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849754155202033132 01/31/24-13:45:34.556939
SID:	2033132
Source Port:	49754
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849787155202814860 01/31/24-13:45:54.370806
SID:	2814860
Source Port:	49787
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849777155202033132 01/31/24-13:45:49.066310
SID:	2033132
Source Port:	49777
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849798155202033132 01/31/24-13:45:59.459423
SID:	2033132
Source Port:	49798
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849756155202033132 01/31/24-13:45:36.130128
SID:	2033132
Source Port:	49756
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849766155202814860 01/31/24-13:45:43.276998
SID:	2814860
Source Port:	49766
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849779155202033132 01/31/24-13:45:50.093694
SID:	2033132
Source Port:	49779
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849981155202814856 01/31/24-13:47:22.668180
SID:	2814856
Source Port:	49981
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849982155202033132 01/31/24-13:47:22.880501
SID:	2033132
Source Port:	49982
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849986155202033132 01/31/24-13:47:24.522770
SID:	2033132
Source Port:	49986
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849987155202033132 01/31/24-13:47:24.936512
SID:	2033132
Source Port:	49987
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849751155202033132 01/31/24-13:45:32.001588
SID:	2033132
Source Port:	49751
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849752155202033132 01/31/24-13:45:32.894155
SID:	2033132
Source Port:	49752
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849983155202033132 01/31/24-13:47:23.294461
SID:	2033132
Source Port:	49983
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849979155202033132 01/31/24-13:47:21.652654
SID:	2033132
Source Port:	49979
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849831155202814860 01/31/24-13:46:16.261316
SID:	2814860
Source Port:	49831
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849795155202814856 01/31/24-13:45:58.218902
SID:	2814856
Source Port:	49795
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849832155202814860 01/31/24-13:46:16.714467
SID:	2814860
Source Port:	49832
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749900155202033132 01/31/24-13:46:48.024191
SID:	2033132
Source Port:	49900
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749901155202033132 01/31/24-13:46:48.436763
SID:	2033132
Source Port:	49901
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849973155202825564 01/31/24-13:47:19.384199
SID:	2825564
Source Port:	49973
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849741155202033132 01/31/24-13:45:21.351974
SID:	2033132
Source Port:	49741
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849762155202033132 01/31/24-13:45:40.365734
SID:	2033132
Source Port:	49762
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849977155202825564 01/31/24-13:47:21.038963
SID:	2825564
Source Port:	49977
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849761155202033132 01/31/24-13:45:39.707753
SID:	2033132
Source Port:	49761
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849740155202033132 01/31/24-13:45:20.067927
SID:	2033132
Source Port:	49740
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849799155202814856 01/31/24-13:46:00.144228
SID:	2814856
Source Port:	49799
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849973155202814860 01/31/24-13:47:19.384199
SID:	2814860
Source Port:	49973
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749902155202825564 01/31/24-13:46:49.045144
SID:	2825564
Source Port:	49902
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849798155202814856 01/31/24-13:45:59.663459
SID:	2814856
Source Port:	49798
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849749155202033132 01/31/24-13:45:29.215400
SID:	2033132
Source Port:	49749
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849794155202814860 01/31/24-13:45:57.792722
SID:	2814860
Source Port:	49794
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849832155202814856 01/31/24-13:46:16.678944
SID:	2814856
Source Port:	49832
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849748155202033132 01/31/24-13:45:28.240086
SID:	2033132
Source Port:	49748
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849769155202033132 01/31/24-13:45:44.671052
SID:	2033132
Source Port:	49769
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749909155202033132 01/31/24-13:46:51.724574
SID:	2033132
Source Port:	49909
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849831155202814856 01/31/24-13:46:16.215977
SID:	2814856
Source Port:	49831
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849795155202814860 01/31/24-13:45:58.277519
SID:	2814860
Source Port:	49795
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749905155202033132 01/31/24-13:46:50.090283
SID:	2033132
Source Port:	49905
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849798155202814860 01/31/24-13:45:59.714507
SID:	2814860
Source Port:	49798
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849739155202814856 01/31/24-13:45:18.934352
SID:	2814856
Source Port:	49739
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849744155202033132 01/31/24-13:45:25.155643
SID:	2033132
Source Port:	49744
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849765155202033132 01/31/24-13:45:42.286721
SID:	2033132
Source Port:	49765
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749904155202033132 01/31/24-13:46:49.666261
SID:	2033132
Source Port:	49904
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749908155202033132 01/31/24-13:46:51.314336
SID:	2033132
Source Port:	49908
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849745155202033132 01/31/24-13:45:26.218929
SID:	2033132
Source Port:	49745
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849766155202033132 01/31/24-13:45:42.895653
SID:	2033132
Source Port:	49766
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849970155202814856 01/31/24-13:47:18.142950
SID:	2814856
Source Port:	49970
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849799155202814860 01/31/24-13:46:00.198767
SID:	2814860
Source Port:	49799
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849742155202814856 01/31/24-13:45:22.849943
SID:	2814856
Source Port:	49742
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849784155202814856 01/31/24-13:45:52.824231
SID:	2814856
Source Port:	49784
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849746155202814856 01/31/24-13:45:27.450026
SID:	2814856
Source Port:	49746
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749911155202033132 01/31/24-13:46:52.542780
SID:	2033132
Source Port:	49911
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849772155202033132 01/31/24-13:45:46.358402
SID:	2033132
Source Port:	49772
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849818155202814856 01/31/24-13:46:10.219641
SID:	2814856
Source Port:	49818
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849825155202814860 01/31/24-13:46:13.495646
SID:	2814860
Source Port:	49825
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849791155202814860 01/31/24-13:45:56.340407
SID:	2814860
Source Port:	49791
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849977155202814860 01/31/24-13:47:21.038963
SID:	2814860
Source Port:	49977
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849818155202814860 01/31/24-13:46:10.277111
SID:	2814860
Source Port:	49818
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849829155202814860 01/31/24-13:46:15.323951
SID:	2814860
Source Port:	49829
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849791155202814856 01/31/24-13:45:56.264063
SID:	2814856
Source Port:	49791
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849780155202814856 01/31/24-13:45:50.796444
SID:	2814856
Source Port:	49780
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849969155202033132 01/31/24-13:47:17.535249
SID:	2033132
Source Port:	49969
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849984155202814856 01/31/24-13:47:23.905775
SID:	2814856
Source Port:	49984
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849997155202033132 01/31/24-13:47:30.060049
SID:	2033132
Source Port:	49997
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849976155202033132 01/31/24-13:47:20.422413
SID:	2033132
Source Port:	49976
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849829155202814856 01/31/24-13:46:15.269751
SID:	2814856
Source Port:	49829
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849808155202814856 01/31/24-13:46:05.566805
SID:	2814856
Source Port:	49808
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849988155202814856 01/31/24-13:47:25.547911
SID:	2814856
Source Port:	49988
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849993155202033132 01/31/24-13:47:28.416919
SID:	2033132
Source Port:	49993
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849972155202033132 01/31/24-13:47:18.768019
SID:	2033132
Source Port:	49972
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849759155202033132 01/31/24-13:45:38.318030
SID:	2033132
Source Port:	49759
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849804155202814856 01/31/24-13:46:02.511067
SID:	2814856
Source Port:	49804
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749902155202814860 01/31/24-13:46:49.045144
SID:	2814860
Source Port:	49902
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849738155202033132 01/31/24-13:45:17.331749
SID:	2033132
Source Port:	49738
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849821155202814856 01/31/24-13:46:11.625536
SID:	2814856
Source Port:	49821
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849825155202814856 01/31/24-13:46:13.454859
SID:	2814856
Source Port:	49825
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749919155202033132 01/31/24-13:46:55.801677
SID:	2033132
Source Port:	49919
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849742155202814860 01/31/24-13:45:23.050025
SID:	2814860
Source Port:	49742
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849797155202033132 01/31/24-13:45:58.973262
SID:	2033132
Source Port:	49797
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849784155202814860 01/31/24-13:45:52.902388
SID:	2814860
Source Port:	49784
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849763155202814860 01/31/24-13:45:41.448830
SID:	2814860
Source Port:	49763
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749915155202033132 01/31/24-13:46:54.174226
SID:	2033132
Source Port:	49915
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849776155202033132 01/31/24-13:45:48.538771
SID:	2033132
Source Port:	49776
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849830155202033132 01/31/24-13:46:15.541687
SID:	2033132
Source Port:	49830
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849755155202033132 01/31/24-13:45:35.358968
SID:	2033132
Source Port:	49755
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849788155202814860 01/31/24-13:45:54.870684
SID:	2814860
Source Port:	49788
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849767155202814860 01/31/24-13:45:43.886463
SID:	2814860
Source Port:	49767
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749906155202814856 01/31/24-13:46:50.697802
SID:	2814856
Source Port:	49906
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749907155202814856 01/31/24-13:46:51.106857
SID:	2814856
Source Port:	49907
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850003155202033132 01/31/24-13:47:32.518153
SID:	2033132
Source Port:	50003
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850004155202033132 01/31/24-13:47:32.935233
SID:	2033132
Source Port:	50004
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850001155202033132 01/31/24-13:47:31.690624
SID:	2033132
Source Port:	50001
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850006155202033132 01/31/24-13:47:33.749960
SID:	2033132
Source Port:	50006
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849801155202814860 01/31/24-13:46:01.152205
SID:	2814860
Source Port:	49801
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849827155202033132 01/31/24-13:46:14.157406
SID:	2033132
Source Port:	49827
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849828155202033132 01/31/24-13:46:14.616052
SID:	2033132
Source Port:	49828
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749934155202033132 01/31/24-13:47:01.972575
SID:	2033132
Source Port:	49934
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849822155202033132 01/31/24-13:46:11.890253
SID:	2033132
Source Port:	49822
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849804155202814860 01/31/24-13:46:02.577515
SID:	2814860
Source Port:	49804
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749931155202033132 01/31/24-13:47:00.748116
SID:	2033132
Source Port:	49931
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749904155202814856 01/31/24-13:46:49.870134
SID:	2814856
Source Port:	49904
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849803155202814860 01/31/24-13:46:02.089469
SID:	2814860
Source Port:	49803
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849825155202033132 01/31/24-13:46:13.251224
SID:	2033132
Source Port:	49825
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849809155202814860 01/31/24-13:46:06.089537
SID:	2814860
Source Port:	49809
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749940155202033132 01/31/24-13:47:04.416054
SID:	2033132
Source Port:	49940
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849812155202814860 01/31/24-13:46:07.480079
SID:	2814860
Source Port:	49812
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749943155202033132 01/31/24-13:47:05.662157
SID:	2033132
Source Port:	49943
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749910155202814856 01/31/24-13:46:52.336812
SID:	2814856
Source Port:	49910
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749918155202814856 01/31/24-13:46:55.592636
SID:	2814856
Source Port:	49918
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749923155202033132 01/31/24-13:46:57.472251
SID:	2033132
Source Port:	49923
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749945155202033132 01/31/24-13:47:06.495555
SID:	2033132
Source Port:	49945
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849817155202814860 01/31/24-13:46:09.792676
SID:	2814860
Source Port:	49817
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749912155202814856 01/31/24-13:46:53.150474
SID:	2814856
Source Port:	49912
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849814155202814860 01/31/24-13:46:08.401884
SID:	2814860
Source Port:	49814
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749913155202814856 01/31/24-13:46:53.561997
SID:	2814856
Source Port:	49913
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849815155202814860 01/31/24-13:46:08.870746
SID:	2814860
Source Port:	49815
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749942155202033132 01/31/24-13:47:05.245630
SID:	2033132
Source Port:	49942
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849817155202825564 01/31/24-13:46:09.792676
SID:	2825564
Source Port:	49817
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749920155202033132 01/31/24-13:46:56.220225
SID:	2033132
Source Port:	49920
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849815155202814856 01/31/24-13:46:08.819131
SID:	2814856
Source Port:	49815
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849814155202814856 01/31/24-13:46:08.354639
SID:	2814856
Source Port:	49814
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849817155202814856 01/31/24-13:46:09.747109
SID:	2814856
Source Port:	49817
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849820155202033132 01/31/24-13:46:10.947330
SID:	2033132
Source Port:	49820
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749926155202033132 01/31/24-13:46:58.717375
SID:	2033132
Source Port:	49926
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749948155202033132 01/31/24-13:47:07.729432
SID:	2033132
Source Port:	49948
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850009155202033132 01/31/24-13:47:34.976243
SID:	2033132
Source Port:	50009
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749925155202033132 01/31/24-13:46:58.308473
SID:	2033132
Source Port:	49925
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749928155202033132 01/31/24-13:46:59.523977
SID:	2033132
Source Port:	49928
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849812155202814856 01/31/24-13:46:07.431812
SID:	2814856
Source Port:	49812
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850024155202825564 01/31/24-13:47:41.354174
SID:	2825564
Source Port:	50024
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849820155202814860 01/31/24-13:46:11.199054
SID:	2814860
Source Port:	49820
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749926155202814856 01/31/24-13:46:58.913086
SID:	2814856
Source Port:	49926
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850026155202033132 01/31/24-13:47:41.976350
SID:	2033132
Source Port:	50026
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850022155202825564 01/31/24-13:47:40.523675
SID:	2825564
Source Port:	50022
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749954155202033132 01/31/24-13:47:11.250193
SID:	2033132
Source Port:	49954
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749912155202033132 01/31/24-13:46:52.954040
SID:	2033132
Source Port:	49912
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849804155202825564 01/31/24-13:46:02.577515
SID:	2825564
Source Port:	49804
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749956155202033132 01/31/24-13:47:12.063457
SID:	2033132
Source Port:	49956
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849828155202814860 01/31/24-13:46:14.855010
SID:	2814860
Source Port:	49828
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849826155202814860 01/31/24-13:46:13.948855
SID:	2814860
Source Port:	49826
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749835155202033132 01/31/24-13:46:17.958782
SID:	2033132
Source Port:	49835
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849805155202033132 01/31/24-13:46:02.790778
SID:	2033132
Source Port:	49805
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850020155202033132 01/31/24-13:47:39.510812
SID:	2033132
Source Port:	50020
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849803155202033132 01/31/24-13:46:01.829460
SID:	2033132
Source Port:	49803
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850002155202814856 01/31/24-13:47:32.305973
SID:	2814856
Source Port:	50002
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749833155202033132 01/31/24-13:46:17.048386
SID:	2033132
Source Port:	49833
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749844155202033132 01/31/24-13:46:22.097354
SID:	2033132
Source Port:	49844
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849968155202033132 01/31/24-13:47:17.112756
SID:	2033132
Source Port:	49968
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850015155202033132 01/31/24-13:47:37.444479
SID:	2033132
Source Port:	50015
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849971155202033132 01/31/24-13:47:18.354724
SID:	2033132
Source Port:	49971
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850034155202033132 01/31/24-13:47:46.229808
SID:	2033132
Source Port:	50034
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850004155202814856 01/31/24-13:47:33.134716
SID:	2814856
Source Port:	50004
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849816155202033132 01/31/24-13:46:09.083103
SID:	2033132
Source Port:	49816
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849809155202814856 01/31/24-13:46:06.043272
SID:	2814856
Source Port:	49809
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849814155202033132 01/31/24-13:46:08.154636
SID:	2033132
Source Port:	49814
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850032155202033132 01/31/24-13:47:45.409296
SID:	2033132
Source Port:	50032
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849803155202814856 01/31/24-13:46:02.031351
SID:	2814856
Source Port:	49803
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849820155202814856 01/31/24-13:46:11.154978
SID:	2814856
Source Port:	49820
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849828155202814856 01/31/24-13:46:14.817747
SID:	2814856
Source Port:	49828
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849826155202814856 01/31/24-13:46:13.902945
SID:	2814856
Source Port:	49826
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849831155202033132 01/31/24-13:46:16.007868
SID:	2033132
Source Port:	49831
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749901155202814860 01/31/24-13:46:48.640808
SID:	2814860
Source Port:	49901
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749937155202033132 01/31/24-13:47:03.201117
SID:	2033132
Source Port:	49937
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749914155202033132 01/31/24-13:46:53.768546
SID:	2033132
Source Port:	49914
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850017155202033132 01/31/24-13:47:38.256699
SID:	2033132
Source Port:	50017
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749939155202033132 01/31/24-13:47:04.003246
SID:	2033132
Source Port:	49939
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849801155202814856 01/31/24-13:46:01.100226
SID:	2814856
Source Port:	49801
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849980155202033132 01/31/24-13:47:22.059043
SID:	2033132
Source Port:	49980
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850048155202033132 01/31/24-13:47:52.000751
SID:	2033132
Source Port:	50048
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849985155202033132 01/31/24-13:47:24.111854
SID:	2033132
Source Port:	49985
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749943155202814856 01/31/24-13:47:05.866911
SID:	2814856
Source Port:	49943
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749855155202033132 01/31/24-13:46:27.050904
SID:	2033132
Source Port:	49855
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049734155202814856 01/31/24-13:45:10.860492
SID:	2814856
Source Port:	49734
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850040155202033132 01/31/24-13:47:48.711215
SID:	2033132
Source Port:	50040
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749839155202814860 01/31/24-13:46:20.073790
SID:	2814860
Source Port:	49839
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850018155202814856 01/31/24-13:47:38.875582
SID:	2814856
Source Port:	50018
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749836155202814860 01/31/24-13:46:18.667489
SID:	2814860
Source Port:	49836
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749952155202814860 01/31/24-13:47:10.635839
SID:	2814860
Source Port:	49952
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749946155202814856 01/31/24-13:47:07.101757
SID:	2814856
Source Port:	49946
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850043155202033132 01/31/24-13:47:49.930565
SID:	2033132
Source Port:	50043
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749836155202814856 01/31/24-13:46:18.623632
SID:	2814856
Source Port:	49836
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850021155202814856 01/31/24-13:47:40.116567
SID:	2814856
Source Port:	50021
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850010155202814856 01/31/24-13:47:35.587080
SID:	2814856
Source Port:	50010
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850013155202814856 01/31/24-13:47:36.821495
SID:	2814856
Source Port:	50013
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049731155202814856 01/31/24-13:45:05.231658
SID:	2814856
Source Port:	49731
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749839155202814856 01/31/24-13:46:20.022783
SID:	2814856
Source Port:	49839
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849988155202033132 01/31/24-13:47:25.359769
SID:	2033132
Source Port:	49988
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849977155202033132 01/31/24-13:47:20.834665
SID:	2033132
Source Port:	49977
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749852155202033132 01/31/24-13:46:25.707747
SID:	2033132
Source Port:	49852
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749861155202033132 01/31/24-13:46:29.760129
SID:	2033132
Source Port:	49861
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850094155202814856 01/31/24-13:48:11.161297
SID:	2814856
Source Port:	50094
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849792155202814856 01/31/24-13:45:56.765465
SID:	2814856
Source Port:	49792
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749965155202033132 01/31/24-13:47:15.753583
SID:	2033132
Source Port:	49965
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049728155202814856 01/31/24-13:45:00.933150
SID:	2814856
Source Port:	49728
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749932155202814856 01/31/24-13:47:01.348075
SID:	2814856
Source Port:	49932
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049723155202814856 01/31/24-13:44:48.800435
SID:	2814856
Source Port:	49723
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749866155202033132 01/31/24-13:46:31.991044
SID:	2033132
Source Port:	49866
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849978155202825564 01/31/24-13:47:21.443343
SID:	2825564
Source Port:	49978
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749869155202033132 01/31/24-13:46:33.348163
SID:	2033132
Source Port:	49869
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749935155202814856 01/31/24-13:47:02.578860
SID:	2814856
Source Port:	49935
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749849155202033132 01/31/24-13:46:24.365433
SID:	2033132
Source Port:	49849
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849760155202033132 01/31/24-13:45:39.022052
SID:	2033132
Source Port:	49760
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749957155202814856 01/31/24-13:47:12.674243
SID:	2814856
Source Port:	49957
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749962155202033132 01/31/24-13:47:14.510701
SID:	2033132
Source Port:	49962
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749966155202825564 01/31/24-13:47:16.363274
SID:	2825564
Source Port:	49966
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849792155202814860 01/31/24-13:45:56.823790
SID:	2814860
Source Port:	49792
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849800155202033132 01/31/24-13:46:00.411259
SID:	2033132
Source Port:	49800
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849763155202033132 01/31/24-13:45:41.022516
SID:	2033132
Source Port:	49763
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849972155202814856 01/31/24-13:47:18.967282
SID:	2814856
Source Port:	49972
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849738155202814856 01/31/24-13:45:17.537234
SID:	2814856
Source Port:	49738
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849743155202033132 01/31/24-13:45:24.048113
SID:	2033132
Source Port:	49743
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749903155202033132 01/31/24-13:46:49.254571
SID:	2033132
Source Port:	49903
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849797155202814860 01/31/24-13:45:59.245743
SID:	2814860
Source Port:	49797
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850061155202825564 01/31/24-13:47:57.550409
SID:	2825564
Source Port:	50061
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849768155202033132 01/31/24-13:45:44.098314
SID:	2033132
Source Port:	49768
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849746155202033132 01/31/24-13:45:27.251423
SID:	2033132
Source Port:	49746
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749906155202033132 01/31/24-13:46:50.493532
SID:	2033132
Source Port:	49906
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749853155202814860 01/31/24-13:46:26.388427
SID:	2814860
Source Port:	49853
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849786155202814856 01/31/24-13:45:53.798770
SID:	2814856
Source Port:	49786
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749951155202033132 01/31/24-13:47:10.012839
SID:	2033132
Source Port:	49951
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849823155202814860 01/31/24-13:46:12.589453
SID:	2814860
Source Port:	49823
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850023155202033132 01/31/24-13:47:40.733451
SID:	2033132
Source Port:	50023
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049717155202814856 01/31/24-13:44:33.052458
SID:	2814856
Source Port:	49717
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749952155202825564 01/31/24-13:47:10.635839
SID:	2825564
Source Port:	49952
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849975155202814856 01/31/24-13:47:20.215092
SID:	2814856
Source Port:	49975
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849808155202033132 01/31/24-13:46:05.365133
SID:	2033132
Source Port:	49808
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749921155202814856 01/31/24-13:46:56.844504
SID:	2814856
Source Port:	49921
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850035155202814856 01/31/24-13:47:46.851418
SID:	2814856
Source Port:	50035
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749838155202033132 01/31/24-13:46:19.351841
SID:	2033132
Source Port:	49838
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850065155202033132 01/31/24-13:47:58.995363
SID:	2033132
Source Port:	50065
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849744155202814856 01/31/24-13:45:25.355958
SID:	2814856
Source Port:	49744
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850083155202814856 01/31/24-13:48:06.641191
SID:	2814856
Source Port:	50083
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749842155202814856 01/31/24-13:46:21.391092
SID:	2814856
Source Port:	49842
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749853155202814856 01/31/24-13:46:26.350352
SID:	2814856
Source Port:	49853
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049720155202814856 01/31/24-13:44:41.444315
SID:	2814856
Source Port:	49720
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749884155202814856 01/31/24-13:46:41.240023
SID:	2814856
Source Port:	49884
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850077155202814856 01/31/24-13:48:04.158283
SID:	2814856
Source Port:	50077
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849999155202033132 01/31/24-13:47:30.874685
SID:	2033132
Source Port:	49999
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049706155202825563 01/31/24-13:44:19.636490
SID:	2825563
Source Port:	49706
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749963155202814856 01/31/24-13:47:15.116261
SID:	2814856
Source Port:	49963
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749883155202033132 01/31/24-13:46:40.580480
SID:	2033132
Source Port:	49883
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749872155202033132 01/31/24-13:46:34.707367
SID:	2033132
Source Port:	49872
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749841155202033132 01/31/24-13:46:20.734404
SID:	2033132
Source Port:	49841
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850041155202814856 01/31/24-13:47:49.318557
SID:	2814856
Source Port:	50041
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849969155202814856 01/31/24-13:47:17.733762
SID:	2814856
Source Port:	49969
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749842155202814860 01/31/24-13:46:21.433179
SID:	2814860
Source Port:	49842
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849991155202033132 01/31/24-13:47:27.567511
SID:	2033132
Source Port:	49991
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849819155202033132 01/31/24-13:46:10.485337
SID:	2033132
Source Port:	49819
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749884155202814860 01/31/24-13:46:41.272782
SID:	2814860
Source Port:	49884
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850037155202033132 01/31/24-13:47:47.476757
SID:	2033132
Source Port:	50037
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850012155202033132 01/31/24-13:47:36.213749
SID:	2033132
Source Port:	50012
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749867155202814860 01/31/24-13:46:32.676788
SID:	2814860
Source Port:	49867
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849974155202033132 01/31/24-13:47:19.598385
SID:	2033132
Source Port:	49974
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849986155202814856 01/31/24-13:47:24.724563
SID:	2814856
Source Port:	49986
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850071155202033132 01/31/24-13:48:01.467383
SID:	2033132
Source Port:	50071
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850079155202033132 01/31/24-13:48:04.787675
SID:	2033132
Source Port:	50079
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849811155202033132 01/31/24-13:46:06.767134
SID:	2033132
Source Port:	49811
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850007155202814856 01/31/24-13:47:34.365838
SID:	2814856
Source Port:	50007
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850049155202814856 01/31/24-13:47:52.618184
SID:	2814856
Source Port:	50049
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850054155202033132 01/31/24-13:47:54.464482
SID:	2033132
Source Port:	50054
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849786155202814860 01/31/24-13:45:53.870717
SID:	2814860
Source Port:	49786
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849806155202814856 01/31/24-13:46:03.674508
SID:	2814856
Source Port:	49806
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749873155202825564 01/31/24-13:46:35.392561
SID:	2825564
Source Port:	49873
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850024155202814860 01/31/24-13:47:41.354174
SID:	2814860
Source Port:	50024
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849774155202033132 01/31/24-13:45:47.451742
SID:	2033132
Source Port:	49774
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749959155202033132 01/31/24-13:47:13.291739
SID:	2033132
Source Port:	49959
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849769155202814860 01/31/24-13:45:45.027079
SID:	2814860
Source Port:	49769
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849799155202033132 01/31/24-13:45:59.937299
SID:	2033132
Source Port:	49799
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849757155202033132 01/31/24-13:45:36.879174
SID:	2033132
Source Port:	49757
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749917155202033132 01/31/24-13:46:54.989310
SID:	2033132
Source Port:	49917
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049705155202033132 01/31/24-13:44:16.950261
SID:	2033132
Source Port:	49705
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849823155202814856 01/31/24-13:46:12.544310
SID:	2814856
Source Port:	49823
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049720155202825563 01/31/24-13:44:41.444315
SID:	2825563
Source Port:	49720
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049720155202033132 01/31/24-13:44:41.241951
SID:	2033132
Source Port:	49720
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049722155202033132 01/31/24-13:44:46.149480
SID:	2033132
Source Port:	49722
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749873155202814860 01/31/24-13:46:35.392561
SID:	2814860
Source Port:	49873
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850087155202033132 01/31/24-13:48:08.080988
SID:	2033132
Source Port:	50087
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850089155202033132 01/31/24-13:48:08.906116
SID:	2033132
Source Port:	50089
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049721155202825563 01/31/24-13:44:43.887774
SID:	2825563
Source Port:	49721
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049721155202033132 01/31/24-13:44:43.687027
SID:	2033132
Source Port:	49721
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049725155202033132 01/31/24-13:44:53.509033
SID:	2033132
Source Port:	49725
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850088155202033132 01/31/24-13:48:08.490521
SID:	2033132
Source Port:	50088
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850061155202814860 01/31/24-13:47:57.550409
SID:	2814860
Source Port:	50061
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850084155202825564 01/31/24-13:48:07.059939
SID:	2825564
Source Port:	50084
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749877155202814860 01/31/24-13:46:38.132257
SID:	2814860
Source Port:	49877
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049724155202033132 01/31/24-13:44:51.051841
SID:	2033132
Source Port:	49724
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850083155202033132 01/31/24-13:48:06.438903
SID:	2033132
Source Port:	50083
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049726155202825563 01/31/24-13:44:56.171384
SID:	2825563
Source Port:	49726
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049727155202825563 01/31/24-13:44:58.623459
SID:	2825563
Source Port:	49727
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049723155202033132 01/31/24-13:44:48.597951
SID:	2033132
Source Port:	49723
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749876155202814860 01/31/24-13:46:37.688591
SID:	2814860
Source Port:	49876
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749898155202033132 01/31/24-13:46:47.202392
SID:	2033132
Source Port:	49898
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850082155202033132 01/31/24-13:48:06.034924
SID:	2033132
Source Port:	50082
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850058155202814856 01/31/24-13:47:56.309369
SID:	2814856
Source Port:	50058
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850065155202814860 01/31/24-13:47:59.200565
SID:	2814860
Source Port:	50065
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749871155202814856 01/31/24-13:46:34.460282
SID:	2814856
Source Port:	49871
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749899155202033132 01/31/24-13:46:47.613502
SID:	2033132
Source Port:	49899
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749872155202814856 01/31/24-13:46:34.911708
SID:	2814856
Source Port:	49872
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049725155202825563 01/31/24-13:44:53.717387
SID:	2825563
Source Port:	49725
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850057155202814856 01/31/24-13:47:55.896752
SID:	2814856
Source Port:	50057
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850062155202814860 01/31/24-13:47:57.963236
SID:	2814860
Source Port:	50062
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850084155202033132 01/31/24-13:48:06.855098
SID:	2033132
Source Port:	50084
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049724155202825563 01/31/24-13:44:51.254967
SID:	2825563
Source Port:	49724
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749878155202814860 01/31/24-13:46:38.581298
SID:	2814860
Source Port:	49878
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749879155202814860 01/31/24-13:46:39.020957
SID:	2814860
Source Port:	49879
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850085155202033132 01/31/24-13:48:07.265700
SID:	2033132
Source Port:	50085
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049722155202825563 01/31/24-13:44:46.349686
SID:	2825563
Source Port:	49722
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049723155202825563 01/31/24-13:44:48.800435
SID:	2825563
Source Port:	49723
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749890155202825564 01/31/24-13:46:43.969651
SID:	2825564
Source Port:	49890
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850086155202033132 01/31/24-13:48:07.671666
SID:	2033132
Source Port:	50086
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749867155202814856 01/31/24-13:46:32.643371
SID:	2814856
Source Port:	49867
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850050155202814856 01/31/24-13:47:53.027210
SID:	2814856
Source Port:	50050
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749866155202814856 01/31/24-13:46:32.193252
SID:	2814856
Source Port:	49866
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749868155202814856 01/31/24-13:46:33.104394
SID:	2814856
Source Port:	49868
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749877155202814856 01/31/24-13:46:38.102021
SID:	2814856
Source Port:	49877
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749879155202814856 01/31/24-13:46:38.988769
SID:	2814856
Source Port:	49879
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749891155202033132 01/31/24-13:46:44.210709
SID:	2033132
Source Port:	49891
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749865155202814856 01/31/24-13:46:31.747691
SID:	2814856
Source Port:	49865
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749869155202814856 01/31/24-13:46:33.548489
SID:	2814856
Source Port:	49869
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749876155202814856 01/31/24-13:46:37.656176
SID:	2814856
Source Port:	49876
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850053155202814856 01/31/24-13:47:54.247008
SID:	2814856
Source Port:	50053
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749892155202033132 01/31/24-13:46:44.651934
SID:	2033132
Source Port:	49892
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850060155202814856 01/31/24-13:47:57.135592
SID:	2814856
Source Port:	50060
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850064155202814856 01/31/24-13:47:58.783656
SID:	2814856
Source Port:	50064
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749863155202814856 01/31/24-13:46:30.851662
SID:	2814856
Source Port:	49863
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749874155202814856 01/31/24-13:46:35.809444
SID:	2814856
Source Port:	49874
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850054155202814856 01/31/24-13:47:54.660783
SID:	2814856
Source Port:	50054
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749862155202814856 01/31/24-13:46:30.408723
SID:	2814856
Source Port:	49862
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749864155202814856 01/31/24-13:46:31.295211
SID:	2814856
Source Port:	49864
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749873155202814856 01/31/24-13:46:35.358742
SID:	2814856
Source Port:	49873
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749875155202814856 01/31/24-13:46:36.286437
SID:	2814856
Source Port:	49875
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850056155202814856 01/31/24-13:47:55.479911
SID:	2814856
Source Port:	50056
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850055155202814856 01/31/24-13:47:55.066735
SID:	2814856
Source Port:	50055
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749890155202033132 01/31/24-13:46:43.762057
SID:	2033132
Source Port:	49890
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850066155202814856 01/31/24-13:47:59.611533
SID:	2814856
Source Port:	50066
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049728155202825563 01/31/24-13:45:00.933150
SID:	2825563
Source Port:	49728
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850091155202033132 01/31/24-13:48:09.729732
SID:	2033132
Source Port:	50091
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850090155202033132 01/31/24-13:48:09.314822
SID:	2033132
Source Port:	50090
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850092155202033132 01/31/24-13:48:10.136213
SID:	2033132
Source Port:	50092
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049717155202825563 01/31/24-13:44:33.052458
SID:	2825563
Source Port:	49717
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049719155202825563 01/31/24-13:44:37.961758
SID:	2825563
Source Port:	49719
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749897155202033132 01/31/24-13:46:46.794716
SID:	2033132
Source Port:	49897
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850081155202033132 01/31/24-13:48:05.621116
SID:	2033132
Source Port:	50081
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049729155202825563 01/31/24-13:45:03.132663
SID:	2825563
Source Port:	49729
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049718155202825563 01/31/24-13:44:35.495883
SID:	2825563
Source Port:	49718
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749870155202814860 01/31/24-13:46:34.040381
SID:	2814860
Source Port:	49870
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749896155202033132 01/31/24-13:46:46.387053
SID:	2033132
Source Port:	49896
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850080155202033132 01/31/24-13:48:05.207859
SID:	2033132
Source Port:	50080
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749881155202814860 01/31/24-13:46:39.922416
SID:	2814860
Source Port:	49881
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749882155202814860 01/31/24-13:46:40.369438
SID:	2814860
Source Port:	49882
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749871155202814860 01/31/24-13:46:34.496971
SID:	2814860
Source Port:	49871
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749893155202033132 01/31/24-13:46:45.104539
SID:	2033132
Source Port:	49893
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749895155202033132 01/31/24-13:46:45.983101
SID:	2033132
Source Port:	49895
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850063155202814856 01/31/24-13:47:58.375861
SID:	2814856
Source Port:	50063
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749883155202814860 01/31/24-13:46:40.819104
SID:	2814860
Source Port:	49883
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850052155202814856 01/31/24-13:47:53.832303
SID:	2814856
Source Port:	50052
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850051155202814856 01/31/24-13:47:53.428486
SID:	2814856
Source Port:	50051
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749872155202814860 01/31/24-13:46:34.944955
SID:	2814860
Source Port:	49872
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749894155202033132 01/31/24-13:46:45.572977
SID:	2033132
Source Port:	49894
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850062155202814856 01/31/24-13:47:57.963034
SID:	2814856
Source Port:	50062
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049731155202825563 01/31/24-13:45:05.231658
SID:	2825563
Source Port:	49731
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049732155202033132 01/31/24-13:45:07.005816
SID:	2033132
Source Port:	49732
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049731155202033132 01/31/24-13:45:05.026604
SID:	2033132
Source Port:	49731
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049733155202033132 01/31/24-13:45:08.875118
SID:	2033132
Source Port:	49733
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049708155202814856 01/31/24-13:44:25.677337
SID:	2814856
Source Port:	49708
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049732155202825563 01/31/24-13:45:07.206576
SID:	2825563
Source Port:	49732
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049735155202033132 01/31/24-13:45:12.468975
SID:	2033132
Source Port:	49735
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749880155202814860 01/31/24-13:46:39.474518
SID:	2814860
Source Port:	49880
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049706155202814856 01/31/24-13:44:19.636490
SID:	2814856
Source Port:	49706
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049715155202825563 01/31/24-13:44:28.120257
SID:	2825563
Source Port:	49715
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049734155202033132 01/31/24-13:45:10.657767
SID:	2033132
Source Port:	49734
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049707155202814856 01/31/24-13:44:22.197999
SID:	2814856
Source Port:	49707
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049716155202825563 01/31/24-13:44:30.597119
SID:	2825563
Source Port:	49716
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749888155202033132 01/31/24-13:46:42.842021
SID:	2033132
Source Port:	49888
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749880155202814856 01/31/24-13:46:39.438225
SID:	2814856
Source Port:	49880
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749882155202814856 01/31/24-13:46:40.334948
SID:	2814856
Source Port:	49882
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749861155202814856 01/31/24-13:46:29.965427
SID:	2814856
Source Port:	49861
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749889155202033132 01/31/24-13:46:43.291654
SID:	2033132
Source Port:	49889
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049736155202825563 01/31/24-13:45:14.416542
SID:	2825563
Source Port:	49736
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049705155202814856 01/31/24-13:44:17.157132
SID:	2814856
Source Port:	49705
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749883155202814856 01/31/24-13:46:40.785921
SID:	2814856
Source Port:	49883
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049734155202825563 01/31/24-13:45:10.860492
SID:	2825563
Source Port:	49734
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049735155202825563 01/31/24-13:45:12.674497
SID:	2825563
Source Port:	49735
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049733155202825563 01/31/24-13:45:09.077590
SID:	2825563
Source Port:	49733
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749881155202814856 01/31/24-13:46:39.885907
SID:	2814856
Source Port:	49881
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049719155202033132 01/31/24-13:44:37.756147
SID:	2033132
Source Port:	49719
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749888155202825564 01/31/24-13:46:43.079505
SID:	2825564
Source Port:	49888
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049718155202033132 01/31/24-13:44:35.296814
SID:	2033132
Source Port:	49718
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049715155202033132 01/31/24-13:44:27.921302
SID:	2033132
Source Port:	49715
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049736155202033132 01/31/24-13:45:14.213925
SID:	2033132
Source Port:	49736
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049737155202033132 01/31/24-13:45:15.749906
SID:	2033132
Source Port:	49737
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049717155202033132 01/31/24-13:44:32.848036
SID:	2033132
Source Port:	49717
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049716155202033132 01/31/24-13:44:30.390996
SID:	2033132
Source Port:	49716
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749852155202814860 01/31/24-13:46:25.945454
SID:	2814860
Source Port:	49852
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749856155202814860 01/31/24-13:46:27.739419
SID:	2814860
Source Port:	49856
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850066155202033132 01/31/24-13:47:59.412636
SID:	2033132
Source Port:	50066
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049716155202814856 01/31/24-13:44:30.597119
SID:	2814856
Source Port:	49716
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749966155202814856 01/31/24-13:47:16.363061
SID:	2814856
Source Port:	49966
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049705155202825563 01/31/24-13:44:17.157132
SID:	2825563
Source Port:	49705
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049718155202814856 01/31/24-13:44:35.495883
SID:	2814856
Source Port:	49718
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749964155202814856 01/31/24-13:47:15.534913
SID:	2814856
Source Port:	49964
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749890155202814860 01/31/24-13:46:44.005841
SID:	2814860
Source Port:	49890
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749854155202814860 01/31/24-13:46:26.840859
SID:	2814860
Source Port:	49854
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850060155202033132 01/31/24-13:47:56.936579
SID:	2033132
Source Port:	50060
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850068155202033132 01/31/24-13:48:00.229815
SID:	2033132
Source Port:	50068
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749877155202033132 01/31/24-13:46:37.898065
SID:	2033132
Source Port:	49877
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850036155202814856 01/31/24-13:47:47.264594
SID:	2814856
Source Port:	50036
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850078155202814856 01/31/24-13:48:04.576644
SID:	2814856
Source Port:	50078
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749850155202814856 01/31/24-13:46:25.014569
SID:	2814856
Source Port:	49850
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749879155202033132 01/31/24-13:46:38.788323
SID:	2033132
Source Port:	49879
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850084155202814860 01/31/24-13:48:07.059939
SID:	2814860
Source Port:	50084
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850062155202033132 01/31/24-13:47:57.760943
SID:	2033132
Source Port:	50062
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850042155202814860 01/31/24-13:47:49.723378
SID:	2814860
Source Port:	50042
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850038155202814856 01/31/24-13:47:48.088388
SID:	2814856
Source Port:	50038
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749858155202814860 01/31/24-13:46:28.626071
SID:	2814860
Source Port:	49858
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749892155202814856 01/31/24-13:46:44.853189
SID:	2814856
Source Port:	49892
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850064155202033132 01/31/24-13:47:58.584730
SID:	2033132
Source Port:	50064
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850082155202814856 01/31/24-13:48:06.228780
SID:	2814856
Source Port:	50082
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749856155202814856 01/31/24-13:46:27.705976
SID:	2814856
Source Port:	49856
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850040155202814856 01/31/24-13:47:48.916037
SID:	2814856
Source Port:	50040
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749845155202814856 01/31/24-13:46:22.755702
SID:	2814856
Source Port:	49845
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749847155202814856 01/31/24-13:46:23.665408
SID:	2814856
Source Port:	49847
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749880155202033132 01/31/24-13:46:39.234189
SID:	2033132
Source Port:	49880
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850070155202814856 01/31/24-13:48:01.254308
SID:	2814856
Source Port:	50070
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749854155202814856 01/31/24-13:46:26.808145
SID:	2814856
Source Port:	49854
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749858155202814856 01/31/24-13:46:28.592351
SID:	2814856
Source Port:	49858
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749871155202033132 01/31/24-13:46:34.256214
SID:	2033132
Source Port:	49871
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850042155202814856 01/31/24-13:47:49.723215
SID:	2814856
Source Port:	50042
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749898155202814856 01/31/24-13:46:47.400814
SID:	2814856
Source Port:	49898
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850032155202814856 01/31/24-13:47:45.605397
SID:	2814856
Source Port:	50032
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749887155202814856 01/31/24-13:46:42.591789
SID:	2814856
Source Port:	49887
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850086155202814856 01/31/24-13:48:07.875190
SID:	2814856
Source Port:	50086
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749852155202814856 01/31/24-13:46:25.908435
SID:	2814856
Source Port:	49852
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749841155202814856 01/31/24-13:46:20.934939
SID:	2814856
Source Port:	49841
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749843155202814856 01/31/24-13:46:21.848505
SID:	2814856
Source Port:	49843
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749849155202814856 01/31/24-13:46:24.570642
SID:	2814856
Source Port:	49849
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850076155202814856 01/31/24-13:48:03.735144
SID:	2814856
Source Port:	50076
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049721155202814856 01/31/24-13:44:43.887774
SID:	2814856
Source Port:	49721
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850080155202814856 01/31/24-13:48:05.407564
SID:	2814856
Source Port:	50080
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850088155202814856 01/31/24-13:48:08.695014
SID:	2814856
Source Port:	50088
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749896155202814856 01/31/24-13:46:46.585901
SID:	2814856
Source Port:	49896
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850034155202814856 01/31/24-13:47:46.432480
SID:	2814856
Source Port:	50034
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749885155202814856 01/31/24-13:46:41.683381
SID:	2814856
Source Port:	49885
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049707155202825563 01/31/24-13:44:22.197999
SID:	2825563
Source Port:	49707
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749962155202814856 01/31/24-13:47:14.711018
SID:	2814856
Source Port:	49962
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850070155202033132 01/31/24-13:48:01.055499
SID:	2033132
Source Port:	50070
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749886155202033132 01/31/24-13:46:41.934421
SID:	2033132
Source Port:	49886
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749875155202033132 01/31/24-13:46:36.082303
SID:	2033132
Source Port:	49875
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749873155202033132 01/31/24-13:46:35.158596
SID:	2033132
Source Port:	49873
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749892155202814860 01/31/24-13:46:44.886388
SID:	2814860
Source Port:	49892
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749882155202033132 01/31/24-13:46:40.134405
SID:	2033132
Source Port:	49882
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749884155202033132 01/31/24-13:46:41.035854
SID:	2033132
Source Port:	49884
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850074155202814856 01/31/24-13:48:02.912213
SID:	2814856
Source Port:	50074
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749860155202814860 01/31/24-13:46:29.547717
SID:	2814860
Source Port:	49860
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749960155202814856 01/31/24-13:47:13.894919
SID:	2814856
Source Port:	49960
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749850155202814860 01/31/24-13:46:25.047527
SID:	2814860
Source Port:	49850
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850030155202814856 01/31/24-13:47:43.897699
SID:	2814856
Source Port:	50030
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749889155202814856 01/31/24-13:46:43.498253
SID:	2814856
Source Port:	49889
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749885155202814860 01/31/24-13:46:41.716903
SID:	2814860
Source Port:	49885
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749843155202814860 01/31/24-13:46:21.886307
SID:	2814860
Source Port:	49843
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850057155202033132 01/31/24-13:47:55.692169
SID:	2033132
Source Port:	50057
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749862155202814860 01/31/24-13:46:30.444908
SID:	2814860
Source Port:	49862
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749864155202814860 01/31/24-13:46:31.327728
SID:	2814860
Source Port:	49864
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850076155202033132 01/31/24-13:48:03.535905
SID:	2033132
Source Port:	50076
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850078155202033132 01/31/24-13:48:04.372175
SID:	2033132
Source Port:	50078
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749841155202814860 01/31/24-13:46:20.980060
SID:	2814860
Source Port:	49841
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749845155202814860 01/31/24-13:46:22.792568
SID:	2814860
Source Port:	49845
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850055155202033132 01/31/24-13:47:54.870059
SID:	2033132
Source Port:	50055
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850059155202033132 01/31/24-13:47:56.526070
SID:	2033132
Source Port:	50059
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749866155202814860 01/31/24-13:46:32.226492
SID:	2814860
Source Port:	49866
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749887155202814860 01/31/24-13:46:42.628090
SID:	2814860
Source Port:	49887
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850072155202033132 01/31/24-13:48:01.881942
SID:	2033132
Source Port:	50072
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850093155202033132 01/31/24-13:48:10.567222
SID:	2033132
Source Port:	50093
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850048155202814856 01/31/24-13:47:52.199710
SID:	2814856
Source Port:	50048
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850067155202814856 01/31/24-13:48:00.017206
SID:	2814856
Source Port:	50067
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850069155202814856 01/31/24-13:48:00.848476
SID:	2814856
Source Port:	50069
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749849155202814860 01/31/24-13:46:24.603477
SID:	2814860
Source Port:	49849
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850046155202814856 01/31/24-13:47:51.371923
SID:	2814856
Source Port:	50046
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850051155202033132 01/31/24-13:47:53.231902
SID:	2033132
Source Port:	50051
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850025155202814856 01/31/24-13:47:41.766989
SID:	2814856
Source Port:	50025
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850029155202814856 01/31/24-13:47:43.412397
SID:	2814856
Source Port:	50029
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749889155202814860 01/31/24-13:46:43.538490
SID:	2814860
Source Port:	49889
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850074155202033132 01/31/24-13:48:02.715887
SID:	2033132
Source Port:	50074
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850095155202033132 01/31/24-13:48:11.377730
SID:	2033132
Source Port:	50095
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749847155202814860 01/31/24-13:46:23.698567
SID:	2814860
Source Port:	49847
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850053155202033132 01/31/24-13:47:54.045481
SID:	2033132
Source Port:	50053
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749868155202814860 01/31/24-13:46:33.136792
SID:	2814860
Source Port:	49868
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850027155202814856 01/31/24-13:47:42.589510
SID:	2814856
Source Port:	50027
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749966155202814860 01/31/24-13:47:16.363274
SID:	2814860
Source Port:	49966
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049708155202033132 01/31/24-13:44:25.477358
SID:	2033132
Source Port:	49708
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049729155202033132 01/31/24-13:45:02.926060
SID:	2033132
Source Port:	49729
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049706155202033132 01/31/24-13:44:19.429763
SID:	2033132
Source Port:	49706
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049727155202033132 01/31/24-13:44:58.422397
SID:	2033132
Source Port:	49727
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850046155202033132 01/31/24-13:47:51.170005
SID:	2033132
Source Port:	50046
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749948155202814856 01/31/24-13:47:07.919170
SID:	2814856
Source Port:	49948
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749949155202814856 01/31/24-13:47:08.341277
SID:	2814856
Source Port:	49949
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749834155202814860 01/31/24-13:46:17.745675
SID:	2814860
Source Port:	49834
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850045155202033132 01/31/24-13:47:50.752955
SID:	2033132
Source Port:	50045
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850049155202033132 01/31/24-13:47:52.413709
SID:	2033132
Source Port:	50049
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749944155202814856 01/31/24-13:47:06.283042
SID:	2814856
Source Port:	49944
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850019155202814856 01/31/24-13:47:39.291146
SID:	2814856
Source Port:	50019
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749833155202814860 01/31/24-13:46:17.292560
SID:	2814860
Source Port:	49833
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850042155202825564 01/31/24-13:47:49.723378
SID:	2825564
Source Port:	50042
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049733155202814856 01/31/24-13:45:09.077590
SID:	2814856
Source Port:	49733
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850022155202814860 01/31/24-13:47:40.523675
SID:	2814860
Source Port:	50022
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749838155202814860 01/31/24-13:46:19.605141
SID:	2814860
Source Port:	49838
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749857155202033132 01/31/24-13:46:27.950399
SID:	2033132
Source Port:	49857
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850041155202033132 01/31/24-13:47:49.124933
SID:	2033132
Source Port:	50041
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850042155202033132 01/31/24-13:47:49.524286
SID:	2033132
Source Port:	50042
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049737155202814856 01/31/24-13:45:15.950581
SID:	2814856
Source Port:	49737
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749858155202033132 01/31/24-13:46:28.390976
SID:	2033132
Source Port:	49858
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049736155202814856 01/31/24-13:45:14.416542
SID:	2814856
Source Port:	49736
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749837155202814860 01/31/24-13:46:19.137007
SID:	2814860
Source Port:	49837
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850092155202814856 01/31/24-13:48:10.339356
SID:	2814856
Source Port:	50092
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749834155202814856 01/31/24-13:46:17.699256
SID:	2814856
Source Port:	49834
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749860155202033132 01/31/24-13:46:29.307614
SID:	2033132
Source Port:	49860
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749833155202814856 01/31/24-13:46:17.254035
SID:	2814856
Source Port:	49833
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749837155202814856 01/31/24-13:46:19.090950
SID:	2814856
Source Port:	49837
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749838155202814856 01/31/24-13:46:19.558116
SID:	2814856
Source Port:	49838
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850011155202814856 01/31/24-13:47:35.995630
SID:	2814856
Source Port:	50011
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049732155202814856 01/31/24-13:45:07.206576
SID:	2814856
Source Port:	49732
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850091155202814856 01/31/24-13:48:09.926337
SID:	2814856
Source Port:	50091
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850023155202814856 01/31/24-13:47:40.937035
SID:	2814856
Source Port:	50023
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850012155202814856 01/31/24-13:47:36.407640
SID:	2814856
Source Port:	50012
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749941155202814856 01/31/24-13:47:05.036152
SID:	2814856
Source Port:	49941
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749951155202814856 01/31/24-13:47:10.216219
SID:	2814856
Source Port:	49951
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749854155202033132 01/31/24-13:46:26.601027
SID:	2033132
Source Port:	49854
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749940155202814856 01/31/24-13:47:04.619814
SID:	2814856
Source Port:	49940
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749853155202033132 01/31/24-13:46:26.150414
SID:	2033132
Source Port:	49853
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749864155202033132 01/31/24-13:46:31.094679
SID:	2033132
Source Port:	49864
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749850155202033132 01/31/24-13:46:24.811943
SID:	2033132
Source Port:	49850
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749863155202033132 01/31/24-13:46:30.651135
SID:	2033132
Source Port:	49863
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749840155202814860 01/31/24-13:46:20.526891
SID:	2814860
Source Port:	49840
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749950155202814856 01/31/24-13:47:08.814709
SID:	2814856
Source Port:	49950
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850095155202814856 01/31/24-13:48:11.578864
SID:	2814856
Source Port:	50095
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749938155202814856 01/31/24-13:47:03.795981
SID:	2814856
Source Port:	49938
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749959155202814856 01/31/24-13:47:13.493250
SID:	2814856
Source Port:	49959
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749960155202033132 01/31/24-13:47:13.697872
SID:	2033132
Source Port:	49960
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749937155202814856 01/31/24-13:47:03.390502
SID:	2814856
Source Port:	49937
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749955155202814856 01/31/24-13:47:11.852909
SID:	2814856
Source Port:	49955
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749933155202814856 01/31/24-13:47:01.767666
SID:	2814856
Source Port:	49933
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049729155202814856 01/31/24-13:45:03.132663
SID:	2814856
Source Port:	49729
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749954155202814856 01/31/24-13:47:11.452802
SID:	2814856
Source Port:	49954
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749967155202033132 01/31/24-13:47:16.575623
SID:	2033132
Source Port:	49967
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049722155202814856 01/31/24-13:44:46.349686
SID:	2814856
Source Port:	49722
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749840155202814856 01/31/24-13:46:20.482440
SID:	2814856
Source Port:	49840
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749867155202033132 01/31/24-13:46:32.440536
SID:	2033132
Source Port:	49867
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749868155202033132 01/31/24-13:46:32.898831
SID:	2033132
Source Port:	49868
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749846155202033132 01/31/24-13:46:23.000649
SID:	2033132
Source Port:	49846
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749934155202814856 01/31/24-13:47:02.168221
SID:	2814856
Source Port:	49934
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749964155202033132 01/31/24-13:47:15.330372
SID:	2033132
Source Port:	49964
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049726155202814856 01/31/24-13:44:56.171384
SID:	2814856
Source Port:	49726
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749847155202033132 01/31/24-13:46:23.459866
SID:	2033132
Source Port:	49847
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049725155202814856 01/31/24-13:44:53.717387
SID:	2814856
Source Port:	49725
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749958155202814856 01/31/24-13:47:13.082784
SID:	2814856
Source Port:	49958
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749963155202033132 01/31/24-13:47:14.917764
SID:	2033132
Source Port:	49963
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749860155202825564 01/31/24-13:46:29.514387
SID:	2825564
Source Port:	49860
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850016155202814860 01/31/24-13:47:38.045928
SID:	2814860
Source Port:	50016
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850028155202033132 01/31/24-13:47:42.796485
SID:	2033132
Source Port:	50028
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850029155202033132 01/31/24-13:47:43.213747
SID:	2033132
Source Port:	50029
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850067155202033132 01/31/24-13:47:59.817861
SID:	2033132
Source Port:	50067
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049719155202814856 01/31/24-13:44:37.961758
SID:	2814856
Source Port:	49719
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749927155202814856 01/31/24-13:46:59.317136
SID:	2814856
Source Port:	49927
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849806155202033132 01/31/24-13:46:03.472670
SID:	2033132
Source Port:	49806
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749965155202814856 01/31/24-13:47:15.958738
SID:	2814856
Source Port:	49965
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749855155202814860 01/31/24-13:46:27.286033
SID:	2814860
Source Port:	49855
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850025155202033132 01/31/24-13:47:41.565873
SID:	2033132
Source Port:	50025
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850079155202814856 01/31/24-13:48:04.991312
SID:	2814856
Source Port:	50079
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849802155202033132 01/31/24-13:46:01.368477
SID:	2033132
Source Port:	49802
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850037155202814856 01/31/24-13:47:47.680497
SID:	2814856
Source Port:	50037
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749836155202033132 01/31/24-13:46:18.423289
SID:	2033132
Source Port:	49836
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749893155202814856 01/31/24-13:46:45.310571
SID:	2814856
Source Port:	49893
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749851155202814856 01/31/24-13:46:25.455044
SID:	2814856
Source Port:	49851
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749878155202033132 01/31/24-13:46:38.341243
SID:	2033132
Source Port:	49878
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749923155202814856 01/31/24-13:46:57.673826
SID:	2814856
Source Port:	49923
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850021155202033132 01/31/24-13:47:39.924049
SID:	2033132
Source Port:	50021
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850063155202033132 01/31/24-13:47:58.185145
SID:	2033132
Source Port:	50063
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749953155202033132 01/31/24-13:47:10.840344
SID:	2033132
Source Port:	49953
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049715155202814856 01/31/24-13:44:28.120257
SID:	2814856
Source Port:	49715
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749859155202814860 01/31/24-13:46:29.090226
SID:	2814860
Source Port:	49859
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850071155202814856 01/31/24-13:48:01.668494
SID:	2814856
Source Port:	50071
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850081155202814856 01/31/24-13:48:05.824286
SID:	2814856
Source Port:	50081
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749844155202814856 01/31/24-13:46:22.302331
SID:	2814856
Source Port:	49844
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749848155202814856 01/31/24-13:46:24.119932
SID:	2814856
Source Port:	49848
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749881155202033132 01/31/24-13:46:39.685109
SID:	2033132
Source Port:	49881
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749897155202814856 01/31/24-13:46:46.990571
SID:	2814856
Source Port:	49897
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749855155202814856 01/31/24-13:46:27.253300
SID:	2814856
Source Port:	49855
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749859155202814856 01/31/24-13:46:29.049332
SID:	2814856
Source Port:	49859
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749870155202033132 01/31/24-13:46:33.799975
SID:	2033132
Source Port:	49870
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850033155202814856 01/31/24-13:47:46.018918
SID:	2814856
Source Port:	50033
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850043155202814856 01/31/24-13:47:50.130460
SID:	2814856
Source Port:	50043
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749886155202814856 01/31/24-13:46:42.141521
SID:	2814856
Source Port:	49886
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749930155202814856 01/31/24-13:47:00.536549
SID:	2814856
Source Port:	49930
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049708155202825563 01/31/24-13:44:25.677337
SID:	2825563
Source Port:	49708
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749961155202814856 01/31/24-13:47:14.304436
SID:	2814856
Source Port:	49961
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749843155202033132 01/31/24-13:46:21.645688
SID:	2033132
Source Port:	49843
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749885155202033132 01/31/24-13:46:41.480651
SID:	2033132
Source Port:	49885
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749874155202033132 01/31/24-13:46:35.603545
SID:	2033132
Source Port:	49874
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850085155202814856 01/31/24-13:48:07.460015
SID:	2814856
Source Port:	50085
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749851155202814860 01/31/24-13:46:25.491736
SID:	2814860
Source Port:	49851
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749893155202814860 01/31/24-13:46:45.363918
SID:	2814860
Source Port:	49893
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749861155202814860 01/31/24-13:46:29.998351
SID:	2814860
Source Port:	49861
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850014155202033132 01/31/24-13:47:37.027194
SID:	2033132
Source Port:	50014
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850056155202033132 01/31/24-13:47:55.277450
SID:	2033132
Source Port:	50056
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749886155202814860 01/31/24-13:46:42.176030
SID:	2814860
Source Port:	49886
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850035155202033132 01/31/24-13:47:46.645976
SID:	2033132
Source Port:	50035
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850095155202825563 01/31/24-13:48:11.578864
SID:	2825563
Source Port:	50095
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850077155202033132 01/31/24-13:48:03.955524
SID:	2033132
Source Port:	50077
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850009155202814856 01/31/24-13:47:35.182188
SID:	2814856
Source Port:	50009
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849817155202033132 01/31/24-13:46:09.546682
SID:	2033132
Source Port:	49817
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850094155202033132 01/31/24-13:48:10.959648
SID:	2033132
Source Port:	50094
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749844155202814860 01/31/24-13:46:22.339756
SID:	2814860
Source Port:	49844
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749865155202814860 01/31/24-13:46:31.781496
SID:	2814860
Source Port:	49865
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850005155202814856 01/31/24-13:47:33.538147
SID:	2814856
Source Port:	50005
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850089155202814856 01/31/24-13:48:09.103545
SID:	2814856
Source Port:	50089
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849813155202033132 01/31/24-13:46:07.692123
SID:	2033132
Source Port:	49813
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850073155202033132 01/31/24-13:48:02.299425
SID:	2033132
Source Port:	50073
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850068155202814856 01/31/24-13:48:00.433237
SID:	2814856
Source Port:	50068
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850010155202033132 01/31/24-13:47:35.392982
SID:	2033132
Source Port:	50010
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850052155202033132 01/31/24-13:47:53.633806
SID:	2033132
Source Port:	50052
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850031155202033132 01/31/24-13:47:45.008075
SID:	2033132
Source Port:	50031
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749848155202814860 01/31/24-13:46:24.154340
SID:	2814860
Source Port:	49848
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749869155202814860 01/31/24-13:46:33.581246
SID:	2814860
Source Port:	49869
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850026155202814860 01/31/24-13:47:42.178067
SID:	2814860
Source Port:	50026
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749957155202033132 01/31/24-13:47:12.475135
SID:	2033132
Source Port:	49957
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049728155202033132 01/31/24-13:45:00.733486
SID:	2033132
Source Port:	49728
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049707155202033132 01/31/24-13:44:21.990595
SID:	2033132
Source Port:	49707
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749936155202033132 01/31/24-13:47:02.788074
SID:	2033132
Source Port:	49936
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850018155202033132 01/31/24-13:47:38.672342
SID:	2033132
Source Port:	50018
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850039155202033132 01/31/24-13:47:48.297219
SID:	2033132
Source Port:	50039
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849800155202814860 01/31/24-13:46:00.683160
SID:	2814860
Source Port:	49800
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749905155202814856 01/31/24-13:46:50.282309
SID:	2814856
Source Port:	49905
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850002155202033132 01/31/24-13:47:32.103980
SID:	2033132
Source Port:	50002
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850005155202033132 01/31/24-13:47:33.343391
SID:	2033132
Source Port:	50005
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749932155202033132 01/31/24-13:47:01.155324
SID:	2033132
Source Port:	49932
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749931155202825564 01/31/24-13:47:00.948487
SID:	2825564
Source Port:	49931
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749933155202033132 01/31/24-13:47:01.564621
SID:	2033132
Source Port:	49933
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749900155202814856 01/31/24-13:46:48.226102
SID:	2814856
Source Port:	49900
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749908155202814856 01/31/24-13:46:51.514064
SID:	2814856
Source Port:	49908
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849807155202814860 01/31/24-13:46:05.156555
SID:	2814860
Source Port:	49807
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849829155202033132 01/31/24-13:46:15.064963
SID:	2033132
Source Port:	49829
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849824155202033132 01/31/24-13:46:12.799482
SID:	2033132
Source Port:	49824
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849823155202033132 01/31/24-13:46:12.343400
SID:	2033132
Source Port:	49823
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749902155202814856 01/31/24-13:46:49.044880
SID:	2814856
Source Port:	49902
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749903155202814856 01/31/24-13:46:49.456243
SID:	2814856
Source Port:	49903
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850000155202033132 01/31/24-13:47:31.281773
SID:	2033132
Source Port:	50000
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849802155202814860 01/31/24-13:46:01.620819
SID:	2814860
Source Port:	49802
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849826155202033132 01/31/24-13:46:13.702582
SID:	2033132
Source Port:	49826
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749930155202033132 01/31/24-13:47:00.345658
SID:	2033132
Source Port:	49930
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849808155202814860 01/31/24-13:46:05.620681
SID:	2814860
Source Port:	49808
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849810155202814860 01/31/24-13:46:06.558355
SID:	2814860
Source Port:	49810
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749917155202814856 01/31/24-13:46:55.187480
SID:	2814856
Source Port:	49917
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849811155202814860 01/31/24-13:46:07.011504
SID:	2814860
Source Port:	49811
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849816155202825564 01/31/24-13:46:09.339379
SID:	2825564
Source Port:	49816
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749916155202814856 01/31/24-13:46:54.782524
SID:	2814856
Source Port:	49916
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749921155202033132 01/31/24-13:46:56.638320
SID:	2033132
Source Port:	49921
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749922155202033132 01/31/24-13:46:57.056086
SID:	2033132
Source Port:	49922
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749944155202033132 01/31/24-13:47:06.078771
SID:	2033132
Source Port:	49944
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749911155202814856 01/31/24-13:46:52.741765
SID:	2814856
Source Port:	49911
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749919155202814856 01/31/24-13:46:56.005189
SID:	2814856
Source Port:	49919
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749924155202033132 01/31/24-13:46:57.890618
SID:	2033132
Source Port:	49924
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849816155202814860 01/31/24-13:46:09.339379
SID:	2814860
Source Port:	49816
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849813155202814860 01/31/24-13:46:07.948855
SID:	2814860
Source Port:	49813
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749941155202033132 01/31/24-13:47:04.837494
SID:	2033132
Source Port:	49941
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849813155202814856 01/31/24-13:46:07.894526
SID:	2814856
Source Port:	49813
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849810155202814856 01/31/24-13:46:06.505433
SID:	2814856
Source Port:	49810
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849816155202814856 01/31/24-13:46:09.288582
SID:	2814856
Source Port:	49816
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849821155202033132 01/31/24-13:46:11.418734
SID:	2033132
Source Port:	49821
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749946155202033132 01/31/24-13:47:06.902605
SID:	2033132
Source Port:	49946
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749929155202033132 01/31/24-13:46:59.931876
SID:	2033132
Source Port:	49929
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749947155202033132 01/31/24-13:47:07.312299
SID:	2033132
Source Port:	49947
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850007155202033132 01/31/24-13:47:34.162873
SID:	2033132
Source Port:	50007
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850008155202033132 01/31/24-13:47:34.574354
SID:	2033132
Source Port:	50008
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849811155202814856 01/31/24-13:46:06.967421
SID:	2814856
Source Port:	49811
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749927155202033132 01/31/24-13:46:59.119869
SID:	2033132
Source Port:	49927
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749949155202033132 01/31/24-13:47:08.159784
SID:	2033132
Source Port:	49949
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749950155202033132 01/31/24-13:47:08.614407
SID:	2033132
Source Port:	49950
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849809155202033132 01/31/24-13:46:05.835145
SID:	2033132
Source Port:	49809
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749928155202814856 01/31/24-13:46:59.722516
SID:	2814856
Source Port:	49928
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850024155202033132 01/31/24-13:47:41.149121
SID:	2033132
Source Port:	50024
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850026155202825564 01/31/24-13:47:42.178067
SID:	2825564
Source Port:	50026
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849822155202814860 01/31/24-13:46:12.136288
SID:	2814860
Source Port:	49822
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749910155202033132 01/31/24-13:46:52.138301
SID:	2033132
Source Port:	49910
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749839155202033132 01/31/24-13:46:19.815753
SID:	2033132
Source Port:	49839
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749922155202814856 01/31/24-13:46:57.259138
SID:	2814856
Source Port:	49922
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849807155202033132 01/31/24-13:46:04.802191
SID:	2033132
Source Port:	49807
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849801155202033132 01/31/24-13:46:00.894571
SID:	2033132
Source Port:	49801
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849824155202814860 01/31/24-13:46:13.042531
SID:	2814860
Source Port:	49824
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749931155202814860 01/31/24-13:47:00.948487
SID:	2814860
Source Port:	49931
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850022155202033132 01/31/24-13:47:40.327654
SID:	2033132
Source Port:	50022
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849819155202814856 01/31/24-13:46:10.685707
SID:	2814856
Source Port:	49819
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749952155202033132 01/31/24-13:47:10.430107
SID:	2033132
Source Port:	49952
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749837155202033132 01/31/24-13:46:18.882097
SID:	2033132
Source Port:	49837
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850000155202814856 01/31/24-13:47:31.484971
SID:	2814856
Source Port:	50000
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849819155202814860 01/31/24-13:46:10.730078
SID:	2814860
Source Port:	49819
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749931155202814856 01/31/24-13:47:00.948294
SID:	2814856
Source Port:	49931
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749842155202033132 01/31/24-13:46:21.188928
SID:	2033132
Source Port:	49842
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749840155202033132 01/31/24-13:46:20.281733
SID:	2033132
Source Port:	49840
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850013155202033132 01/31/24-13:47:36.618527
SID:	2033132
Source Port:	50013
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850038155202033132 01/31/24-13:47:47.888470
SID:	2033132
Source Port:	50038
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850008155202814856 01/31/24-13:47:34.765342
SID:	2814856
Source Port:	50008
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849975155202033132 01/31/24-13:47:20.013685
SID:	2033132
Source Port:	49975
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849818155202033132 01/31/24-13:46:10.020757
SID:	2033132
Source Port:	49818
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850036155202033132 01/31/24-13:47:47.061816
SID:	2033132
Source Port:	50036
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849812155202033132 01/31/24-13:46:07.224734
SID:	2033132
Source Port:	49812
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850030155202033132 01/31/24-13:47:43.709345
SID:	2033132
Source Port:	50030
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850011155202033132 01/31/24-13:47:35.802351
SID:	2033132
Source Port:	50011
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849973155202033132 01/31/24-13:47:19.186188
SID:	2033132
Source Port:	49973
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849824155202814856 01/31/24-13:46:13.001970
SID:	2814856
Source Port:	49824
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849807155202814856 01/31/24-13:46:05.008925
SID:	2814856
Source Port:	49807
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849805155202814856 01/31/24-13:46:02.997883
SID:	2814856
Source Port:	49805
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849810155202033132 01/31/24-13:46:06.305307
SID:	2033132
Source Port:	49810
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849739155202033132 01/31/24-13:45:18.732077
SID:	2033132
Source Port:	49739
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749958155202033132 01/31/24-13:47:12.884236
SID:	2033132
Source Port:	49958
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749916155202033132 01/31/24-13:46:54.580221
SID:	2033132
Source Port:	49916
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749935155202033132 01/31/24-13:47:02.379861
SID:	2033132
Source Port:	49935
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749918155202033132 01/31/24-13:46:55.392900
SID:	2033132
Source Port:	49918
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850019155202033132 01/31/24-13:47:39.087121
SID:	2033132
Source Port:	50019
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849822155202814856 01/31/24-13:46:12.095476
SID:	2814856
Source Port:	49822
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849981155202033132 01/31/24-13:47:22.470875
SID:	2033132
Source Port:	49981
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850044155202033132 01/31/24-13:47:50.342289
SID:	2033132
Source Port:	50044
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749835155202814860 01/31/24-13:46:18.215655
SID:	2814860
Source Port:	49835
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850047155202033132 01/31/24-13:47:51.584056
SID:	2033132
Source Port:	50047
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749856155202033132 01/31/24-13:46:27.501239
SID:	2033132
Source Port:	49856
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849750155202033132 01/31/24-13:45:30.328911
SID:	2033132
Source Port:	49750
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749859155202033132 01/31/24-13:46:28.841911
SID:	2033132
Source Port:	49859
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849984155202033132 01/31/24-13:47:23.707901
SID:	2033132
Source Port:	49984
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049735155202814856 01/31/24-13:45:12.674497
SID:	2814856
Source Port:	49735
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749947155202814856 01/31/24-13:47:07.514179
SID:	2814856
Source Port:	49947
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850093155202814856 01/31/24-13:48:10.750102
SID:	2814856
Source Port:	50093
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850020155202814856 01/31/24-13:47:39.712520
SID:	2814856
Source Port:	50020
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849989155202033132 01/31/24-13:47:25.938949
SID:	2033132
Source Port:	49989
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749865155202033132 01/31/24-13:46:31.540764
SID:	2033132
Source Port:	49865
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749942155202814856 01/31/24-13:47:05.448739
SID:	2814856
Source Port:	49942
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849978155202033132 01/31/24-13:47:21.245709
SID:	2033132
Source Port:	49978
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749851155202033132 01/31/24-13:46:25.254447
SID:	2033132
Source Port:	49851
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749862155202033132 01/31/24-13:46:30.206739
SID:	2033132
Source Port:	49862
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749835155202814856 01/31/24-13:46:18.162993
SID:	2814856
Source Port:	49835
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849796155202814856 01/31/24-13:45:58.699621
SID:	2814856
Source Port:	49796
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749961155202033132 01/31/24-13:47:14.103273
SID:	2033132
Source Port:	49961
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849830155202814860 01/31/24-13:46:15.792501
SID:	2814860
Source Port:	49830
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749939155202814856 01/31/24-13:47:04.203524
SID:	2814856
Source Port:	49939
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049727155202814856 01/31/24-13:44:58.623459
SID:	2814856
Source Port:	49727
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849793155202814856 01/31/24-13:45:57.235502
SID:	2814856
Source Port:	49793
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749953155202814856 01/31/24-13:47:11.038407
SID:	2814856
Source Port:	49953
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749966155202033132 01/31/24-13:47:16.164740
SID:	2033132
Source Port:	49966
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749902155202033132 01/31/24-13:46:48.852329
SID:	2033132
Source Port:	49902
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049724155202814856 01/31/24-13:44:51.254967
SID:	2814856
Source Port:	49724
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749845155202033132 01/31/24-13:46:22.551676
SID:	2033132
Source Port:	49845
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749967155202825564 01/31/24-13:47:16.775266
SID:	2825564
Source Port:	49967
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849999155202825564 01/31/24-13:47:31.071732
SID:	2825564
Source Port:	49999
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849996155202825564 01/31/24-13:47:29.849435
SID:	2825564
Source Port:	49996
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749936155202814856 01/31/24-13:47:02.986112
SID:	2814856
Source Port:	49936
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749848155202033132 01/31/24-13:46:23.914570
SID:	2033132
Source Port:	49848
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849793155202814860 01/31/24-13:45:57.308396
SID:	2814860
Source Port:	49793
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849796155202814860 01/31/24-13:45:58.761258
SID:	2814860
Source Port:	49796
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849830155202814856 01/31/24-13:46:15.746995
SID:	2814856
Source Port:	49830
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849764155202033132 01/31/24-13:45:41.662817
SID:	2033132
Source Port:	49764
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849742155202033132 01/31/24-13:45:22.649520
SID:	2033132
Source Port:	49742
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849971155202814856 01/31/24-13:47:18.558458
SID:	2814856
Source Port:	49971
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749907155202033132 01/31/24-13:46:50.908092
SID:	2033132
Source Port:	49907
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850062155202825564 01/31/24-13:47:57.963236
SID:	2825564
Source Port:	50062
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849767155202033132 01/31/24-13:45:43.496811
SID:	2033132
Source Port:	49767
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850065155202825564 01/31/24-13:47:59.200565
SID:	2825564
Source Port:	50065
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850027155202033132 01/31/24-13:47:42.389488
SID:	2033132
Source Port:	50027
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749891155202814860 01/31/24-13:46:44.445521
SID:	2814860
Source Port:	49891
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849782155202814856 01/31/24-13:45:51.796178
SID:	2814856
Source Port:	49782
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749955155202033132 01/31/24-13:47:11.657071
SID:	2033132
Source Port:	49955
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850061155202033132 01/31/24-13:47:57.347142
SID:	2033132
Source Port:	50061
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850069155202033132 01/31/24-13:48:00.646233
SID:	2033132
Source Port:	50069
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849740155202814856 01/31/24-13:45:20.274353
SID:	2814856
Source Port:	49740
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849748155202814856 01/31/24-13:45:28.445670
SID:	2814856
Source Port:	49748
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749913155202033132 01/31/24-13:46:53.375137
SID:	2033132
Source Port:	49913
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749834155202033132 01/31/24-13:46:17.499124
SID:	2033132
Source Port:	49834
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749891155202814856 01/31/24-13:46:44.410919
SID:	2814856
Source Port:	49891
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849827155202814860 01/31/24-13:46:14.402060
SID:	2814860
Source Port:	49827
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850039155202814856 01/31/24-13:47:48.496167
SID:	2814856
Source Port:	50039
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749857155202814860 01/31/24-13:46:28.183761
SID:	2814860
Source Port:	49857
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849804155202033132 01/31/24-13:46:02.305053
SID:	2033132
Source Port:	49804
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849770155202033132 01/31/24-13:45:45.239214
SID:	2033132
Source Port:	49770
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749925155202814856 01/31/24-13:46:58.513351
SID:	2814856
Source Port:	49925
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749846155202814856 01/31/24-13:46:23.201203
SID:	2814856
Source Port:	49846
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749899155202814856 01/31/24-13:46:47.814291
SID:	2814856
Source Port:	49899
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749857155202814856 01/31/24-13:46:28.150551
SID:	2814856
Source Port:	49857
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850031155202814856 01/31/24-13:47:45.206039
SID:	2814856
Source Port:	50031
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850087155202814856 01/31/24-13:48:08.277789
SID:	2814856
Source Port:	50087
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850045155202814856 01/31/24-13:47:50.956001
SID:	2814856
Source Port:	50045
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749887155202033132 01/31/24-13:46:42.387241
SID:	2033132
Source Port:	49887
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749876155202033132 01/31/24-13:46:37.451893
SID:	2033132
Source Port:	49876
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850016155202033132 01/31/24-13:47:37.847755
SID:	2033132
Source Port:	50016
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749863155202814860 01/31/24-13:46:30.883967
SID:	2814860
Source Port:	49863
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849970155202033132 01/31/24-13:47:17.943987
SID:	2033132
Source Port:	49970
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749888155202814860 01/31/24-13:46:43.079505
SID:	2814860
Source Port:	49888
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850050155202033132 01/31/24-13:47:52.828780
SID:	2033132
Source Port:	50050
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850058155202033132 01/31/24-13:47:56.111095
SID:	2033132
Source Port:	50058
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850003155202814856 01/31/24-13:47:32.722269
SID:	2814856
Source Port:	50003
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850028155202814856 01/31/24-13:47:42.996356
SID:	2814856
Source Port:	50028
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749846155202814860 01/31/24-13:46:23.245831
SID:	2814860
Source Port:	49846
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849995155202033132 01/31/24-13:47:29.244694
SID:	2033132
Source Port:	49995
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849815155202033132 01/31/24-13:46:08.614062
SID:	2033132
Source Port:	49815
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850033155202033132 01/31/24-13:47:45.819071
SID:	2033132
Source Port:	50033
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17850075155202033132 01/31/24-13:48:03.125337
SID:	2033132
Source Port:	50075
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849782155202814860 01/31/24-13:45:51.886933
SID:	2814860
Source Port:	49782
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849802155202814856 01/31/24-13:46:01.573874
SID:	2814856
Source Port:	49802
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749967155202814860 01/31/24-13:47:16.775266
SID:	2814860
Source Port:	49967
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849753155202033132 01/31/24-13:45:33.735251
SID:	2033132
Source Port:	49753
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849827155202814856 01/31/24-13:46:14.359489
SID:	2814856
Source Port:	49827
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849832155202033132 01/31/24-13:46:16.473185
SID:	2033132
Source Port:	49832
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849982155202814856 01/31/24-13:47:23.085370
SID:	2814856
Source Port:	49982
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849765155202814860 01/31/24-13:45:42.684965
SID:	2814860
Source Port:	49765
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.157.220

Timestamp:	192.168.2.113.69.157.22049726155202033132 01/31/24-13:44:55.970492
SID:	2033132
Source Port:	49726
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.69.115.178

Timestamp:	192.168.2.113.69.115.17849778155202033132 01/31/24-13:45:49.577430
SID:	2033132
Source Port:	49778
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) - Source IP: 192.168.2.11 - Destination IP: 3.66.38.117

Timestamp:	192.168.2.113.66.38.11749938155202033132 01/31/24-13:47:03.596968
SID:	2033132
Source Port:	49938
Destination Port:	15520
Protocol:	TCP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: ziTLBa3N50.exe

Avira: detected

Antivirus detection for URL or domain

Source: 6.tcp.eu.ngrok.io

Avira URL Cloud: Label: malware

Found malware configuration

Source: 00000001.00000000.1248679370.0000000000172000.00000002.00000001.01000000.00000003.sdmp

Malware Configuration Extractor: Njrat {"Host": "6.tcp.eu.ngrok.io", "Port": "15520", "Version": "im523", "Campaign ID": "HacKed", "Install Name": "server.exe", "Install Dir": "TEMP"}

Multi AV Scanner detection for domain / URL

Source: 6.tcp.eu.ngrok.io	Virustotal: Detection: 12%			Perma Link
Source: 6.tcp.eu.ngrok.io	Virustotal: Detection: 12%			Perma Link

Multi AV Scanner detection for submitted file

Source: ziTLBa3N50.exe	ReversingLabs: Detection: 84%
Source: ziTLBa3N50.exe	Virustotal: Detection: 84%			Perma Link

Yara detected Njrat

Source: Yara match	File source: ziTLBa3N50.exe, type: SAMPLE
Source: Yara match	File source: 1.0.ziTLBa3N50.exe.170000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000001.00000000.1248679370.0000000000172000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: ziTLBa3N50.exe PID: 5576, type: MEMORYSTR

Machine Learning detection for sample

Source: ziTLBa3N50.exe

Joe Sandbox ML: detected

Source: ziTLBa3N50.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: C:\Users\user\Desktop\ziTLBa3N50.exe

File opened: C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.9672_none_d08f9da24428a513\MSVCR80.dll

Jump to behavior

Source: ziTLBa3N50.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source: ziTLBa3N50.exe, 00000001.00000000.1248679370.0000000000172000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: autorun.inf
Source: ziTLBa3N50.exe, 00000001.00000000.1248679370.0000000000172000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: [autorun]
Source: ziTLBa3N50.exe, 00000001.00000002.3690177112.0000000002771000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: autorun.inf
Source: ziTLBa3N50.exe, 00000001.00000002.3690177112.0000000002771000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: [autorun]
Source: ziTLBa3N50.exe	Binary or memory string: autorun.inf
Source: ziTLBa3N50.exe	Binary or memory string: [autorun]

Networking

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49705 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49705 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2825563 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) 192.168.2.11:49705 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49706 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49706 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2825563 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) 192.168.2.11:49706 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49707 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49707 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2825563 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) 192.168.2.11:49707 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49708 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49708 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2825563 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) 192.168.2.11:49708 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49715 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49715 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2825563 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) 192.168.2.11:49715 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49716 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49716 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2825563 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) 192.168.2.11:49716 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49717 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49717 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2825563 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) 192.168.2.11:49717 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49718 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49718 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2825563 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) 192.168.2.11:49718 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49719 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49719 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2825563 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) 192.168.2.11:49719 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49720 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49720 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2825563 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) 192.168.2.11:49720 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49721 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49721 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2825563 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) 192.168.2.11:49721 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49722 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49722 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2825563 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) 192.168.2.11:49722 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49723 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49723 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2825563 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) 192.168.2.11:49723 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49724 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49724 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2825563 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) 192.168.2.11:49724 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49725 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49725 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2825563 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) 192.168.2.11:49725 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49726 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49726 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2825563 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) 192.168.2.11:49726 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49727 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49727 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2825563 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) 192.168.2.11:49727 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49728 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49728 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2825563 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) 192.168.2.11:49728 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49729 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49729 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2825563 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) 192.168.2.11:49729 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49731 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49731 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2825563 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) 192.168.2.11:49731 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49732 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49732 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2825563 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) 192.168.2.11:49732 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49733 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49733 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2825563 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) 192.168.2.11:49733 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49734 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49734 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2825563 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) 192.168.2.11:49734 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49735 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49735 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2825563 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) 192.168.2.11:49735 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49736 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49736 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2825563 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf) 192.168.2.11:49736 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49737 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49737 -> 3.69.157.220:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49738 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49738 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49739 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49739 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49740 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49740 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49741 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49741 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49742 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49742 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49742 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49743 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49743 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49744 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49744 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49745 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49745 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49746 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49746 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49748 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49748 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49749 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49749 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49750 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49750 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49751 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49751 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49752 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49752 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49753 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49753 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49754 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49754 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49755 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49755 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49756 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49756 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49757 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49757 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49758 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49758 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49759 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49759 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49760 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49761 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49761 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49762 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49762 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49763 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49763 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49763 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49764 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49764 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49765 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49765 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49765 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49766 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49766 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49766 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49767 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49767 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49767 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49768 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49768 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49768 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49769 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49769 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49769 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49770 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49770 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49770 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49771 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49771 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49771 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49772 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49772 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49772 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49773 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49773 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49773 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49774 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49774 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49774 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49775 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49775 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49775 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49776 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49776 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49776 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49777 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49777 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49777 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49778 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49778 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49778 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49779 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49779 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49779 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49780 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49780 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49781 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49781 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49781 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49782 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49782 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49782 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49783 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49783 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49783 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49784 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49784 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49784 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49785 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49785 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49785 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49786 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49786 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49786 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49787 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49787 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49787 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49788 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49788 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49789 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49789 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49789 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49790 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49790 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49790 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49791 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49791 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49791 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49792 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49792 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49792 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49793 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49793 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49793 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49794 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49794 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49795 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49795 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49795 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49796 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49796 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49796 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49797 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49797 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49798 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49798 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49798 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49799 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49799 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49799 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49800 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49800 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49801 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49801 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49801 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49802 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49802 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49802 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49803 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49803 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49803 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49804 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49804 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49804 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2825564 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) 192.168.2.11:49804 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49805 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49805 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49806 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49806 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49807 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49807 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49807 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49808 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49808 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49808 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49809 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49809 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49809 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49810 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49810 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49810 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49811 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49811 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49811 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49812 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49812 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49812 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49813 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49813 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49813 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49814 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49814 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49814 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49815 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49815 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49815 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49816 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49816 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49816 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2825564 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) 192.168.2.11:49816 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49817 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49817 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49817 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2825564 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) 192.168.2.11:49817 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49818 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49818 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49818 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49819 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49819 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49819 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49820 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49820 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49820 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49821 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49821 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49822 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49822 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49822 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49823 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49823 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49823 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49824 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49824 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49824 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49825 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49825 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49825 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49826 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49826 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49826 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49827 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49827 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49827 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49828 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49828 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49828 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49829 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49829 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49829 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49830 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49830 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49830 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49831 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49831 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49831 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49832 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49832 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49832 -> 3.69.115.178:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49833 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49833 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49833 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49834 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49834 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49834 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49835 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49835 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49835 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49836 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49836 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49836 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49837 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49837 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49837 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49838 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49838 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49838 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49839 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49839 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49839 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49840 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49840 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49840 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49841 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49841 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49841 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49842 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49842 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49842 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49843 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49843 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49843 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49844 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49844 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49844 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49845 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49845 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49845 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49846 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49846 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49846 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49847 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49847 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49847 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49848 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49848 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49848 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49849 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49849 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49849 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49850 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49850 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49850 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49851 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49851 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49851 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49852 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49852 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49852 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49853 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49853 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49853 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49854 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49854 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49854 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49855 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49855 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49855 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49856 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49856 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49856 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49857 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49857 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49857 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49858 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49858 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49858 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49859 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49859 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49859 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49860 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49860 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2825564 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) 192.168.2.11:49860 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49861 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49861 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49861 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49862 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49862 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49862 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49863 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49863 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49863 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49864 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49864 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49864 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49865 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49865 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49865 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49866 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49866 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49866 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49867 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49867 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49867 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49868 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49868 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49868 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49869 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49869 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49869 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49870 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49870 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49871 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49871 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49871 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49872 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49872 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49872 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49873 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49873 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49873 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2825564 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) 192.168.2.11:49873 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49874 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49874 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49875 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49875 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49876 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49876 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49876 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49877 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49877 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49877 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49878 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49878 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49879 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49879 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49879 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49880 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49880 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49880 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49881 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49881 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49881 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49882 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49882 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49882 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49883 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49883 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49883 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49884 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49884 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49884 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49885 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49885 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49885 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49886 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49886 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49886 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49887 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49887 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49887 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49888 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49888 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2825564 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) 192.168.2.11:49888 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49889 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814856 ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf) 192.168.2.11:49889 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49889 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2033132 ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll) 192.168.2.11:49890 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2814860 ETPRO TROJAN njRAT/Bladabindi CnC Callback (act) 192.168.2.11:49890 -> 3.66.38.117:15520
Source: Traffic	Snort IDS: 2825564 ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act) 192.168.2.11:49890 -> 3.66.38.117:15520

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor

URLs: 6.tcp.eu.ngrok.io

Source: global traffic	TCP traffic: 192.168.2.11:49705 -> 3.69.157.220:15520
Source: global traffic	TCP traffic: 192.168.2.11:49738 -> 3.69.115.178:15520
Source: global traffic	TCP traffic: 192.168.2.11:49833 -> 3.66.38.117:15520

Source: Joe Sandbox View	IP Address: 3.66.38.117 3.66.38.117
Source: Joe Sandbox View	IP Address: 3.69.115.178 3.69.115.178
Source: Joe Sandbox View	IP Address: 3.69.157.220 3.69.157.220

Source: Joe Sandbox View	ASN Name: AMAZON-02US AMAZON-02US
Source: Joe Sandbox View	ASN Name: AMAZON-02US AMAZON-02US
Source: Joe Sandbox View	ASN Name: AMAZON-02US AMAZON-02US

Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: unknown

DNS traffic detected: queries for: 6.tcp.eu.ngrok.io

Source: ziTLBa3N50.exe, 00000001.00000002.3689657270.00000000007DF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://go.microsoft.
Source: ziTLBa3N50.exe, 00000001.00000002.3689657270.00000000007DF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://go.microsoft.LinkId=42127
Source: ziTLBa3N50.exe	String found in binary or memory: https://dl.dropbox.com/s/p84aaz28t0hepul/Pass.exe?dl=0

E-Banking Fraud

Yara detected Njrat

Source: Yara match	File source: ziTLBa3N50.exe, type: SAMPLE
Source: Yara match	File source: 1.0.ziTLBa3N50.exe.170000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000001.00000000.1248679370.0000000000172000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: ziTLBa3N50.exe PID: 5576, type: MEMORYSTR

System Summary

Malicious sample detected (through community Yara rule)

Source: ziTLBa3N50.exe, type: SAMPLE	Matched rule: Windows_Trojan_Njrat_30f3c220 Author: unknown
Source: ziTLBa3N50.exe, type: SAMPLE	Matched rule: Identify njRat Author: Brian Wallace @botnet_hunter
Source: ziTLBa3N50.exe, type: SAMPLE	Matched rule: Detects NjRAT / Bladabindi Author: ditekSHen
Source: 1.0.ziTLBa3N50.exe.170000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Njrat_30f3c220 Author: unknown
Source: 1.0.ziTLBa3N50.exe.170000.0.unpack, type: UNPACKEDPE	Matched rule: Identify njRat Author: Brian Wallace @botnet_hunter
Source: 1.0.ziTLBa3N50.exe.170000.0.unpack, type: UNPACKEDPE	Matched rule: Detects NjRAT / Bladabindi Author: ditekSHen
Source: 00000001.00000000.1248679370.0000000000172000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Njrat_30f3c220 Author: unknown
Source: 00000001.00000000.1248679370.0000000000172000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY	Matched rule: Identify njRat Author: Brian Wallace @botnet_hunter

Source: C:\Users\user\Desktop\ziTLBa3N50.exe

Process Stats: CPU usage > 49%

Source: ziTLBa3N50.exe, 00000001.00000002.3689657270.00000000007AE000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: OriginalFilenamemscorwks.dllT vs ziTLBa3N50.exe

Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Section loaded: shfolder.dll	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Section loaded: avicap32.dll	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Section loaded: msvfw32.dll	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: ifmon.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: mprapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: rasmontr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: mfc42u.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: authfwcfg.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: fwpolicyiomgr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: firewallapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: fwbase.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: dhcpcmonitor.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: dot3cfg.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: dot3api.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: onex.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: eappcfg.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: eappprxy.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: fwcfg.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: hnetmon.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: netshell.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: netsetupapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: netiohlp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: nshhttp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: httpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: nshipsec.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: activeds.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: polstore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: winipsec.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: adsldpc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: adsldpc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: nshwfp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: cabinet.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: p2pnetsh.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: p2p.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: rpcnsh.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: whhelper.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: wlancfg.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: wlanapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: wshelper.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: wevtapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: peerdistsh.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: wcmapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: rmclient.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: mobilenetworking.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: ktmw32.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: mprmsg.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Section loaded: msasn1.dll	Jump to behavior

Source: ziTLBa3N50.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: ziTLBa3N50.exe, type: SAMPLE	Matched rule: Windows_Trojan_Njrat_30f3c220 reference_sample = 741a0f3954499c11f9eddc8df7c31e7c59ca41f1a7005646735b8b1d53438c1b, os = windows, severity = x86, creation_date = 2021-06-13, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Njrat, fingerprint = d15e131bca6beddcaecb20fffaff1784ad8a33a25e7ce90f7450d1a362908cc4, id = 30f3c220-b8dc-45a1-bcf0-027c2f76fa63, last_modified = 2021-10-04
Source: ziTLBa3N50.exe, type: SAMPLE	Matched rule: njrat1 date = 2015-05-27, author = Brian Wallace @botnet_hunter, description = Identify njRat, author_email = bwall@ballastsecurity.net
Source: ziTLBa3N50.exe, type: SAMPLE	Matched rule: MALWARE_Win_NjRAT author = ditekSHen, description = Detects NjRAT / Bladabindi
Source: 1.0.ziTLBa3N50.exe.170000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Njrat_30f3c220 reference_sample = 741a0f3954499c11f9eddc8df7c31e7c59ca41f1a7005646735b8b1d53438c1b, os = windows, severity = x86, creation_date = 2021-06-13, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Njrat, fingerprint = d15e131bca6beddcaecb20fffaff1784ad8a33a25e7ce90f7450d1a362908cc4, id = 30f3c220-b8dc-45a1-bcf0-027c2f76fa63, last_modified = 2021-10-04
Source: 1.0.ziTLBa3N50.exe.170000.0.unpack, type: UNPACKEDPE	Matched rule: njrat1 date = 2015-05-27, author = Brian Wallace @botnet_hunter, description = Identify njRat, author_email = bwall@ballastsecurity.net
Source: 1.0.ziTLBa3N50.exe.170000.0.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_NjRAT author = ditekSHen, description = Detects NjRAT / Bladabindi
Source: 00000001.00000000.1248679370.0000000000172000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Njrat_30f3c220 reference_sample = 741a0f3954499c11f9eddc8df7c31e7c59ca41f1a7005646735b8b1d53438c1b, os = windows, severity = x86, creation_date = 2021-06-13, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Njrat, fingerprint = d15e131bca6beddcaecb20fffaff1784ad8a33a25e7ce90f7450d1a362908cc4, id = 30f3c220-b8dc-45a1-bcf0-027c2f76fa63, last_modified = 2021-10-04
Source: 00000001.00000000.1248679370.0000000000172000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY	Matched rule: njrat1 date = 2015-05-27, author = Brian Wallace @botnet_hunter, description = Identify njRat, author_email = bwall@ballastsecurity.net

Source: classification engine

Classification label: mal100.troj.evad.winEXE@4/1@4/3

Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Code function: 1_2_04B324A6 AdjustTokenPrivileges,		1_2_04B324A6
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Code function: 1_2_04B3246F AdjustTokenPrivileges,		1_2_04B3246F

Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Mutant created: NULL
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Mutant created: \Sessions\1\BaseNamedObjects\Global\.net clr networking
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7476:120:WilError_03
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Mutant created: \Sessions\1\BaseNamedObjects\c47c770dd260557ab9af41e7813fc4be

Source: ziTLBa3N50.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: ziTLBa3N50.exe

Static file information: TRID: Win32 Executable (generic) Net Framework (10011505/4) 49.80%

Source: C:\Users\user\Desktop\ziTLBa3N50.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: ziTLBa3N50.exe	ReversingLabs: Detection: 84%
Source: ziTLBa3N50.exe	Virustotal: Detection: 84%

Source: unknown	Process created: C:\Users\user\Desktop\ziTLBa3N50.exe C:\Users\user\Desktop\ziTLBa3N50.exe
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Process created: C:\Windows\SysWOW64\netsh.exe netsh firewall add allowedprogram "C:\Users\user\Desktop\ziTLBa3N50.exe" "ziTLBa3N50.exe" ENABLE
Source: C:\Windows\SysWOW64\netsh.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Process created: C:\Windows\SysWOW64\netsh.exe netsh firewall add allowedprogram "C:\Users\user\Desktop\ziTLBa3N50.exe" "ziTLBa3N50.exe" ENABLE	Jump to behavior

Source: C:\Users\user\Desktop\ziTLBa3N50.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}\InprocServer32

Jump to behavior

Source: C:\Users\user\Desktop\ziTLBa3N50.exe

File opened: C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll

Jump to behavior

Source: ziTLBa3N50.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR

Source: C:\Users\user\Desktop\ziTLBa3N50.exe

File opened: C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.9672_none_d08f9da24428a513\MSVCR80.dll

Jump to behavior

Source: ziTLBa3N50.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Data Obfuscation

.NET source code contains potential unpacker

Source: ziTLBa3N50.exe, -.cs

.Net Code: @ System.Reflection.Assembly.Load(byte[])

Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Code function: 1_2_00752D7F push edi; retf	1_2_00752D7E
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Code function: 1_2_00752D4F push edi; retf	1_2_00752D7E
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Code function: 1_2_00752DD3 push eax; retf	1_2_00752DDE
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Code function: 1_2_00752DDF push edi; retf	1_2_00752D7E
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Code function: 1_2_007529DB push ebp; iretd	1_2_00752A1A
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Code function: 1_2_00752F9B push eax; retf	1_2_0075305A

Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Memory allocated: B00000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Memory allocated: 2770000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Memory allocated: 4770000 memory commit \| memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Window / User API: threadDelayed 3659	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Window / User API: threadDelayed 5581	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Window / User API: foregroundWindowGot 1738	Jump to behavior

Source: C:\Users\user\Desktop\ziTLBa3N50.exe TID: 5376	Thread sleep count: 152 > 30	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe TID: 5376	Thread sleep time: -152000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe TID: 7472	Thread sleep count: 3659 > 30	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe TID: 5376	Thread sleep count: 5581 > 30	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe TID: 5376	Thread sleep time: -5581000s >= -30000s	Jump to behavior

Source: C:\Windows\System32\conhost.exe

Last function: Thread delayed

Source: ziTLBa3N50.exe, 00000001.00000002.3689657270.00000000007DF000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWwer="true" app
Source: ziTLBa3N50.exe, 00000001.00000002.3689657270.00000000007DF000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll9K
Source: netsh.exe, 00000007.00000002.1323321374.000000000375B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Users\user\Desktop\ziTLBa3N50.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Users\user\Desktop\ziTLBa3N50.exe

Memory allocated: page read and write | page guard

Jump to behavior

Source: ziTLBa3N50.exe, 00000001.00000002.3690177112.000000000280F000.00000004.00000800.00020000.00000000.sdmp, ziTLBa3N50.exe, 00000001.00000002.3690177112.0000000002CDD000.00000004.00000800.00020000.00000000.sdmp, ziTLBa3N50.exe, 00000001.00000002.3690177112.0000000002D29000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Program Manager
Source: ziTLBa3N50.exe, 00000001.00000002.3690177112.000000000280F000.00000004.00000800.00020000.00000000.sdmp, ziTLBa3N50.exe, 00000001.00000002.3690177112.0000000002CDD000.00000004.00000800.00020000.00000000.sdmp, ziTLBa3N50.exe, 00000001.00000002.3690177112.0000000002D29000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Program Manager@9

Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ziTLBa3N50.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\netsh.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\ziTLBa3N50.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Modifies the windows firewall

Source: C:\Users\user\Desktop\ziTLBa3N50.exe

Process created: C:\Windows\SysWOW64\netsh.exe netsh firewall add allowedprogram "C:\Users\user\Desktop\ziTLBa3N50.exe" "ziTLBa3N50.exe" ENABLE

Uses netsh to modify the Windows network and firewall settings

Source: C:\Users\user\Desktop\ziTLBa3N50.exe

Process created: C:\Windows\SysWOW64\netsh.exe netsh firewall add allowedprogram "C:\Users\user\Desktop\ziTLBa3N50.exe" "ziTLBa3N50.exe" ENABLE

Stealing of Sensitive Information

Yara detected Njrat

Source: Yara match	File source: ziTLBa3N50.exe, type: SAMPLE
Source: Yara match	File source: 1.0.ziTLBa3N50.exe.170000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000001.00000000.1248679370.0000000000172000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: ziTLBa3N50.exe PID: 5576, type: MEMORYSTR

Remote Access Functionality

Yara detected Njrat

Source: Yara match	File source: ziTLBa3N50.exe, type: SAMPLE
Source: Yara match	File source: 1.0.ziTLBa3N50.exe.170000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000001.00000000.1248679370.0000000000172000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: ziTLBa3N50.exe PID: 5576, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Replication Through Removable Media	Windows Management Instrumentation	1 DLL Side-Loading	1 Access Token Manipulation	2 Virtualization/Sandbox Evasion	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Non-Standard Port	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	2 Process Injection	21 Disable or Modify Tools	LSASS Memory	2 Virtualization/Sandbox Evasion	Remote Desktop Protocol	Data from Removable Media	1 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 DLL Side-Loading	1 Access Token Manipulation	Security Account Manager	1 Process Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	11 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	2 Process Injection	NTDS	1 Application Window Discovery	Distributed Component Object Model	Input Capture	Protocol Impersonation	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Obfuscated Files or Information	LSA Secrets	1 Peripheral Device Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 Software Packing	Cached Domain Credentials	12 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 DLL Side-Loading	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
ziTLBa3N50.exe	84%	ReversingLabs	ByteCode-MSIL.Trojan.NjRAT
ziTLBa3N50.exe	85%	Virustotal		Browse
ziTLBa3N50.exe	100%	Avira	TR/ATRAPS.Gen
ziTLBa3N50.exe	100%	Joe Sandbox ML

Source	Detection	Scanner	Label	Link
6.tcp.eu.ngrok.io	12%	Virustotal		Browse

URLs

Source	Detection	Scanner	Label	Link
http://go.microsoft.	0%	URL Reputation	safe
http://go.microsoft.LinkId=42127	0%	Avira URL Cloud	safe
6.tcp.eu.ngrok.io	12%	Virustotal		Browse
6.tcp.eu.ngrok.io	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
6.tcp.eu.ngrok.io	3.69.157.220	true	true	12%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
6.tcp.eu.ngrok.io	true	12%, Virustotal, Browse Avira URL Cloud: malware	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://go.microsoft.	ziTLBa3N50.exe, 00000001.00000002.3689657270.00000000007DF000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://dl.dropbox.com/s/p84aaz28t0hepul/Pass.exe?dl=0	ziTLBa3N50.exe	false		high
http://go.microsoft.LinkId=42127	ziTLBa3N50.exe, 00000001.00000002.3689657270.00000000007DF000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
3.66.38.117	unknown	United States	16509	AMAZON-02US	true
3.69.115.178	unknown	United States	16509	AMAZON-02US	true
3.69.157.220	6.tcp.eu.ngrok.io	United States	16509	AMAZON-02US	true

General Information

Joe Sandbox version:	39.0.0 Ruby
Analysis ID:	1384047
Start date and time:	2024-01-31 13:43:14 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 51s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	17
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	ziTLBa3N50.exe renamed because original name is a hash value
Original Sample Name:	a3826b6c05674ce99890e7919c6daeb2.exe
Detection:	MAL
Classification:	mal100.troj.evad.winEXE@4/1@4/3
EGA Information:	Successful, ratio: 100%
HCA Information:	Successful, ratio: 100% Number of executed functions: 80 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .exe Override analysis time to 240000 for current running targets taking high CPU consumption

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, backgroundTaskHost.exe, svchost.exe
Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.

Simulations

Behavior and APIs

Time	Type	Description
13:44:46	API Interceptor	1092166x Sleep call for process: ziTLBa3N50.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
3.66.38.117	1.exe	Get hash	malicious	Njrat	Browse
	226dVJ2zRZ.exe	Get hash	malicious	Njrat	Browse
	IsJb5hB84q.exe	Get hash	malicious	Njrat	Browse
	Terraria.exe	Get hash	malicious	Njrat	Browse
	rkIcS0Y2WY.exe	Get hash	malicious	Njrat	Browse
	m5l9v13hIi.exe	Get hash	malicious	Njrat	Browse
	QsKtlzYaKF.exe	Get hash	malicious	Njrat	Browse
	dKe1GfZOs1.exe	Get hash	malicious	Njrat	Browse
	bRxR.exe	Get hash	malicious	AsyncRAT, DcRat	Browse
	X5eo58PPCB.exe	Get hash	malicious	Njrat	Browse
3.69.115.178	IsJb5hB84q.exe	Get hash	malicious	Njrat	Browse
	myidJB8lDL.exe	Get hash	malicious	Njrat	Browse
	rkIcS0Y2WY.exe	Get hash	malicious	Njrat	Browse
	30b4CoDmKk.exe	Get hash	malicious	Njrat	Browse
	QsKtlzYaKF.exe	Get hash	malicious	Njrat	Browse
	xZLQ8X9Cxo.exe	Get hash	malicious	Njrat	Browse
	sCXwkZrcZ3.exe	Get hash	malicious	Njrat	Browse
	wiUnP1h5Ex.exe	Get hash	malicious	Njrat	Browse
	d09l64ZAW6.exe	Get hash	malicious	Njrat	Browse
	8AKGdJOQ8N.exe	Get hash	malicious	Njrat	Browse
3.69.157.220	1.exe	Get hash	malicious	Njrat	Browse
	226dVJ2zRZ.exe	Get hash	malicious	Njrat	Browse
	myidJB8lDL.exe	Get hash	malicious	Njrat	Browse
	QsKtlzYaKF.exe	Get hash	malicious	Njrat	Browse
	xZLQ8X9Cxo.exe	Get hash	malicious	Njrat	Browse
	dKe1GfZOs1.exe	Get hash	malicious	Njrat	Browse
	bRxR.exe	Get hash	malicious	AsyncRAT, DcRat	Browse
	X5eo58PPCB.exe	Get hash	malicious	Njrat	Browse
	ZuXcnAYgVp.exe	Get hash	malicious	Njrat	Browse
	BqFosj9Wcb.exe	Get hash	malicious	Njrat	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
6.tcp.eu.ngrok.io	1.exe	Get hash	malicious	Njrat	Browse	3.66.38.117
	226dVJ2zRZ.exe	Get hash	malicious	Njrat	Browse	3.69.157.220
	IsJb5hB84q.exe	Get hash	malicious	Njrat	Browse	3.66.38.117
	Terraria.exe	Get hash	malicious	Njrat	Browse	3.66.38.117
	myidJB8lDL.exe	Get hash	malicious	Njrat	Browse	3.69.115.178
	rkIcS0Y2WY.exe	Get hash	malicious	Njrat	Browse	3.69.115.178
	30b4CoDmKk.exe	Get hash	malicious	Njrat	Browse	18.197.239.109
	N1aqZIb7KG.exe	Get hash	malicious	Njrat	Browse	3.68.171.119
	m5l9v13hIi.exe	Get hash	malicious	Njrat	Browse	3.66.38.117
	QsKtlzYaKF.exe	Get hash	malicious	Njrat	Browse	3.69.157.220

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
AMAZON-02US	sample.exe	Get hash	malicious	Unknown	Browse	75.2.11.242
	DHL_7214306201_pdf.exe	Get hash	malicious	FormBook, GuLoader	Browse	3.64.163.50
	https://github.com+login%3Dsecure+settings%3Dprivate@flow.page/unccc.com	Get hash	malicious	Unknown	Browse	3.163.80.128
	http://agoda.onelink.me/1640755593?pid=Email&c=inquiry_booking&af_dp=agoda%3A%2F%2Fhotel%2FAgoda%2520ABS%2520Dummy%2F2544216%26temp%3D0&adults=2&children=0&rooms=1&checkIn=2022-02-17&checkOut=2022-02-20&los=3&cid=1772772&af_force_dp=true&af_r=https://egfianzas.com.mx/rentx/apex/apex/mashpotato@email.com	Get hash	malicious	Unknown	Browse	18.155.1.97
	https://fvnhjuiuyt.000webhostapp.com/obspmfr.html	Get hash	malicious	Unknown	Browse	54.230.253.44
	https://upvir.al/155240/lp155240	Get hash	malicious	Unknown	Browse	54.230.253.44
	https://my-site-109807-108382.weeblysite.com	Get hash	malicious	Unknown	Browse	108.156.154.126
	https://www.dropbox.com/scl/fi/joc5943xfws38s82igsk0/Versavel-Consulting-SPRL-IOR24400059-25318-S-I-C-PO-credit-note-01-30-2024.pdf?rlkey=omfi1tsruqrb3gi5tec6cmsme&dl=0	Get hash	malicious	HTMLPhisher	Browse	108.156.152.4
	Dispute_Verification_Form.html	Get hash	malicious	Unknown	Browse	3.137.75.83
	https://379388.seu2.cleverreach.com/c/91435175/9b36c77c185-s82q1v	Get hash	malicious	Unknown	Browse	54.171.59.219
AMAZON-02US	sample.exe	Get hash	malicious	Unknown	Browse	75.2.11.242
	DHL_7214306201_pdf.exe	Get hash	malicious	FormBook, GuLoader	Browse	3.64.163.50
	https://github.com+login%3Dsecure+settings%3Dprivate@flow.page/unccc.com	Get hash	malicious	Unknown	Browse	3.163.80.128
	http://agoda.onelink.me/1640755593?pid=Email&c=inquiry_booking&af_dp=agoda%3A%2F%2Fhotel%2FAgoda%2520ABS%2520Dummy%2F2544216%26temp%3D0&adults=2&children=0&rooms=1&checkIn=2022-02-17&checkOut=2022-02-20&los=3&cid=1772772&af_force_dp=true&af_r=https://egfianzas.com.mx/rentx/apex/apex/mashpotato@email.com	Get hash	malicious	Unknown	Browse	18.155.1.97
	https://fvnhjuiuyt.000webhostapp.com/obspmfr.html	Get hash	malicious	Unknown	Browse	54.230.253.44
	https://upvir.al/155240/lp155240	Get hash	malicious	Unknown	Browse	54.230.253.44
	https://my-site-109807-108382.weeblysite.com	Get hash	malicious	Unknown	Browse	108.156.154.126
	https://www.dropbox.com/scl/fi/joc5943xfws38s82igsk0/Versavel-Consulting-SPRL-IOR24400059-25318-S-I-C-PO-credit-note-01-30-2024.pdf?rlkey=omfi1tsruqrb3gi5tec6cmsme&dl=0	Get hash	malicious	HTMLPhisher	Browse	108.156.152.4
	Dispute_Verification_Form.html	Get hash	malicious	Unknown	Browse	3.137.75.83
	https://379388.seu2.cleverreach.com/c/91435175/9b36c77c185-s82q1v	Get hash	malicious	Unknown	Browse	54.171.59.219
AMAZON-02US	sample.exe	Get hash	malicious	Unknown	Browse	75.2.11.242
	DHL_7214306201_pdf.exe	Get hash	malicious	FormBook, GuLoader	Browse	3.64.163.50
	https://github.com+login%3Dsecure+settings%3Dprivate@flow.page/unccc.com	Get hash	malicious	Unknown	Browse	3.163.80.128
	http://agoda.onelink.me/1640755593?pid=Email&c=inquiry_booking&af_dp=agoda%3A%2F%2Fhotel%2FAgoda%2520ABS%2520Dummy%2F2544216%26temp%3D0&adults=2&children=0&rooms=1&checkIn=2022-02-17&checkOut=2022-02-20&los=3&cid=1772772&af_force_dp=true&af_r=https://egfianzas.com.mx/rentx/apex/apex/mashpotato@email.com	Get hash	malicious	Unknown	Browse	18.155.1.97
	https://fvnhjuiuyt.000webhostapp.com/obspmfr.html	Get hash	malicious	Unknown	Browse	54.230.253.44
	https://upvir.al/155240/lp155240	Get hash	malicious	Unknown	Browse	54.230.253.44
	https://my-site-109807-108382.weeblysite.com	Get hash	malicious	Unknown	Browse	108.156.154.126
	https://www.dropbox.com/scl/fi/joc5943xfws38s82igsk0/Versavel-Consulting-SPRL-IOR24400059-25318-S-I-C-PO-credit-note-01-30-2024.pdf?rlkey=omfi1tsruqrb3gi5tec6cmsme&dl=0	Get hash	malicious	HTMLPhisher	Browse	108.156.152.4
	Dispute_Verification_Form.html	Get hash	malicious	Unknown	Browse	3.137.75.83
	https://379388.seu2.cleverreach.com/c/91435175/9b36c77c185-s82q1v	Get hash	malicious	Unknown	Browse	54.171.59.219

Process:	C:\Windows\SysWOW64\netsh.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	313
Entropy (8bit):	4.971939296804078
Encrypted:	false
SSDEEP:	6:/ojfKsUTGN8Ypox42k9L+DbGMKeQE+vigqAZs2E+AYeDPO+Yswyha:wjPIGNrkHk9iaeIM6ADDPOHyha
MD5:	689E2126A85BF55121488295EE068FA1
SHA1:	09BAAA253A49D80C18326DFBCA106551EBF22DD6
SHA-256:	D968A966EF474068E41256321F77807A042F1965744633D37A203A705662EC25
SHA-512:	C3736A8FC7E6573FA1B26FE6A901C05EE85C55A4A276F8F569D9EADC9A58BEC507D1BB90DBF9EA62AE79A6783178C69304187D6B90441D82E46F5F56172B5C5C
Malicious:	false
Reputation:	high, very likely benign file
Preview:	..IMPORTANT: Command executed successfully...However, "netsh firewall" is deprecated;..use "netsh advfirewall firewall" instead...For more information on using "netsh advfirewall firewall" commands..instead of "netsh firewall", see KB article 947709..at https://go.microsoft.com/fwlink/?linkid=121488 .....Ok.....

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy (8bit):	5.474975799731301
TrID:	Win32 Executable (generic) Net Framework (10011505/4) 49.80% Win32 Executable (generic) a (10002005/4) 49.75% Generic CIL Executable (.NET, Mono, etc.) (73296/58) 0.36% Windows Screen Saver (13104/52) 0.07% Generic Win/DOS Executable (2004/3) 0.01%
File name:	ziTLBa3N50.exe
File size:	36'864 bytes
MD5:	a3826b6c05674ce99890e7919c6daeb2
SHA1:	256f7be76b479fa8ad83a08e61fadbc679261417
SHA256:	5c4661e1393f0927e1c5b123db7dc1ecbf5fbf6169d46ee691d392dd85a7578c
SHA512:	fefada504c407c5222ab325f5d7def199edf7bfa226f4c53b03db8f590ee4741e68798c8160a60ceadcb3e1947e25ee6fc04ec69599a563b1acd7b75c4e36feb
SSDEEP:	768:m9SCeJmqDEhB2y6nkU1GQ8/dEhq5lxOBcmZPtCwjC:m9SCoNAB2y6kUoQy5lxOWmq9
TLSH:	97F20A8DBFE24194C2FD5E734671D2220276F01B1A23EA5D8EE845F65BA37848E4CED1
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...>~.e................................. ........@.. ....................................@................................

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0x40a79e
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
Time Stamp:	0x65B67E3E [Sun Jan 28 16:18:06 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	f34d5f2d4577ed6d9ceec516c1f5a744

Entrypoint Preview

Instruction
jmp dword ptr [00402000h]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0xa74c	0x4f	.text
IMAGE_DIRECTORY_ENTRY_RESOURCE	0xc000	0x240	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0xe000	0xc	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x2000	0x8	.text
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x2008	0x48	.text
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x2000	0x87a4	0x8800	5f363a7c8fdf585a2c54edcfb8ec8d36	False	0.4590418198529412	data	5.5852317470258335	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rsrc	0xc000	0x240	0x400	51256fd902ea81e24345f3635f652b14	False	0.302734375	data	3.5362123075490928	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0xe000	0xc	0x200	24c6f967d8108de0a22630b17540302b	False	0.044921875	data	0.07763316234324169	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0xc058	0x1e7	XML 1.0 document, ASCII text, with CRLF line terminators			0.5338809034907598

Imports

DLL	Import
mscoree.dll	_CorExeMain

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
192.168.2.113.69.115.17849762155202814856 01/31/24-13:45:40.570669	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49762	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849763155202814856 01/31/24-13:45:41.224839	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49763	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849767155202814856 01/31/24-13:45:43.705102	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49767	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849997155202814856 01/31/24-13:47:30.256512	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49997	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849996155202814856 01/31/24-13:47:29.848833	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49996	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849768155202814856 01/31/24-13:45:44.300228	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49768	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849995155202814856 01/31/24-13:47:29.444723	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49995	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849761155202814856 01/31/24-13:45:39.911797	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49761	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849769155202814856 01/31/24-13:45:44.870856	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49769	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849794155202033132 01/31/24-13:45:57.521029	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49794	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849793155202033132 01/31/24-13:45:57.036626	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49793	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849795155202033132 01/31/24-13:45:58.012819	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49795	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849790155202033132 01/31/24-13:45:55.580697	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49790	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849791155202033132 01/31/24-13:45:56.063734	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49791	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849766155202814856 01/31/24-13:45:43.097765	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49766	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849792155202033132 01/31/24-13:45:56.558458	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49792	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849770155202814860 01/31/24-13:45:45.589498	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49770	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849765155202814856 01/31/24-13:45:42.491988	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49765	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849996155202814860 01/31/24-13:47:29.849435	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49996	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849999155202814860 01/31/24-13:47:31.071732	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49999	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849770155202814856 01/31/24-13:45:45.445161	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49770	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849753155202814856 01/31/24-13:45:33.936480	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49753	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849773155202814856 01/31/24-13:45:47.117691	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49773	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849775155202814856 01/31/24-13:45:48.197897	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49775	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849752155202814856 01/31/24-13:45:33.101147	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49752	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849756155202814856 01/31/24-13:45:36.336566	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49756	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849774155202814856 01/31/24-13:45:47.650383	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49774	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849757155202814856 01/31/24-13:45:37.081248	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49757	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849778155202814856 01/31/24-13:45:49.777327	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49778	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849779155202814856 01/31/24-13:45:50.294535	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49779	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849771155202814856 01/31/24-13:45:46.010488	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49771	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849751155202814856 01/31/24-13:45:32.201796	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49751	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849759155202814856 01/31/24-13:45:38.522647	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49759	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849750155202814856 01/31/24-13:45:30.534004	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49750	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849758155202814856 01/31/24-13:45:37.811818	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49758	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849772155202814856 01/31/24-13:45:46.557352	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49772	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849782155202033132 01/31/24-13:45:51.596602	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49782	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849784155202033132 01/31/24-13:45:52.616349	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49784	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849783155202033132 01/31/24-13:45:52.107131	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49783	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849777155202814856 01/31/24-13:45:49.268594	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49777	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849780155202033132 01/31/24-13:45:50.594771	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49780	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849755155202814856 01/31/24-13:45:35.559272	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49755	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849776155202814856 01/31/24-13:45:48.746773	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49776	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849754155202814856 01/31/24-13:45:34.762162	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49754	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849781155202033132 01/31/24-13:45:51.096168	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49781	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849771155202814860 01/31/24-13:45:46.151994	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49771	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849772155202814860 01/31/24-13:45:46.698800	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49772	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849775155202814860 01/31/24-13:45:48.324382	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49775	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849786155202033132 01/31/24-13:45:53.597911	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49786	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849773155202814860 01/31/24-13:45:47.245712	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49773	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849774155202814860 01/31/24-13:45:47.777024	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49774	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849785155202033132 01/31/24-13:45:53.109081	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49785	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849993155202814856 01/31/24-13:47:28.619271	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49993	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849778155202814860 01/31/24-13:45:49.886504	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49778	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849779155202814860 01/31/24-13:45:50.386375	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49779	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849992155202814856 01/31/24-13:47:28.201764	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49992	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849994155202814856 01/31/24-13:47:29.030024	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49994	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849776155202814860 01/31/24-13:45:48.857825	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49776	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849787155202033132 01/31/24-13:45:54.094507	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49787	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849990155202814856 01/31/24-13:47:26.374958	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49990	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849788155202033132 01/31/24-13:45:54.586774	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49788	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849991155202814856 01/31/24-13:47:27.771988	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49991	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849777155202814860 01/31/24-13:45:49.370664	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49777	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849789155202033132 01/31/24-13:45:55.086954	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49789	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849785155202814856 01/31/24-13:45:53.309420	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49785	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849743155202814856 01/31/24-13:45:24.249667	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49743	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849741155202814856 01/31/24-13:45:21.556899	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49741	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849745155202814856 01/31/24-13:45:26.417768	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49745	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849781155202814856 01/31/24-13:45:51.298918	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49781	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849789155202814856 01/31/24-13:45:55.294477	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49789	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849783155202814856 01/31/24-13:45:52.314422	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49783	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849974155202814856 01/31/24-13:47:19.803790	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49974	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849773155202033132 01/31/24-13:45:46.912901	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49773	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849976155202814856 01/31/24-13:47:20.621315	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49976	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849771155202033132 01/31/24-13:45:45.804788	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49771	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849787155202814856 01/31/24-13:45:54.300287	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49787	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849978155202814856 01/31/24-13:47:21.443127	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49978	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849790155202814860 01/31/24-13:45:55.855361	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49790	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849978155202814860 01/31/24-13:47:21.443343	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49978	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849790155202814856 01/31/24-13:45:55.779555	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49790	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849992155202033132 01/31/24-13:47:27.997449	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49992	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849968155202814856 01/31/24-13:47:17.316176	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49968	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849996155202033132 01/31/24-13:47:29.654158	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49996	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849985155202814856 01/31/24-13:47:24.309547	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49985	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849990155202033132 01/31/24-13:47:26.173196	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49990	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849998155202033132 01/31/24-13:47:30.467960	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49998	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849989155202814856 01/31/24-13:47:25.964919	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49989	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849994155202033132 01/31/24-13:47:28.832945	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49994	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849781155202814860 01/31/24-13:45:51.388930	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49781	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849758155202033132 01/31/24-13:45:37.606701	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49758	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849783155202814860 01/31/24-13:45:52.401950	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49783	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849764155202814860 01/31/24-13:45:42.073885	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49764	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849785155202814860 01/31/24-13:45:53.386398	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49785	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849775155202033132 01/31/24-13:45:47.991049	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49775	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849796155202033132 01/31/24-13:45:58.495812	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49796	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849768155202814860 01/31/24-13:45:44.464487	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49768	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849789155202814860 01/31/24-13:45:55.370759	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49789	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849983155202814856 01/31/24-13:47:23.499110	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49983	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849749155202814856 01/31/24-13:45:29.423347	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49749	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849754155202033132 01/31/24-13:45:34.556939	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49754	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849787155202814860 01/31/24-13:45:54.370806	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49787	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849777155202033132 01/31/24-13:45:49.066310	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49777	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849798155202033132 01/31/24-13:45:59.459423	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49798	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849756155202033132 01/31/24-13:45:36.130128	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49756	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849766155202814860 01/31/24-13:45:43.276998	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49766	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849779155202033132 01/31/24-13:45:50.093694	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49779	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849981155202814856 01/31/24-13:47:22.668180	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49981	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849982155202033132 01/31/24-13:47:22.880501	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49982	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849986155202033132 01/31/24-13:47:24.522770	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49986	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849987155202033132 01/31/24-13:47:24.936512	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49987	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849751155202033132 01/31/24-13:45:32.001588	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49751	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849752155202033132 01/31/24-13:45:32.894155	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49752	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849983155202033132 01/31/24-13:47:23.294461	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49983	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849979155202033132 01/31/24-13:47:21.652654	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49979	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849831155202814860 01/31/24-13:46:16.261316	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49831	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849795155202814856 01/31/24-13:45:58.218902	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49795	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849832155202814860 01/31/24-13:46:16.714467	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49832	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749900155202033132 01/31/24-13:46:48.024191	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49900	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749901155202033132 01/31/24-13:46:48.436763	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49901	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17849973155202825564 01/31/24-13:47:19.384199	TCP	2825564	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act)	49973	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849741155202033132 01/31/24-13:45:21.351974	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49741	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849762155202033132 01/31/24-13:45:40.365734	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49762	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849977155202825564 01/31/24-13:47:21.038963	TCP	2825564	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act)	49977	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849761155202033132 01/31/24-13:45:39.707753	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49761	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849740155202033132 01/31/24-13:45:20.067927	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49740	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849799155202814856 01/31/24-13:46:00.144228	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49799	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849973155202814860 01/31/24-13:47:19.384199	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49973	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749902155202825564 01/31/24-13:46:49.045144	TCP	2825564	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act)	49902	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17849798155202814856 01/31/24-13:45:59.663459	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49798	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849749155202033132 01/31/24-13:45:29.215400	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49749	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849794155202814860 01/31/24-13:45:57.792722	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49794	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849832155202814856 01/31/24-13:46:16.678944	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49832	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849748155202033132 01/31/24-13:45:28.240086	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49748	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849769155202033132 01/31/24-13:45:44.671052	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49769	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749909155202033132 01/31/24-13:46:51.724574	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49909	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17849831155202814856 01/31/24-13:46:16.215977	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49831	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849795155202814860 01/31/24-13:45:58.277519	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49795	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749905155202033132 01/31/24-13:46:50.090283	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49905	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17849798155202814860 01/31/24-13:45:59.714507	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49798	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849739155202814856 01/31/24-13:45:18.934352	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49739	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849744155202033132 01/31/24-13:45:25.155643	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49744	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849765155202033132 01/31/24-13:45:42.286721	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49765	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749904155202033132 01/31/24-13:46:49.666261	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49904	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749908155202033132 01/31/24-13:46:51.314336	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49908	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17849745155202033132 01/31/24-13:45:26.218929	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49745	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849766155202033132 01/31/24-13:45:42.895653	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49766	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849970155202814856 01/31/24-13:47:18.142950	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49970	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849799155202814860 01/31/24-13:46:00.198767	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49799	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849742155202814856 01/31/24-13:45:22.849943	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49742	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849784155202814856 01/31/24-13:45:52.824231	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49784	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849746155202814856 01/31/24-13:45:27.450026	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49746	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749911155202033132 01/31/24-13:46:52.542780	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49911	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17849772155202033132 01/31/24-13:45:46.358402	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49772	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849818155202814856 01/31/24-13:46:10.219641	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49818	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849825155202814860 01/31/24-13:46:13.495646	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49825	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849791155202814860 01/31/24-13:45:56.340407	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49791	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849977155202814860 01/31/24-13:47:21.038963	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49977	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849818155202814860 01/31/24-13:46:10.277111	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49818	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849829155202814860 01/31/24-13:46:15.323951	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49829	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849791155202814856 01/31/24-13:45:56.264063	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49791	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849780155202814856 01/31/24-13:45:50.796444	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49780	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849969155202033132 01/31/24-13:47:17.535249	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49969	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849984155202814856 01/31/24-13:47:23.905775	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49984	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849997155202033132 01/31/24-13:47:30.060049	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49997	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849976155202033132 01/31/24-13:47:20.422413	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49976	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849829155202814856 01/31/24-13:46:15.269751	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49829	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849808155202814856 01/31/24-13:46:05.566805	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49808	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849988155202814856 01/31/24-13:47:25.547911	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49988	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849993155202033132 01/31/24-13:47:28.416919	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49993	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849972155202033132 01/31/24-13:47:18.768019	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49972	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849759155202033132 01/31/24-13:45:38.318030	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49759	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849804155202814856 01/31/24-13:46:02.511067	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49804	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749902155202814860 01/31/24-13:46:49.045144	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49902	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17849738155202033132 01/31/24-13:45:17.331749	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49738	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849821155202814856 01/31/24-13:46:11.625536	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49821	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849825155202814856 01/31/24-13:46:13.454859	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49825	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749919155202033132 01/31/24-13:46:55.801677	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49919	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17849742155202814860 01/31/24-13:45:23.050025	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49742	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849797155202033132 01/31/24-13:45:58.973262	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49797	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849784155202814860 01/31/24-13:45:52.902388	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49784	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849763155202814860 01/31/24-13:45:41.448830	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49763	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749915155202033132 01/31/24-13:46:54.174226	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49915	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17849776155202033132 01/31/24-13:45:48.538771	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49776	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849830155202033132 01/31/24-13:46:15.541687	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49830	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849755155202033132 01/31/24-13:45:35.358968	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49755	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849788155202814860 01/31/24-13:45:54.870684	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49788	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849767155202814860 01/31/24-13:45:43.886463	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49767	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749906155202814856 01/31/24-13:46:50.697802	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49906	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749907155202814856 01/31/24-13:46:51.106857	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49907	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850003155202033132 01/31/24-13:47:32.518153	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50003	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850004155202033132 01/31/24-13:47:32.935233	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50004	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850001155202033132 01/31/24-13:47:31.690624	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50001	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850006155202033132 01/31/24-13:47:33.749960	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50006	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849801155202814860 01/31/24-13:46:01.152205	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49801	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849827155202033132 01/31/24-13:46:14.157406	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49827	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849828155202033132 01/31/24-13:46:14.616052	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49828	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749934155202033132 01/31/24-13:47:01.972575	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49934	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17849822155202033132 01/31/24-13:46:11.890253	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49822	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849804155202814860 01/31/24-13:46:02.577515	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49804	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749931155202033132 01/31/24-13:47:00.748116	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49931	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749904155202814856 01/31/24-13:46:49.870134	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49904	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17849803155202814860 01/31/24-13:46:02.089469	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49803	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849825155202033132 01/31/24-13:46:13.251224	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49825	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849809155202814860 01/31/24-13:46:06.089537	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49809	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749940155202033132 01/31/24-13:47:04.416054	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49940	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17849812155202814860 01/31/24-13:46:07.480079	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49812	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749943155202033132 01/31/24-13:47:05.662157	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49943	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749910155202814856 01/31/24-13:46:52.336812	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49910	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749918155202814856 01/31/24-13:46:55.592636	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49918	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749923155202033132 01/31/24-13:46:57.472251	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49923	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749945155202033132 01/31/24-13:47:06.495555	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49945	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17849817155202814860 01/31/24-13:46:09.792676	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49817	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749912155202814856 01/31/24-13:46:53.150474	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49912	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17849814155202814860 01/31/24-13:46:08.401884	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49814	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749913155202814856 01/31/24-13:46:53.561997	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49913	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17849815155202814860 01/31/24-13:46:08.870746	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49815	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749942155202033132 01/31/24-13:47:05.245630	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49942	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17849817155202825564 01/31/24-13:46:09.792676	TCP	2825564	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act)	49817	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749920155202033132 01/31/24-13:46:56.220225	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49920	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17849815155202814856 01/31/24-13:46:08.819131	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49815	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849814155202814856 01/31/24-13:46:08.354639	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49814	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849817155202814856 01/31/24-13:46:09.747109	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49817	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849820155202033132 01/31/24-13:46:10.947330	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49820	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749926155202033132 01/31/24-13:46:58.717375	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49926	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749948155202033132 01/31/24-13:47:07.729432	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49948	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850009155202033132 01/31/24-13:47:34.976243	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50009	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749925155202033132 01/31/24-13:46:58.308473	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49925	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749928155202033132 01/31/24-13:46:59.523977	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49928	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17849812155202814856 01/31/24-13:46:07.431812	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49812	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850024155202825564 01/31/24-13:47:41.354174	TCP	2825564	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act)	50024	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849820155202814860 01/31/24-13:46:11.199054	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49820	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749926155202814856 01/31/24-13:46:58.913086	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49926	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850026155202033132 01/31/24-13:47:41.976350	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50026	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850022155202825564 01/31/24-13:47:40.523675	TCP	2825564	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act)	50022	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749954155202033132 01/31/24-13:47:11.250193	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49954	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749912155202033132 01/31/24-13:46:52.954040	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49912	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17849804155202825564 01/31/24-13:46:02.577515	TCP	2825564	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act)	49804	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749956155202033132 01/31/24-13:47:12.063457	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49956	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17849828155202814860 01/31/24-13:46:14.855010	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49828	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849826155202814860 01/31/24-13:46:13.948855	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49826	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749835155202033132 01/31/24-13:46:17.958782	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49835	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17849805155202033132 01/31/24-13:46:02.790778	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49805	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850020155202033132 01/31/24-13:47:39.510812	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50020	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849803155202033132 01/31/24-13:46:01.829460	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49803	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850002155202814856 01/31/24-13:47:32.305973	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50002	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749833155202033132 01/31/24-13:46:17.048386	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49833	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749844155202033132 01/31/24-13:46:22.097354	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49844	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17849968155202033132 01/31/24-13:47:17.112756	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49968	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850015155202033132 01/31/24-13:47:37.444479	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50015	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849971155202033132 01/31/24-13:47:18.354724	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49971	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850034155202033132 01/31/24-13:47:46.229808	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50034	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850004155202814856 01/31/24-13:47:33.134716	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50004	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849816155202033132 01/31/24-13:46:09.083103	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49816	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849809155202814856 01/31/24-13:46:06.043272	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49809	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849814155202033132 01/31/24-13:46:08.154636	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49814	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850032155202033132 01/31/24-13:47:45.409296	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50032	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849803155202814856 01/31/24-13:46:02.031351	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49803	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849820155202814856 01/31/24-13:46:11.154978	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49820	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849828155202814856 01/31/24-13:46:14.817747	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49828	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849826155202814856 01/31/24-13:46:13.902945	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49826	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849831155202033132 01/31/24-13:46:16.007868	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49831	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749901155202814860 01/31/24-13:46:48.640808	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49901	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749937155202033132 01/31/24-13:47:03.201117	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49937	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749914155202033132 01/31/24-13:46:53.768546	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49914	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850017155202033132 01/31/24-13:47:38.256699	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50017	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749939155202033132 01/31/24-13:47:04.003246	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49939	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17849801155202814856 01/31/24-13:46:01.100226	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49801	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849980155202033132 01/31/24-13:47:22.059043	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49980	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850048155202033132 01/31/24-13:47:52.000751	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50048	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849985155202033132 01/31/24-13:47:24.111854	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49985	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749943155202814856 01/31/24-13:47:05.866911	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49943	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749855155202033132 01/31/24-13:46:27.050904	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49855	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.157.22049734155202814856 01/31/24-13:45:10.860492	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49734	15520	192.168.2.11	3.69.157.220
192.168.2.113.69.115.17850040155202033132 01/31/24-13:47:48.711215	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50040	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749839155202814860 01/31/24-13:46:20.073790	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49839	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850018155202814856 01/31/24-13:47:38.875582	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50018	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749836155202814860 01/31/24-13:46:18.667489	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49836	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749952155202814860 01/31/24-13:47:10.635839	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49952	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749946155202814856 01/31/24-13:47:07.101757	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49946	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850043155202033132 01/31/24-13:47:49.930565	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50043	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749836155202814856 01/31/24-13:46:18.623632	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49836	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850021155202814856 01/31/24-13:47:40.116567	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50021	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850010155202814856 01/31/24-13:47:35.587080	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50010	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850013155202814856 01/31/24-13:47:36.821495	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50013	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.157.22049731155202814856 01/31/24-13:45:05.231658	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49731	15520	192.168.2.11	3.69.157.220
192.168.2.113.66.38.11749839155202814856 01/31/24-13:46:20.022783	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49839	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17849988155202033132 01/31/24-13:47:25.359769	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49988	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849977155202033132 01/31/24-13:47:20.834665	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49977	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749852155202033132 01/31/24-13:46:25.707747	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49852	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749861155202033132 01/31/24-13:46:29.760129	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49861	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850094155202814856 01/31/24-13:48:11.161297	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50094	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849792155202814856 01/31/24-13:45:56.765465	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49792	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749965155202033132 01/31/24-13:47:15.753583	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49965	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.157.22049728155202814856 01/31/24-13:45:00.933150	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49728	15520	192.168.2.11	3.69.157.220
192.168.2.113.66.38.11749932155202814856 01/31/24-13:47:01.348075	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49932	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.157.22049723155202814856 01/31/24-13:44:48.800435	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49723	15520	192.168.2.11	3.69.157.220
192.168.2.113.66.38.11749866155202033132 01/31/24-13:46:31.991044	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49866	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17849978155202825564 01/31/24-13:47:21.443343	TCP	2825564	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act)	49978	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749869155202033132 01/31/24-13:46:33.348163	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49869	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749935155202814856 01/31/24-13:47:02.578860	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49935	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749849155202033132 01/31/24-13:46:24.365433	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49849	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17849760155202033132 01/31/24-13:45:39.022052	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49760	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749957155202814856 01/31/24-13:47:12.674243	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49957	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749962155202033132 01/31/24-13:47:14.510701	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49962	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749966155202825564 01/31/24-13:47:16.363274	TCP	2825564	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act)	49966	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17849792155202814860 01/31/24-13:45:56.823790	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49792	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849800155202033132 01/31/24-13:46:00.411259	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49800	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849763155202033132 01/31/24-13:45:41.022516	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49763	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849972155202814856 01/31/24-13:47:18.967282	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49972	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849738155202814856 01/31/24-13:45:17.537234	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49738	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849743155202033132 01/31/24-13:45:24.048113	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49743	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749903155202033132 01/31/24-13:46:49.254571	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49903	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17849797155202814860 01/31/24-13:45:59.245743	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49797	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850061155202825564 01/31/24-13:47:57.550409	TCP	2825564	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act)	50061	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849768155202033132 01/31/24-13:45:44.098314	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49768	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849746155202033132 01/31/24-13:45:27.251423	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49746	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749906155202033132 01/31/24-13:46:50.493532	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49906	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749853155202814860 01/31/24-13:46:26.388427	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49853	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17849786155202814856 01/31/24-13:45:53.798770	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49786	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749951155202033132 01/31/24-13:47:10.012839	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49951	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17849823155202814860 01/31/24-13:46:12.589453	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49823	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850023155202033132 01/31/24-13:47:40.733451	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50023	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.157.22049717155202814856 01/31/24-13:44:33.052458	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49717	15520	192.168.2.11	3.69.157.220
192.168.2.113.66.38.11749952155202825564 01/31/24-13:47:10.635839	TCP	2825564	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act)	49952	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17849975155202814856 01/31/24-13:47:20.215092	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49975	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849808155202033132 01/31/24-13:46:05.365133	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49808	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749921155202814856 01/31/24-13:46:56.844504	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49921	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850035155202814856 01/31/24-13:47:46.851418	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50035	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749838155202033132 01/31/24-13:46:19.351841	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49838	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850065155202033132 01/31/24-13:47:58.995363	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50065	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849744155202814856 01/31/24-13:45:25.355958	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49744	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850083155202814856 01/31/24-13:48:06.641191	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50083	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749842155202814856 01/31/24-13:46:21.391092	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49842	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749853155202814856 01/31/24-13:46:26.350352	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49853	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.157.22049720155202814856 01/31/24-13:44:41.444315	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49720	15520	192.168.2.11	3.69.157.220
192.168.2.113.66.38.11749884155202814856 01/31/24-13:46:41.240023	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49884	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850077155202814856 01/31/24-13:48:04.158283	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50077	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849999155202033132 01/31/24-13:47:30.874685	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49999	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.157.22049706155202825563 01/31/24-13:44:19.636490	TCP	2825563	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf)	49706	15520	192.168.2.11	3.69.157.220
192.168.2.113.66.38.11749963155202814856 01/31/24-13:47:15.116261	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49963	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749883155202033132 01/31/24-13:46:40.580480	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49883	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749872155202033132 01/31/24-13:46:34.707367	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49872	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749841155202033132 01/31/24-13:46:20.734404	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49841	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850041155202814856 01/31/24-13:47:49.318557	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50041	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849969155202814856 01/31/24-13:47:17.733762	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49969	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749842155202814860 01/31/24-13:46:21.433179	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49842	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17849991155202033132 01/31/24-13:47:27.567511	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49991	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849819155202033132 01/31/24-13:46:10.485337	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49819	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749884155202814860 01/31/24-13:46:41.272782	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49884	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850037155202033132 01/31/24-13:47:47.476757	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50037	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850012155202033132 01/31/24-13:47:36.213749	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50012	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749867155202814860 01/31/24-13:46:32.676788	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49867	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17849974155202033132 01/31/24-13:47:19.598385	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49974	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849986155202814856 01/31/24-13:47:24.724563	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49986	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850071155202033132 01/31/24-13:48:01.467383	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50071	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850079155202033132 01/31/24-13:48:04.787675	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50079	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849811155202033132 01/31/24-13:46:06.767134	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49811	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850007155202814856 01/31/24-13:47:34.365838	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50007	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850049155202814856 01/31/24-13:47:52.618184	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50049	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850054155202033132 01/31/24-13:47:54.464482	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50054	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849786155202814860 01/31/24-13:45:53.870717	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49786	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849806155202814856 01/31/24-13:46:03.674508	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49806	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749873155202825564 01/31/24-13:46:35.392561	TCP	2825564	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act)	49873	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850024155202814860 01/31/24-13:47:41.354174	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	50024	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849774155202033132 01/31/24-13:45:47.451742	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49774	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749959155202033132 01/31/24-13:47:13.291739	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49959	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17849769155202814860 01/31/24-13:45:45.027079	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49769	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849799155202033132 01/31/24-13:45:59.937299	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49799	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849757155202033132 01/31/24-13:45:36.879174	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49757	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749917155202033132 01/31/24-13:46:54.989310	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49917	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.157.22049705155202033132 01/31/24-13:44:16.950261	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49705	15520	192.168.2.11	3.69.157.220
192.168.2.113.69.115.17849823155202814856 01/31/24-13:46:12.544310	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49823	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.157.22049720155202825563 01/31/24-13:44:41.444315	TCP	2825563	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf)	49720	15520	192.168.2.11	3.69.157.220
192.168.2.113.69.157.22049720155202033132 01/31/24-13:44:41.241951	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49720	15520	192.168.2.11	3.69.157.220
192.168.2.113.69.157.22049722155202033132 01/31/24-13:44:46.149480	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49722	15520	192.168.2.11	3.69.157.220
192.168.2.113.66.38.11749873155202814860 01/31/24-13:46:35.392561	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49873	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850087155202033132 01/31/24-13:48:08.080988	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50087	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850089155202033132 01/31/24-13:48:08.906116	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50089	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.157.22049721155202825563 01/31/24-13:44:43.887774	TCP	2825563	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf)	49721	15520	192.168.2.11	3.69.157.220
192.168.2.113.69.157.22049721155202033132 01/31/24-13:44:43.687027	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49721	15520	192.168.2.11	3.69.157.220
192.168.2.113.69.157.22049725155202033132 01/31/24-13:44:53.509033	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49725	15520	192.168.2.11	3.69.157.220
192.168.2.113.69.115.17850088155202033132 01/31/24-13:48:08.490521	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50088	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850061155202814860 01/31/24-13:47:57.550409	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	50061	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850084155202825564 01/31/24-13:48:07.059939	TCP	2825564	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act)	50084	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749877155202814860 01/31/24-13:46:38.132257	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49877	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.157.22049724155202033132 01/31/24-13:44:51.051841	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49724	15520	192.168.2.11	3.69.157.220
192.168.2.113.69.115.17850083155202033132 01/31/24-13:48:06.438903	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50083	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.157.22049726155202825563 01/31/24-13:44:56.171384	TCP	2825563	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf)	49726	15520	192.168.2.11	3.69.157.220
192.168.2.113.69.157.22049727155202825563 01/31/24-13:44:58.623459	TCP	2825563	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf)	49727	15520	192.168.2.11	3.69.157.220
192.168.2.113.69.157.22049723155202033132 01/31/24-13:44:48.597951	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49723	15520	192.168.2.11	3.69.157.220
192.168.2.113.66.38.11749876155202814860 01/31/24-13:46:37.688591	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49876	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749898155202033132 01/31/24-13:46:47.202392	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49898	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850082155202033132 01/31/24-13:48:06.034924	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50082	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850058155202814856 01/31/24-13:47:56.309369	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50058	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850065155202814860 01/31/24-13:47:59.200565	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	50065	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749871155202814856 01/31/24-13:46:34.460282	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49871	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749899155202033132 01/31/24-13:46:47.613502	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49899	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749872155202814856 01/31/24-13:46:34.911708	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49872	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.157.22049725155202825563 01/31/24-13:44:53.717387	TCP	2825563	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf)	49725	15520	192.168.2.11	3.69.157.220
192.168.2.113.69.115.17850057155202814856 01/31/24-13:47:55.896752	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50057	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850062155202814860 01/31/24-13:47:57.963236	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	50062	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850084155202033132 01/31/24-13:48:06.855098	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50084	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.157.22049724155202825563 01/31/24-13:44:51.254967	TCP	2825563	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf)	49724	15520	192.168.2.11	3.69.157.220
192.168.2.113.66.38.11749878155202814860 01/31/24-13:46:38.581298	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49878	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749879155202814860 01/31/24-13:46:39.020957	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49879	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850085155202033132 01/31/24-13:48:07.265700	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50085	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.157.22049722155202825563 01/31/24-13:44:46.349686	TCP	2825563	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf)	49722	15520	192.168.2.11	3.69.157.220
192.168.2.113.69.157.22049723155202825563 01/31/24-13:44:48.800435	TCP	2825563	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf)	49723	15520	192.168.2.11	3.69.157.220
192.168.2.113.66.38.11749890155202825564 01/31/24-13:46:43.969651	TCP	2825564	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act)	49890	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850086155202033132 01/31/24-13:48:07.671666	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50086	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749867155202814856 01/31/24-13:46:32.643371	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49867	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850050155202814856 01/31/24-13:47:53.027210	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50050	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749866155202814856 01/31/24-13:46:32.193252	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49866	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749868155202814856 01/31/24-13:46:33.104394	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49868	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749877155202814856 01/31/24-13:46:38.102021	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49877	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749879155202814856 01/31/24-13:46:38.988769	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49879	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749891155202033132 01/31/24-13:46:44.210709	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49891	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749865155202814856 01/31/24-13:46:31.747691	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49865	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749869155202814856 01/31/24-13:46:33.548489	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49869	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749876155202814856 01/31/24-13:46:37.656176	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49876	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850053155202814856 01/31/24-13:47:54.247008	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50053	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749892155202033132 01/31/24-13:46:44.651934	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49892	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850060155202814856 01/31/24-13:47:57.135592	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50060	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850064155202814856 01/31/24-13:47:58.783656	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50064	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749863155202814856 01/31/24-13:46:30.851662	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49863	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749874155202814856 01/31/24-13:46:35.809444	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49874	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850054155202814856 01/31/24-13:47:54.660783	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50054	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749862155202814856 01/31/24-13:46:30.408723	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49862	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749864155202814856 01/31/24-13:46:31.295211	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49864	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749873155202814856 01/31/24-13:46:35.358742	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49873	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749875155202814856 01/31/24-13:46:36.286437	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49875	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850056155202814856 01/31/24-13:47:55.479911	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50056	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850055155202814856 01/31/24-13:47:55.066735	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50055	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749890155202033132 01/31/24-13:46:43.762057	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49890	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850066155202814856 01/31/24-13:47:59.611533	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50066	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.157.22049728155202825563 01/31/24-13:45:00.933150	TCP	2825563	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf)	49728	15520	192.168.2.11	3.69.157.220
192.168.2.113.69.115.17850091155202033132 01/31/24-13:48:09.729732	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50091	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850090155202033132 01/31/24-13:48:09.314822	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50090	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850092155202033132 01/31/24-13:48:10.136213	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50092	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.157.22049717155202825563 01/31/24-13:44:33.052458	TCP	2825563	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf)	49717	15520	192.168.2.11	3.69.157.220
192.168.2.113.69.157.22049719155202825563 01/31/24-13:44:37.961758	TCP	2825563	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf)	49719	15520	192.168.2.11	3.69.157.220
192.168.2.113.66.38.11749897155202033132 01/31/24-13:46:46.794716	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49897	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850081155202033132 01/31/24-13:48:05.621116	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50081	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.157.22049729155202825563 01/31/24-13:45:03.132663	TCP	2825563	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf)	49729	15520	192.168.2.11	3.69.157.220
192.168.2.113.69.157.22049718155202825563 01/31/24-13:44:35.495883	TCP	2825563	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf)	49718	15520	192.168.2.11	3.69.157.220
192.168.2.113.66.38.11749870155202814860 01/31/24-13:46:34.040381	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49870	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749896155202033132 01/31/24-13:46:46.387053	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49896	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850080155202033132 01/31/24-13:48:05.207859	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50080	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749881155202814860 01/31/24-13:46:39.922416	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49881	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749882155202814860 01/31/24-13:46:40.369438	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49882	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749871155202814860 01/31/24-13:46:34.496971	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49871	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749893155202033132 01/31/24-13:46:45.104539	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49893	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749895155202033132 01/31/24-13:46:45.983101	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49895	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850063155202814856 01/31/24-13:47:58.375861	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50063	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749883155202814860 01/31/24-13:46:40.819104	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49883	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850052155202814856 01/31/24-13:47:53.832303	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50052	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850051155202814856 01/31/24-13:47:53.428486	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50051	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749872155202814860 01/31/24-13:46:34.944955	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49872	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749894155202033132 01/31/24-13:46:45.572977	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49894	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850062155202814856 01/31/24-13:47:57.963034	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50062	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.157.22049731155202825563 01/31/24-13:45:05.231658	TCP	2825563	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf)	49731	15520	192.168.2.11	3.69.157.220
192.168.2.113.69.157.22049732155202033132 01/31/24-13:45:07.005816	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49732	15520	192.168.2.11	3.69.157.220
192.168.2.113.69.157.22049731155202033132 01/31/24-13:45:05.026604	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49731	15520	192.168.2.11	3.69.157.220
192.168.2.113.69.157.22049733155202033132 01/31/24-13:45:08.875118	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49733	15520	192.168.2.11	3.69.157.220
192.168.2.113.69.157.22049708155202814856 01/31/24-13:44:25.677337	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49708	15520	192.168.2.11	3.69.157.220
192.168.2.113.69.157.22049732155202825563 01/31/24-13:45:07.206576	TCP	2825563	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf)	49732	15520	192.168.2.11	3.69.157.220
192.168.2.113.69.157.22049735155202033132 01/31/24-13:45:12.468975	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49735	15520	192.168.2.11	3.69.157.220
192.168.2.113.66.38.11749880155202814860 01/31/24-13:46:39.474518	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49880	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.157.22049706155202814856 01/31/24-13:44:19.636490	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49706	15520	192.168.2.11	3.69.157.220
192.168.2.113.69.157.22049715155202825563 01/31/24-13:44:28.120257	TCP	2825563	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf)	49715	15520	192.168.2.11	3.69.157.220
192.168.2.113.69.157.22049734155202033132 01/31/24-13:45:10.657767	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49734	15520	192.168.2.11	3.69.157.220
192.168.2.113.69.157.22049707155202814856 01/31/24-13:44:22.197999	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49707	15520	192.168.2.11	3.69.157.220
192.168.2.113.69.157.22049716155202825563 01/31/24-13:44:30.597119	TCP	2825563	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf)	49716	15520	192.168.2.11	3.69.157.220
192.168.2.113.66.38.11749888155202033132 01/31/24-13:46:42.842021	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49888	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749880155202814856 01/31/24-13:46:39.438225	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49880	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749882155202814856 01/31/24-13:46:40.334948	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49882	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749861155202814856 01/31/24-13:46:29.965427	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49861	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749889155202033132 01/31/24-13:46:43.291654	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49889	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.157.22049736155202825563 01/31/24-13:45:14.416542	TCP	2825563	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf)	49736	15520	192.168.2.11	3.69.157.220
192.168.2.113.69.157.22049705155202814856 01/31/24-13:44:17.157132	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49705	15520	192.168.2.11	3.69.157.220
192.168.2.113.66.38.11749883155202814856 01/31/24-13:46:40.785921	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49883	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.157.22049734155202825563 01/31/24-13:45:10.860492	TCP	2825563	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf)	49734	15520	192.168.2.11	3.69.157.220
192.168.2.113.69.157.22049735155202825563 01/31/24-13:45:12.674497	TCP	2825563	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf)	49735	15520	192.168.2.11	3.69.157.220
192.168.2.113.69.157.22049733155202825563 01/31/24-13:45:09.077590	TCP	2825563	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf)	49733	15520	192.168.2.11	3.69.157.220
192.168.2.113.66.38.11749881155202814856 01/31/24-13:46:39.885907	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49881	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.157.22049719155202033132 01/31/24-13:44:37.756147	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49719	15520	192.168.2.11	3.69.157.220
192.168.2.113.66.38.11749888155202825564 01/31/24-13:46:43.079505	TCP	2825564	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act)	49888	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.157.22049718155202033132 01/31/24-13:44:35.296814	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49718	15520	192.168.2.11	3.69.157.220
192.168.2.113.69.157.22049715155202033132 01/31/24-13:44:27.921302	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49715	15520	192.168.2.11	3.69.157.220
192.168.2.113.69.157.22049736155202033132 01/31/24-13:45:14.213925	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49736	15520	192.168.2.11	3.69.157.220
192.168.2.113.69.157.22049737155202033132 01/31/24-13:45:15.749906	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49737	15520	192.168.2.11	3.69.157.220
192.168.2.113.69.157.22049717155202033132 01/31/24-13:44:32.848036	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49717	15520	192.168.2.11	3.69.157.220
192.168.2.113.69.157.22049716155202033132 01/31/24-13:44:30.390996	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49716	15520	192.168.2.11	3.69.157.220
192.168.2.113.66.38.11749852155202814860 01/31/24-13:46:25.945454	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49852	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749856155202814860 01/31/24-13:46:27.739419	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49856	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850066155202033132 01/31/24-13:47:59.412636	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50066	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.157.22049716155202814856 01/31/24-13:44:30.597119	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49716	15520	192.168.2.11	3.69.157.220
192.168.2.113.66.38.11749966155202814856 01/31/24-13:47:16.363061	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49966	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.157.22049705155202825563 01/31/24-13:44:17.157132	TCP	2825563	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf)	49705	15520	192.168.2.11	3.69.157.220
192.168.2.113.69.157.22049718155202814856 01/31/24-13:44:35.495883	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49718	15520	192.168.2.11	3.69.157.220
192.168.2.113.66.38.11749964155202814856 01/31/24-13:47:15.534913	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49964	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749890155202814860 01/31/24-13:46:44.005841	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49890	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749854155202814860 01/31/24-13:46:26.840859	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49854	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850060155202033132 01/31/24-13:47:56.936579	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50060	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850068155202033132 01/31/24-13:48:00.229815	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50068	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749877155202033132 01/31/24-13:46:37.898065	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49877	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850036155202814856 01/31/24-13:47:47.264594	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50036	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850078155202814856 01/31/24-13:48:04.576644	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50078	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749850155202814856 01/31/24-13:46:25.014569	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49850	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749879155202033132 01/31/24-13:46:38.788323	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49879	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850084155202814860 01/31/24-13:48:07.059939	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	50084	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850062155202033132 01/31/24-13:47:57.760943	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50062	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850042155202814860 01/31/24-13:47:49.723378	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	50042	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850038155202814856 01/31/24-13:47:48.088388	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50038	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749858155202814860 01/31/24-13:46:28.626071	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49858	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749892155202814856 01/31/24-13:46:44.853189	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49892	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850064155202033132 01/31/24-13:47:58.584730	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50064	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850082155202814856 01/31/24-13:48:06.228780	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50082	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749856155202814856 01/31/24-13:46:27.705976	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49856	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850040155202814856 01/31/24-13:47:48.916037	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50040	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749845155202814856 01/31/24-13:46:22.755702	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49845	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749847155202814856 01/31/24-13:46:23.665408	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49847	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749880155202033132 01/31/24-13:46:39.234189	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49880	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850070155202814856 01/31/24-13:48:01.254308	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50070	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749854155202814856 01/31/24-13:46:26.808145	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49854	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749858155202814856 01/31/24-13:46:28.592351	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49858	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749871155202033132 01/31/24-13:46:34.256214	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49871	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850042155202814856 01/31/24-13:47:49.723215	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50042	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749898155202814856 01/31/24-13:46:47.400814	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49898	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850032155202814856 01/31/24-13:47:45.605397	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50032	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749887155202814856 01/31/24-13:46:42.591789	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49887	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850086155202814856 01/31/24-13:48:07.875190	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50086	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749852155202814856 01/31/24-13:46:25.908435	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49852	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749841155202814856 01/31/24-13:46:20.934939	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49841	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749843155202814856 01/31/24-13:46:21.848505	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49843	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749849155202814856 01/31/24-13:46:24.570642	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49849	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850076155202814856 01/31/24-13:48:03.735144	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50076	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.157.22049721155202814856 01/31/24-13:44:43.887774	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49721	15520	192.168.2.11	3.69.157.220
192.168.2.113.69.115.17850080155202814856 01/31/24-13:48:05.407564	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50080	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850088155202814856 01/31/24-13:48:08.695014	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50088	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749896155202814856 01/31/24-13:46:46.585901	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49896	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850034155202814856 01/31/24-13:47:46.432480	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50034	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749885155202814856 01/31/24-13:46:41.683381	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49885	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.157.22049707155202825563 01/31/24-13:44:22.197999	TCP	2825563	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf)	49707	15520	192.168.2.11	3.69.157.220
192.168.2.113.66.38.11749962155202814856 01/31/24-13:47:14.711018	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49962	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850070155202033132 01/31/24-13:48:01.055499	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50070	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749886155202033132 01/31/24-13:46:41.934421	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49886	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749875155202033132 01/31/24-13:46:36.082303	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49875	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749873155202033132 01/31/24-13:46:35.158596	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49873	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749892155202814860 01/31/24-13:46:44.886388	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49892	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749882155202033132 01/31/24-13:46:40.134405	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49882	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749884155202033132 01/31/24-13:46:41.035854	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49884	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850074155202814856 01/31/24-13:48:02.912213	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50074	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749860155202814860 01/31/24-13:46:29.547717	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49860	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749960155202814856 01/31/24-13:47:13.894919	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49960	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749850155202814860 01/31/24-13:46:25.047527	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49850	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850030155202814856 01/31/24-13:47:43.897699	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50030	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749889155202814856 01/31/24-13:46:43.498253	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49889	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749885155202814860 01/31/24-13:46:41.716903	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49885	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749843155202814860 01/31/24-13:46:21.886307	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49843	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850057155202033132 01/31/24-13:47:55.692169	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50057	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749862155202814860 01/31/24-13:46:30.444908	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49862	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749864155202814860 01/31/24-13:46:31.327728	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49864	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850076155202033132 01/31/24-13:48:03.535905	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50076	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850078155202033132 01/31/24-13:48:04.372175	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50078	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749841155202814860 01/31/24-13:46:20.980060	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49841	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749845155202814860 01/31/24-13:46:22.792568	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49845	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850055155202033132 01/31/24-13:47:54.870059	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50055	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850059155202033132 01/31/24-13:47:56.526070	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50059	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749866155202814860 01/31/24-13:46:32.226492	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49866	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749887155202814860 01/31/24-13:46:42.628090	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49887	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850072155202033132 01/31/24-13:48:01.881942	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50072	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850093155202033132 01/31/24-13:48:10.567222	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50093	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850048155202814856 01/31/24-13:47:52.199710	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50048	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850067155202814856 01/31/24-13:48:00.017206	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50067	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850069155202814856 01/31/24-13:48:00.848476	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50069	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749849155202814860 01/31/24-13:46:24.603477	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49849	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850046155202814856 01/31/24-13:47:51.371923	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50046	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850051155202033132 01/31/24-13:47:53.231902	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50051	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850025155202814856 01/31/24-13:47:41.766989	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50025	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850029155202814856 01/31/24-13:47:43.412397	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50029	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749889155202814860 01/31/24-13:46:43.538490	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49889	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850074155202033132 01/31/24-13:48:02.715887	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50074	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850095155202033132 01/31/24-13:48:11.377730	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50095	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749847155202814860 01/31/24-13:46:23.698567	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49847	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850053155202033132 01/31/24-13:47:54.045481	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50053	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749868155202814860 01/31/24-13:46:33.136792	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49868	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850027155202814856 01/31/24-13:47:42.589510	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50027	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749966155202814860 01/31/24-13:47:16.363274	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49966	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.157.22049708155202033132 01/31/24-13:44:25.477358	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49708	15520	192.168.2.11	3.69.157.220
192.168.2.113.69.157.22049729155202033132 01/31/24-13:45:02.926060	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49729	15520	192.168.2.11	3.69.157.220
192.168.2.113.69.157.22049706155202033132 01/31/24-13:44:19.429763	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49706	15520	192.168.2.11	3.69.157.220
192.168.2.113.69.157.22049727155202033132 01/31/24-13:44:58.422397	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49727	15520	192.168.2.11	3.69.157.220
192.168.2.113.69.115.17850046155202033132 01/31/24-13:47:51.170005	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50046	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749948155202814856 01/31/24-13:47:07.919170	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49948	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749949155202814856 01/31/24-13:47:08.341277	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49949	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749834155202814860 01/31/24-13:46:17.745675	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49834	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850045155202033132 01/31/24-13:47:50.752955	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50045	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850049155202033132 01/31/24-13:47:52.413709	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50049	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749944155202814856 01/31/24-13:47:06.283042	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49944	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850019155202814856 01/31/24-13:47:39.291146	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50019	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749833155202814860 01/31/24-13:46:17.292560	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49833	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850042155202825564 01/31/24-13:47:49.723378	TCP	2825564	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act)	50042	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.157.22049733155202814856 01/31/24-13:45:09.077590	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49733	15520	192.168.2.11	3.69.157.220
192.168.2.113.69.115.17850022155202814860 01/31/24-13:47:40.523675	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	50022	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749838155202814860 01/31/24-13:46:19.605141	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49838	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749857155202033132 01/31/24-13:46:27.950399	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49857	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850041155202033132 01/31/24-13:47:49.124933	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50041	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850042155202033132 01/31/24-13:47:49.524286	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50042	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.157.22049737155202814856 01/31/24-13:45:15.950581	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49737	15520	192.168.2.11	3.69.157.220
192.168.2.113.66.38.11749858155202033132 01/31/24-13:46:28.390976	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49858	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.157.22049736155202814856 01/31/24-13:45:14.416542	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49736	15520	192.168.2.11	3.69.157.220
192.168.2.113.66.38.11749837155202814860 01/31/24-13:46:19.137007	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49837	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850092155202814856 01/31/24-13:48:10.339356	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50092	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749834155202814856 01/31/24-13:46:17.699256	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49834	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749860155202033132 01/31/24-13:46:29.307614	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49860	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749833155202814856 01/31/24-13:46:17.254035	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49833	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749837155202814856 01/31/24-13:46:19.090950	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49837	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749838155202814856 01/31/24-13:46:19.558116	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49838	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850011155202814856 01/31/24-13:47:35.995630	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50011	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.157.22049732155202814856 01/31/24-13:45:07.206576	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49732	15520	192.168.2.11	3.69.157.220
192.168.2.113.69.115.17850091155202814856 01/31/24-13:48:09.926337	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50091	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850023155202814856 01/31/24-13:47:40.937035	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50023	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850012155202814856 01/31/24-13:47:36.407640	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50012	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749941155202814856 01/31/24-13:47:05.036152	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49941	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749951155202814856 01/31/24-13:47:10.216219	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49951	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749854155202033132 01/31/24-13:46:26.601027	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49854	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749940155202814856 01/31/24-13:47:04.619814	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49940	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749853155202033132 01/31/24-13:46:26.150414	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49853	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749864155202033132 01/31/24-13:46:31.094679	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49864	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749850155202033132 01/31/24-13:46:24.811943	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49850	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749863155202033132 01/31/24-13:46:30.651135	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49863	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749840155202814860 01/31/24-13:46:20.526891	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49840	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749950155202814856 01/31/24-13:47:08.814709	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49950	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850095155202814856 01/31/24-13:48:11.578864	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50095	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749938155202814856 01/31/24-13:47:03.795981	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49938	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749959155202814856 01/31/24-13:47:13.493250	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49959	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749960155202033132 01/31/24-13:47:13.697872	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49960	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749937155202814856 01/31/24-13:47:03.390502	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49937	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749955155202814856 01/31/24-13:47:11.852909	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49955	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749933155202814856 01/31/24-13:47:01.767666	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49933	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.157.22049729155202814856 01/31/24-13:45:03.132663	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49729	15520	192.168.2.11	3.69.157.220
192.168.2.113.66.38.11749954155202814856 01/31/24-13:47:11.452802	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49954	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749967155202033132 01/31/24-13:47:16.575623	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49967	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.157.22049722155202814856 01/31/24-13:44:46.349686	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49722	15520	192.168.2.11	3.69.157.220
192.168.2.113.66.38.11749840155202814856 01/31/24-13:46:20.482440	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49840	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749867155202033132 01/31/24-13:46:32.440536	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49867	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749868155202033132 01/31/24-13:46:32.898831	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49868	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749846155202033132 01/31/24-13:46:23.000649	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49846	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749934155202814856 01/31/24-13:47:02.168221	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49934	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749964155202033132 01/31/24-13:47:15.330372	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49964	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.157.22049726155202814856 01/31/24-13:44:56.171384	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49726	15520	192.168.2.11	3.69.157.220
192.168.2.113.66.38.11749847155202033132 01/31/24-13:46:23.459866	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49847	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.157.22049725155202814856 01/31/24-13:44:53.717387	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49725	15520	192.168.2.11	3.69.157.220
192.168.2.113.66.38.11749958155202814856 01/31/24-13:47:13.082784	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49958	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749963155202033132 01/31/24-13:47:14.917764	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49963	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749860155202825564 01/31/24-13:46:29.514387	TCP	2825564	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act)	49860	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850016155202814860 01/31/24-13:47:38.045928	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	50016	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850028155202033132 01/31/24-13:47:42.796485	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50028	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850029155202033132 01/31/24-13:47:43.213747	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50029	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850067155202033132 01/31/24-13:47:59.817861	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50067	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.157.22049719155202814856 01/31/24-13:44:37.961758	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49719	15520	192.168.2.11	3.69.157.220
192.168.2.113.66.38.11749927155202814856 01/31/24-13:46:59.317136	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49927	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17849806155202033132 01/31/24-13:46:03.472670	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49806	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749965155202814856 01/31/24-13:47:15.958738	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49965	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749855155202814860 01/31/24-13:46:27.286033	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49855	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850025155202033132 01/31/24-13:47:41.565873	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50025	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850079155202814856 01/31/24-13:48:04.991312	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50079	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849802155202033132 01/31/24-13:46:01.368477	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49802	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850037155202814856 01/31/24-13:47:47.680497	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50037	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749836155202033132 01/31/24-13:46:18.423289	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49836	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749893155202814856 01/31/24-13:46:45.310571	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49893	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749851155202814856 01/31/24-13:46:25.455044	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49851	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749878155202033132 01/31/24-13:46:38.341243	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49878	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749923155202814856 01/31/24-13:46:57.673826	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49923	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850021155202033132 01/31/24-13:47:39.924049	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50021	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850063155202033132 01/31/24-13:47:58.185145	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50063	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749953155202033132 01/31/24-13:47:10.840344	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49953	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.157.22049715155202814856 01/31/24-13:44:28.120257	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49715	15520	192.168.2.11	3.69.157.220
192.168.2.113.66.38.11749859155202814860 01/31/24-13:46:29.090226	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49859	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850071155202814856 01/31/24-13:48:01.668494	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50071	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850081155202814856 01/31/24-13:48:05.824286	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50081	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749844155202814856 01/31/24-13:46:22.302331	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49844	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749848155202814856 01/31/24-13:46:24.119932	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49848	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749881155202033132 01/31/24-13:46:39.685109	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49881	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749897155202814856 01/31/24-13:46:46.990571	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49897	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749855155202814856 01/31/24-13:46:27.253300	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49855	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749859155202814856 01/31/24-13:46:29.049332	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49859	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749870155202033132 01/31/24-13:46:33.799975	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49870	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850033155202814856 01/31/24-13:47:46.018918	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50033	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850043155202814856 01/31/24-13:47:50.130460	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50043	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749886155202814856 01/31/24-13:46:42.141521	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49886	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749930155202814856 01/31/24-13:47:00.536549	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49930	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.157.22049708155202825563 01/31/24-13:44:25.677337	TCP	2825563	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf)	49708	15520	192.168.2.11	3.69.157.220
192.168.2.113.66.38.11749961155202814856 01/31/24-13:47:14.304436	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49961	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749843155202033132 01/31/24-13:46:21.645688	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49843	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749885155202033132 01/31/24-13:46:41.480651	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49885	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749874155202033132 01/31/24-13:46:35.603545	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49874	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850085155202814856 01/31/24-13:48:07.460015	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50085	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749851155202814860 01/31/24-13:46:25.491736	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49851	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749893155202814860 01/31/24-13:46:45.363918	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49893	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749861155202814860 01/31/24-13:46:29.998351	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49861	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850014155202033132 01/31/24-13:47:37.027194	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50014	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850056155202033132 01/31/24-13:47:55.277450	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50056	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749886155202814860 01/31/24-13:46:42.176030	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49886	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850035155202033132 01/31/24-13:47:46.645976	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50035	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850095155202825563 01/31/24-13:48:11.578864	TCP	2825563	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (inf)	50095	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850077155202033132 01/31/24-13:48:03.955524	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50077	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850009155202814856 01/31/24-13:47:35.182188	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50009	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849817155202033132 01/31/24-13:46:09.546682	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49817	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850094155202033132 01/31/24-13:48:10.959648	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50094	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749844155202814860 01/31/24-13:46:22.339756	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49844	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749865155202814860 01/31/24-13:46:31.781496	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49865	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850005155202814856 01/31/24-13:47:33.538147	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50005	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850089155202814856 01/31/24-13:48:09.103545	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50089	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849813155202033132 01/31/24-13:46:07.692123	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49813	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850073155202033132 01/31/24-13:48:02.299425	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50073	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850068155202814856 01/31/24-13:48:00.433237	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50068	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850010155202033132 01/31/24-13:47:35.392982	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50010	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850052155202033132 01/31/24-13:47:53.633806	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50052	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850031155202033132 01/31/24-13:47:45.008075	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50031	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749848155202814860 01/31/24-13:46:24.154340	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49848	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749869155202814860 01/31/24-13:46:33.581246	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49869	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850026155202814860 01/31/24-13:47:42.178067	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	50026	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749957155202033132 01/31/24-13:47:12.475135	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49957	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.157.22049728155202033132 01/31/24-13:45:00.733486	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49728	15520	192.168.2.11	3.69.157.220
192.168.2.113.69.157.22049707155202033132 01/31/24-13:44:21.990595	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49707	15520	192.168.2.11	3.69.157.220
192.168.2.113.66.38.11749936155202033132 01/31/24-13:47:02.788074	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49936	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850018155202033132 01/31/24-13:47:38.672342	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50018	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850039155202033132 01/31/24-13:47:48.297219	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50039	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849800155202814860 01/31/24-13:46:00.683160	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49800	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749905155202814856 01/31/24-13:46:50.282309	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49905	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850002155202033132 01/31/24-13:47:32.103980	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50002	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850005155202033132 01/31/24-13:47:33.343391	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50005	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749932155202033132 01/31/24-13:47:01.155324	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49932	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749931155202825564 01/31/24-13:47:00.948487	TCP	2825564	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act)	49931	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749933155202033132 01/31/24-13:47:01.564621	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49933	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749900155202814856 01/31/24-13:46:48.226102	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49900	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749908155202814856 01/31/24-13:46:51.514064	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49908	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17849807155202814860 01/31/24-13:46:05.156555	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49807	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849829155202033132 01/31/24-13:46:15.064963	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49829	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849824155202033132 01/31/24-13:46:12.799482	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49824	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849823155202033132 01/31/24-13:46:12.343400	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49823	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749902155202814856 01/31/24-13:46:49.044880	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49902	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749903155202814856 01/31/24-13:46:49.456243	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49903	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850000155202033132 01/31/24-13:47:31.281773	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50000	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849802155202814860 01/31/24-13:46:01.620819	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49802	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849826155202033132 01/31/24-13:46:13.702582	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49826	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749930155202033132 01/31/24-13:47:00.345658	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49930	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17849808155202814860 01/31/24-13:46:05.620681	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49808	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849810155202814860 01/31/24-13:46:06.558355	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49810	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749917155202814856 01/31/24-13:46:55.187480	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49917	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17849811155202814860 01/31/24-13:46:07.011504	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49811	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849816155202825564 01/31/24-13:46:09.339379	TCP	2825564	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act)	49816	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749916155202814856 01/31/24-13:46:54.782524	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49916	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749921155202033132 01/31/24-13:46:56.638320	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49921	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749922155202033132 01/31/24-13:46:57.056086	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49922	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749944155202033132 01/31/24-13:47:06.078771	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49944	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749911155202814856 01/31/24-13:46:52.741765	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49911	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749919155202814856 01/31/24-13:46:56.005189	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49919	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749924155202033132 01/31/24-13:46:57.890618	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49924	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17849816155202814860 01/31/24-13:46:09.339379	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49816	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849813155202814860 01/31/24-13:46:07.948855	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49813	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749941155202033132 01/31/24-13:47:04.837494	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49941	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17849813155202814856 01/31/24-13:46:07.894526	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49813	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849810155202814856 01/31/24-13:46:06.505433	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49810	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849816155202814856 01/31/24-13:46:09.288582	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49816	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849821155202033132 01/31/24-13:46:11.418734	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49821	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749946155202033132 01/31/24-13:47:06.902605	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49946	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749929155202033132 01/31/24-13:46:59.931876	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49929	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749947155202033132 01/31/24-13:47:07.312299	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49947	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850007155202033132 01/31/24-13:47:34.162873	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50007	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850008155202033132 01/31/24-13:47:34.574354	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50008	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849811155202814856 01/31/24-13:46:06.967421	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49811	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749927155202033132 01/31/24-13:46:59.119869	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49927	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749949155202033132 01/31/24-13:47:08.159784	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49949	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749950155202033132 01/31/24-13:47:08.614407	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49950	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17849809155202033132 01/31/24-13:46:05.835145	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49809	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749928155202814856 01/31/24-13:46:59.722516	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49928	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850024155202033132 01/31/24-13:47:41.149121	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50024	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850026155202825564 01/31/24-13:47:42.178067	TCP	2825564	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act)	50026	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849822155202814860 01/31/24-13:46:12.136288	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49822	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749910155202033132 01/31/24-13:46:52.138301	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49910	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749839155202033132 01/31/24-13:46:19.815753	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49839	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749922155202814856 01/31/24-13:46:57.259138	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49922	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17849807155202033132 01/31/24-13:46:04.802191	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49807	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849801155202033132 01/31/24-13:46:00.894571	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49801	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849824155202814860 01/31/24-13:46:13.042531	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49824	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749931155202814860 01/31/24-13:47:00.948487	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49931	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850022155202033132 01/31/24-13:47:40.327654	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50022	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849819155202814856 01/31/24-13:46:10.685707	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49819	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749952155202033132 01/31/24-13:47:10.430107	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49952	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749837155202033132 01/31/24-13:46:18.882097	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49837	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850000155202814856 01/31/24-13:47:31.484971	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50000	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849819155202814860 01/31/24-13:46:10.730078	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49819	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749931155202814856 01/31/24-13:47:00.948294	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49931	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749842155202033132 01/31/24-13:46:21.188928	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49842	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749840155202033132 01/31/24-13:46:20.281733	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49840	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850013155202033132 01/31/24-13:47:36.618527	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50013	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850038155202033132 01/31/24-13:47:47.888470	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50038	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850008155202814856 01/31/24-13:47:34.765342	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50008	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849975155202033132 01/31/24-13:47:20.013685	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49975	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849818155202033132 01/31/24-13:46:10.020757	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49818	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850036155202033132 01/31/24-13:47:47.061816	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50036	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849812155202033132 01/31/24-13:46:07.224734	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49812	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850030155202033132 01/31/24-13:47:43.709345	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50030	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850011155202033132 01/31/24-13:47:35.802351	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50011	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849973155202033132 01/31/24-13:47:19.186188	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49973	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849824155202814856 01/31/24-13:46:13.001970	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49824	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849807155202814856 01/31/24-13:46:05.008925	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49807	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849805155202814856 01/31/24-13:46:02.997883	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49805	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849810155202033132 01/31/24-13:46:06.305307	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49810	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849739155202033132 01/31/24-13:45:18.732077	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49739	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749958155202033132 01/31/24-13:47:12.884236	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49958	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749916155202033132 01/31/24-13:46:54.580221	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49916	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749935155202033132 01/31/24-13:47:02.379861	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49935	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749918155202033132 01/31/24-13:46:55.392900	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49918	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850019155202033132 01/31/24-13:47:39.087121	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50019	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849822155202814856 01/31/24-13:46:12.095476	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49822	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849981155202033132 01/31/24-13:47:22.470875	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49981	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850044155202033132 01/31/24-13:47:50.342289	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50044	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749835155202814860 01/31/24-13:46:18.215655	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49835	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850047155202033132 01/31/24-13:47:51.584056	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50047	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749856155202033132 01/31/24-13:46:27.501239	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49856	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17849750155202033132 01/31/24-13:45:30.328911	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49750	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749859155202033132 01/31/24-13:46:28.841911	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49859	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17849984155202033132 01/31/24-13:47:23.707901	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49984	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.157.22049735155202814856 01/31/24-13:45:12.674497	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49735	15520	192.168.2.11	3.69.157.220
192.168.2.113.66.38.11749947155202814856 01/31/24-13:47:07.514179	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49947	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850093155202814856 01/31/24-13:48:10.750102	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50093	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850020155202814856 01/31/24-13:47:39.712520	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50020	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849989155202033132 01/31/24-13:47:25.938949	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49989	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749865155202033132 01/31/24-13:46:31.540764	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49865	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749942155202814856 01/31/24-13:47:05.448739	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49942	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17849978155202033132 01/31/24-13:47:21.245709	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49978	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749851155202033132 01/31/24-13:46:25.254447	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49851	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749862155202033132 01/31/24-13:46:30.206739	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49862	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749835155202814856 01/31/24-13:46:18.162993	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49835	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17849796155202814856 01/31/24-13:45:58.699621	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49796	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749961155202033132 01/31/24-13:47:14.103273	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49961	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17849830155202814860 01/31/24-13:46:15.792501	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49830	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749939155202814856 01/31/24-13:47:04.203524	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49939	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.157.22049727155202814856 01/31/24-13:44:58.623459	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49727	15520	192.168.2.11	3.69.157.220
192.168.2.113.69.115.17849793155202814856 01/31/24-13:45:57.235502	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49793	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749953155202814856 01/31/24-13:47:11.038407	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49953	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749966155202033132 01/31/24-13:47:16.164740	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49966	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749902155202033132 01/31/24-13:46:48.852329	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49902	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.157.22049724155202814856 01/31/24-13:44:51.254967	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49724	15520	192.168.2.11	3.69.157.220
192.168.2.113.66.38.11749845155202033132 01/31/24-13:46:22.551676	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49845	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749967155202825564 01/31/24-13:47:16.775266	TCP	2825564	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act)	49967	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17849999155202825564 01/31/24-13:47:31.071732	TCP	2825564	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act)	49999	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849996155202825564 01/31/24-13:47:29.849435	TCP	2825564	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act)	49996	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749936155202814856 01/31/24-13:47:02.986112	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49936	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749848155202033132 01/31/24-13:46:23.914570	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49848	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17849793155202814860 01/31/24-13:45:57.308396	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49793	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849796155202814860 01/31/24-13:45:58.761258	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49796	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849830155202814856 01/31/24-13:46:15.746995	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49830	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849764155202033132 01/31/24-13:45:41.662817	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49764	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849742155202033132 01/31/24-13:45:22.649520	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49742	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849971155202814856 01/31/24-13:47:18.558458	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49971	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749907155202033132 01/31/24-13:46:50.908092	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49907	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850062155202825564 01/31/24-13:47:57.963236	TCP	2825564	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act)	50062	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849767155202033132 01/31/24-13:45:43.496811	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49767	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850065155202825564 01/31/24-13:47:59.200565	TCP	2825564	ETPRO TROJAN Generic njRAT/Bladabindi CnC Activity (act)	50065	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850027155202033132 01/31/24-13:47:42.389488	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50027	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749891155202814860 01/31/24-13:46:44.445521	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49891	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17849782155202814856 01/31/24-13:45:51.796178	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49782	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749955155202033132 01/31/24-13:47:11.657071	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49955	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850061155202033132 01/31/24-13:47:57.347142	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50061	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850069155202033132 01/31/24-13:48:00.646233	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50069	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849740155202814856 01/31/24-13:45:20.274353	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49740	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849748155202814856 01/31/24-13:45:28.445670	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49748	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749913155202033132 01/31/24-13:46:53.375137	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49913	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749834155202033132 01/31/24-13:46:17.499124	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49834	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749891155202814856 01/31/24-13:46:44.410919	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49891	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17849827155202814860 01/31/24-13:46:14.402060	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49827	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850039155202814856 01/31/24-13:47:48.496167	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50039	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749857155202814860 01/31/24-13:46:28.183761	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49857	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17849804155202033132 01/31/24-13:46:02.305053	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49804	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849770155202033132 01/31/24-13:45:45.239214	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49770	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749925155202814856 01/31/24-13:46:58.513351	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49925	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749846155202814856 01/31/24-13:46:23.201203	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49846	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749899155202814856 01/31/24-13:46:47.814291	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49899	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749857155202814856 01/31/24-13:46:28.150551	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49857	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850031155202814856 01/31/24-13:47:45.206039	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50031	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850087155202814856 01/31/24-13:48:08.277789	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50087	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850045155202814856 01/31/24-13:47:50.956001	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50045	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749887155202033132 01/31/24-13:46:42.387241	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49887	15520	192.168.2.11	3.66.38.117
192.168.2.113.66.38.11749876155202033132 01/31/24-13:46:37.451893	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49876	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850016155202033132 01/31/24-13:47:37.847755	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50016	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749863155202814860 01/31/24-13:46:30.883967	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49863	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17849970155202033132 01/31/24-13:47:17.943987	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49970	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749888155202814860 01/31/24-13:46:43.079505	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49888	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17850050155202033132 01/31/24-13:47:52.828780	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50050	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850058155202033132 01/31/24-13:47:56.111095	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50058	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850003155202814856 01/31/24-13:47:32.722269	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50003	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850028155202814856 01/31/24-13:47:42.996356	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	50028	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749846155202814860 01/31/24-13:46:23.245831	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49846	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17849995155202033132 01/31/24-13:47:29.244694	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49995	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849815155202033132 01/31/24-13:46:08.614062	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49815	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850033155202033132 01/31/24-13:47:45.819071	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50033	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17850075155202033132 01/31/24-13:48:03.125337	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	50075	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849782155202814860 01/31/24-13:45:51.886933	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49782	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849802155202814856 01/31/24-13:46:01.573874	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49802	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749967155202814860 01/31/24-13:47:16.775266	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49967	15520	192.168.2.11	3.66.38.117
192.168.2.113.69.115.17849753155202033132 01/31/24-13:45:33.735251	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49753	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849827155202814856 01/31/24-13:46:14.359489	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49827	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849832155202033132 01/31/24-13:46:16.473185	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49832	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849982155202814856 01/31/24-13:47:23.085370	TCP	2814856	ETPRO TROJAN njrat ver 0.7d Malware CnC Callback (inf)	49982	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.115.17849765155202814860 01/31/24-13:45:42.684965	TCP	2814860	ETPRO TROJAN njRAT/Bladabindi CnC Callback (act)	49765	15520	192.168.2.11	3.69.115.178
192.168.2.113.69.157.22049726155202033132 01/31/24-13:44:55.970492	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49726	15520	192.168.2.11	3.69.157.220
192.168.2.113.69.115.17849778155202033132 01/31/24-13:45:49.577430	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49778	15520	192.168.2.11	3.69.115.178
192.168.2.113.66.38.11749938155202033132 01/31/24-13:47:03.596968	TCP	2033132	ET TROJAN Generic njRAT/Bladabindi CnC Activity (ll)	49938	15520	192.168.2.11	3.66.38.117

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 31, 2024 13:44:16.629501104 CET	49705	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:16.836266994 CET	15520	49705	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:16.836437941 CET	49705	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:16.950261116 CET	49705	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:17.157073021 CET	15520	49705	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:17.157131910 CET	49705	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:17.194190979 CET	15520	49705	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:17.196947098 CET	49705	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:17.363831997 CET	15520	49705	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:17.403702974 CET	15520	49705	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:19.217252970 CET	49706	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:19.424084902 CET	15520	49706	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:19.424237013 CET	49706	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:19.429763079 CET	49706	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:19.636372089 CET	15520	49706	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:19.636490107 CET	49706	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:19.667854071 CET	15520	49706	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:19.667983055 CET	49706	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:19.843010902 CET	15520	49706	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:19.874547005 CET	15520	49706	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:21.777607918 CET	49707	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:21.984847069 CET	15520	49707	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:21.984951019 CET	49707	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:21.990595102 CET	49707	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:22.197871923 CET	15520	49707	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:22.197999001 CET	49707	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:22.229326963 CET	15520	49707	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:22.229433060 CET	49707	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:22.405251980 CET	15520	49707	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:22.436712027 CET	15520	49707	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:25.269862890 CET	49708	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:25.469926119 CET	15520	49708	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:25.470076084 CET	49708	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:25.477358103 CET	49708	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:25.677277088 CET	15520	49708	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:25.677336931 CET	49708	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:25.708782911 CET	15520	49708	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:25.708854914 CET	49708	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:25.877355099 CET	15520	49708	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:25.908885002 CET	15520	49708	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:27.716330051 CET	49715	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:27.915121078 CET	15520	49715	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:27.915292025 CET	49715	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:27.921302080 CET	49715	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:28.120156050 CET	15520	49715	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:28.120256901 CET	49715	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:28.156443119 CET	15520	49715	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:28.156640053 CET	49715	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:28.319091082 CET	15520	49715	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:28.355398893 CET	15520	49715	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:30.169373989 CET	49716	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:30.375525951 CET	15520	49716	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:30.375637054 CET	49716	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:30.390995979 CET	49716	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:30.597035885 CET	15520	49716	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:30.597119093 CET	49716	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:30.629350901 CET	15520	49716	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:30.629520893 CET	49716	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:30.803072929 CET	15520	49716	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:30.835549116 CET	15520	49716	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:32.637904882 CET	49717	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:32.842364073 CET	15520	49717	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:32.842542887 CET	49717	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:32.848036051 CET	49717	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:33.052361965 CET	15520	49717	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:33.052458048 CET	49717	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:33.083798885 CET	15520	49717	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:33.083873987 CET	49717	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:33.256745100 CET	15520	49717	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:33.288239956 CET	15520	49717	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:35.091490030 CET	49718	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:35.290589094 CET	15520	49718	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:35.290734053 CET	49718	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:35.296813965 CET	49718	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:35.495795012 CET	15520	49718	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:35.495882988 CET	49718	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:35.526963949 CET	15520	49718	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:35.527031898 CET	49718	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:35.695055008 CET	15520	49718	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:35.726001978 CET	15520	49718	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:37.544658899 CET	49719	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:37.750264883 CET	15520	49719	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:37.750386953 CET	49719	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:37.756146908 CET	49719	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:37.961623907 CET	15520	49719	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:37.961757898 CET	49719	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:37.993451118 CET	15520	49719	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:37.993526936 CET	49719	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:38.167253017 CET	15520	49719	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:38.199021101 CET	15520	49719	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:41.033077955 CET	49720	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:41.235780954 CET	15520	49720	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:41.235884905 CET	49720	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:41.241950989 CET	49720	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:41.444226027 CET	15520	49720	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:41.444314957 CET	49720	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:41.477071047 CET	15520	49720	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:41.477143049 CET	49720	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:41.646492958 CET	15520	49720	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:41.679438114 CET	15520	49720	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:43.481463909 CET	49721	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:43.682154894 CET	15520	49721	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:43.682356119 CET	49721	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:43.687026978 CET	49721	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:43.887692928 CET	15520	49721	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:43.887773991 CET	49721	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:43.919214964 CET	15520	49721	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:43.919280052 CET	49721	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:44.088418961 CET	15520	49721	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:44.119934082 CET	15520	49721	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:45.943665028 CET	49722	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:46.143634081 CET	15520	49722	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:46.143722057 CET	49722	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:46.149480104 CET	49722	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:46.349528074 CET	15520	49722	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:46.349685907 CET	49722	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:46.381783962 CET	15520	49722	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:46.381932020 CET	49722	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:46.549760103 CET	15520	49722	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:46.581948996 CET	15520	49722	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:48.387820959 CET	49723	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:48.590320110 CET	15520	49723	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:48.590457916 CET	49723	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:48.597950935 CET	49723	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:48.800370932 CET	15520	49723	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:48.800435066 CET	49723	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:48.831865072 CET	15520	49723	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:48.831954002 CET	49723	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:49.003083944 CET	15520	49723	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:49.034332991 CET	15520	49723	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:50.840955973 CET	49724	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:51.046169996 CET	15520	49724	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:51.046308041 CET	49724	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:51.051841021 CET	49724	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:51.254874945 CET	15520	49724	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:51.254966974 CET	49724	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:51.286473036 CET	15520	49724	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:51.286595106 CET	49724	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:51.458420038 CET	15520	49724	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:51.490235090 CET	15520	49724	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:53.294917107 CET	49725	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:53.503340006 CET	15520	49725	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:53.503433943 CET	49725	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:53.509032965 CET	49725	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:53.717282057 CET	15520	49725	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:53.717386961 CET	49725	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:53.749583006 CET	15520	49725	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:53.749728918 CET	49725	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:53.925784111 CET	15520	49725	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:53.958154917 CET	15520	49725	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:55.764064074 CET	49726	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:55.964940071 CET	15520	49726	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:55.965059996 CET	49726	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:55.970491886 CET	49726	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:56.171309948 CET	15520	49726	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:56.171384096 CET	49726	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:56.203454971 CET	15520	49726	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:56.203586102 CET	49726	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:56.374453068 CET	15520	49726	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:56.404387951 CET	15520	49726	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:58.216294050 CET	49727	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:58.417023897 CET	15520	49727	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:58.417167902 CET	49727	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:58.422396898 CET	49727	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:58.623214960 CET	15520	49727	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:58.623459101 CET	49727	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:58.655754089 CET	15520	49727	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:58.655885935 CET	49727	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:44:58.824229002 CET	15520	49727	3.69.157.220	192.168.2.11
Jan 31, 2024 13:44:58.856702089 CET	15520	49727	3.69.157.220	192.168.2.11
Jan 31, 2024 13:45:00.529376984 CET	49728	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:45:00.728974104 CET	15520	49728	3.69.157.220	192.168.2.11
Jan 31, 2024 13:45:00.729055882 CET	49728	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:45:00.733485937 CET	49728	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:45:00.932893991 CET	15520	49728	3.69.157.220	192.168.2.11
Jan 31, 2024 13:45:00.933150053 CET	49728	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:45:00.966264009 CET	15520	49728	3.69.157.220	192.168.2.11
Jan 31, 2024 13:45:00.966401100 CET	49728	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:45:01.132750988 CET	15520	49728	3.69.157.220	192.168.2.11
Jan 31, 2024 13:45:01.166126966 CET	15520	49728	3.69.157.220	192.168.2.11
Jan 31, 2024 13:45:02.715759039 CET	49729	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:45:02.922131062 CET	15520	49729	3.69.157.220	192.168.2.11
Jan 31, 2024 13:45:02.922358036 CET	49729	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:45:02.926059961 CET	49729	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:45:03.132599115 CET	15520	49729	3.69.157.220	192.168.2.11
Jan 31, 2024 13:45:03.132663012 CET	49729	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:45:03.171422005 CET	15520	49729	3.69.157.220	192.168.2.11
Jan 31, 2024 13:45:03.171509981 CET	49729	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:45:03.339219093 CET	15520	49729	3.69.157.220	192.168.2.11
Jan 31, 2024 13:45:03.378015995 CET	15520	49729	3.69.157.220	192.168.2.11
Jan 31, 2024 13:45:04.814094067 CET	49731	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:45:05.022331953 CET	15520	49731	3.69.157.220	192.168.2.11
Jan 31, 2024 13:45:05.022481918 CET	49731	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:45:05.026603937 CET	49731	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:45:05.231590986 CET	15520	49731	3.69.157.220	192.168.2.11
Jan 31, 2024 13:45:05.231657982 CET	49731	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:45:05.269741058 CET	15520	49731	3.69.157.220	192.168.2.11
Jan 31, 2024 13:45:05.269813061 CET	49731	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:45:05.439501047 CET	15520	49731	3.69.157.220	192.168.2.11
Jan 31, 2024 13:45:05.478315115 CET	15520	49731	3.69.157.220	192.168.2.11
Jan 31, 2024 13:45:06.795006990 CET	49732	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:45:06.995656013 CET	15520	49732	3.69.157.220	192.168.2.11
Jan 31, 2024 13:45:06.995785952 CET	49732	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:45:07.005815983 CET	49732	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:45:07.206459045 CET	15520	49732	3.69.157.220	192.168.2.11
Jan 31, 2024 13:45:07.206576109 CET	49732	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:45:07.241050959 CET	15520	49732	3.69.157.220	192.168.2.11
Jan 31, 2024 13:45:07.241230011 CET	49732	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:45:07.407149076 CET	15520	49732	3.69.157.220	192.168.2.11
Jan 31, 2024 13:45:07.442209005 CET	15520	49732	3.69.157.220	192.168.2.11
Jan 31, 2024 13:45:08.669018030 CET	49733	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:45:08.871284962 CET	15520	49733	3.69.157.220	192.168.2.11
Jan 31, 2024 13:45:08.871375084 CET	49733	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:45:08.875118017 CET	49733	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:45:09.077498913 CET	15520	49733	3.69.157.220	192.168.2.11
Jan 31, 2024 13:45:09.077589989 CET	49733	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:45:09.114034891 CET	15520	49733	3.69.157.220	192.168.2.11
Jan 31, 2024 13:45:09.114154100 CET	49733	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:45:09.279999971 CET	15520	49733	3.69.157.220	192.168.2.11
Jan 31, 2024 13:45:09.316468000 CET	15520	49733	3.69.157.220	192.168.2.11
Jan 31, 2024 13:45:10.450640917 CET	49734	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:45:10.653312922 CET	15520	49734	3.69.157.220	192.168.2.11
Jan 31, 2024 13:45:10.653419018 CET	49734	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:45:10.657767057 CET	49734	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:45:10.860371113 CET	15520	49734	3.69.157.220	192.168.2.11
Jan 31, 2024 13:45:10.860491991 CET	49734	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:45:10.892452955 CET	15520	49734	3.69.157.220	192.168.2.11
Jan 31, 2024 13:45:10.892546892 CET	49734	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:45:11.063035965 CET	15520	49734	3.69.157.220	192.168.2.11
Jan 31, 2024 13:45:11.095144987 CET	15520	49734	3.69.157.220	192.168.2.11
Jan 31, 2024 13:45:12.138483047 CET	49735	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:45:12.344050884 CET	15520	49735	3.69.157.220	192.168.2.11
Jan 31, 2024 13:45:12.345110893 CET	49735	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:45:12.468975067 CET	49735	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:45:12.674403906 CET	15520	49735	3.69.157.220	192.168.2.11
Jan 31, 2024 13:45:12.674496889 CET	49735	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:45:12.706773043 CET	15520	49735	3.69.157.220	192.168.2.11
Jan 31, 2024 13:45:12.706887960 CET	49735	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:45:12.879895926 CET	15520	49735	3.69.157.220	192.168.2.11
Jan 31, 2024 13:45:12.912499905 CET	15520	49735	3.69.157.220	192.168.2.11
Jan 31, 2024 13:45:13.996891022 CET	49736	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:45:14.199718952 CET	15520	49736	3.69.157.220	192.168.2.11
Jan 31, 2024 13:45:14.200031042 CET	49736	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:45:14.213924885 CET	49736	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:45:14.416420937 CET	15520	49736	3.69.157.220	192.168.2.11
Jan 31, 2024 13:45:14.416542053 CET	49736	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:45:14.448647976 CET	15520	49736	3.69.157.220	192.168.2.11
Jan 31, 2024 13:45:14.448751926 CET	49736	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:45:14.619086981 CET	15520	49736	3.69.157.220	192.168.2.11
Jan 31, 2024 13:45:14.651268005 CET	15520	49736	3.69.157.220	192.168.2.11
Jan 31, 2024 13:45:15.544652939 CET	49737	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:45:15.745456934 CET	15520	49737	3.69.157.220	192.168.2.11
Jan 31, 2024 13:45:15.745626926 CET	49737	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:45:15.749906063 CET	49737	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:45:15.950442076 CET	15520	49737	3.69.157.220	192.168.2.11
Jan 31, 2024 13:45:15.950581074 CET	49737	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:45:15.986637115 CET	15520	49737	3.69.157.220	192.168.2.11
Jan 31, 2024 13:45:15.986766100 CET	49737	15520	192.168.2.11	3.69.157.220
Jan 31, 2024 13:45:16.151070118 CET	15520	49737	3.69.157.220	192.168.2.11
Jan 31, 2024 13:45:16.187267065 CET	15520	49737	3.69.157.220	192.168.2.11
Jan 31, 2024 13:45:17.121475935 CET	49738	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:17.326998949 CET	15520	49738	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:17.327126026 CET	49738	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:17.331748962 CET	49738	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:17.537166119 CET	15520	49738	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:17.537234068 CET	49738	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:17.569047928 CET	15520	49738	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:17.569149017 CET	49738	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:17.742837906 CET	15520	49738	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:17.774653912 CET	15520	49738	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:18.513297081 CET	49739	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:18.719896078 CET	15520	49739	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:18.720062017 CET	49739	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:18.732076883 CET	49739	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:18.934245110 CET	15520	49739	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:18.934351921 CET	49739	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:18.966063976 CET	15520	49739	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:18.966156006 CET	49739	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:19.136744022 CET	15520	49739	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:19.168328047 CET	15520	49739	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:19.857284069 CET	49740	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:20.063625097 CET	15520	49740	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:20.063719034 CET	49740	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:20.067926884 CET	49740	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:20.274249077 CET	15520	49740	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:20.274353027 CET	49740	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:20.311031103 CET	15520	49740	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:20.311129093 CET	49740	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:20.480654955 CET	15520	49740	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:20.517369032 CET	15520	49740	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:21.141882896 CET	49741	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:21.346942902 CET	15520	49741	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:21.347027063 CET	49741	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:21.351974010 CET	49741	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:21.556551933 CET	15520	49741	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:21.556899071 CET	49741	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:21.669605970 CET	15520	49741	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:21.669709921 CET	49741	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:21.761626005 CET	15520	49741	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:21.874317884 CET	15520	49741	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:22.436733961 CET	49742	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:22.636764050 CET	15520	49742	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:22.636913061 CET	49742	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:22.649519920 CET	49742	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:22.849813938 CET	15520	49742	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:22.849942923 CET	49742	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:23.049843073 CET	15520	49742	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:23.050024986 CET	49742	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:23.117038012 CET	15520	49742	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:23.117239952 CET	49742	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:23.250056028 CET	15520	49742	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:23.317159891 CET	15520	49742	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:23.841703892 CET	49743	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:24.043112993 CET	15520	49743	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:24.043184996 CET	49743	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:24.048113108 CET	49743	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:24.249471903 CET	15520	49743	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:24.249666929 CET	49743	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:24.283760071 CET	15520	49743	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:24.283894062 CET	49743	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:24.451039076 CET	15520	49743	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:24.485249043 CET	15520	49743	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:24.951001883 CET	49744	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:25.151140928 CET	15520	49744	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:25.151218891 CET	49744	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:25.155642986 CET	49744	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:25.355627060 CET	15520	49744	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:25.355957985 CET	49744	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:25.387720108 CET	15520	49744	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:25.387928009 CET	49744	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:25.555993080 CET	15520	49744	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:25.588006973 CET	15520	49744	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:26.014539003 CET	49745	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:26.213758945 CET	15520	49745	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:26.213923931 CET	49745	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:26.218929052 CET	49745	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:26.417639971 CET	15520	49745	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:26.417768002 CET	49745	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:26.449877977 CET	15520	49745	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:26.450026989 CET	49745	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:26.616471052 CET	15520	49745	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:26.648772955 CET	15520	49745	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:27.045411110 CET	49746	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:27.243861914 CET	15520	49746	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:27.244014978 CET	49746	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:27.251422882 CET	49746	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:27.449799061 CET	15520	49746	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:27.450026035 CET	49746	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:27.482575893 CET	15520	49746	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:27.482677937 CET	49746	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:27.648303986 CET	15520	49746	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:27.680933952 CET	15520	49746	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:28.029478073 CET	49748	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:28.234950066 CET	15520	49748	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:28.235029936 CET	49748	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:28.240086079 CET	49748	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:28.445414066 CET	15520	49748	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:28.445669889 CET	49748	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:28.479196072 CET	15520	49748	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:28.481780052 CET	49748	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:28.651002884 CET	15520	49748	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:28.687251091 CET	15520	49748	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:29.001543999 CET	49749	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:29.209386110 CET	15520	49749	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:29.209528923 CET	49749	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:29.215399981 CET	49749	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:29.423247099 CET	15520	49749	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:29.423346996 CET	49749	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:29.458082914 CET	15520	49749	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:29.458169937 CET	49749	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:29.631292105 CET	15520	49749	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:29.665999889 CET	15520	49749	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:29.934988022 CET	49750	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:30.139946938 CET	15520	49750	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:30.140053988 CET	49750	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:30.328911066 CET	49750	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:30.533919096 CET	15520	49750	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:30.534003973 CET	49750	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:30.567822933 CET	15520	49750	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:30.567881107 CET	49750	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:30.739006996 CET	15520	49750	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:30.772854090 CET	15520	49750	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:31.779367924 CET	49751	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:31.979827881 CET	15520	49751	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:31.979964972 CET	49751	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:32.001588106 CET	49751	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:32.201652050 CET	15520	49751	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:32.201796055 CET	49751	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:32.234668016 CET	15520	49751	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:32.234752893 CET	49751	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:32.401706934 CET	15520	49751	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:32.434689999 CET	15520	49751	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:32.655888081 CET	49752	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:32.862724066 CET	15520	49752	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:32.863023043 CET	49752	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:32.894155025 CET	49752	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:33.100931883 CET	15520	49752	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:33.101146936 CET	49752	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:33.134546041 CET	15520	49752	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:33.134665966 CET	49752	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:33.308026075 CET	15520	49752	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:33.341528893 CET	15520	49752	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:33.529242039 CET	49753	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:33.730523109 CET	15520	49753	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:33.730674028 CET	49753	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:33.735250950 CET	49753	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:33.936393023 CET	15520	49753	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:33.936480045 CET	49753	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:33.968669891 CET	15520	49753	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:33.968730927 CET	49753	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:34.137734890 CET	15520	49753	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:34.169919968 CET	15520	49753	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:34.345484018 CET	49754	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:34.550594091 CET	15520	49754	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:34.550693035 CET	49754	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:34.556938887 CET	49754	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:34.762058020 CET	15520	49754	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:34.762161970 CET	49754	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:34.805037975 CET	15520	49754	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:34.805282116 CET	49754	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:34.967302084 CET	15520	49754	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:35.010421991 CET	15520	49754	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:35.154387951 CET	49755	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:35.354387045 CET	15520	49755	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:35.354546070 CET	49755	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:35.358968019 CET	49755	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:35.559000969 CET	15520	49755	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:35.559272051 CET	49755	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:35.592596054 CET	15520	49755	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:35.592720032 CET	49755	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:35.759327888 CET	15520	49755	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:35.792793989 CET	15520	49755	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:35.919426918 CET	49756	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:36.125922918 CET	15520	49756	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:36.126041889 CET	49756	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:36.130127907 CET	49756	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:36.336492062 CET	15520	49756	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:36.336565971 CET	49756	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:36.368594885 CET	15520	49756	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:36.368709087 CET	49756	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:36.543965101 CET	15520	49756	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:36.575088978 CET	15520	49756	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:36.672389984 CET	49757	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:36.874475002 CET	15520	49757	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:36.874572992 CET	49757	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:36.879173994 CET	49757	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:37.081109047 CET	15520	49757	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:37.081248045 CET	49757	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:37.113104105 CET	15520	49757	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:37.113241911 CET	49757	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:37.283227921 CET	15520	49757	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:37.315284014 CET	15520	49757	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:37.389214993 CET	49758	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:37.594055891 CET	15520	49758	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:37.594767094 CET	49758	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:37.606700897 CET	49758	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:37.811619997 CET	15520	49758	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:37.811817884 CET	49758	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:37.843703032 CET	15520	49758	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:37.843843937 CET	49758	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:38.016639948 CET	15520	49758	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:38.048640013 CET	15520	49758	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:38.107960939 CET	49759	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:38.312598944 CET	15520	49759	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:38.312741995 CET	49759	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:38.318030119 CET	49759	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:38.522469044 CET	15520	49759	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:38.522646904 CET	49759	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:38.556119919 CET	15520	49759	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:38.556258917 CET	49759	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:38.727180958 CET	15520	49759	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:38.760725021 CET	15520	49759	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:38.810720921 CET	49760	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:39.017559052 CET	15520	49760	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:39.017736912 CET	49760	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:39.022052050 CET	49760	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:39.222002029 CET	49760	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:39.228813887 CET	15520	49760	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:39.263472080 CET	15520	49760	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:39.263530970 CET	49760	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:39.428832054 CET	15520	49760	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:39.428853035 CET	15520	49760	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:39.470390081 CET	15520	49760	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:39.498390913 CET	49761	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:39.702640057 CET	15520	49761	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:39.702864885 CET	49761	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:39.707752943 CET	49761	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:39.911566019 CET	15520	49761	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:39.911797047 CET	49761	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:39.943547010 CET	15520	49761	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:39.943613052 CET	49761	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:40.115606070 CET	15520	49761	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:40.147450924 CET	15520	49761	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:40.155690908 CET	49762	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:40.361036062 CET	15520	49762	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:40.361258030 CET	49762	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:40.365734100 CET	49762	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:40.570574999 CET	15520	49762	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:40.570668936 CET	49762	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:40.602713108 CET	15520	49762	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:40.602830887 CET	49762	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:40.775538921 CET	15520	49762	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:40.807704926 CET	15520	49762	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:40.815857887 CET	49763	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:41.018064022 CET	15520	49763	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:41.018178940 CET	49763	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:41.022516012 CET	49763	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:41.224522114 CET	15520	49763	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:41.224838972 CET	49763	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:41.257900953 CET	15520	49763	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:41.258084059 CET	49763	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:41.426915884 CET	15520	49763	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:41.448829889 CET	49763	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:41.450768948 CET	49764	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:41.460279942 CET	15520	49763	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:41.650934935 CET	15520	49763	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:41.658756018 CET	15520	49764	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:41.658849001 CET	49764	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:41.662817001 CET	49764	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:41.870603085 CET	49764	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:41.870727062 CET	15520	49764	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:41.902654886 CET	15520	49764	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:41.902892113 CET	49764	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:42.073884964 CET	49764	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:42.075470924 CET	49765	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:42.078665018 CET	15520	49764	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:42.110784054 CET	15520	49764	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:42.280747890 CET	15520	49765	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:42.281055927 CET	49765	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:42.281836033 CET	15520	49764	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:42.286720991 CET	49765	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:42.491828918 CET	15520	49765	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:42.491987944 CET	49765	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:42.523998022 CET	15520	49765	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:42.525538921 CET	49765	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:42.684964895 CET	49765	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:42.688869953 CET	49766	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:42.697134018 CET	15520	49765	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:42.730698109 CET	15520	49765	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:42.890090942 CET	15520	49765	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:42.890830040 CET	15520	49766	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:42.890942097 CET	49766	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:42.895653009 CET	49766	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:43.097618103 CET	15520	49766	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:43.097764969 CET	49766	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:43.130444050 CET	15520	49766	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:43.130584955 CET	49766	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:43.276998043 CET	49766	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:43.283833981 CET	49767	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:43.299797058 CET	15520	49766	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:43.332508087 CET	15520	49766	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:43.480124950 CET	15520	49766	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:43.491841078 CET	15520	49767	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:43.491941929 CET	49767	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:43.496810913 CET	49767	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:43.704864025 CET	15520	49767	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:43.705101967 CET	49767	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:43.745825052 CET	15520	49767	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:43.746051073 CET	49767	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:43.886462927 CET	49767	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:43.891755104 CET	49768	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:43.913254023 CET	15520	49767	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:43.954076052 CET	15520	49767	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:44.093858957 CET	15520	49768	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:44.094002008 CET	49768	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:44.094527006 CET	15520	49767	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:44.098314047 CET	49768	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:44.300153017 CET	15520	49768	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:44.300228119 CET	49768	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:44.336761951 CET	15520	49768	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:44.336858034 CET	49768	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:44.464487076 CET	49768	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:44.466867924 CET	49769	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:44.502060890 CET	15520	49768	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:44.538700104 CET	15520	49768	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:44.666559935 CET	15520	49768	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:44.666578054 CET	15520	49769	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:44.666671991 CET	49769	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:44.671051979 CET	49769	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:44.870727062 CET	15520	49769	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:44.870856047 CET	49769	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:44.902879953 CET	15520	49769	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:44.903006077 CET	49769	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:45.027079105 CET	49769	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:45.028810024 CET	49770	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:45.070624113 CET	15520	49769	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:45.102817059 CET	15520	49769	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:45.226819992 CET	15520	49769	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:45.234539986 CET	15520	49770	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:45.234649897 CET	49770	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:45.239213943 CET	49770	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:45.445031881 CET	15520	49770	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:45.445161104 CET	49770	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:45.477212906 CET	15520	49770	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:45.477405071 CET	49770	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:45.589498043 CET	49770	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:45.594551086 CET	49771	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:45.651051998 CET	15520	49770	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:45.683198929 CET	15520	49770	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:45.795285940 CET	15520	49770	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:45.799693108 CET	15520	49771	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:45.799776077 CET	49771	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:45.804788113 CET	49771	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:46.010327101 CET	15520	49771	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:46.010488033 CET	49771	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:46.042908907 CET	15520	49771	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:46.043020010 CET	49771	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:46.151993990 CET	49771	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:46.154634953 CET	49772	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:46.215653896 CET	15520	49771	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:46.248079062 CET	15520	49771	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:46.353530884 CET	15520	49772	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:46.353615046 CET	49772	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:46.357080936 CET	15520	49771	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:46.358402014 CET	49772	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:46.557207108 CET	15520	49772	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:46.557352066 CET	49772	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:46.589598894 CET	15520	49772	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:46.589715004 CET	49772	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:46.698800087 CET	49772	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:46.703635931 CET	49773	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:46.756297112 CET	15520	49772	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:46.788651943 CET	15520	49772	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:46.897764921 CET	15520	49772	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:46.908401966 CET	15520	49773	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:46.908612013 CET	49773	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:46.912900925 CET	49773	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:47.117561102 CET	15520	49773	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:47.117691040 CET	49773	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:47.150048018 CET	15520	49773	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:47.150173903 CET	49773	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:47.245712042 CET	49773	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:47.247786045 CET	49774	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:47.322336912 CET	15520	49773	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:47.354816914 CET	15520	49773	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:47.446376085 CET	15520	49774	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:47.446490049 CET	49774	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:47.450527906 CET	15520	49773	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:47.451741934 CET	49774	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:47.650269985 CET	15520	49774	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:47.650382996 CET	49774	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:47.687575102 CET	15520	49774	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:47.687710047 CET	49774	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:47.777024031 CET	49774	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:47.779711008 CET	49775	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:47.848970890 CET	15520	49774	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:47.886287928 CET	15520	49774	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:47.975574017 CET	15520	49774	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:47.986453056 CET	15520	49775	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:47.986567974 CET	49775	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:47.991049051 CET	49775	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:48.197783947 CET	15520	49775	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:48.197896957 CET	49775	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:48.231648922 CET	15520	49775	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:48.231698990 CET	49775	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:48.324382067 CET	49775	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:48.325737953 CET	49776	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:48.404680014 CET	15520	49775	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:48.438433886 CET	15520	49775	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:48.527683973 CET	15520	49776	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:48.529788017 CET	49776	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:48.531132936 CET	15520	49775	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:48.538770914 CET	49776	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:48.740742922 CET	15520	49776	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:48.746773005 CET	49776	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:48.773156881 CET	15520	49776	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:48.774791956 CET	49776	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:48.857825041 CET	49776	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:48.859787941 CET	49777	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:48.948786974 CET	15520	49776	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:48.976780891 CET	15520	49776	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:49.059905052 CET	15520	49776	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:49.061810017 CET	15520	49777	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:49.061939001 CET	49777	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:49.066309929 CET	49777	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:49.268457890 CET	15520	49777	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:49.268594027 CET	49777	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:49.300929070 CET	15520	49777	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:49.301074028 CET	49777	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:49.370663881 CET	49777	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:49.372662067 CET	49778	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:49.470752001 CET	15520	49777	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:49.503195047 CET	15520	49777	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:49.572385073 CET	15520	49778	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:49.572535992 CET	49778	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:49.572665930 CET	15520	49777	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:49.577430010 CET	49778	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:49.777121067 CET	15520	49778	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:49.777327061 CET	49778	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:49.814557076 CET	15520	49778	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:49.814774990 CET	49778	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:49.886503935 CET	49778	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:49.888570070 CET	49779	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:49.977199078 CET	15520	49778	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:50.014573097 CET	15520	49778	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:50.086235046 CET	15520	49778	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:50.089267015 CET	15520	49779	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:50.089370012 CET	49779	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:50.093693972 CET	49779	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:50.294342995 CET	15520	49779	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:50.294534922 CET	49779	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:50.326744080 CET	15520	49779	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:50.326888084 CET	49779	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:50.386374950 CET	49779	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:50.388072014 CET	49780	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:50.495364904 CET	15520	49779	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:50.527574062 CET	15520	49779	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:50.587059975 CET	15520	49779	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:50.589637995 CET	15520	49780	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:50.589747906 CET	49780	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:50.594770908 CET	49780	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:50.796292067 CET	15520	49780	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:50.796443939 CET	49780	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:50.828805923 CET	15520	49780	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:50.828893900 CET	49780	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:50.887132883 CET	49780	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:50.891522884 CET	49781	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:50.997915983 CET	15520	49780	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:51.030487061 CET	15520	49780	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:51.088716984 CET	15520	49780	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:51.090209961 CET	15520	49781	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:51.090399027 CET	49781	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:51.096168041 CET	49781	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:51.298734903 CET	15520	49781	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:51.298918009 CET	49781	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:51.331856966 CET	15520	49781	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:51.331994057 CET	49781	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:51.388930082 CET	49781	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:51.390718937 CET	49782	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:51.497684002 CET	15520	49781	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:51.530781031 CET	15520	49781	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:51.587609053 CET	15520	49781	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:51.589926958 CET	15520	49782	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:51.590039968 CET	49782	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:51.596601963 CET	49782	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:51.795831919 CET	15520	49782	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:51.796178102 CET	49782	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:51.827713013 CET	15520	49782	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:51.828165054 CET	49782	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:51.886933088 CET	49782	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:51.891150951 CET	49783	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:51.995449066 CET	15520	49782	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:52.027432919 CET	15520	49782	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:52.086360931 CET	15520	49782	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:52.098875999 CET	15520	49783	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:52.099134922 CET	49783	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:52.107131004 CET	49783	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:52.314285994 CET	15520	49783	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:52.314421892 CET	49783	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:52.349365950 CET	15520	49783	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:52.349477053 CET	49783	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:52.401949883 CET	49783	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:52.404320002 CET	49784	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:52.523494959 CET	15520	49783	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:52.558358908 CET	15520	49783	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:52.609074116 CET	15520	49783	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:52.611974001 CET	15520	49784	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:52.612081051 CET	49784	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:52.616348982 CET	49784	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:52.824112892 CET	15520	49784	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:52.824230909 CET	49784	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:52.856847048 CET	15520	49784	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:52.856936932 CET	49784	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:52.902388096 CET	49784	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:52.904047966 CET	49785	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:53.031991005 CET	15520	49784	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:53.064672947 CET	15520	49784	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:53.104290962 CET	15520	49785	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:53.104403019 CET	49785	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:53.109081030 CET	49785	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:53.109941959 CET	15520	49784	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:53.309283018 CET	15520	49785	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:53.309420109 CET	49785	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:53.343590975 CET	15520	49785	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:53.343724966 CET	49785	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:53.386398077 CET	49785	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:53.388683081 CET	49786	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:53.509955883 CET	15520	49785	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:53.543924093 CET	15520	49785	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:53.586641073 CET	15520	49785	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:53.589332104 CET	15520	49786	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:53.589445114 CET	49786	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:53.597910881 CET	49786	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:53.798578978 CET	15520	49786	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:53.798769951 CET	49786	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:53.831964970 CET	15520	49786	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:53.832089901 CET	49786	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:53.870717049 CET	49786	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:53.873960972 CET	49787	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:53.999438047 CET	15520	49786	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:54.032824039 CET	15520	49786	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:54.071460009 CET	15520	49786	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:54.079704046 CET	15520	49787	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:54.079835892 CET	49787	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:54.094506979 CET	49787	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:54.300208092 CET	15520	49787	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:54.300287008 CET	49787	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:54.332715988 CET	15520	49787	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:54.332798958 CET	49787	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:54.370805979 CET	49787	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:54.373558998 CET	49788	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:54.507333994 CET	15520	49787	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:54.538711071 CET	15520	49787	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:54.578892946 CET	15520	49787	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:54.582036018 CET	15520	49788	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:54.582137108 CET	49788	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:54.586774111 CET	49788	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:54.789665937 CET	49788	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:54.793746948 CET	15520	49788	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:54.830580950 CET	15520	49788	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:54.830717087 CET	49788	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:54.870683908 CET	49788	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:54.872231960 CET	49789	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:54.996628046 CET	15520	49788	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:54.996649981 CET	15520	49788	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:55.037614107 CET	15520	49788	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:55.077569962 CET	15520	49788	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:55.079646111 CET	15520	49789	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:55.079777956 CET	49789	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:55.086954117 CET	49789	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:55.294363022 CET	15520	49789	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:55.294476986 CET	49789	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:55.332549095 CET	15520	49789	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:55.332743883 CET	49789	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:55.370759010 CET	49789	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:55.377258062 CET	49790	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:55.501957893 CET	15520	49789	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:55.540133953 CET	15520	49789	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:55.576096058 CET	15520	49790	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:55.576375008 CET	49790	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:55.578202009 CET	15520	49789	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:55.580697060 CET	49790	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:55.779448032 CET	15520	49790	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:55.779555082 CET	49790	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:55.813003063 CET	15520	49790	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:55.813150883 CET	49790	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:55.855360985 CET	49790	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:55.857358932 CET	49791	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:55.978375912 CET	15520	49790	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:56.011939049 CET	15520	49790	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:56.055797100 CET	15520	49790	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:56.059278011 CET	15520	49791	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:56.059385061 CET	49791	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:56.063734055 CET	49791	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:56.263933897 CET	15520	49791	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:56.264062881 CET	49791	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:56.299453020 CET	15520	49791	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:56.299561977 CET	49791	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:56.340406895 CET	49791	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:56.342025042 CET	49792	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:56.464292049 CET	15520	49791	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:56.499799967 CET	15520	49791	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:56.540636063 CET	15520	49791	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:56.548928022 CET	15520	49792	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:56.549046040 CET	49792	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:56.558458090 CET	49792	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:56.765387058 CET	15520	49792	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:56.765465021 CET	49792	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:56.798001051 CET	15520	49792	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:56.798125982 CET	49792	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:56.823790073 CET	49792	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:56.829005003 CET	49793	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:56.972394943 CET	15520	49792	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:57.004996061 CET	15520	49792	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:57.027851105 CET	15520	49793	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:57.028023958 CET	49793	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:57.030643940 CET	15520	49792	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:57.036626101 CET	49793	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:57.235399008 CET	15520	49793	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:57.235502005 CET	49793	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:57.270308971 CET	15520	49793	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:57.270428896 CET	49793	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:57.308396101 CET	49793	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:57.310697079 CET	49794	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:57.434477091 CET	15520	49793	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:57.469235897 CET	15520	49793	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:57.509048939 CET	15520	49793	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:57.516292095 CET	15520	49794	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:57.516411066 CET	49794	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:57.521028996 CET	49794	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:57.725970984 CET	49794	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:57.726645947 CET	15520	49794	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:57.762527943 CET	15520	49794	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:57.762670994 CET	49794	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:57.792721987 CET	49794	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:57.795769930 CET	49795	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:57.931668997 CET	15520	49794	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:57.968358994 CET	15520	49794	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:57.998389959 CET	15520	49794	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:58.001535892 CET	15520	49795	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:58.001708031 CET	49795	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:58.012819052 CET	49795	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:58.218630075 CET	15520	49795	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:58.218902111 CET	49795	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:58.251578093 CET	15520	49795	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:58.251681089 CET	49795	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:58.277518988 CET	49795	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:58.286489964 CET	49796	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:58.424765110 CET	15520	49795	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:58.457622051 CET	15520	49795	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:58.483467102 CET	15520	49795	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:58.490344048 CET	15520	49796	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:58.490416050 CET	49796	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:58.495811939 CET	49796	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:58.699481010 CET	15520	49796	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:58.699620962 CET	49796	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:58.732382059 CET	15520	49796	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:58.732459068 CET	49796	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:58.761257887 CET	49796	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:58.763448000 CET	49797	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:58.905035019 CET	15520	49796	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:58.936067104 CET	15520	49796	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:58.964926004 CET	15520	49796	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:58.968909025 CET	15520	49797	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:58.969011068 CET	49797	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:58.973262072 CET	49797	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:59.172091961 CET	49797	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:59.180155039 CET	15520	49797	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:59.212965012 CET	15520	49797	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:59.213107109 CET	49797	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:59.245743036 CET	49797	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:59.251226902 CET	49798	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:59.377646923 CET	15520	49797	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:59.418606043 CET	15520	49797	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:59.451159954 CET	15520	49797	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:59.455199003 CET	15520	49798	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:59.455270052 CET	49798	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:59.459423065 CET	49798	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:59.663382053 CET	15520	49798	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:59.663459063 CET	49798	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:59.696757078 CET	15520	49798	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:59.696837902 CET	49798	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:59.714507103 CET	49798	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:59.723813057 CET	49799	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:59.867470026 CET	15520	49798	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:59.900698900 CET	15520	49798	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:59.918382883 CET	15520	49798	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:59.930550098 CET	15520	49799	3.69.115.178	192.168.2.11
Jan 31, 2024 13:45:59.930702925 CET	49799	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:45:59.937299013 CET	49799	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:00.144128084 CET	15520	49799	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:00.144227982 CET	49799	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:00.181557894 CET	15520	49799	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:00.181636095 CET	49799	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:00.198766947 CET	49799	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:00.200390100 CET	49800	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:00.351125956 CET	15520	49799	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:00.388403893 CET	15520	49799	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:00.405558109 CET	15520	49799	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:00.406493902 CET	15520	49800	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:00.406589985 CET	49800	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:00.411258936 CET	49800	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:00.612724066 CET	49800	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:00.617618084 CET	15520	49800	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:00.655940056 CET	15520	49800	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:00.656105042 CET	49800	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:00.683160067 CET	49800	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:00.684822083 CET	49801	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:00.818975925 CET	15520	49800	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:00.862356901 CET	15520	49800	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:00.889389038 CET	15520	49800	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:00.890212059 CET	15520	49801	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:00.890315056 CET	49801	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:00.894571066 CET	49801	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:01.100095987 CET	15520	49801	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:01.100225925 CET	49801	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:01.131900072 CET	15520	49801	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:01.132230997 CET	49801	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:01.152204990 CET	49801	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:01.154772997 CET	49802	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:01.305785894 CET	15520	49801	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:01.337724924 CET	15520	49801	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:01.357645988 CET	15520	49801	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:01.358644009 CET	15520	49802	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:01.358731031 CET	49802	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:01.368477106 CET	49802	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:01.573745966 CET	15520	49802	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:01.573873997 CET	49802	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:01.606354952 CET	15520	49802	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:01.606482983 CET	49802	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:01.620819092 CET	49802	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:01.622930050 CET	49803	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:01.777775049 CET	15520	49802	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:01.810309887 CET	15520	49802	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:01.824763060 CET	15520	49803	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:01.824775934 CET	15520	49802	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:01.825025082 CET	49803	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:01.829459906 CET	49803	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:02.031172037 CET	15520	49803	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:02.031351089 CET	49803	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:02.063563108 CET	15520	49803	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:02.063757896 CET	49803	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:02.089468956 CET	49803	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:02.094681978 CET	49804	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:02.233649015 CET	15520	49803	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:02.265502930 CET	15520	49803	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:02.292520046 CET	15520	49803	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:02.300606012 CET	15520	49804	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:02.300770998 CET	49804	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:02.305052996 CET	49804	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:02.510988951 CET	15520	49804	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:02.511066914 CET	49804	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:02.543121099 CET	15520	49804	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:02.543174028 CET	49804	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:02.577514887 CET	49804	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:02.579446077 CET	49805	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:02.717004061 CET	15520	49804	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:02.749046087 CET	15520	49804	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:02.783384085 CET	15520	49804	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:02.786376953 CET	15520	49805	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:02.786484003 CET	49805	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:02.790777922 CET	49805	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:02.997612000 CET	15520	49805	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:02.997883081 CET	49805	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:03.029689074 CET	15520	49805	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:03.029848099 CET	49805	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:03.204787016 CET	15520	49805	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:03.236690044 CET	15520	49805	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:03.242317915 CET	49806	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:03.444112062 CET	15520	49806	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:03.444242954 CET	49806	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:03.472670078 CET	49806	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:03.674371958 CET	15520	49806	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:03.674508095 CET	49806	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:03.709408998 CET	15520	49806	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:03.709537029 CET	49806	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:03.876286983 CET	15520	49806	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:03.911230087 CET	15520	49806	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:04.591253042 CET	49807	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:04.797754049 CET	15520	49807	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:04.797955036 CET	49807	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:04.802191019 CET	49807	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:05.008727074 CET	15520	49807	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:05.008924961 CET	49807	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:05.041078091 CET	15520	49807	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:05.041232109 CET	49807	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:05.156554937 CET	49807	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:05.158380032 CET	49808	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:05.215518951 CET	15520	49807	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:05.247843981 CET	15520	49807	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:05.360472918 CET	15520	49808	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:05.360584974 CET	49808	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:05.363269091 CET	15520	49807	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:05.365133047 CET	49808	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:05.566658020 CET	15520	49808	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:05.566804886 CET	49808	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:05.600795031 CET	15520	49808	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:05.600908041 CET	49808	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:05.620681047 CET	49808	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:05.622987986 CET	49809	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:05.769534111 CET	15520	49808	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:05.802396059 CET	15520	49808	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:05.822233915 CET	15520	49808	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:05.830811977 CET	15520	49809	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:05.830956936 CET	49809	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:05.835144997 CET	49809	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:06.043013096 CET	15520	49809	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:06.043272018 CET	49809	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:06.075308084 CET	15520	49809	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:06.075582981 CET	49809	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:06.089536905 CET	49809	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:06.095240116 CET	49810	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:06.251354933 CET	15520	49809	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:06.284357071 CET	15520	49809	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:06.295268059 CET	15520	49810	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:06.295461893 CET	49810	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:06.297310114 CET	15520	49809	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:06.305306911 CET	49810	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:06.505245924 CET	15520	49810	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:06.505433083 CET	49810	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:06.537241936 CET	15520	49810	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:06.537396908 CET	49810	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:06.558355093 CET	49810	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:06.560276985 CET	49811	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:06.705415964 CET	15520	49810	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:06.737407923 CET	15520	49810	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:06.758327961 CET	15520	49810	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:06.760605097 CET	15520	49811	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:06.760772943 CET	49811	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:06.767133951 CET	49811	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:06.967355013 CET	15520	49811	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:06.967421055 CET	49811	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:06.999839067 CET	15520	49811	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:06.999897003 CET	49811	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:07.011503935 CET	49811	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:07.013286114 CET	49812	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:07.167732000 CET	15520	49811	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:07.200193882 CET	15520	49811	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:07.211827040 CET	15520	49811	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:07.220216990 CET	15520	49812	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:07.220335007 CET	49812	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:07.224734068 CET	49812	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:07.431582928 CET	15520	49812	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:07.431812048 CET	49812	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:07.463985920 CET	15520	49812	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:07.464040041 CET	49812	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:07.480078936 CET	49812	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:07.484783888 CET	49813	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:07.638793945 CET	15520	49812	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:07.670901060 CET	15520	49812	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:07.686692953 CET	15520	49813	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:07.686930895 CET	49813	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:07.686960936 CET	15520	49812	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:07.692122936 CET	49813	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:07.894380093 CET	15520	49813	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:07.894526005 CET	49813	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:07.927603960 CET	15520	49813	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:07.927825928 CET	49813	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:07.948854923 CET	49813	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:07.951008081 CET	49814	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:08.096975088 CET	15520	49813	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:08.129709959 CET	15520	49813	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:08.149422884 CET	15520	49814	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:08.149497032 CET	49814	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:08.150665045 CET	15520	49813	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:08.154635906 CET	49814	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:08.354521990 CET	15520	49814	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:08.354639053 CET	49814	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:08.389055967 CET	15520	49814	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:08.389272928 CET	49814	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:08.401884079 CET	49814	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:08.403830051 CET	49815	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:08.553792000 CET	15520	49814	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:08.589873075 CET	15520	49814	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:08.600516081 CET	15520	49814	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:08.609751940 CET	15520	49815	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:08.609848022 CET	49815	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:08.614062071 CET	49815	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:08.818984032 CET	15520	49815	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:08.819130898 CET	49815	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:08.851130009 CET	15520	49815	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:08.851249933 CET	49815	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:08.870745897 CET	49815	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:08.872829914 CET	49816	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:09.024178028 CET	15520	49815	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:09.056174994 CET	15520	49815	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:09.075649023 CET	15520	49815	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:09.078376055 CET	15520	49816	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:09.078495979 CET	49816	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:09.083102942 CET	49816	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:09.288516998 CET	15520	49816	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:09.288582087 CET	49816	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:09.324399948 CET	15520	49816	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:09.324466944 CET	49816	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:09.339379072 CET	49816	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:09.340986967 CET	49817	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:09.494100094 CET	15520	49816	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:09.529937029 CET	15520	49816	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:09.541429043 CET	15520	49817	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:09.541527033 CET	49817	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:09.544852972 CET	15520	49816	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:09.546681881 CET	49817	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:09.747030973 CET	15520	49817	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:09.747108936 CET	49817	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:09.779795885 CET	15520	49817	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:09.779871941 CET	49817	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:09.792675972 CET	49817	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:09.795515060 CET	49818	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:09.947578907 CET	15520	49817	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:09.980256081 CET	15520	49817	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:09.993020058 CET	15520	49817	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:09.994088888 CET	15520	49818	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:09.994169950 CET	49818	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:10.020756960 CET	49818	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:10.219453096 CET	15520	49818	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:10.219640970 CET	49818	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:10.259743929 CET	15520	49818	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:10.259891987 CET	49818	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:10.277111053 CET	49818	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:10.278852940 CET	49819	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:10.418348074 CET	15520	49818	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:10.458647966 CET	15520	49818	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:10.475805998 CET	15520	49818	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:10.479156971 CET	15520	49819	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:10.480513096 CET	49819	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:10.485337019 CET	49819	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:10.685600996 CET	15520	49819	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:10.685707092 CET	49819	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:10.718575954 CET	15520	49819	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:10.722830057 CET	49819	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:10.730077982 CET	49819	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:10.732302904 CET	49820	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:10.885982037 CET	15520	49819	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:10.923173904 CET	15520	49819	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:10.930289984 CET	15520	49819	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:10.939035892 CET	15520	49820	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:10.942941904 CET	49820	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:10.947329998 CET	49820	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:11.154309034 CET	15520	49820	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:11.154978037 CET	49820	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:11.186743021 CET	15520	49820	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:11.187238932 CET	49820	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:11.199054003 CET	49820	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:11.200812101 CET	49821	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:11.362035036 CET	15520	49820	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:11.394012928 CET	15520	49820	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:11.405816078 CET	15520	49820	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:11.407449007 CET	15520	49821	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:11.408972979 CET	49821	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:11.418734074 CET	49821	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:11.625452042 CET	15520	49821	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:11.625535965 CET	49821	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:11.657639980 CET	15520	49821	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:11.657696009 CET	49821	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:11.668128014 CET	49821	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:11.678931952 CET	49822	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:11.832293987 CET	15520	49821	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:11.864418983 CET	15520	49821	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:11.874864101 CET	15520	49821	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:11.883972883 CET	15520	49822	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:11.884068966 CET	49822	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:11.890253067 CET	49822	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:12.095371962 CET	15520	49822	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:12.095475912 CET	49822	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:12.127409935 CET	15520	49822	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:12.127502918 CET	49822	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:12.136287928 CET	49822	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:12.138494015 CET	49823	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:12.300597906 CET	15520	49822	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:12.332485914 CET	15520	49822	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:12.338083982 CET	15520	49823	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:12.338319063 CET	49823	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:12.341355085 CET	15520	49822	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:12.343400002 CET	49823	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:12.543266058 CET	15520	49823	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:12.544310093 CET	49823	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:12.575326920 CET	15520	49823	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:12.576915026 CET	49823	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:12.589452982 CET	49823	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:12.591778040 CET	49824	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:12.744029999 CET	15520	49823	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:12.776717901 CET	15520	49823	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:12.789238930 CET	15520	49823	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:12.791254997 CET	15520	49824	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:12.791353941 CET	49824	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:12.799482107 CET	49824	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:12.999221087 CET	15520	49824	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:13.001970053 CET	49824	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:13.036886930 CET	15520	49824	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:13.036995888 CET	49824	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:13.042531013 CET	49824	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:13.044673920 CET	49825	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:13.201533079 CET	15520	49824	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:13.236671925 CET	15520	49824	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:13.241993904 CET	15520	49824	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:13.244829893 CET	15520	49825	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:13.247030973 CET	49825	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:13.251224041 CET	49825	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:13.451287985 CET	15520	49825	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:13.454859018 CET	49825	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:13.485184908 CET	15520	49825	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:13.485258102 CET	49825	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:13.495646000 CET	49825	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:13.497276068 CET	49826	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:13.655096054 CET	15520	49825	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:13.685481071 CET	15520	49825	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:13.695781946 CET	15520	49825	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:13.697485924 CET	15520	49826	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:13.697576046 CET	49826	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:13.702581882 CET	49826	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:13.902780056 CET	15520	49826	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:13.902945042 CET	49826	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:13.935193062 CET	15520	49826	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:13.935349941 CET	49826	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:13.948854923 CET	49826	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:13.950957060 CET	49827	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:14.103530884 CET	15520	49826	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:14.135611057 CET	15520	49826	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:14.149106979 CET	15520	49826	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:14.152827978 CET	15520	49827	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:14.152951002 CET	49827	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:14.157406092 CET	49827	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:14.359348059 CET	15520	49827	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:14.359488964 CET	49827	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:14.391180992 CET	15520	49827	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:14.391331911 CET	49827	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:14.402060032 CET	49827	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:14.403503895 CET	49828	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:14.561445951 CET	15520	49827	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:14.593215942 CET	15520	49827	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:14.603956938 CET	15520	49827	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:14.605041981 CET	15520	49828	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:14.605232954 CET	49828	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:14.616051912 CET	49828	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:14.817648888 CET	15520	49828	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:14.817747116 CET	49828	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:14.850452900 CET	15520	49828	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:14.850512981 CET	49828	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:14.855010033 CET	49828	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:14.857023954 CET	49829	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:15.019275904 CET	15520	49828	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:15.052082062 CET	15520	49828	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:15.056473970 CET	15520	49828	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:15.060458899 CET	15520	49829	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:15.060559988 CET	49829	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:15.064963102 CET	49829	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:15.269577980 CET	15520	49829	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:15.269751072 CET	49829	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:15.307275057 CET	15520	49829	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:15.307601929 CET	49829	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:15.323951006 CET	49829	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:15.329495907 CET	49830	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:15.473378897 CET	15520	49829	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:15.511132002 CET	15520	49829	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:15.527467966 CET	15520	49829	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:15.534657955 CET	15520	49830	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:15.534790993 CET	49830	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:15.541687012 CET	49830	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:15.746886969 CET	15520	49830	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:15.746994972 CET	49830	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:15.779273033 CET	15520	49830	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:15.779406071 CET	49830	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:15.792500973 CET	49830	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:15.794171095 CET	49831	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:15.952152014 CET	15520	49830	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:15.984550953 CET	15520	49830	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:15.997600079 CET	15520	49830	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:16.002070904 CET	15520	49831	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:16.002161980 CET	49831	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:16.007868052 CET	49831	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:16.215835094 CET	15520	49831	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:16.215976954 CET	49831	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:16.247618914 CET	15520	49831	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:16.247684956 CET	49831	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:16.261316061 CET	49831	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:16.263592958 CET	49832	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:16.424079895 CET	15520	49831	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:16.455571890 CET	15520	49831	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:16.468451023 CET	15520	49832	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:16.468605042 CET	49832	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:16.469197989 CET	15520	49831	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:16.473185062 CET	49832	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:16.678791046 CET	15520	49832	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:16.678944111 CET	49832	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:16.711194038 CET	15520	49832	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:16.711339951 CET	49832	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:16.714467049 CET	49832	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:46:16.838140965 CET	49833	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:16.883897066 CET	15520	49832	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:16.916290045 CET	15520	49832	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:16.919265032 CET	15520	49832	3.69.115.178	192.168.2.11
Jan 31, 2024 13:46:17.043735981 CET	15520	49833	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:17.043872118 CET	49833	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:17.048386097 CET	49833	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:17.253897905 CET	15520	49833	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:17.254034996 CET	49833	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:17.286174059 CET	15520	49833	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:17.286279917 CET	49833	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:17.292560101 CET	49833	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:17.294106960 CET	49834	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:17.459630013 CET	15520	49833	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:17.491956949 CET	15520	49833	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:17.494180918 CET	15520	49834	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:17.494306087 CET	49834	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:17.497951984 CET	15520	49833	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:17.499124050 CET	49834	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:17.699167967 CET	15520	49834	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:17.699255943 CET	49834	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:17.732430935 CET	15520	49834	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:17.732498884 CET	49834	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:17.745675087 CET	49834	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:17.747338057 CET	49835	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:17.899318933 CET	15520	49834	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:17.932472944 CET	15520	49834	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:17.945806980 CET	15520	49834	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:17.951054096 CET	15520	49835	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:17.954792976 CET	49835	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:17.958781958 CET	49835	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:18.162667036 CET	15520	49835	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:18.162992954 CET	49835	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:18.201284885 CET	15520	49835	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:18.201715946 CET	49835	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:18.215655088 CET	49835	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:18.218559980 CET	49836	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:18.366966963 CET	15520	49835	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:18.405503988 CET	15520	49835	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:18.419003010 CET	15520	49836	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:18.419122934 CET	49836	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:18.419399977 CET	15520	49835	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:18.423289061 CET	49836	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:18.623553991 CET	15520	49836	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:18.623631954 CET	49836	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:18.656845093 CET	15520	49836	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:18.656904936 CET	49836	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:18.667489052 CET	49836	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:18.669867992 CET	49837	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:18.824042082 CET	15520	49836	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:18.857314110 CET	15520	49836	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:18.867820024 CET	15520	49836	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:18.877675056 CET	15520	49837	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:18.877758980 CET	49837	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:18.882097006 CET	49837	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:19.090719938 CET	15520	49837	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:19.090950012 CET	49837	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:19.122711897 CET	15520	49837	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:19.122945070 CET	49837	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:19.137006998 CET	49837	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:19.140990973 CET	49838	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:19.298602104 CET	15520	49837	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:19.330765009 CET	15520	49837	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:19.344897985 CET	15520	49837	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:19.347018003 CET	15520	49838	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:19.347162962 CET	49838	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:19.351840973 CET	49838	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:19.557944059 CET	15520	49838	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:19.558115959 CET	49838	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:19.591897964 CET	15520	49838	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:19.592048883 CET	49838	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:19.605140924 CET	49838	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:19.606787920 CET	49839	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:19.764246941 CET	15520	49838	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:19.798278093 CET	15520	49838	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:19.810897112 CET	15520	49839	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:19.811355114 CET	49839	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:19.811378002 CET	15520	49838	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:19.815752983 CET	49839	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:20.019819021 CET	15520	49839	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:20.022783041 CET	49839	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:20.060276031 CET	15520	49839	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:20.060345888 CET	49839	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:20.073790073 CET	49839	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:20.076128006 CET	49840	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:20.228075981 CET	15520	49839	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:20.264451027 CET	15520	49839	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:20.277046919 CET	15520	49840	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:20.277281046 CET	49840	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:20.277812004 CET	15520	49839	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:20.281733036 CET	49840	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:20.482289076 CET	15520	49840	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:20.482439995 CET	49840	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:20.516652107 CET	15520	49840	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:20.516731024 CET	49840	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:20.526890993 CET	49840	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:20.528830051 CET	49841	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:20.684967995 CET	15520	49840	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:20.717468023 CET	15520	49840	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:20.727474928 CET	15520	49840	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:20.729211092 CET	15520	49841	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:20.729330063 CET	49841	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:20.734404087 CET	49841	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:20.934751034 CET	15520	49841	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:20.934938908 CET	49841	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:20.967819929 CET	15520	49841	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:20.967999935 CET	49841	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:20.980060101 CET	49841	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:20.982604980 CET	49842	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:21.135952950 CET	15520	49841	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:21.168313026 CET	15520	49841	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:21.181062937 CET	15520	49841	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:21.184799910 CET	15520	49842	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:21.184894085 CET	49842	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:21.188927889 CET	49842	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:21.390959978 CET	15520	49842	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:21.391092062 CET	49842	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:21.424379110 CET	15520	49842	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:21.424489975 CET	49842	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:21.433178902 CET	49842	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:21.438803911 CET	49843	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:21.593324900 CET	15520	49842	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:21.626615047 CET	15520	49842	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:21.635379076 CET	15520	49842	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:21.641418934 CET	15520	49843	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:21.641551971 CET	49843	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:21.645688057 CET	49843	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:21.848388910 CET	15520	49843	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:21.848505020 CET	49843	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:21.881109953 CET	15520	49843	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:21.881211042 CET	49843	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:21.886307001 CET	49843	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:21.887938976 CET	49844	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:22.051112890 CET	15520	49843	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:22.084002018 CET	15520	49843	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:22.088768959 CET	15520	49843	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:22.092784882 CET	15520	49844	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:22.092888117 CET	49844	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:22.097353935 CET	49844	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:22.302244902 CET	15520	49844	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:22.302330971 CET	49844	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:22.335048914 CET	15520	49844	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:22.335124969 CET	49844	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:22.339756012 CET	49844	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:22.341382027 CET	49845	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:22.509289026 CET	15520	49844	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:22.541941881 CET	15520	49844	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:22.546314001 CET	15520	49844	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:22.546890020 CET	15520	49845	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:22.546946049 CET	49845	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:22.551676035 CET	49845	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:22.755582094 CET	15520	49845	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:22.755702019 CET	49845	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:22.788386106 CET	15520	49845	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:22.788503885 CET	49845	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:22.792567968 CET	49845	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:22.795411110 CET	49846	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:22.959486008 CET	15520	49845	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:22.992259979 CET	15520	49845	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:22.995692968 CET	15520	49846	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:22.995879889 CET	49846	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:22.996247053 CET	15520	49845	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:23.000648975 CET	49846	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:23.200949907 CET	15520	49846	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:23.201203108 CET	49846	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:23.234503031 CET	15520	49846	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:23.234687090 CET	49846	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:23.245831013 CET	49846	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:23.249404907 CET	49847	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:23.401827097 CET	15520	49846	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:23.435020924 CET	15520	49846	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:23.446329117 CET	15520	49846	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:23.454838991 CET	15520	49847	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:23.454916000 CET	49847	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:23.459866047 CET	49847	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:23.665268898 CET	15520	49847	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:23.665407896 CET	49847	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:23.697590113 CET	15520	49847	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:23.697896957 CET	49847	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:23.698566914 CET	49847	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:23.705049038 CET	49848	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:23.871218920 CET	15520	49847	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:23.903542995 CET	15520	49847	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:23.903800964 CET	15520	49847	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:23.910307884 CET	15520	49848	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:23.910393953 CET	49848	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:23.914570093 CET	49848	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:24.119837999 CET	15520	49848	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:24.119931936 CET	49848	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:24.153867006 CET	15520	49848	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:24.153980017 CET	49848	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:24.154340029 CET	49848	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:24.155909061 CET	49849	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:24.325928926 CET	15520	49848	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:24.360107899 CET	15520	49848	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:24.360153913 CET	15520	49848	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:24.360886097 CET	15520	49849	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:24.361072063 CET	49849	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:24.365432978 CET	49849	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:24.570424080 CET	15520	49849	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:24.570641994 CET	49849	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:24.603141069 CET	15520	49849	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:24.603209019 CET	49849	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:24.603477001 CET	49849	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:24.605741024 CET	49850	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:24.774988890 CET	15520	49849	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:24.807032108 CET	15520	49850	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:24.807226896 CET	49850	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:24.807266951 CET	15520	49849	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:24.807445049 CET	15520	49849	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:24.811943054 CET	49850	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:25.014408112 CET	15520	49850	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:25.014569044 CET	49850	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:25.046927929 CET	15520	49850	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:25.047142029 CET	49850	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:25.047527075 CET	49850	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:25.049757004 CET	49851	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:25.215883017 CET	15520	49850	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:25.248351097 CET	15520	49850	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:25.248578072 CET	15520	49850	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:25.250092983 CET	15520	49851	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:25.250179052 CET	49851	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:25.254446983 CET	49851	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:25.454862118 CET	15520	49851	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:25.455044031 CET	49851	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:25.491446018 CET	15520	49851	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:25.491537094 CET	49851	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:25.491735935 CET	49851	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:25.493257999 CET	49852	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:25.655525923 CET	15520	49851	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:25.694055080 CET	15520	49851	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:25.694119930 CET	15520	49851	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:25.694907904 CET	15520	49852	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:25.695019007 CET	49852	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:25.707746983 CET	49852	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:25.908310890 CET	15520	49852	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:25.908435106 CET	49852	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:25.942780972 CET	15520	49852	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:25.942933083 CET	49852	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:25.945453882 CET	49852	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:25.947290897 CET	49853	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:26.109525919 CET	15520	49852	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:26.143354893 CET	15520	49852	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:26.145761013 CET	15520	49852	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:26.145776033 CET	15520	49853	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:26.145899057 CET	49853	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:26.150413990 CET	49853	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:26.350269079 CET	15520	49853	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:26.350352049 CET	49853	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:26.387711048 CET	15520	49853	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:26.387789011 CET	49853	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:26.388427019 CET	49853	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:26.389905930 CET	49854	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:26.549185038 CET	15520	49853	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:26.586452961 CET	15520	49853	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:26.586843014 CET	15520	49853	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:26.596833944 CET	15520	49854	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:26.596927881 CET	49854	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:26.601027012 CET	49854	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:26.808003902 CET	15520	49854	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:26.808145046 CET	49854	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:26.840522051 CET	15520	49854	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:26.840666056 CET	49854	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:26.840858936 CET	49854	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:26.843533993 CET	49855	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:27.015207052 CET	15520	49854	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:27.045799017 CET	15520	49855	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:27.045985937 CET	49855	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:27.047607899 CET	15520	49854	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:27.047702074 CET	15520	49854	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:27.050904036 CET	49855	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:27.253144979 CET	15520	49855	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:27.253299952 CET	49855	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:27.285561085 CET	15520	49855	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:27.285712957 CET	49855	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:27.286032915 CET	49855	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:27.289702892 CET	49856	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:27.455535889 CET	15520	49855	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:27.491043091 CET	15520	49855	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:27.491199017 CET	15520	49855	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:27.496671915 CET	15520	49856	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:27.496783972 CET	49856	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:27.501239061 CET	49856	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:27.705730915 CET	15520	49856	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:27.705976009 CET	49856	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:27.738131046 CET	15520	49856	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:27.738297939 CET	49856	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:27.739418983 CET	49856	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:27.745389938 CET	49857	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:27.910423994 CET	15520	49856	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:27.942759991 CET	15520	49856	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:27.943845987 CET	15520	49856	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:27.945401907 CET	15520	49857	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:27.945504904 CET	49857	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:27.950398922 CET	49857	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:28.150468111 CET	15520	49857	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:28.150551081 CET	49857	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:28.183373928 CET	15520	49857	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:28.183465958 CET	49857	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:28.183760881 CET	49857	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:28.185866117 CET	49858	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:28.350706100 CET	15520	49857	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:28.383611917 CET	15520	49857	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:28.383714914 CET	15520	49857	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:28.386454105 CET	15520	49858	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:28.386549950 CET	49858	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:28.390975952 CET	49858	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:28.592257977 CET	15520	49858	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:28.592350960 CET	49858	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:28.625746012 CET	15520	49858	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:28.625821114 CET	49858	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:28.626070976 CET	49858	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:28.628767014 CET	49859	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:28.792996883 CET	15520	49858	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:28.826416969 CET	15520	49858	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:28.826476097 CET	15520	49858	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:28.836222887 CET	15520	49859	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:28.836396933 CET	49859	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:28.841911077 CET	49859	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:29.049195051 CET	15520	49859	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:29.049331903 CET	49859	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:29.089809895 CET	15520	49859	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:29.089870930 CET	49859	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:29.090225935 CET	49859	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:29.092219114 CET	49860	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:29.256730080 CET	15520	49859	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:29.297208071 CET	15520	49859	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:29.297331095 CET	15520	49859	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:29.298865080 CET	15520	49860	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:29.298949957 CET	49860	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:29.307614088 CET	49860	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:29.504362106 CET	49860	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:29.514291048 CET	15520	49860	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:29.514386892 CET	49860	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:29.547080040 CET	15520	49860	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:29.547316074 CET	49860	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:29.547717094 CET	49860	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:29.550108910 CET	49861	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:29.711322069 CET	15520	49860	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:29.721023083 CET	15520	49860	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:29.754213095 CET	15520	49860	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:29.754266977 CET	15520	49860	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:29.755354881 CET	15520	49861	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:29.755455017 CET	49861	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:29.760128975 CET	49861	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:29.965353966 CET	15520	49861	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:29.965426922 CET	49861	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:29.998016119 CET	15520	49861	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:29.998085976 CET	49861	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:29.998351097 CET	49861	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:29.999833107 CET	49862	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:30.170721054 CET	15520	49861	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:30.202493906 CET	15520	49862	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:30.202625990 CET	49862	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:30.203545094 CET	15520	49861	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:30.203831911 CET	15520	49861	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:30.206738949 CET	49862	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:30.408647060 CET	15520	49862	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:30.408723116 CET	49862	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:30.444498062 CET	15520	49862	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:30.444571972 CET	49862	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:30.444907904 CET	49862	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:30.446446896 CET	49863	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:30.610733986 CET	15520	49862	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:30.646538973 CET	15520	49862	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:30.646583080 CET	15520	49863	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:30.646728992 CET	15520	49862	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:30.646794081 CET	49863	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:30.651134968 CET	49863	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:30.851319075 CET	15520	49863	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:30.851661921 CET	49863	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:30.883230925 CET	15520	49863	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:30.883480072 CET	49863	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:30.883966923 CET	49863	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:30.890145063 CET	49864	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:31.051901102 CET	15520	49863	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:31.083751917 CET	15520	49863	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:31.083909988 CET	15520	49863	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:31.090208054 CET	15520	49864	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:31.090421915 CET	49864	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:31.094679117 CET	49864	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:31.294841051 CET	15520	49864	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:31.295211077 CET	49864	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:31.327447891 CET	15520	49864	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:31.327568054 CET	49864	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:31.327728033 CET	49864	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:31.329262018 CET	49865	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:31.495327950 CET	15520	49864	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:31.528439045 CET	15520	49864	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:31.528508902 CET	15520	49864	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:31.536617041 CET	15520	49865	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:31.536761045 CET	49865	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:31.540764093 CET	49865	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:31.747514963 CET	15520	49865	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:31.747690916 CET	49865	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:31.780946970 CET	15520	49865	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:31.781101942 CET	49865	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:31.781496048 CET	49865	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:31.783672094 CET	49866	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:31.954462051 CET	15520	49865	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:31.985897064 CET	15520	49866	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:31.986061096 CET	49866	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:31.987690926 CET	15520	49865	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:31.987946033 CET	15520	49865	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:31.991044044 CET	49866	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:32.193178892 CET	15520	49866	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:32.193252087 CET	49866	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:32.225408077 CET	15520	49866	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:32.225505114 CET	49866	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:32.226491928 CET	49866	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:32.233728886 CET	49867	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:32.395432949 CET	15520	49866	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:32.427629948 CET	15520	49866	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:32.428431988 CET	15520	49866	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:32.436357021 CET	15520	49867	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:32.436480045 CET	49867	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:32.440536022 CET	49867	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:32.643217087 CET	15520	49867	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:32.643371105 CET	49867	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:32.676038980 CET	15520	49867	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:32.676228046 CET	49867	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:32.676788092 CET	49867	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:32.684957027 CET	49868	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:32.847615004 CET	15520	49867	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:32.880779982 CET	15520	49867	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:32.881031990 CET	15520	49867	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:32.891930103 CET	15520	49868	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:32.892082930 CET	49868	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:32.898830891 CET	49868	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:33.104233980 CET	15520	49868	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:33.104393959 CET	49868	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:33.136321068 CET	15520	49868	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:33.136411905 CET	49868	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:33.136791945 CET	49868	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:33.143419027 CET	49869	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:33.309721947 CET	15520	49868	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:33.341581106 CET	15520	49868	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:33.341829062 CET	15520	49868	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:33.343653917 CET	15520	49869	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:33.343745947 CET	49869	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:33.348162889 CET	49869	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:33.548408031 CET	15520	49869	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:33.548489094 CET	49869	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:33.580786943 CET	15520	49869	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:33.580897093 CET	49869	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:33.581245899 CET	49869	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:33.583342075 CET	49870	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:33.748846054 CET	15520	49869	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:33.781089067 CET	15520	49869	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:33.781336069 CET	15520	49869	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:33.790788889 CET	15520	49870	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:33.790904045 CET	49870	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:33.799974918 CET	49870	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:34.004456043 CET	49870	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:34.007405043 CET	15520	49870	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:34.040015936 CET	15520	49870	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:34.040199995 CET	49870	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:34.040380955 CET	49870	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:34.042747974 CET	49871	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:34.212342024 CET	15520	49870	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:34.247262955 CET	15520	49871	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:34.247601986 CET	49871	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:34.247729063 CET	15520	49870	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:34.247827053 CET	15520	49870	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:34.256213903 CET	49871	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:34.460189104 CET	15520	49871	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:34.460282087 CET	49871	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:34.496582031 CET	15520	49871	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:34.496685028 CET	49871	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:34.496970892 CET	49871	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:34.498505116 CET	49872	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:34.664263010 CET	15520	49871	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:34.700727940 CET	15520	49871	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:34.700846910 CET	15520	49871	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:34.702702045 CET	15520	49872	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:34.702831030 CET	49872	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:34.707366943 CET	49872	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:34.911262989 CET	15520	49872	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:34.911708117 CET	49872	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:34.943747997 CET	15520	49872	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:34.943942070 CET	49872	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:34.944955111 CET	49872	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:34.951857090 CET	49873	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:35.115690947 CET	15520	49872	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:35.147890091 CET	15520	49872	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:35.148838043 CET	15520	49872	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:35.152060032 CET	15520	49873	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:35.152262926 CET	49873	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:35.158596039 CET	49873	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:35.358572960 CET	15520	49873	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:35.358741999 CET	49873	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:35.392246962 CET	15520	49873	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:35.392429113 CET	49873	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:35.392560959 CET	49873	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:35.394155979 CET	49874	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:35.558734894 CET	15520	49873	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:35.592526913 CET	15520	49873	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:35.592550039 CET	15520	49873	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:35.599965096 CET	15520	49874	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:35.600043058 CET	49874	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:35.603544950 CET	49874	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:35.809349060 CET	15520	49874	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:35.809443951 CET	49874	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:35.841994047 CET	15520	49874	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:35.842119932 CET	49874	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:35.872425079 CET	49874	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:35.874023914 CET	49875	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:36.015336990 CET	15520	49874	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:36.047923088 CET	15520	49874	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:36.078007936 CET	15520	49875	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:36.078211069 CET	15520	49874	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:36.078269958 CET	49875	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:36.082303047 CET	49875	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:36.286319971 CET	15520	49875	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:36.286437035 CET	49875	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:36.319199085 CET	15520	49875	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:36.319319963 CET	49875	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:36.491046906 CET	15520	49875	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:36.523268938 CET	15520	49875	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:37.243148088 CET	49876	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:37.447489977 CET	15520	49876	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:37.447716951 CET	49876	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:37.451893091 CET	49876	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:37.656088114 CET	15520	49876	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:37.656176090 CET	49876	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:37.688251019 CET	15520	49876	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:37.688337088 CET	49876	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:37.688591003 CET	49876	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:37.692147017 CET	49877	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:37.860534906 CET	15520	49876	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:37.892505884 CET	15520	49876	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:37.892596960 CET	15520	49876	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:37.893034935 CET	15520	49877	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:37.893114090 CET	49877	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:37.898065090 CET	49877	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:38.101764917 CET	15520	49877	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:38.102020979 CET	49877	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:38.131876945 CET	15520	49877	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:38.132116079 CET	49877	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:38.132256985 CET	49877	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:38.134280920 CET	49878	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:38.304652929 CET	15520	49877	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:38.333028078 CET	15520	49877	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:38.333040953 CET	15520	49877	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:38.338251114 CET	15520	49878	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:38.338362932 CET	49878	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:38.341243029 CET	49878	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:38.543942928 CET	49878	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:38.547080994 CET	15520	49878	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:38.580444098 CET	15520	49878	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:38.580652952 CET	49878	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:38.581298113 CET	49878	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:38.585163116 CET	49879	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:38.748370886 CET	15520	49878	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:38.784905910 CET	15520	49878	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:38.785296917 CET	15520	49878	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:38.785340071 CET	15520	49879	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:38.785404921 CET	49879	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:38.788322926 CET	49879	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:38.988675117 CET	15520	49879	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:38.988769054 CET	49879	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:39.020675898 CET	15520	49879	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:39.020730972 CET	49879	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:39.020956993 CET	49879	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:39.023346901 CET	49880	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:39.189219952 CET	15520	49879	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:39.220978022 CET	15520	49879	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:39.221169949 CET	15520	49879	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:39.227075100 CET	15520	49880	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:39.227266073 CET	49880	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:39.234189034 CET	49880	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:39.437978029 CET	15520	49880	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:39.438225031 CET	49880	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:39.474033117 CET	15520	49880	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:39.474148989 CET	49880	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:39.474518061 CET	49880	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:39.479060888 CET	49881	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:39.642055988 CET	15520	49880	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:39.677968025 CET	15520	49880	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:39.678095102 CET	15520	49880	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:39.679274082 CET	15520	49881	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:39.679378033 CET	49881	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:39.685108900 CET	49881	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:39.885623932 CET	15520	49881	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:39.885906935 CET	49881	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:39.917960882 CET	15520	49881	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:39.918216944 CET	49881	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:39.922415972 CET	49881	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:39.926611900 CET	49882	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:40.086246967 CET	15520	49881	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:40.118627071 CET	15520	49881	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:40.122713089 CET	15520	49881	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:40.126972914 CET	15520	49882	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:40.127091885 CET	49882	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:40.134404898 CET	49882	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:40.334808111 CET	15520	49882	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:40.334948063 CET	49882	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:40.368952990 CET	15520	49882	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:40.369139910 CET	49882	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:40.369437933 CET	49882	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:40.371669054 CET	49883	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:40.535316944 CET	15520	49882	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:40.569454908 CET	15520	49882	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:40.569531918 CET	15520	49882	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:40.577002048 CET	15520	49883	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:40.577203035 CET	49883	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:40.580480099 CET	49883	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:40.785792112 CET	15520	49883	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:40.785921097 CET	49883	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:40.818731070 CET	15520	49883	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:40.818830967 CET	49883	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:40.819103956 CET	49883	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:40.821391106 CET	49884	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:40.991422892 CET	15520	49883	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:41.024180889 CET	15520	49883	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:41.024347067 CET	15520	49883	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:41.025386095 CET	15520	49884	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:41.025481939 CET	49884	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:41.035854101 CET	49884	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:41.239911079 CET	15520	49884	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:41.240022898 CET	49884	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:41.272475958 CET	15520	49884	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:41.272543907 CET	49884	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:41.272782087 CET	49884	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:41.274477959 CET	49885	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:41.444094896 CET	15520	49884	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:41.476814032 CET	15520	49884	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:41.476849079 CET	15520	49884	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:41.476869106 CET	15520	49885	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:41.477287054 CET	49885	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:41.480650902 CET	49885	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:41.683267117 CET	15520	49885	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:41.683381081 CET	49885	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:41.716032028 CET	15520	49885	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:41.716348886 CET	49885	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:41.716902971 CET	49885	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:41.724514961 CET	49886	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:41.885814905 CET	15520	49885	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:41.918751955 CET	15520	49885	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:41.919265032 CET	15520	49885	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:41.931139946 CET	15520	49886	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:41.931255102 CET	49886	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:41.934421062 CET	49886	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:42.141256094 CET	15520	49886	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:42.141520977 CET	49886	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:42.175390005 CET	15520	49886	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:42.175652981 CET	49886	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:42.176029921 CET	49886	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:42.178366899 CET	49887	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:42.348299026 CET	15520	49886	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:42.382356882 CET	15520	49886	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:42.382636070 CET	15520	49886	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:42.382761955 CET	15520	49887	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:42.382849932 CET	49887	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:42.387240887 CET	49887	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:42.591666937 CET	15520	49887	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:42.591789007 CET	49887	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:42.626822948 CET	15520	49887	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:42.627028942 CET	49887	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:42.628089905 CET	49887	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:42.634443998 CET	49888	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:42.796376944 CET	15520	49887	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:42.832300901 CET	15520	49887	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:42.832684994 CET	15520	49887	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:42.838963985 CET	15520	49888	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:42.839073896 CET	49888	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:42.842020988 CET	49888	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:43.046019077 CET	49888	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:43.046340942 CET	15520	49888	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:43.079240084 CET	15520	49888	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:43.079336882 CET	49888	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:43.079504967 CET	49888	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:43.081809998 CET	49889	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:43.250711918 CET	15520	49888	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:43.250757933 CET	15520	49888	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:43.283900976 CET	15520	49888	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:43.283938885 CET	15520	49888	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:43.288176060 CET	15520	49889	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:43.288417101 CET	49889	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:43.291654110 CET	49889	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:43.497931957 CET	15520	49889	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:43.498253107 CET	49889	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:43.538126945 CET	15520	49889	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:43.538351059 CET	49889	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:43.538490057 CET	49889	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:43.540956974 CET	49890	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:43.704529047 CET	15520	49889	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:43.744563103 CET	15520	49889	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:43.744592905 CET	15520	49889	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:43.748362064 CET	15520	49890	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:43.748526096 CET	49890	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:43.762057066 CET	49890	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:43.958429098 CET	49890	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:43.969465971 CET	15520	49890	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:43.969650984 CET	49890	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:44.005434036 CET	15520	49890	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:44.005539894 CET	49890	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:44.005841017 CET	49890	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:44.008264065 CET	49891	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:44.166018963 CET	15520	49890	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:44.166049957 CET	15520	49890	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:44.177056074 CET	15520	49890	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:44.207921028 CET	15520	49891	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:44.207989931 CET	49891	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:44.210709095 CET	49891	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:44.212910891 CET	15520	49890	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:44.213115931 CET	15520	49890	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:44.410701990 CET	15520	49891	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:44.410918951 CET	49891	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:44.444686890 CET	15520	49891	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:44.444885015 CET	49891	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:44.445521116 CET	49891	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:44.447453976 CET	49892	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:44.610584974 CET	15520	49891	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:44.644520044 CET	15520	49891	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:44.644989967 CET	15520	49891	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:44.648648024 CET	15520	49892	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:44.648736000 CET	49892	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:44.651933908 CET	49892	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:44.853100061 CET	15520	49892	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:44.853188992 CET	49892	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:44.885605097 CET	15520	49892	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:44.885689974 CET	49892	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:44.886388063 CET	49892	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:44.895817041 CET	49893	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:45.054478884 CET	15520	49892	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:45.086874962 CET	15520	49892	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:45.087430000 CET	15520	49892	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:45.101648092 CET	15520	49893	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:45.101747036 CET	49893	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:45.104538918 CET	49893	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:45.310463905 CET	15520	49893	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:45.310570955 CET	49893	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:45.363436937 CET	15520	49893	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:45.363528967 CET	49893	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:45.363918066 CET	49893	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:45.365411997 CET	49894	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:45.516567945 CET	15520	49893	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:45.569529057 CET	15520	49893	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:45.569561005 CET	15520	49894	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:45.569794893 CET	15520	49893	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:45.569878101 CET	49894	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:45.572977066 CET	49894	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:45.767364025 CET	49894	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:45.774416924 CET	15520	49894	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:45.774518967 CET	49894	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:45.774766922 CET	49894	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:45.776997089 CET	15520	49894	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:45.777439117 CET	49895	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:45.971837997 CET	15520	49894	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:45.978707075 CET	15520	49894	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:45.978878021 CET	15520	49894	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:45.980159044 CET	15520	49895	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:45.980259895 CET	49895	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:45.983100891 CET	49895	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:46.178569078 CET	49895	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:46.183470964 CET	15520	49895	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:46.183568001 CET	49895	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:46.183787107 CET	49895	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:46.185733080 CET	15520	49895	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:46.185842991 CET	49896	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:46.381592989 CET	15520	49895	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:46.384284973 CET	15520	49896	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:46.384381056 CET	49896	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:46.386152983 CET	15520	49895	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:46.386409044 CET	15520	49895	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:46.387053013 CET	49896	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:46.585714102 CET	15520	49896	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:46.585901022 CET	49896	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:46.589760065 CET	15520	49896	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:46.592396021 CET	49897	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:46.784790993 CET	15520	49896	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:46.791038990 CET	15520	49897	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:46.791155100 CET	49897	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:46.794715881 CET	49897	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:46.990298986 CET	15520	49897	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:46.990571022 CET	49897	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:46.991323948 CET	49897	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:46.993314028 CET	15520	49897	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:46.999203920 CET	49898	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:47.189445019 CET	15520	49897	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:47.189877987 CET	15520	49897	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:47.199469090 CET	15520	49898	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:47.199578047 CET	49898	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:47.202392101 CET	49898	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:47.400580883 CET	15520	49898	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:47.400814056 CET	49898	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:47.401945114 CET	49898	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:47.402316093 CET	15520	49898	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:47.406356096 CET	49899	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:47.600843906 CET	15520	49898	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:47.601864100 CET	15520	49898	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:47.610039949 CET	15520	49899	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:47.610162973 CET	49899	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:47.613502026 CET	49899	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:47.814141989 CET	15520	49899	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:47.814291000 CET	49899	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:47.814589977 CET	49899	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:47.817173004 CET	15520	49899	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:47.817284107 CET	49900	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:48.018136024 CET	15520	49899	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:48.018315077 CET	15520	49899	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:48.021332026 CET	15520	49900	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:48.021445036 CET	49900	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:48.024190903 CET	49900	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:48.225841999 CET	15520	49900	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:48.226102114 CET	49900	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:48.226155043 CET	49900	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:48.228101969 CET	49901	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:48.228240967 CET	15520	49900	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:48.430381060 CET	15520	49900	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:48.430505991 CET	15520	49900	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:48.434226036 CET	15520	49901	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:48.434315920 CET	49901	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:48.436763048 CET	49901	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:48.616880894 CET	49901	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:48.640674114 CET	15520	49901	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:48.640808105 CET	49901	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:48.641079903 CET	49901	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:48.642673016 CET	15520	49901	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:48.643119097 CET	49902	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:48.823072910 CET	15520	49901	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:48.843650103 CET	15520	49902	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:48.843852043 CET	49902	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:48.846709013 CET	15520	49901	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:48.846951008 CET	15520	49901	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:48.852329016 CET	49902	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:49.044718027 CET	15520	49902	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:49.044879913 CET	49902	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:49.045144081 CET	49902	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:49.047647953 CET	49903	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:49.052776098 CET	15520	49902	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:49.245413065 CET	15520	49902	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:49.245440006 CET	15520	49902	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:49.251569986 CET	15520	49903	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:49.251638889 CET	49903	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:49.254570961 CET	49903	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:49.456098080 CET	15520	49903	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:49.456243038 CET	49903	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:49.456547976 CET	49903	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:49.458496094 CET	15520	49903	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:49.458517075 CET	49904	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:49.661884069 CET	15520	49903	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:49.661926985 CET	15520	49903	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:49.663028002 CET	15520	49904	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:49.663129091 CET	49904	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:49.666260958 CET	49904	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:49.869926929 CET	15520	49904	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:49.870134115 CET	49904	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:49.876683950 CET	15520	49904	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:49.879538059 CET	49905	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:50.073977947 CET	15520	49904	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:50.080516100 CET	15520	49905	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:50.080672026 CET	49905	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:50.090282917 CET	49905	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:50.282083035 CET	15520	49905	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:50.282309055 CET	49905	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:50.282553911 CET	49905	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:50.285043955 CET	49906	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:50.291322947 CET	15520	49905	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:50.483772993 CET	15520	49905	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:50.483841896 CET	15520	49905	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:50.491015911 CET	15520	49906	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:50.491091013 CET	49906	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:50.493531942 CET	49906	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:50.697542906 CET	15520	49906	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:50.697802067 CET	49906	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:50.699173927 CET	49906	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:50.699507952 CET	15520	49906	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:50.704823017 CET	49907	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:50.904108047 CET	15520	49906	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:50.904936075 CET	15520	49906	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:50.905469894 CET	15520	49907	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:50.905581951 CET	49907	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:50.908092022 CET	49907	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:51.106771946 CET	15520	49907	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:51.106857061 CET	49907	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:51.107601881 CET	49907	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:51.108604908 CET	15520	49907	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:51.109180927 CET	49908	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:51.307739019 CET	15520	49907	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:51.308161974 CET	15520	49907	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:51.311353922 CET	15520	49908	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:51.311451912 CET	49908	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:51.314336061 CET	49908	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:51.513961077 CET	15520	49908	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:51.514064074 CET	49908	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:51.514564991 CET	49908	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:51.515866995 CET	49909	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:51.516429901 CET	15520	49908	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:51.716530085 CET	15520	49908	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:51.716711044 CET	15520	49908	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:51.721998930 CET	15520	49909	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:51.722074032 CET	49909	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:51.724574089 CET	49909	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:51.923846960 CET	49909	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:51.930658102 CET	15520	49909	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:51.931540966 CET	15520	49909	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:51.934221983 CET	49910	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:52.130286932 CET	15520	49909	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:52.135010004 CET	15520	49910	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:52.135113955 CET	49910	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:52.138300896 CET	49910	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:52.336584091 CET	15520	49910	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:52.336812019 CET	49910	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:52.337256908 CET	49910	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:52.339140892 CET	15520	49910	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:52.339643002 CET	49911	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:52.538738012 CET	15520	49910	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:52.538775921 CET	15520	49910	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:52.540148020 CET	15520	49911	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:52.540246964 CET	49911	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:52.542779922 CET	49911	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:52.741590023 CET	15520	49911	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:52.741765022 CET	49911	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:52.742027044 CET	49911	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:52.743237972 CET	15520	49911	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:52.744151115 CET	49912	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:52.942569971 CET	15520	49911	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:52.942601919 CET	15520	49911	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:52.946887016 CET	15520	49912	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:52.947006941 CET	49912	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:52.954040051 CET	49912	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:53.150331020 CET	15520	49912	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:53.150474072 CET	49912	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:53.150743008 CET	49912	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:53.155360937 CET	49913	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:53.156774044 CET	15520	49912	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:53.353384972 CET	15520	49912	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:53.353430033 CET	15520	49912	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:53.357827902 CET	15520	49913	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:53.357925892 CET	49913	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:53.375137091 CET	49913	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:53.561909914 CET	15520	49913	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:53.561996937 CET	49913	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:53.562509060 CET	49913	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:53.564435959 CET	49914	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:53.577714920 CET	15520	49913	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:53.765367031 CET	15520	49913	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:53.765480042 CET	15520	49914	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:53.765549898 CET	49914	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:53.765732050 CET	15520	49913	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:53.768546104 CET	49914	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:53.960133076 CET	49914	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:53.968065023 CET	15520	49914	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:53.968126059 CET	49914	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:53.968589067 CET	49914	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:53.969577074 CET	15520	49914	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:53.970125914 CET	49915	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:54.162410975 CET	15520	49914	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:54.170023918 CET	15520	49914	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:54.170516968 CET	15520	49914	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:54.171169043 CET	15520	49915	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:54.171257019 CET	49915	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:54.174226046 CET	49915	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:54.367557049 CET	49915	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:54.370986938 CET	15520	49915	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:54.371102095 CET	49915	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:54.371546984 CET	49915	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:54.373150110 CET	49916	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:54.373584986 CET	15520	49915	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:54.567209959 CET	15520	49915	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:54.570446968 CET	15520	49915	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:54.570911884 CET	15520	49915	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:54.577523947 CET	15520	49916	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:54.577634096 CET	49916	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:54.580220938 CET	49916	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:54.782439947 CET	15520	49916	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:54.782524109 CET	49916	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:54.782810926 CET	49916	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:54.784543037 CET	15520	49916	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:54.785233021 CET	49917	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:54.986025095 CET	15520	49917	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:54.986202955 CET	49917	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:54.986962080 CET	15520	49916	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:54.987113953 CET	15520	49916	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:54.989310026 CET	49917	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:55.187385082 CET	15520	49917	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:55.187479973 CET	49917	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:55.187640905 CET	49917	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:55.189570904 CET	49918	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:55.189794064 CET	15520	49917	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:55.388164043 CET	15520	49917	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:55.388196945 CET	15520	49917	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:55.389499903 CET	15520	49918	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:55.389626980 CET	49918	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:55.392899990 CET	49918	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:55.592480898 CET	15520	49918	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:55.592636108 CET	49918	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:55.592781067 CET	15520	49918	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:55.592875004 CET	49918	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:55.594286919 CET	49919	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:55.792633057 CET	15520	49918	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:55.792664051 CET	15520	49918	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:55.798371077 CET	15520	49919	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:55.798468113 CET	49919	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:55.801676989 CET	49919	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:56.005012989 CET	15520	49919	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:56.005188942 CET	49919	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:56.005570889 CET	49919	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:56.005716085 CET	15520	49919	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:56.010797024 CET	49920	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:56.209501982 CET	15520	49919	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:56.209539890 CET	15520	49919	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:56.216970921 CET	15520	49920	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:56.217077017 CET	49920	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:56.220225096 CET	49920	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:56.421616077 CET	49920	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:56.423630953 CET	15520	49920	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:56.423748970 CET	49920	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:56.424405098 CET	49920	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:56.426484108 CET	15520	49920	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:56.426785946 CET	49921	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:56.628010988 CET	15520	49920	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:56.629808903 CET	15520	49920	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:56.630328894 CET	15520	49920	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:56.635324001 CET	15520	49921	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:56.635426998 CET	49921	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:56.638319969 CET	49921	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:56.844217062 CET	15520	49921	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:56.844504118 CET	49921	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:56.844868898 CET	49921	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:56.846641064 CET	15520	49921	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:56.847338915 CET	49922	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:57.053047895 CET	15520	49922	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:57.053087950 CET	15520	49921	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:57.053102970 CET	15520	49921	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:57.053348064 CET	49922	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:57.056086063 CET	49922	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:57.259031057 CET	15520	49922	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:57.259138107 CET	49922	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:57.259349108 CET	49922	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:57.261455059 CET	15520	49922	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:57.262356043 CET	49923	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:57.464728117 CET	15520	49922	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:57.464759111 CET	15520	49922	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:57.467751980 CET	15520	49923	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:57.467837095 CET	49923	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:57.472250938 CET	49923	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:57.673558950 CET	15520	49923	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:57.673825979 CET	49923	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:57.673945904 CET	49923	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:57.677522898 CET	15520	49923	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:57.680514097 CET	49924	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:57.879375935 CET	15520	49923	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:57.879414082 CET	15520	49923	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:57.887836933 CET	15520	49924	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:57.888067007 CET	49924	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:57.890618086 CET	49924	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:58.093822956 CET	49924	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:58.095654011 CET	15520	49924	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:58.095731020 CET	49924	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:58.096337080 CET	49924	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:58.097795963 CET	15520	49924	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:58.098409891 CET	49925	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:58.301366091 CET	15520	49924	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:58.301471949 CET	15520	49924	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:58.302886963 CET	15520	49924	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:58.303477049 CET	15520	49924	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:58.304536104 CET	15520	49925	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:58.304749012 CET	49925	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:58.308473110 CET	49925	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:58.513138056 CET	15520	49925	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:58.513350964 CET	49925	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:58.513681889 CET	49925	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:58.514625072 CET	15520	49925	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:58.515537977 CET	49926	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:58.713936090 CET	15520	49926	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:58.714288950 CET	49926	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:58.717375040 CET	49926	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:58.719471931 CET	15520	49925	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:58.719697952 CET	15520	49925	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:58.912957907 CET	15520	49926	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:58.913085938 CET	49926	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:58.913315058 CET	49926	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:58.915556908 CET	15520	49926	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:58.916193962 CET	49927	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:59.111416101 CET	15520	49926	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:59.111450911 CET	15520	49926	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:59.116286993 CET	15520	49927	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:59.116466045 CET	49927	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:59.119868994 CET	49927	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:59.316878080 CET	15520	49927	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:59.317136049 CET	49927	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:59.317419052 CET	49927	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:59.319801092 CET	15520	49927	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:59.320565939 CET	49928	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:59.517373085 CET	15520	49927	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:59.517402887 CET	15520	49927	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:59.521241903 CET	15520	49928	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:59.521328926 CET	49928	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:59.523977041 CET	49928	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:59.722400904 CET	15520	49928	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:59.722516060 CET	49928	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:59.722786903 CET	49928	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:59.724644899 CET	15520	49928	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:59.724764109 CET	49929	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:59.923429012 CET	15520	49928	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:59.923460007 CET	15520	49928	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:59.928689957 CET	15520	49929	3.66.38.117	192.168.2.11
Jan 31, 2024 13:46:59.928828001 CET	49929	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:46:59.931875944 CET	49929	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:00.128247023 CET	49929	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:00.133224010 CET	15520	49929	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:00.133336067 CET	49929	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:00.133713961 CET	49929	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:00.135787964 CET	15520	49929	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:00.137032986 CET	49930	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:00.332545042 CET	15520	49929	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:00.336464882 CET	15520	49930	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:00.336692095 CET	49930	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:00.337833881 CET	15520	49929	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:00.338282108 CET	15520	49929	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:00.345658064 CET	49930	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:00.536412954 CET	15520	49930	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:00.536549091 CET	49930	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:00.536807060 CET	49930	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:00.540200949 CET	49931	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:00.545042038 CET	15520	49930	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:00.735933065 CET	15520	49930	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:00.735972881 CET	15520	49930	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:00.743999004 CET	15520	49931	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:00.744146109 CET	49931	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:00.748116016 CET	49931	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:00.948200941 CET	15520	49931	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:00.948293924 CET	49931	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:00.948487043 CET	49931	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:00.950889111 CET	49932	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:00.951858997 CET	15520	49931	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:01.149187088 CET	15520	49932	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:01.149357080 CET	49932	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:01.152529955 CET	15520	49931	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:01.152581930 CET	15520	49931	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:01.155323982 CET	49932	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:01.347944021 CET	15520	49932	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:01.348074913 CET	49932	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:01.348681927 CET	49932	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:01.353657007 CET	15520	49932	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:01.354835987 CET	49933	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:01.546480894 CET	15520	49932	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:01.547009945 CET	15520	49932	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:01.561036110 CET	15520	49933	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:01.561131001 CET	49933	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:01.564620972 CET	49933	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:01.767462969 CET	15520	49933	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:01.767666101 CET	49933	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:01.767905951 CET	49933	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:01.770520926 CET	49934	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:01.770715952 CET	15520	49933	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:01.969108105 CET	15520	49934	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:01.969326019 CET	49934	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:01.972574949 CET	49934	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:01.973802090 CET	15520	49933	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:01.973833084 CET	15520	49933	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:02.168101072 CET	15520	49934	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:02.168220997 CET	49934	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:02.168355942 CET	49934	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:02.170905113 CET	15520	49934	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:02.170917988 CET	49935	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:02.366769075 CET	15520	49934	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:02.366807938 CET	15520	49934	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:02.374608040 CET	15520	49935	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:02.374711037 CET	49935	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:02.379861116 CET	49935	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:02.578594923 CET	15520	49935	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:02.578860044 CET	49935	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:02.579046965 CET	49935	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:02.583498001 CET	15520	49935	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:02.583784103 CET	49936	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:02.782629013 CET	15520	49935	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:02.782664061 CET	15520	49935	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:02.784621954 CET	15520	49936	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:02.784738064 CET	49936	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:02.788074017 CET	49936	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:02.985852957 CET	15520	49936	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:02.986112118 CET	49936	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:02.988050938 CET	49936	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:02.988934994 CET	15520	49936	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:02.992750883 CET	49937	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:03.187197924 CET	15520	49936	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:03.188949108 CET	15520	49936	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:03.191140890 CET	15520	49937	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:03.191297054 CET	49937	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:03.201117039 CET	49937	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:03.390180111 CET	15520	49937	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:03.390501976 CET	49937	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:03.390611887 CET	49937	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:03.392684937 CET	49938	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:03.399625063 CET	15520	49937	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:03.589123964 CET	15520	49937	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:03.589162111 CET	15520	49937	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:03.594042063 CET	15520	49938	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:03.594161034 CET	49938	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:03.596967936 CET	49938	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:03.795826912 CET	15520	49938	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:03.795980930 CET	49938	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:03.796199083 CET	49938	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:03.797772884 CET	49939	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:03.798358917 CET	15520	49938	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:03.997380018 CET	15520	49938	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:03.997417927 CET	15520	49938	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:04.000339985 CET	15520	49939	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:04.000550032 CET	49939	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:04.003246069 CET	49939	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:04.203296900 CET	15520	49939	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:04.203524113 CET	49939	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:04.203860044 CET	49939	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:04.205636978 CET	15520	49939	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:04.206213951 CET	49940	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:04.406104088 CET	15520	49939	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:04.406217098 CET	15520	49939	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:04.412549019 CET	15520	49940	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:04.412899971 CET	49940	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:04.416054010 CET	49940	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:04.619607925 CET	15520	49940	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:04.619813919 CET	49940	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:04.620455980 CET	49940	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:04.622267962 CET	15520	49940	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:04.626877069 CET	49941	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:04.826302052 CET	15520	49940	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:04.826772928 CET	15520	49940	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:04.831084967 CET	15520	49941	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:04.831366062 CET	49941	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:04.837493896 CET	49941	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:05.035952091 CET	15520	49941	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:05.036151886 CET	49941	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:05.036283970 CET	49941	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:05.037822962 CET	49942	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:05.041691065 CET	15520	49941	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:05.240387917 CET	15520	49941	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:05.240420103 CET	15520	49941	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:05.241970062 CET	15520	49942	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:05.242245913 CET	49942	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:05.245630026 CET	49942	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:05.448540926 CET	15520	49942	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:05.448739052 CET	49942	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:05.449589968 CET	49942	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:05.451647043 CET	49943	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:05.451806068 CET	15520	49942	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:05.652781010 CET	15520	49942	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:05.653314114 CET	15520	49942	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:05.658934116 CET	15520	49943	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:05.659032106 CET	49943	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:05.662157059 CET	49943	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:05.866628885 CET	15520	49943	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:05.866910934 CET	49943	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:05.866961956 CET	49943	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:05.869257927 CET	15520	49943	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:05.869299889 CET	49944	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:06.075623035 CET	15520	49944	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:06.075799942 CET	49944	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:06.076466084 CET	15520	49943	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:06.076479912 CET	15520	49943	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:06.078771114 CET	49944	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:06.282824039 CET	15520	49944	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:06.283041954 CET	49944	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:06.283622026 CET	49944	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:06.285626888 CET	15520	49944	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:06.291203976 CET	49945	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:06.487528086 CET	15520	49944	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:06.487931967 CET	15520	49944	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:06.492383957 CET	15520	49945	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:06.492584944 CET	49945	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:06.495554924 CET	49945	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:06.688751936 CET	49945	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:06.694107056 CET	15520	49945	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:06.694233894 CET	49945	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:06.694453955 CET	49945	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:06.696541071 CET	49946	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:06.696672916 CET	15520	49945	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:06.890172005 CET	15520	49945	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:06.890218973 CET	15520	49945	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:06.895337105 CET	15520	49945	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:06.895500898 CET	15520	49945	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:06.898822069 CET	15520	49946	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:06.898931980 CET	49946	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:06.902605057 CET	49946	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:07.101504087 CET	15520	49946	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:07.101757050 CET	49946	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:07.101902008 CET	49946	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:07.103518963 CET	49947	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:07.104823112 CET	15520	49946	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:07.304230928 CET	15520	49946	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:07.304322958 CET	15520	49946	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:07.308552980 CET	15520	49947	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:07.308669090 CET	49947	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:07.312299013 CET	49947	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:07.514025927 CET	15520	49947	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:07.514178991 CET	49947	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:07.514414072 CET	49947	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:07.517276049 CET	15520	49947	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:07.518591881 CET	49948	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:07.718624115 CET	15520	49948	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:07.718775988 CET	49948	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:07.719207048 CET	15520	49947	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:07.719386101 CET	15520	49947	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:07.729432106 CET	49948	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:07.919092894 CET	15520	49948	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:07.919169903 CET	49948	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:07.923134089 CET	49948	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:07.924653053 CET	49949	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:07.929378986 CET	15520	49948	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:08.119225979 CET	15520	49948	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:08.133976936 CET	15520	49948	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:08.134094954 CET	15520	49949	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:08.134383917 CET	49949	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:08.159784079 CET	49949	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:08.341186047 CET	15520	49949	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:08.341276884 CET	49949	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:08.366357088 CET	15520	49949	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:08.407354116 CET	49949	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:08.409605026 CET	49950	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:08.547872066 CET	15520	49949	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:08.611821890 CET	15520	49950	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:08.611907959 CET	49950	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:08.614012003 CET	15520	49949	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:08.614407063 CET	49950	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:08.814363003 CET	15520	49950	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:08.814708948 CET	49950	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:08.816462994 CET	15520	49950	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:09.017635107 CET	15520	49950	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:09.801666021 CET	49951	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:10.009712934 CET	15520	49951	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:10.009834051 CET	49951	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:10.012839079 CET	49951	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:10.216026068 CET	15520	49951	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:10.216218948 CET	49951	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:10.217820883 CET	15520	49951	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:10.218400002 CET	49951	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:10.220180988 CET	49952	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:10.421359062 CET	15520	49951	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:10.423372030 CET	15520	49951	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:10.427736044 CET	15520	49952	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:10.427835941 CET	49952	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:10.430107117 CET	49952	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:10.627657890 CET	49952	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:10.635735035 CET	15520	49952	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:10.635838985 CET	49952	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:10.636240959 CET	49952	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:10.637579918 CET	15520	49952	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:10.637738943 CET	49953	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:10.835349083 CET	15520	49952	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:10.835378885 CET	15520	49952	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:10.837848902 CET	15520	49953	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:10.837934971 CET	49953	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:10.840343952 CET	49953	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:10.843338013 CET	15520	49952	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:10.843709946 CET	15520	49952	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:11.038333893 CET	15520	49953	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:11.038407087 CET	49953	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:11.038616896 CET	49953	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:11.040430069 CET	15520	49953	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:11.040781021 CET	49954	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:11.238583088 CET	15520	49953	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:11.238704920 CET	15520	49953	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:11.246470928 CET	15520	49954	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:11.246546984 CET	49954	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:11.250193119 CET	49954	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:11.452724934 CET	15520	49954	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:11.452801943 CET	49954	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:11.453042984 CET	49954	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:11.455194950 CET	49955	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:11.455781937 CET	15520	49954	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:11.653776884 CET	15520	49955	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:11.653904915 CET	49955	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:11.657071114 CET	49955	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:11.658694029 CET	15520	49954	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:11.658734083 CET	15520	49954	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:11.852766037 CET	15520	49955	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:11.852909088 CET	49955	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:11.853142977 CET	49955	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:11.854703903 CET	49956	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:11.855537891 CET	15520	49955	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:12.051567078 CET	15520	49955	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:12.051593065 CET	15520	49955	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:12.060735941 CET	15520	49956	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:12.060846090 CET	49956	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:12.063457012 CET	49956	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:12.265868902 CET	49956	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:12.267605066 CET	15520	49956	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:12.267688036 CET	49956	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:12.267839909 CET	49956	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:12.269412041 CET	15520	49956	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:12.269639969 CET	49957	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:12.471779108 CET	15520	49957	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:12.471873999 CET	49957	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:12.472193956 CET	15520	49956	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:12.472234964 CET	15520	49956	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:12.473690033 CET	15520	49956	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:12.473778009 CET	15520	49956	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:12.475135088 CET	49957	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:12.674143076 CET	15520	49957	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:12.674242973 CET	49957	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:12.677007914 CET	15520	49957	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:12.677905083 CET	49957	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:12.680231094 CET	49958	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:12.876302958 CET	15520	49957	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:12.879745960 CET	15520	49957	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:12.880943060 CET	15520	49958	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:12.881155014 CET	49958	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:12.884236097 CET	49958	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:13.082540035 CET	15520	49958	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:13.082783937 CET	49958	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:13.082891941 CET	49958	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:13.085381985 CET	49959	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:13.085535049 CET	15520	49958	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:13.283423901 CET	15520	49958	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:13.283488989 CET	15520	49958	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:13.289037943 CET	15520	49959	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:13.289151907 CET	49959	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:13.291738987 CET	49959	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:13.492984056 CET	15520	49959	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:13.493249893 CET	49959	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:13.493434906 CET	49959	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:13.495239973 CET	15520	49959	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:13.495413065 CET	49960	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:13.694181919 CET	15520	49960	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:13.694909096 CET	49960	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:13.696804047 CET	15520	49959	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:13.696885109 CET	15520	49959	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:13.697871923 CET	49960	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:13.894067049 CET	15520	49960	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:13.894918919 CET	49960	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:13.895364046 CET	49960	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:13.896490097 CET	15520	49960	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:13.897155046 CET	49961	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:14.093993902 CET	15520	49960	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:14.094062090 CET	15520	49960	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:14.100070000 CET	15520	49961	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:14.100150108 CET	49961	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:14.103272915 CET	49961	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:14.304349899 CET	15520	49961	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:14.304435968 CET	49961	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:14.305288076 CET	49961	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:14.306011915 CET	15520	49961	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:14.307503939 CET	49962	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:14.507350922 CET	15520	49961	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:14.508004904 CET	15520	49962	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:14.508018970 CET	15520	49961	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:14.508135080 CET	49962	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:14.510700941 CET	49962	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:14.708918095 CET	15520	49962	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:14.711018085 CET	49962	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:14.711122036 CET	15520	49962	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:14.711848021 CET	49962	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:14.713391066 CET	49963	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:14.911672115 CET	15520	49962	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:14.912264109 CET	15520	49962	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:14.913655996 CET	15520	49963	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:14.914904118 CET	49963	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:14.917763948 CET	49963	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:15.116163015 CET	15520	49963	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:15.116261005 CET	49963	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:15.116513014 CET	49963	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:15.118226051 CET	15520	49963	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:15.119438887 CET	49964	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:15.316699982 CET	15520	49963	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:15.316781044 CET	15520	49963	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:15.325649023 CET	15520	49964	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:15.327059031 CET	49964	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:15.330372095 CET	49964	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:15.533771038 CET	15520	49964	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:15.534913063 CET	49964	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:15.535505056 CET	49964	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:15.536530972 CET	15520	49964	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:15.543224096 CET	49965	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:15.741228104 CET	15520	49964	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:15.741705894 CET	15520	49964	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:15.750581980 CET	15520	49965	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:15.750706911 CET	49965	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:15.753582954 CET	49965	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:15.958622932 CET	15520	49965	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:15.958738089 CET	49965	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:15.959131002 CET	49965	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:15.960903883 CET	15520	49965	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:15.961046934 CET	49966	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:16.161735058 CET	15520	49966	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:16.161971092 CET	49966	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:16.164740086 CET	49966	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:16.166156054 CET	15520	49965	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:16.166342974 CET	15520	49965	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:16.362966061 CET	15520	49966	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:16.363060951 CET	49966	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:16.363274097 CET	49966	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:16.365331888 CET	15520	49966	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:16.365770102 CET	49967	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:16.563960075 CET	15520	49966	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:16.563981056 CET	15520	49966	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:16.569977045 CET	15520	49967	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:16.570208073 CET	49967	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:16.575623035 CET	49967	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:16.757860899 CET	49967	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:16.775084019 CET	15520	49967	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:16.775265932 CET	49967	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:16.775702953 CET	49967	15520	192.168.2.11	3.66.38.117
Jan 31, 2024 13:47:16.779829979 CET	15520	49967	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:16.901794910 CET	49968	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:16.962657928 CET	15520	49967	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:16.979774952 CET	15520	49967	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:16.980952978 CET	15520	49967	3.66.38.117	192.168.2.11
Jan 31, 2024 13:47:17.108583927 CET	15520	49968	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:17.108992100 CET	49968	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:17.112756014 CET	49968	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:17.315916061 CET	15520	49968	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:17.316175938 CET	49968	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:17.316361904 CET	49968	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:17.319272041 CET	15520	49968	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:17.319571972 CET	49969	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:17.523036003 CET	15520	49968	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:17.523096085 CET	15520	49968	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:17.526216984 CET	15520	49969	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:17.526416063 CET	49969	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:17.535248995 CET	49969	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:17.733517885 CET	15520	49969	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:17.733762026 CET	49969	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:17.734257936 CET	49969	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:17.740966082 CET	49970	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:17.741838932 CET	15520	49969	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:17.940619946 CET	15520	49969	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:17.940824032 CET	15520	49969	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:17.941226006 CET	15520	49970	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:17.941323042 CET	49970	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:17.943986893 CET	49970	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:18.142812967 CET	15520	49970	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:18.142950058 CET	49970	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:18.143233061 CET	49970	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:18.144903898 CET	15520	49970	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:18.145378113 CET	49971	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:18.343580961 CET	15520	49970	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:18.343702078 CET	15520	49970	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:18.351619005 CET	15520	49971	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:18.351867914 CET	49971	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:18.354723930 CET	49971	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:18.558372021 CET	15520	49971	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:18.558458090 CET	49971	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:18.558712006 CET	49971	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:18.561158895 CET	15520	49971	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:18.562680960 CET	49972	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:18.764662981 CET	15520	49972	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:18.764713049 CET	15520	49971	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:18.764744997 CET	15520	49971	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:18.764765978 CET	49972	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:18.768018961 CET	49972	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:18.967031002 CET	15520	49972	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:18.967282057 CET	49972	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:18.967475891 CET	49972	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:18.969536066 CET	49973	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:18.969784021 CET	15520	49972	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:19.169141054 CET	15520	49972	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:19.169162989 CET	15520	49972	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:19.176568031 CET	15520	49973	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:19.176791906 CET	49973	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:19.186187983 CET	49973	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:19.372873068 CET	49973	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:19.384073019 CET	15520	49973	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:19.384198904 CET	49973	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:19.384565115 CET	49973	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:19.387435913 CET	49974	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:19.393188953 CET	15520	49973	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:19.580149889 CET	15520	49973	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:19.580199003 CET	15520	49973	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:19.591228008 CET	15520	49973	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:19.591439009 CET	15520	49973	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:19.595284939 CET	15520	49974	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:19.595371008 CET	49974	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:19.598385096 CET	49974	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:19.803579092 CET	15520	49974	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:19.803790092 CET	49974	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:19.803823948 CET	49974	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:19.806160927 CET	49975	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:19.806200981 CET	15520	49974	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:20.010406971 CET	15520	49975	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:20.010488987 CET	49975	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:20.012264967 CET	15520	49974	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:20.012279987 CET	15520	49974	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:20.013684988 CET	49975	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:20.214934111 CET	15520	49975	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:20.215091944 CET	49975	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:20.215462923 CET	49975	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:20.217406988 CET	49976	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:20.217714071 CET	15520	49975	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:20.418908119 CET	15520	49976	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:20.419269085 CET	49976	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:20.419373989 CET	15520	49975	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:20.419504881 CET	15520	49975	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:20.422413111 CET	49976	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:20.621151924 CET	15520	49976	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:20.621315002 CET	49976	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:20.621642113 CET	49976	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:20.623819113 CET	15520	49976	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:20.625490904 CET	49977	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:20.822822094 CET	15520	49976	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:20.822961092 CET	15520	49976	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:20.831926107 CET	15520	49977	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:20.832009077 CET	49977	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:20.834665060 CET	49977	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:21.028923035 CET	49977	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:21.038857937 CET	15520	49977	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:21.038963079 CET	49977	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:21.039241076 CET	49977	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:21.041037083 CET	15520	49977	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:21.042798996 CET	49978	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:21.235508919 CET	15520	49977	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:21.242635965 CET	15520	49978	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:21.242888927 CET	49978	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:21.245462894 CET	15520	49977	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:21.245507956 CET	15520	49977	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:21.245708942 CET	49978	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:21.443006039 CET	15520	49978	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:21.443126917 CET	49978	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:21.443342924 CET	49978	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:21.445419073 CET	15520	49978	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:21.450779915 CET	49979	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:21.643187046 CET	15520	49978	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:21.643248081 CET	15520	49978	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:21.649271011 CET	15520	49979	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:21.649440050 CET	49979	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:21.652653933 CET	49979	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:21.847600937 CET	49979	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:21.848129988 CET	15520	49979	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:21.848352909 CET	49979	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:21.848536968 CET	49979	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:21.850426912 CET	49980	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:21.851193905 CET	15520	49979	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:22.046204090 CET	15520	49979	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:22.046680927 CET	15520	49979	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:22.046813965 CET	15520	49979	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:22.055752993 CET	15520	49980	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:22.055910110 CET	49980	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:22.059042931 CET	49980	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:22.261177063 CET	49980	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:22.261472940 CET	15520	49980	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:22.261579037 CET	49980	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:22.261841059 CET	49980	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:22.263525963 CET	49981	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:22.264381886 CET	15520	49980	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:22.465502977 CET	15520	49981	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:22.465802908 CET	49981	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:22.466639996 CET	15520	49980	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:22.466769934 CET	15520	49980	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:22.467014074 CET	15520	49980	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:22.470875025 CET	49981	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:22.668051004 CET	15520	49981	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:22.668179989 CET	49981	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:22.668382883 CET	49981	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:22.669986963 CET	49982	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:22.672667027 CET	15520	49981	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:22.870354891 CET	15520	49981	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:22.870466948 CET	15520	49981	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:22.877336979 CET	15520	49982	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:22.877433062 CET	49982	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:22.880501032 CET	49982	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:23.085207939 CET	15520	49982	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:23.085370064 CET	49982	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:23.085508108 CET	49982	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:23.086895943 CET	49983	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:23.087949038 CET	15520	49982	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:23.290766954 CET	15520	49983	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:23.291038990 CET	49983	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:23.292803049 CET	15520	49982	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:23.292820930 CET	15520	49982	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:23.294461012 CET	49983	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:23.498778105 CET	15520	49983	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:23.499109983 CET	49983	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:23.499253035 CET	49983	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:23.501758099 CET	15520	49983	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:23.504529953 CET	49984	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:23.703126907 CET	15520	49983	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:23.703145981 CET	15520	49983	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:23.705250978 CET	15520	49984	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:23.705332041 CET	49984	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:23.707901001 CET	49984	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:23.905587912 CET	15520	49984	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:23.905775070 CET	49984	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:23.905836105 CET	49984	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:23.907685995 CET	15520	49984	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:23.908349991 CET	49985	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:24.106102943 CET	15520	49984	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:24.106122017 CET	15520	49984	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:24.109055042 CET	15520	49985	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:24.109249115 CET	49985	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:24.111854076 CET	49985	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:24.309452057 CET	15520	49985	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:24.309546947 CET	49985	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:24.310074091 CET	49985	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:24.311831951 CET	15520	49985	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:24.312772036 CET	49986	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:24.509819984 CET	15520	49985	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:24.510085106 CET	15520	49985	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:24.518335104 CET	15520	49986	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:24.518444061 CET	49986	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:24.522769928 CET	49986	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:24.724442005 CET	15520	49986	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:24.724562883 CET	49986	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:24.724736929 CET	49986	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:24.727292061 CET	49987	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:24.733700991 CET	15520	49986	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:24.930344105 CET	15520	49986	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:24.930361986 CET	15520	49986	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:24.933270931 CET	15520	49987	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:24.933341026 CET	49987	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:24.936511993 CET	49987	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:25.135958910 CET	49987	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:25.141719103 CET	15520	49987	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:25.141807079 CET	49987	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:25.141977072 CET	49987	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:25.144033909 CET	49988	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:25.144772053 CET	15520	49987	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:25.341844082 CET	15520	49987	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:25.345571041 CET	15520	49988	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:25.345794916 CET	49988	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:25.347462893 CET	15520	49987	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:25.347598076 CET	15520	49987	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:25.359769106 CET	49988	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:25.547800064 CET	15520	49988	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:25.547910929 CET	49988	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:25.548274040 CET	49988	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:25.549649000 CET	49989	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:25.561328888 CET	15520	49988	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:25.749789000 CET	15520	49988	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:25.749850035 CET	15520	49988	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:25.755971909 CET	15520	49989	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:25.757814884 CET	49989	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:25.938949108 CET	49989	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:25.964436054 CET	15520	49989	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:25.964919090 CET	49989	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:25.965039015 CET	49989	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:25.966778994 CET	49990	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:26.146519899 CET	15520	49989	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:26.170371056 CET	15520	49990	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:26.170568943 CET	49990	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:26.172389984 CET	15520	49989	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:26.172401905 CET	15520	49989	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:26.173196077 CET	49990	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:26.372975111 CET	15520	49990	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:26.374958038 CET	49990	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:26.375005007 CET	15520	49990	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:26.576968908 CET	15520	49990	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:27.358781099 CET	49991	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:27.564996004 CET	15520	49991	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:27.565094948 CET	49991	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:27.567511082 CET	49991	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:27.771769047 CET	15520	49991	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:27.771987915 CET	49991	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:27.773700953 CET	15520	49991	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:27.785557032 CET	49991	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:27.787087917 CET	49992	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:27.978168964 CET	15520	49991	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:27.992439985 CET	15520	49991	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:27.994721889 CET	15520	49992	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:27.994779110 CET	49992	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:27.997448921 CET	49992	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:28.201649904 CET	15520	49992	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:28.201764107 CET	49992	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:28.204020023 CET	15520	49992	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:28.206847906 CET	49992	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:28.208898067 CET	49993	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:28.408498049 CET	15520	49992	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:28.413434982 CET	15520	49992	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:28.413777113 CET	15520	49993	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:28.413873911 CET	49993	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:28.416918993 CET	49993	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:28.619124889 CET	15520	49993	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:28.619271040 CET	49993	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:28.619628906 CET	49993	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:28.621701956 CET	15520	49993	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:28.625188112 CET	49994	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:28.824280024 CET	15520	49993	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:28.824734926 CET	15520	49993	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:28.826690912 CET	15520	49994	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:28.826841116 CET	49994	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:28.832945108 CET	49994	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:29.029850960 CET	15520	49994	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:29.030024052 CET	49994	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:29.030148029 CET	49994	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:29.032687902 CET	49995	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:29.035527945 CET	15520	49994	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:29.231635094 CET	15520	49994	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:29.231687069 CET	15520	49994	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:29.238432884 CET	15520	49995	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:29.238513947 CET	49995	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:29.244693995 CET	49995	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:29.444617033 CET	15520	49995	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:29.444722891 CET	49995	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:29.445024967 CET	49995	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:29.446818113 CET	49996	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:29.450395107 CET	15520	49995	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:29.647651911 CET	15520	49996	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:29.647788048 CET	49996	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:29.650485039 CET	15520	49995	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:29.650614023 CET	15520	49995	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:29.654158115 CET	49996	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:29.848516941 CET	15520	49996	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:29.848833084 CET	49996	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:29.849435091 CET	49996	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:29.854581118 CET	15520	49996	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:29.855566978 CET	49997	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:30.049463987 CET	15520	49996	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:30.049705982 CET	15520	49996	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:30.055758953 CET	15520	49997	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:30.055996895 CET	49997	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:30.060049057 CET	49997	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:30.256428003 CET	15520	49997	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:30.256511927 CET	49997	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:30.256705046 CET	49997	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:30.258057117 CET	49998	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:30.260333061 CET	15520	49997	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:30.456932068 CET	15520	49997	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:30.456950903 CET	15520	49997	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:30.462879896 CET	15520	49998	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:30.463109970 CET	49998	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:30.467959881 CET	49998	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:30.662136078 CET	49998	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:30.668212891 CET	15520	49998	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:30.668411970 CET	49998	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:30.668622017 CET	49998	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:30.670947075 CET	49999	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:30.672658920 CET	15520	49998	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:30.867085934 CET	15520	49998	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:30.871216059 CET	15520	49999	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:30.871300936 CET	49999	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:30.873168945 CET	15520	49998	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:30.873236895 CET	15520	49998	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:30.874685049 CET	49999	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:31.064564943 CET	49999	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:31.071623087 CET	15520	49999	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:31.071732044 CET	49999	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:31.071868896 CET	49999	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:31.074163914 CET	50000	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:31.074775934 CET	15520	49999	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:31.264858961 CET	15520	49999	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:31.271981001 CET	15520	49999	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:31.271996975 CET	15520	49999	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:31.279279947 CET	15520	50000	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:31.279378891 CET	50000	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:31.281773090 CET	50000	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:31.484857082 CET	15520	50000	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:31.484971046 CET	50000	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:31.485135078 CET	50000	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:31.486890078 CET	15520	50000	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:31.487262964 CET	50001	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:31.687632084 CET	15520	50001	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:31.687813997 CET	50001	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:31.690161943 CET	15520	50000	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:31.690201044 CET	15520	50000	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:31.690623999 CET	50001	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:31.884944916 CET	50001	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:31.888278961 CET	15520	50001	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:31.888398886 CET	50001	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:31.888834000 CET	50001	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:31.890624046 CET	15520	50001	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:31.891200066 CET	50002	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:32.085064888 CET	15520	50001	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:32.088406086 CET	15520	50001	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:32.088737011 CET	15520	50001	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:32.098318100 CET	15520	50002	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:32.098464966 CET	50002	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:32.103980064 CET	50002	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:32.305824995 CET	15520	50002	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:32.305973053 CET	50002	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:32.306170940 CET	50002	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:32.308264971 CET	50003	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:32.311012983 CET	15520	50002	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:32.513274908 CET	15520	50002	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:32.513303995 CET	15520	50002	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:32.514969110 CET	15520	50003	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:32.515067101 CET	50003	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:32.518152952 CET	50003	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:32.722100973 CET	15520	50003	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:32.722269058 CET	50003	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:32.723074913 CET	50003	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:32.724793911 CET	15520	50003	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:32.730207920 CET	50004	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:32.929503918 CET	15520	50003	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:32.930381060 CET	15520	50003	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:32.931785107 CET	15520	50004	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:32.931898117 CET	50004	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:32.935233116 CET	50004	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:33.134622097 CET	15520	50004	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:33.134716034 CET	50004	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:33.135235071 CET	50004	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:33.137000084 CET	15520	50004	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:33.137100935 CET	50005	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:33.336456060 CET	15520	50004	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:33.336843014 CET	15520	50004	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:33.337299109 CET	15520	50005	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:33.337423086 CET	50005	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:33.343390942 CET	50005	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:33.537936926 CET	15520	50005	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:33.538146973 CET	50005	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:33.539454937 CET	50005	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:33.543523073 CET	15520	50005	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:33.545547009 CET	50006	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:33.738564968 CET	15520	50005	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:33.739661932 CET	15520	50005	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:33.747286081 CET	15520	50006	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:33.747354984 CET	50006	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:33.749959946 CET	50006	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:33.945581913 CET	50006	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:33.949311018 CET	15520	50006	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:33.949501038 CET	50006	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:33.949718952 CET	50006	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:33.951613903 CET	15520	50006	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:33.953593016 CET	50007	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:34.148109913 CET	15520	50006	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:34.148135900 CET	15520	50006	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:34.151164055 CET	15520	50006	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:34.151277065 CET	15520	50006	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:34.159485102 CET	15520	50007	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:34.159622908 CET	50007	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:34.162873030 CET	50007	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:34.365720034 CET	15520	50007	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:34.365838051 CET	50007	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:34.366028070 CET	50007	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:34.368032932 CET	50008	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:34.368650913 CET	15520	50007	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:34.566560030 CET	15520	50008	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:34.566705942 CET	50008	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:34.571824074 CET	15520	50007	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:34.571985006 CET	15520	50007	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:34.574353933 CET	50008	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:34.765208960 CET	15520	50008	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:34.765341997 CET	50008	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:34.765809059 CET	50008	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:34.768023968 CET	50009	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:34.772531033 CET	15520	50008	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:34.963682890 CET	15520	50008	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:34.964087963 CET	15520	50008	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:34.972851038 CET	15520	50009	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:34.972923040 CET	50009	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:34.976243019 CET	50009	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:35.181984901 CET	15520	50009	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:35.182040930 CET	15520	50009	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:35.182188034 CET	50009	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:35.182568073 CET	50009	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:35.184720993 CET	50010	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:35.383471012 CET	15520	50010	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:35.383624077 CET	50010	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:35.387207031 CET	15520	50009	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:35.387358904 CET	15520	50009	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:35.392982006 CET	50010	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:35.586954117 CET	15520	50010	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:35.587080002 CET	50010	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:35.587312937 CET	50010	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:35.593817949 CET	50011	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:35.594333887 CET	15520	50010	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:35.786079884 CET	15520	50010	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:35.786149025 CET	15520	50010	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:35.794580936 CET	15520	50011	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:35.794691086 CET	50011	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:35.802350998 CET	50011	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:35.995322943 CET	15520	50011	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:35.995630026 CET	50011	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:35.995906115 CET	50011	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:36.002974033 CET	50012	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:36.003196001 CET	15520	50011	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:36.196044922 CET	15520	50011	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:36.196321011 CET	15520	50011	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:36.204924107 CET	15520	50012	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:36.205029011 CET	50012	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:36.213748932 CET	50012	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:36.407277107 CET	15520	50012	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:36.407639980 CET	50012	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:36.407869101 CET	50012	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:36.410408974 CET	50013	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:36.415662050 CET	15520	50012	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:36.609565020 CET	15520	50012	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:36.609673023 CET	15520	50012	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:36.615704060 CET	15520	50013	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:36.615928888 CET	50013	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:36.618526936 CET	50013	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:36.821382999 CET	15520	50013	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:36.821495056 CET	50013	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:36.821672916 CET	50013	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:36.823667049 CET	15520	50013	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:36.824372053 CET	50014	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:37.024313927 CET	15520	50014	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:37.024570942 CET	50014	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:37.026743889 CET	15520	50013	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:37.026763916 CET	15520	50013	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:37.027194023 CET	50014	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:37.223592043 CET	50014	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:37.224606991 CET	15520	50014	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:37.224708080 CET	50014	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:37.225966930 CET	50014	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:37.226891041 CET	15520	50014	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:37.232883930 CET	50015	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:37.423794031 CET	15520	50014	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:37.423851967 CET	15520	50014	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:37.424499035 CET	15520	50014	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:37.425657034 CET	15520	50014	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:37.434786081 CET	15520	50015	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:37.435015917 CET	50015	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:37.444478989 CET	50015	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:37.632697105 CET	50015	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:37.637284994 CET	15520	50015	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:37.637474060 CET	50015	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:37.637824059 CET	50015	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:37.639750004 CET	50016	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:37.646444082 CET	15520	50015	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:37.834959030 CET	15520	50015	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:37.834983110 CET	15520	50015	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:37.839359045 CET	15520	50015	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:37.839584112 CET	15520	50015	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:37.842019081 CET	15520	50016	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:37.842103958 CET	50016	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:37.847754955 CET	50016	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:38.027991056 CET	50016	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:38.045605898 CET	15520	50016	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:38.045928001 CET	50016	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:38.045928001 CET	50016	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:38.047816992 CET	50017	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:38.050780058 CET	15520	50016	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:38.230323076 CET	15520	50016	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:38.248016119 CET	15520	50016	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:38.248054981 CET	15520	50016	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:38.253765106 CET	15520	50017	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:38.253884077 CET	50017	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:38.256699085 CET	50017	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:38.457220078 CET	50017	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:38.462018967 CET	15520	50017	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:38.462151051 CET	50017	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:38.462563992 CET	50017	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:38.464531898 CET	15520	50017	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:38.464742899 CET	50018	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:38.663412094 CET	15520	50017	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:38.668143034 CET	15520	50017	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:38.668338060 CET	15520	50017	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:38.669822931 CET	15520	50018	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:38.670017958 CET	50018	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:38.672342062 CET	50018	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:38.875422001 CET	15520	50018	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:38.875581980 CET	50018	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:38.877394915 CET	15520	50018	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:38.878464937 CET	50018	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:38.880558014 CET	50019	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:39.080832958 CET	15520	50018	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:39.083590984 CET	15520	50018	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:39.084249973 CET	15520	50019	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:39.084347010 CET	50019	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:39.087121010 CET	50019	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:39.290981054 CET	15520	50019	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:39.291146040 CET	50019	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:39.291615963 CET	50019	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:39.293327093 CET	15520	50019	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:39.294258118 CET	50020	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:39.494992018 CET	15520	50019	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:39.495227098 CET	15520	50019	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:39.503012896 CET	15520	50020	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:39.503211975 CET	50020	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:39.510812044 CET	50020	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:39.712289095 CET	15520	50020	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:39.712519884 CET	50020	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:39.712646008 CET	50020	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:39.715795994 CET	50021	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:39.718811035 CET	15520	50020	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:39.915863991 CET	15520	50021	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:39.916137934 CET	50021	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:39.920656919 CET	15520	50020	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:39.920696974 CET	15520	50020	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:39.924048901 CET	50021	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:40.116282940 CET	15520	50021	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:40.116566896 CET	50021	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:40.117634058 CET	50021	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:40.123920918 CET	15520	50021	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:40.125257969 CET	50022	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:40.316572905 CET	15520	50021	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:40.317475080 CET	15520	50021	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:40.324337006 CET	15520	50022	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:40.324438095 CET	50022	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:40.327653885 CET	50022	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:40.509444952 CET	50022	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:40.523552895 CET	15520	50022	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:40.523674965 CET	50022	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:40.523967028 CET	50022	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:40.525867939 CET	50023	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:40.526356936 CET	15520	50022	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:40.707998037 CET	15520	50022	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:40.708025932 CET	15520	50022	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:40.723323107 CET	15520	50022	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:40.723345995 CET	15520	50022	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:40.730869055 CET	15520	50023	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:40.730992079 CET	50023	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:40.733450890 CET	50023	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:40.936877966 CET	15520	50023	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:40.937035084 CET	50023	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:40.937316895 CET	50023	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:40.938045979 CET	15520	50023	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:40.939469099 CET	50024	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:41.141566992 CET	15520	50023	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:41.141633034 CET	15520	50023	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:41.146578074 CET	15520	50024	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:41.146816015 CET	50024	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:41.149121046 CET	50024	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:41.344413042 CET	50024	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:41.354084969 CET	15520	50024	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:41.354173899 CET	50024	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:41.354451895 CET	50024	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:41.356070995 CET	15520	50024	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:41.356682062 CET	50025	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:41.551709890 CET	15520	50024	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:41.561460972 CET	15520	50024	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:41.561661959 CET	15520	50024	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:41.561702013 CET	15520	50025	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:41.561875105 CET	50025	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:41.565872908 CET	50025	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:41.766799927 CET	15520	50025	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:41.766988993 CET	50025	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:41.767129898 CET	50025	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:41.769910097 CET	50026	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:41.770461082 CET	15520	50025	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:41.971955061 CET	15520	50025	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:41.971982956 CET	15520	50025	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:41.973601103 CET	15520	50026	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:41.973668098 CET	50026	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:41.976350069 CET	50026	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:42.164603949 CET	50026	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:42.177925110 CET	15520	50026	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:42.178066969 CET	50026	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:42.179269075 CET	50026	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:42.180090904 CET	15520	50026	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:42.184501886 CET	50027	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:42.368529081 CET	15520	50026	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:42.368556023 CET	15520	50026	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:42.381711960 CET	15520	50026	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:42.382834911 CET	15520	50026	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:42.386703968 CET	15520	50027	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:42.386825085 CET	50027	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:42.389487982 CET	50027	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:42.589335918 CET	15520	50027	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:42.589509964 CET	50027	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:42.589675903 CET	50027	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:42.591712952 CET	15520	50027	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:42.592111111 CET	50028	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:42.791836023 CET	15520	50027	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:42.791866064 CET	15520	50027	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:42.793945074 CET	15520	50028	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:42.794090033 CET	50028	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:42.796484947 CET	50028	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:42.996155024 CET	15520	50028	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:42.996356010 CET	50028	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:42.998191118 CET	15520	50028	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:43.008980036 CET	50028	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:43.010833025 CET	50029	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:43.198321104 CET	15520	50028	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:43.210742950 CET	15520	50028	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:43.211174011 CET	15520	50029	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:43.211292982 CET	50029	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:43.213747025 CET	50029	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:43.412204027 CET	15520	50029	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:43.412396908 CET	50029	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:43.414089918 CET	15520	50029	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:43.487718105 CET	50029	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:43.489273071 CET	50030	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:43.612910032 CET	15520	50029	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:43.688200951 CET	15520	50029	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:43.693119049 CET	15520	50030	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:43.693293095 CET	50030	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:43.709345102 CET	50030	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:43.897537947 CET	15520	50030	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:43.897699118 CET	50030	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:43.913158894 CET	15520	50030	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:44.101869106 CET	15520	50030	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:44.805094957 CET	50031	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:45.005253077 CET	15520	50031	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:45.005544901 CET	50031	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:45.008074999 CET	50031	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:45.205822945 CET	15520	50031	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:45.206038952 CET	50031	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:45.206233025 CET	50031	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:45.207654953 CET	15520	50031	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:45.207710981 CET	50032	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:45.405992031 CET	15520	50031	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:45.406027079 CET	15520	50031	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:45.406136990 CET	15520	50032	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:45.406364918 CET	50032	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:45.409296036 CET	50032	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:45.605052948 CET	15520	50032	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:45.605396986 CET	50032	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:45.605396986 CET	50032	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:45.607341051 CET	50033	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:45.607678890 CET	15520	50032	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:45.804109097 CET	15520	50032	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:45.804167986 CET	15520	50032	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:45.812778950 CET	15520	50033	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:45.812922955 CET	50033	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:45.819071054 CET	50033	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:46.018688917 CET	15520	50033	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:46.018918037 CET	50033	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:46.019212961 CET	50033	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:46.021348000 CET	50034	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:46.024465084 CET	15520	50033	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:46.224525928 CET	15520	50033	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:46.224586964 CET	15520	50033	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:46.226669073 CET	15520	50034	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:46.226790905 CET	50034	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:46.229808092 CET	50034	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:46.432307959 CET	15520	50034	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:46.432480097 CET	50034	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:46.432847023 CET	50034	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:46.435024023 CET	15520	50034	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:46.435458899 CET	50035	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:46.637804985 CET	15520	50034	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:46.637991905 CET	15520	50034	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:46.643145084 CET	15520	50035	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:46.643232107 CET	50035	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:46.645976067 CET	50035	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:46.851140976 CET	15520	50035	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:46.851418018 CET	50035	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:46.851727962 CET	50035	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:46.853612900 CET	15520	50035	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:46.853987932 CET	50036	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:47.058957100 CET	15520	50036	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:47.059078932 CET	15520	50035	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:47.059257030 CET	15520	50035	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:47.059288979 CET	50036	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:47.061815977 CET	50036	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:47.264520884 CET	15520	50036	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:47.264594078 CET	50036	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:47.264921904 CET	50036	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:47.266680956 CET	15520	50036	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:47.267606020 CET	50037	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:47.469609022 CET	15520	50036	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:47.469706059 CET	15520	50036	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:47.473747015 CET	15520	50037	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:47.473908901 CET	50037	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:47.476757050 CET	50037	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:47.680357933 CET	15520	50037	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:47.680496931 CET	50037	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:47.680752039 CET	50037	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:47.682862997 CET	15520	50037	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:47.683429003 CET	50038	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:47.885461092 CET	15520	50038	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:47.885701895 CET	50038	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:47.886888027 CET	15520	50037	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:47.886929035 CET	15520	50037	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:47.888469934 CET	50038	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:48.088192940 CET	15520	50038	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:48.088387966 CET	50038	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:48.088601112 CET	50038	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:48.090348959 CET	15520	50038	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:48.091305017 CET	50039	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:48.290465117 CET	15520	50038	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:48.290513992 CET	15520	50038	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:48.293442011 CET	15520	50039	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:48.293529987 CET	50039	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:48.297219038 CET	50039	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:48.495918989 CET	15520	50039	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:48.496166945 CET	50039	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:48.496339083 CET	50039	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:48.499054909 CET	50040	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:48.499284029 CET	15520	50039	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:48.698436022 CET	15520	50039	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:48.698503971 CET	15520	50039	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:48.707284927 CET	15520	50040	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:48.707648039 CET	50040	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:48.711215019 CET	50040	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:48.915894032 CET	15520	50040	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:48.916037083 CET	50040	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:48.916363001 CET	50040	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:48.918071032 CET	50041	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:48.919091940 CET	15520	50040	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:49.118105888 CET	15520	50041	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:49.118273973 CET	50041	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:49.123996019 CET	15520	50040	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:49.124108076 CET	15520	50040	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:49.124933004 CET	50041	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:49.318424940 CET	15520	50041	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:49.318557024 CET	50041	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:49.319017887 CET	50041	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:49.321113110 CET	50042	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:49.324794054 CET	15520	50041	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:49.518678904 CET	15520	50041	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:49.518974066 CET	15520	50041	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:49.521166086 CET	15520	50042	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:49.521300077 CET	50042	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:49.524286032 CET	50042	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:49.723092079 CET	15520	50042	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:49.723215103 CET	50042	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:49.723377943 CET	50042	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:49.724023104 CET	15520	50042	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:49.725897074 CET	50043	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:49.923110962 CET	15520	50042	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:49.923167944 CET	15520	50042	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:49.927742004 CET	15520	50043	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:49.927900076 CET	50043	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:49.930565119 CET	50043	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:50.130074024 CET	15520	50043	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:50.130460024 CET	50043	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:50.130891085 CET	50043	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:50.132317066 CET	15520	50043	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:50.135740995 CET	50044	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:50.332396030 CET	15520	50043	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:50.332622051 CET	15520	50043	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:50.338113070 CET	15520	50044	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:50.338234901 CET	50044	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:50.342288971 CET	50044	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:50.541527033 CET	50044	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:50.542041063 CET	15520	50044	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:50.542232037 CET	50044	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:50.542527914 CET	50044	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:50.544575930 CET	15520	50044	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:50.544861078 CET	50045	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:50.744029045 CET	15520	50044	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:50.744479895 CET	15520	50044	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:50.744688034 CET	15520	50044	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:50.749927998 CET	15520	50045	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:50.750185966 CET	50045	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:50.752954960 CET	50045	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:50.955799103 CET	15520	50045	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:50.956001043 CET	50045	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:50.956338882 CET	50045	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:50.957977057 CET	15520	50045	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:50.959080935 CET	50046	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:51.161286116 CET	15520	50045	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:51.161320925 CET	15520	50045	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:51.165302992 CET	15520	50046	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:51.165477037 CET	50046	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:51.170005083 CET	50046	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:51.371783018 CET	15520	50046	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:51.371922970 CET	50046	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:51.372083902 CET	50046	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:51.374789000 CET	50047	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:51.376140118 CET	15520	50046	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:51.578347921 CET	15520	50046	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:51.578414917 CET	15520	50046	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:51.580427885 CET	15520	50047	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:51.580707073 CET	50047	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:51.584055901 CET	50047	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:51.784421921 CET	50047	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:51.789650917 CET	15520	50047	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:51.789798975 CET	50047	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:51.790754080 CET	50047	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:51.792800903 CET	15520	50047	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:51.796036959 CET	50048	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:51.990164995 CET	15520	50047	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:51.990195990 CET	15520	50047	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:51.995346069 CET	15520	50047	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:51.996210098 CET	15520	50047	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:51.997446060 CET	15520	50048	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:51.997565031 CET	50048	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:52.000751019 CET	50048	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:52.199449062 CET	15520	50048	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:52.199709892 CET	50048	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:52.200021029 CET	50048	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:52.202152014 CET	15520	50048	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:52.203699112 CET	50049	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:52.401567936 CET	15520	50048	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:52.401632071 CET	15520	50048	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:52.410528898 CET	15520	50049	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:52.410753965 CET	50049	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:52.413708925 CET	50049	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:52.617983103 CET	15520	50049	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:52.618184090 CET	50049	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:52.618422985 CET	50049	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:52.620445967 CET	15520	50049	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:52.625299931 CET	50050	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:52.825263023 CET	15520	50049	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:52.825320959 CET	15520	50049	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:52.825741053 CET	15520	50050	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:52.825958967 CET	50050	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:52.828779936 CET	50050	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:53.027105093 CET	15520	50050	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:53.027209997 CET	50050	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:53.027930975 CET	50050	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:53.029459953 CET	50051	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:53.029592991 CET	15520	50050	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:53.227844954 CET	15520	50050	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:53.228231907 CET	15520	50050	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:53.228665113 CET	15520	50051	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:53.228800058 CET	50051	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:53.231901884 CET	50051	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:53.428210020 CET	15520	50051	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:53.428486109 CET	50051	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:53.428721905 CET	50051	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:53.430685997 CET	50052	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:53.430900097 CET	15520	50051	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:53.627758026 CET	15520	50051	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:53.627789974 CET	15520	50051	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:53.631100893 CET	15520	50052	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:53.631185055 CET	50052	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:53.633805990 CET	50052	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:53.832075119 CET	15520	50052	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:53.832303047 CET	50052	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:53.833338976 CET	50052	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:53.834079981 CET	15520	50052	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:53.840413094 CET	50053	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:54.032824993 CET	15520	50052	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:54.033571005 CET	15520	50052	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:54.042566061 CET	15520	50053	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:54.042685032 CET	50053	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:54.045480967 CET	50053	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:54.246758938 CET	15520	50053	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:54.247008085 CET	50053	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:54.247226000 CET	50053	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:54.247555017 CET	15520	50053	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:54.250062943 CET	50054	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:54.449327946 CET	15520	50053	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:54.449359894 CET	15520	50053	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:54.455203056 CET	15520	50054	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:54.455303907 CET	50054	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:54.464482069 CET	50054	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:54.660674095 CET	15520	50054	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:54.660783052 CET	50054	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:54.661770105 CET	50054	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:54.666518927 CET	50055	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:54.669472933 CET	15520	50054	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:54.865989923 CET	15520	50054	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:54.866389036 CET	15520	50055	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:54.866481066 CET	50055	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:54.866648912 CET	15520	50054	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:54.870059013 CET	50055	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:55.066584110 CET	15520	50055	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:55.066735029 CET	50055	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:55.067353964 CET	50055	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:55.068957090 CET	50056	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:55.069762945 CET	15520	50055	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:55.266717911 CET	15520	50055	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:55.267040968 CET	15520	50055	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:55.274147987 CET	15520	50056	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:55.274224043 CET	50056	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:55.277450085 CET	50056	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:55.479736090 CET	15520	50056	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:55.479911089 CET	50056	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:55.480400085 CET	50056	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:55.482502937 CET	50057	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:55.482592106 CET	15520	50056	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:55.685296059 CET	15520	50056	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:55.685538054 CET	15520	50056	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:55.689265013 CET	15520	50057	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:55.689363956 CET	50057	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:55.692168951 CET	50057	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:55.896500111 CET	15520	50057	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:55.896752119 CET	50057	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:55.896873951 CET	50057	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:55.898499012 CET	50058	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:55.898972034 CET	15520	50057	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:56.103569984 CET	15520	50058	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:56.103738070 CET	50058	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:56.103771925 CET	15520	50057	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:56.103812933 CET	15520	50057	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:56.111094952 CET	50058	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:56.309173107 CET	15520	50058	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:56.309369087 CET	50058	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:56.309804916 CET	50058	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:56.316092968 CET	15520	50058	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:56.318864107 CET	50059	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:56.514661074 CET	15520	50058	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:56.514772892 CET	15520	50058	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:56.523313999 CET	15520	50059	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:56.523417950 CET	50059	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:56.526070118 CET	50059	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:56.722873926 CET	50059	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:56.728147984 CET	15520	50059	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:56.728260040 CET	50059	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:56.728579998 CET	50059	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:56.730309963 CET	15520	50059	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:56.730967999 CET	50060	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:56.927431107 CET	15520	50059	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:56.932550907 CET	15520	50059	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:56.932912111 CET	15520	50059	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:56.932936907 CET	15520	50060	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:56.933101892 CET	50060	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:56.936578989 CET	50060	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:57.135385036 CET	15520	50060	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:57.135591984 CET	50060	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:57.135785103 CET	50060	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:57.137783051 CET	50061	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:57.138489962 CET	15520	50060	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:57.337737083 CET	15520	50060	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:57.337769032 CET	15520	50060	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:57.343751907 CET	15520	50061	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:57.344041109 CET	50061	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:57.347141981 CET	50061	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:57.541731119 CET	50061	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:57.550322056 CET	15520	50061	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:57.550409079 CET	50061	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:57.550618887 CET	50061	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:57.553036928 CET	15520	50061	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:57.553308010 CET	50062	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:57.747988939 CET	15520	50061	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:57.748018026 CET	15520	50061	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:57.756336927 CET	15520	50061	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:57.756447077 CET	15520	50061	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:57.757627964 CET	15520	50062	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:57.757844925 CET	50062	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:57.760942936 CET	50062	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:57.962542057 CET	15520	50062	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:57.963033915 CET	50062	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:57.963236094 CET	50062	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:57.965241909 CET	15520	50062	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:57.965615034 CET	50063	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:58.167588949 CET	15520	50062	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:58.167615891 CET	15520	50062	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:58.170342922 CET	15520	50063	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:58.170552015 CET	50063	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:58.185144901 CET	50063	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:58.375689983 CET	15520	50063	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:58.375860929 CET	50063	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:58.375950098 CET	50063	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:58.377531052 CET	50064	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:58.389873981 CET	15520	50063	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:58.580151081 CET	15520	50064	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:58.580511093 CET	50064	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:58.580926895 CET	15520	50063	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:58.580965042 CET	15520	50063	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:58.584729910 CET	50064	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:58.783548117 CET	15520	50064	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:58.783655882 CET	50064	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:58.783901930 CET	50064	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:58.785381079 CET	50065	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:58.787024021 CET	15520	50064	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:58.986082077 CET	15520	50064	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:58.986126900 CET	15520	50064	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:58.992044926 CET	15520	50065	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:58.992151022 CET	50065	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:58.995362997 CET	50065	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:59.186722994 CET	50065	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:59.200321913 CET	15520	50065	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:59.200565100 CET	50065	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:59.200854063 CET	50065	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:59.203200102 CET	15520	50065	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:59.207791090 CET	50066	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:59.391987085 CET	15520	50065	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:59.392046928 CET	15520	50065	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:59.405654907 CET	15520	50065	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:59.405678988 CET	15520	50065	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:59.409308910 CET	15520	50066	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:59.409419060 CET	50066	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:59.412636042 CET	50066	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:59.611336946 CET	15520	50066	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:59.611532927 CET	50066	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:59.611850977 CET	50066	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:59.614137888 CET	15520	50066	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:59.614608049 CET	50067	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:59.813347101 CET	15520	50066	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:59.813405991 CET	15520	50066	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:59.815052032 CET	15520	50067	3.69.115.178	192.168.2.11
Jan 31, 2024 13:47:59.815207958 CET	50067	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:47:59.817861080 CET	50067	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:00.017103910 CET	15520	50067	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:00.017205954 CET	50067	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:00.017472029 CET	50067	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:00.018266916 CET	15520	50067	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:00.019690990 CET	50068	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:00.217864990 CET	15520	50067	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:00.217909098 CET	15520	50067	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:00.226016045 CET	15520	50068	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:00.226247072 CET	50068	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:00.229815006 CET	50068	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:00.432986975 CET	15520	50068	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:00.433237076 CET	50068	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:00.433454990 CET	50068	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:00.436124086 CET	15520	50068	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:00.438540936 CET	50069	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:00.639802933 CET	15520	50068	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:00.639842033 CET	15520	50068	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:00.643295050 CET	15520	50069	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:00.643419027 CET	50069	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:00.646233082 CET	50069	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:00.848364115 CET	15520	50069	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:00.848475933 CET	50069	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:00.848680019 CET	50069	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:00.850642920 CET	50070	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:00.850894928 CET	15520	50069	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:01.052288055 CET	15520	50070	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:01.052386045 CET	50070	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:01.053117990 CET	15520	50069	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:01.053232908 CET	15520	50069	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:01.055499077 CET	50070	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:01.254146099 CET	15520	50070	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:01.254307985 CET	50070	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:01.254764080 CET	50070	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:01.256884098 CET	15520	50070	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:01.256923914 CET	50071	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:01.456084013 CET	15520	50070	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:01.456316948 CET	15520	50070	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:01.462523937 CET	15520	50071	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:01.462641001 CET	50071	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:01.467382908 CET	50071	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:01.668416977 CET	15520	50071	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:01.668493986 CET	50071	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:01.668997049 CET	50071	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:01.670542002 CET	50072	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:01.672851086 CET	15520	50071	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:01.874089003 CET	15520	50071	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:01.874404907 CET	15520	50071	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:01.877556086 CET	15520	50072	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:01.877662897 CET	50072	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:01.881942034 CET	50072	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:02.080936909 CET	50072	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:02.084933043 CET	15520	50072	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:02.085026026 CET	50072	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:02.085196972 CET	50072	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:02.087474108 CET	50073	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:02.088862896 CET	15520	50072	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:02.288084030 CET	15520	50072	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:02.288105965 CET	15520	50072	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:02.291944981 CET	15520	50072	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:02.292021036 CET	15520	50073	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:02.292041063 CET	15520	50072	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:02.292172909 CET	50073	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:02.299424887 CET	50073	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:02.497127056 CET	50073	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:02.497147083 CET	15520	50073	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:02.497224092 CET	50073	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:02.497369051 CET	50073	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:02.498788118 CET	50074	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:02.503962040 CET	15520	50073	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:02.701963902 CET	15520	50073	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:02.701984882 CET	15520	50073	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:02.701994896 CET	15520	50073	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:02.705219030 CET	15520	50074	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:02.705332041 CET	50074	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:02.715887070 CET	50074	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:02.912003994 CET	15520	50074	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:02.912213087 CET	50074	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:02.912724018 CET	50074	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:02.915479898 CET	50075	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:02.922266960 CET	15520	50074	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:03.118774891 CET	15520	50074	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:03.119000912 CET	15520	50074	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:03.122205973 CET	15520	50075	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:03.122313976 CET	50075	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:03.125336885 CET	50075	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:03.323178053 CET	50075	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:03.329529047 CET	15520	50075	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:03.329612017 CET	50075	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:03.329803944 CET	50075	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:03.331520081 CET	50076	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:03.331971884 CET	15520	50075	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:03.530143976 CET	15520	50075	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:03.533071041 CET	15520	50076	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:03.533188105 CET	50076	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:03.535904884 CET	50076	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:03.536293030 CET	15520	50075	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:03.536410093 CET	15520	50075	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:03.734991074 CET	15520	50076	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:03.735143900 CET	50076	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:03.737202883 CET	50076	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:03.737399101 CET	15520	50076	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:03.745071888 CET	50077	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:03.936923981 CET	15520	50076	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:03.938707113 CET	15520	50076	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:03.951359987 CET	15520	50077	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:03.951450109 CET	50077	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:03.955523968 CET	50077	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:04.158121109 CET	15520	50077	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:04.158282995 CET	50077	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:04.158435106 CET	50077	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:04.161127090 CET	50078	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:04.161658049 CET	15520	50077	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:04.364758015 CET	15520	50077	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:04.364787102 CET	15520	50077	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:04.368662119 CET	15520	50078	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:04.368772984 CET	50078	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:04.372174978 CET	50078	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:04.576529026 CET	15520	50078	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:04.576643944 CET	50078	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:04.576849937 CET	50078	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:04.579560995 CET	50079	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:04.579607010 CET	15520	50078	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:04.784260035 CET	15520	50078	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:04.784291029 CET	15520	50078	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:04.785137892 CET	15520	50079	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:04.785228014 CET	50079	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:04.787674904 CET	50079	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:04.991164923 CET	15520	50079	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:04.991312027 CET	50079	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:04.991483927 CET	50079	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:04.993196964 CET	15520	50079	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:04.993923903 CET	50080	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:05.197098970 CET	15520	50079	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:05.197132111 CET	15520	50079	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:05.200417995 CET	15520	50080	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:05.200540066 CET	50080	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:05.207859039 CET	50080	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:05.407370090 CET	15520	50080	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:05.407563925 CET	50080	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:05.408616066 CET	50080	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:05.410586119 CET	50081	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:05.414370060 CET	15520	50080	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:05.614130020 CET	15520	50080	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:05.614963055 CET	15520	50080	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:05.617221117 CET	15520	50081	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:05.617296934 CET	50081	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:05.621115923 CET	50081	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:05.824168921 CET	15520	50081	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:05.824285984 CET	50081	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:05.824573994 CET	50081	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:05.827752113 CET	15520	50081	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:05.828967094 CET	50082	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:06.028654099 CET	15520	50082	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:06.028911114 CET	50082	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:06.030968904 CET	15520	50081	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:06.031156063 CET	15520	50081	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:06.034924030 CET	50082	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:06.228688002 CET	15520	50082	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:06.228780031 CET	50082	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:06.228980064 CET	50082	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:06.230997086 CET	50083	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:06.234389067 CET	15520	50082	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:06.428493977 CET	15520	50082	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:06.428528070 CET	15520	50082	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:06.435852051 CET	15520	50083	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:06.436007023 CET	50083	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:06.438903093 CET	50083	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:06.641067982 CET	15520	50083	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:06.641191006 CET	50083	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:06.641514063 CET	50083	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:06.643563986 CET	50084	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:06.643634081 CET	15520	50083	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:06.847321987 CET	15520	50083	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:06.847548008 CET	15520	50083	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:06.851843119 CET	15520	50084	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:06.851933002 CET	50084	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:06.855098009 CET	50084	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:07.049985886 CET	50084	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:07.059837103 CET	15520	50084	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:07.059938908 CET	50084	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:07.060118914 CET	50084	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:07.062225103 CET	50085	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:07.062690020 CET	15520	50084	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:07.257940054 CET	15520	50084	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:07.257960081 CET	15520	50084	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:07.260921955 CET	15520	50085	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:07.261034012 CET	50085	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:07.265700102 CET	50085	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:07.267555952 CET	15520	50084	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:07.267649889 CET	15520	50084	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:07.459943056 CET	15520	50085	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:07.460015059 CET	50085	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:07.460470915 CET	50085	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:07.462975979 CET	50086	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:07.464381933 CET	15520	50085	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:07.658864021 CET	15520	50085	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:07.659060001 CET	15520	50085	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:07.668752909 CET	15520	50086	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:07.668849945 CET	50086	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:07.671665907 CET	50086	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:07.875003099 CET	15520	50086	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:07.875190020 CET	50086	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:07.875361919 CET	50086	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:07.877427101 CET	15520	50086	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:07.877718925 CET	50087	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:08.077409029 CET	15520	50087	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:08.077578068 CET	50087	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:08.080987930 CET	50087	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:08.081039906 CET	15520	50086	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:08.081064939 CET	15520	50086	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:08.277570009 CET	15520	50087	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:08.277789116 CET	50087	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:08.278270006 CET	50087	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:08.280600071 CET	50088	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:08.280678034 CET	15520	50087	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:08.477610111 CET	15520	50087	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:08.477858067 CET	15520	50087	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:08.487647057 CET	15520	50088	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:08.487724066 CET	50088	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:08.490520954 CET	50088	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:08.694833040 CET	15520	50088	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:08.695014000 CET	50088	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:08.695298910 CET	50088	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:08.697295904 CET	15520	50088	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:08.702713966 CET	50089	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:08.901942015 CET	15520	50088	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:08.902076960 CET	15520	50088	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:08.902841091 CET	15520	50089	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:08.902946949 CET	50089	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:08.906116009 CET	50089	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:09.103456020 CET	15520	50089	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:09.103544950 CET	50089	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:09.103769064 CET	50089	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:09.105262041 CET	50090	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:09.106230021 CET	15520	50089	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:09.303878069 CET	15520	50089	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:09.303910971 CET	15520	50089	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:09.311264038 CET	15520	50090	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:09.311471939 CET	50090	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:09.314821959 CET	50090	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:09.503563881 CET	50090	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:09.519913912 CET	15520	50090	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:09.520102978 CET	50090	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:09.520704031 CET	15520	50090	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:09.522226095 CET	50090	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:09.525721073 CET	50091	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:09.709688902 CET	15520	50090	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:09.725758076 CET	15520	50091	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:09.725999117 CET	50091	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:09.726149082 CET	15520	50090	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:09.728118896 CET	15520	50090	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:09.729732037 CET	50091	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:09.926172018 CET	15520	50091	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:09.926337004 CET	50091	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:09.926601887 CET	50091	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:09.928077936 CET	50092	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:09.929624081 CET	15520	50091	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:10.126494884 CET	15520	50091	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:10.126526117 CET	15520	50091	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:10.133363008 CET	15520	50092	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:10.133606911 CET	50092	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:10.136213064 CET	50092	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:10.339240074 CET	15520	50092	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:10.339355946 CET	50092	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:10.339893103 CET	50092	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:10.341388941 CET	15520	50092	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:10.341420889 CET	50093	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:10.544728041 CET	15520	50092	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:10.545048952 CET	15520	50092	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:10.545504093 CET	15520	50093	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:10.545588017 CET	50093	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:10.567222118 CET	50093	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:10.750021935 CET	15520	50093	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:10.750102043 CET	50093	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:10.750309944 CET	50093	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:10.752480030 CET	50094	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:10.771919966 CET	15520	50093	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:10.954335928 CET	15520	50093	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:10.954368114 CET	15520	50093	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:10.956496000 CET	15520	50094	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:10.956681013 CET	50094	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:10.959647894 CET	50094	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:11.161026001 CET	15520	50094	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:11.161297083 CET	50094	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:11.161691904 CET	50094	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:11.163732052 CET	15520	50094	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:11.164383888 CET	50095	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:11.365497112 CET	15520	50094	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:11.365619898 CET	15520	50094	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:11.371378899 CET	15520	50095	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:11.371455908 CET	50095	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:11.377729893 CET	50095	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:11.578738928 CET	15520	50095	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:11.578864098 CET	50095	15520	192.168.2.11	3.69.115.178
Jan 31, 2024 13:48:11.584635019 CET	15520	50095	3.69.115.178	192.168.2.11
Jan 31, 2024 13:48:11.785840988 CET	15520	50095	3.69.115.178	192.168.2.11

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 31, 2024 13:44:16.505882978 CET	51594	53	192.168.2.11	1.1.1.1
Jan 31, 2024 13:44:16.625925064 CET	53	51594	1.1.1.1	192.168.2.11
Jan 31, 2024 13:45:16.997170925 CET	64275	53	192.168.2.11	1.1.1.1
Jan 31, 2024 13:45:17.120119095 CET	53	64275	1.1.1.1	192.168.2.11
Jan 31, 2024 13:46:16.715934992 CET	57337	53	192.168.2.11	1.1.1.1
Jan 31, 2024 13:46:16.835041046 CET	53	57337	1.1.1.1	192.168.2.11
Jan 31, 2024 13:47:16.777192116 CET	53989	53	192.168.2.11	1.1.1.1
Jan 31, 2024 13:47:16.897372007 CET	53	53989	1.1.1.1	192.168.2.11

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 31, 2024 13:44:16.505882978 CET	192.168.2.11	1.1.1.1	0xf7e8	Standard query (0)	6.tcp.eu.ngrok.io	A (IP address)	IN (0x0001)	false
Jan 31, 2024 13:45:16.997170925 CET	192.168.2.11	1.1.1.1	0x9cb2	Standard query (0)	6.tcp.eu.ngrok.io	A (IP address)	IN (0x0001)	false
Jan 31, 2024 13:46:16.715934992 CET	192.168.2.11	1.1.1.1	0x7f42	Standard query (0)	6.tcp.eu.ngrok.io	A (IP address)	IN (0x0001)	false
Jan 31, 2024 13:47:16.777192116 CET	192.168.2.11	1.1.1.1	0xb2ef	Standard query (0)	6.tcp.eu.ngrok.io	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Jan 31, 2024 13:44:16.625925064 CET	1.1.1.1	192.168.2.11	0xf7e8	No error (0)	6.tcp.eu.ngrok.io	3.69.157.220	A (IP address)	IN (0x0001)	false
Jan 31, 2024 13:45:17.120119095 CET	1.1.1.1	192.168.2.11	0x9cb2	No error (0)	6.tcp.eu.ngrok.io	3.69.115.178	A (IP address)	IN (0x0001)	false
Jan 31, 2024 13:46:16.835041046 CET	1.1.1.1	192.168.2.11	0x7f42	No error (0)	6.tcp.eu.ngrok.io	3.66.38.117	A (IP address)	IN (0x0001)	false
Jan 31, 2024 13:47:16.897372007 CET	1.1.1.1	192.168.2.11	0xb2ef	No error (0)	6.tcp.eu.ngrok.io	3.69.115.178	A (IP address)	IN (0x0001)	false

Target ID:	1
Start time:	13:44:06
Start date:	31/01/2024
Path:	C:\Users\user\Desktop\ziTLBa3N50.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\Desktop\ziTLBa3N50.exe
Imagebase:	0x7ff68cce0000
File size:	36'864 bytes
MD5 hash:	A3826B6C05674CE99890E7919C6DAEB2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Njrat, Description: Yara detected Njrat, Source: 00000001.00000000.1248679370.0000000000172000.00000002.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: Windows_Trojan_Njrat_30f3c220, Description: unknown, Source: 00000001.00000000.1248679370.0000000000172000.00000002.00000001.01000000.00000003.sdmp, Author: unknown Rule: njrat1, Description: Identify njRat, Source: 00000001.00000000.1248679370.0000000000172000.00000002.00000001.01000000.00000003.sdmp, Author: Brian Wallace @botnet_hunter
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	13:44:13
Start date:	31/01/2024
Path:	C:\Windows\SysWOW64\netsh.exe
Wow64 process (32bit):	true
Commandline:	netsh firewall add allowedprogram "C:\Users\user\Desktop\ziTLBa3N50.exe" "ziTLBa3N50.exe" ENABLE
Imagebase:	0x10d0000
File size:	82'432 bytes
MD5 hash:	4E89A1A088BE715D6C946E55AB07C7DF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	13:44:13
Start date:	31/01/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff68cce0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	16.1%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	2.4%
Total number of Nodes:	123
Total number of Limit Nodes:	5

Executed Functions

Function 04B3246F Relevance: 1.6, APIs: 1, Instructions: 75COMMON

Download Yara Rule

APIs

AdjustTokenPrivileges.KERNELBASE(?,?,?,?,?,?), ref: 04B324EF

Memory Dump Source

Source File: 00000001.00000002.3691646480.0000000004B30000.00000040.00000800.00020000.00000000.sdmp, Offset: 04B30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_4b30000_ziTLBa3N50.jbxd

Similarity

API ID: AdjustPrivilegesToken
String ID:
API String ID: 2874748243-0
Opcode ID: 1e8f97f8d63d1aaa9dc81d86487b69eba0bb8e41e1a562f9fffea66d947cc3fc
Instruction ID: 97ce7ef059e630f1c9d80cc3bfbb488666dee449dde12fba9a30c2679f4220f7
Opcode Fuzzy Hash: 1e8f97f8d63d1aaa9dc81d86487b69eba0bb8e41e1a562f9fffea66d947cc3fc
Instruction Fuzzy Hash: C521BC75509380AFDB228F25DC50B92BFB4EF06310F0985DAE9848B1A3D270E918DB62

Uniqueness

Uniqueness Score: -1.00%

Function 04B324A6 Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

AdjustTokenPrivileges.KERNELBASE(?,?,?,?,?,?), ref: 04B324EF

Memory Dump Source

Source File: 00000001.00000002.3691646480.0000000004B30000.00000040.00000800.00020000.00000000.sdmp, Offset: 04B30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_4b30000_ziTLBa3N50.jbxd

Similarity

API ID: AdjustPrivilegesToken
String ID:
API String ID: 2874748243-0
Opcode ID: af56dfc2cbd6d13d7626933ed0c544710b08ec93cd5df0cb749f40b4a63afa98
Instruction ID: 10a45a0f65a0c00beaf9cdf0db9abf623ce7af5480b6bf7d93070e0a16aa5a4a
Opcode Fuzzy Hash: af56dfc2cbd6d13d7626933ed0c544710b08ec93cd5df0cb749f40b4a63afa98
Instruction Fuzzy Hash: D811AC356002009FEB21CF5AD984B66FBE4EF04221F08C8AAEE458B662D375E518DF61

Uniqueness

Uniqueness Score: -1.00%

Function 04930F90 Relevance: 1.6, APIs: 1, Instructions: 115
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

KiUserExceptionDispatcher.NTDLL ref: 04930FB7

Memory Dump Source

Source File: 00000001.00000002.3691389844.0000000004930000.00000040.00000800.00020000.00000000.sdmp, Offset: 04930000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_4930000_ziTLBa3N50.jbxd

Similarity

API ID: DispatcherExceptionUser
String ID:
API String ID: 6842923-0
Opcode ID: 065c638a579beacfc874e0944215b3e5379c33ef7fc6c5bd1daa8463d49bef15
Instruction ID: 27143946aa190d7988da784011b98b35d8fc530e17c3dd00ce2b6f35264c3dfc
Opcode Fuzzy Hash: 065c638a579beacfc874e0944215b3e5379c33ef7fc6c5bd1daa8463d49bef15
Instruction Fuzzy Hash: 9241BE317002118FCB14EF78D8856AEB7E6AF84245B548479D809DB3AAEF39DD45CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 04930F7F Relevance: 1.6, APIs: 1, Instructions: 109
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

KiUserExceptionDispatcher.NTDLL ref: 04930FB7

Memory Dump Source

Source File: 00000001.00000002.3691389844.0000000004930000.00000040.00000800.00020000.00000000.sdmp, Offset: 04930000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_4930000_ziTLBa3N50.jbxd

Similarity

API ID: DispatcherExceptionUser
String ID:
API String ID: 6842923-0
Opcode ID: fd826bc4861172e30b2b0716db1d179d8202074876552967c2c93968c7446a1b
Instruction ID: 052d08df350c6de4b21bbcbaae55fcef062a11fcd174ccdf855bd91703515012
Opcode Fuzzy Hash: fd826bc4861172e30b2b0716db1d179d8202074876552967c2c93968c7446a1b
Instruction Fuzzy Hash: 8741A2317002118FCB14DF38C8856AE77E6AB84345B588479D809DB3AAEF39DD45CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 0075B7C6 Relevance: 1.6, APIs: 1, Instructions: 103
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?), ref: 0075B885

Memory Dump Source

Source File: 00000001.00000002.3689300199.000000000075A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0075A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_75a000_ziTLBa3N50.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: b7af933f792461a18dc6e31bea9fa7c30b9dd30311dbf07844b28fe443d29427
Instruction ID: b80daad5532d1a55b769f2e12996c47ed364fed75ce56758bb615d85d3849eed
Opcode Fuzzy Hash: b7af933f792461a18dc6e31bea9fa7c30b9dd30311dbf07844b28fe443d29427
Instruction Fuzzy Hash: 5D31B5715053806FE722CF65DC45BA2BFF8EF06314F08489AE9848B652D375E809D771

Uniqueness

Uniqueness Score: -1.00%

Function 04B31F7A Relevance: 1.6, APIs: 1, Instructions: 99
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegCreateKeyExW.KERNELBASE(?,00000E24), ref: 04B32041

Memory Dump Source

Source File: 00000001.00000002.3691646480.0000000004B30000.00000040.00000800.00020000.00000000.sdmp, Offset: 04B30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_4b30000_ziTLBa3N50.jbxd

Similarity

API ID: Create
String ID:
API String ID: 2289755597-0
Opcode ID: c959d6d044f3b2b50f6478c95810ca13c4a38fb9156b98042898247e05d75085
Instruction ID: b44250d76f9635eccb1ba0222ba9ada7a61da7a1f541c00a95561fca8ef885a2
Opcode Fuzzy Hash: c959d6d044f3b2b50f6478c95810ca13c4a38fb9156b98042898247e05d75085
Instruction Fuzzy Hash: 96315E72504744AFE7228F65CC44FA7BBFCEF15310F08899AE9458B662D325E908CB61

Uniqueness

Uniqueness Score: -1.00%

Function 0075BD33 Relevance: 1.6, APIs: 1, Instructions: 98
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegQueryValueExW.KERNELBASE(?,00000E24,?,?), ref: 0075BDFA

Memory Dump Source

Source File: 00000001.00000002.3689300199.000000000075A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0075A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_75a000_ziTLBa3N50.jbxd

Similarity

API ID: QueryValue
String ID:
API String ID: 3660427363-0
Opcode ID: c1ef85a025aa68af2e7879d0ab77e38a41a31974082e71e18247d35cdf10360d
Instruction ID: 7bdcfe1e9ca4497ed1be6c283d198b58e7a295bb64860c987f4f8342d56706f1
Opcode Fuzzy Hash: c1ef85a025aa68af2e7879d0ab77e38a41a31974082e71e18247d35cdf10360d
Instruction Fuzzy Hash: CB319C6510E7C06FD3138B258C61A61BFB4EF47610F0E85DBD8C48F6A3D269A909C7B2

Uniqueness

Uniqueness Score: -1.00%

Function 04B30B98 Relevance: 1.6, APIs: 1, Instructions: 93
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

getaddrinfo.WS2_32(?,00000E24), ref: 04B30C5F

Memory Dump Source

Source File: 00000001.00000002.3691646480.0000000004B30000.00000040.00000800.00020000.00000000.sdmp, Offset: 04B30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_4b30000_ziTLBa3N50.jbxd

Similarity

API ID: getaddrinfo
String ID:
API String ID: 300660673-0
Opcode ID: 6d7ca9817edaaf49810256b0cf78803d7adcb3d248de432bb5c1406f5d0920b5
Instruction ID: c83f082b6bacf1d16999e3a270e35555a80003353cca29f41aa82fbb55fdd8f1
Opcode Fuzzy Hash: 6d7ca9817edaaf49810256b0cf78803d7adcb3d248de432bb5c1406f5d0920b5
Instruction Fuzzy Hash: EF31BFB2104340AFEB21CB61DC85FA6FBACEF05714F04489AFA489B681D375E908CB71

Uniqueness

Uniqueness Score: -1.00%

Function 0075AA52 Relevance: 1.6, APIs: 1, Instructions: 91
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyExW.KERNELBASE(?,00000E24), ref: 0075AB05

Memory Dump Source

Source File: 00000001.00000002.3689300199.000000000075A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0075A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_75a000_ziTLBa3N50.jbxd

Similarity

API ID: Open
String ID:
API String ID: 71445658-0
Opcode ID: 3ec29630b0912ae76cda89c0c739692396ac7ed99839e1b6533b3c49182976f9
Instruction ID: a16b66129b4b88f6ef0a3c543f885cb791e2c6ffb43254538a35ba3759b7a2bd
Opcode Fuzzy Hash: 3ec29630b0912ae76cda89c0c739692396ac7ed99839e1b6533b3c49182976f9
Instruction Fuzzy Hash: D03195725083846FE7228B65CC44FA7BFBCEF16314F08859AE9848B552D265E90CC772

Uniqueness

Uniqueness Score: -1.00%

Function 0075A612 Relevance: 1.6, APIs: 1, Instructions: 89
synchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateMutexW.KERNELBASE(?,?), ref: 0075A6B9

Memory Dump Source

Source File: 00000001.00000002.3689300199.000000000075A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0075A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_75a000_ziTLBa3N50.jbxd

Similarity

API ID: CreateMutex
String ID:
API String ID: 1964310414-0
Opcode ID: 6320cc53b4187204577aed63c5be872205c1bbfb5f42f1933b29da1f0f91a912
Instruction ID: a43393294a5b4424105807ef107b056154bf1c3a19f375138d354bf42822e3aa
Opcode Fuzzy Hash: 6320cc53b4187204577aed63c5be872205c1bbfb5f42f1933b29da1f0f91a912
Instruction Fuzzy Hash: 823197755093806FE711CB65DC45B96FFF8EF06314F0888AAE944CB292D375E909C762

Uniqueness

Uniqueness Score: -1.00%

Function 04B3038C Relevance: 1.6, APIs: 1, Instructions: 89
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ConvertStringSecurityDescriptorToSecurityDescriptorW.ADVAPI32(?,00000E24), ref: 04B30423

Memory Dump Source

Source File: 00000001.00000002.3691646480.0000000004B30000.00000040.00000800.00020000.00000000.sdmp, Offset: 04B30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_4b30000_ziTLBa3N50.jbxd

Similarity

API ID: DescriptorSecurity$ConvertString
String ID:
API String ID: 3907675253-0
Opcode ID: a1ce78b27ee26bfb7096fe857104c895638732905f3b41adfde0a9b83eb33a84
Instruction ID: 165fd45dc51d210284263434d20c127133a1ae7c5c4d23cd2badbdb7e54cd670
Opcode Fuzzy Hash: a1ce78b27ee26bfb7096fe857104c895638732905f3b41adfde0a9b83eb33a84
Instruction Fuzzy Hash: 5E318171504344AFEB21CF65DC45FA7BFB8EF05210F0888AAE944DB652D364E918CB61

Uniqueness

Uniqueness Score: -1.00%

Function 04B30A90 Relevance: 1.6, APIs: 1, Instructions: 88
timeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetProcessTimes.KERNELBASE(?,00000E24,1BD0493D,00000000,00000000,00000000,00000000), ref: 04B30B2D

Memory Dump Source

Source File: 00000001.00000002.3691646480.0000000004B30000.00000040.00000800.00020000.00000000.sdmp, Offset: 04B30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_4b30000_ziTLBa3N50.jbxd

Similarity

API ID: ProcessTimes
String ID:
API String ID: 1995159646-0
Opcode ID: 9f740f00df49c4feb7774550eda5addfc747467ad1d03768d6d76c633cd0995a
Instruction ID: 661935272cf9a6a486b2e8f3966dc7cda2b57af69c51efd8bf68b6e7e890e841
Opcode Fuzzy Hash: 9f740f00df49c4feb7774550eda5addfc747467ad1d03768d6d76c633cd0995a
Instruction Fuzzy Hash: 9031F5725057806FDB22CF65DD55F96BFB8EF06314F0888EAE8848B193D234A909CB71

Uniqueness

Uniqueness Score: -1.00%

Function 04B31FA6 Relevance: 1.6, APIs: 1, Instructions: 86
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegCreateKeyExW.KERNELBASE(?,00000E24), ref: 04B32041

Memory Dump Source

Source File: 00000001.00000002.3691646480.0000000004B30000.00000040.00000800.00020000.00000000.sdmp, Offset: 04B30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_4b30000_ziTLBa3N50.jbxd

Similarity

API ID: Create
String ID:
API String ID: 2289755597-0
Opcode ID: 2c05f3717dc641b27ad1e8892698015947e80c776144c1207c6ad57980e3a3a3
Instruction ID: 212df6a42a1bffa8477a618a7884d191657a62746adf3a10476411f16946706d
Opcode Fuzzy Hash: 2c05f3717dc641b27ad1e8892698015947e80c776144c1207c6ad57980e3a3a3
Instruction Fuzzy Hash: 6D218D76600204AEEB318F65CD40FA7BBECEF08314F0489AAE945C6651D724F508CA61

Uniqueness

Uniqueness Score: -1.00%

Function 0075A361 Relevance: 1.6, APIs: 1, Instructions: 85
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegQueryValueExW.KERNELBASE(?,00000E24,1BD0493D,00000000,00000000,00000000,00000000), ref: 0075A40C

Memory Dump Source

Source File: 00000001.00000002.3689300199.000000000075A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0075A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_75a000_ziTLBa3N50.jbxd

Similarity

API ID: QueryValue
String ID:
API String ID: 3660427363-0
Opcode ID: 306775811ee3231ba679d8a2ca28b47915d8ecf1c2647e09f7ae10de58f1d434
Instruction ID: a71c4f2eed618ac9b0c8bae62722f1e5273f83461bd97ceb89d120c765ebe56f
Opcode Fuzzy Hash: 306775811ee3231ba679d8a2ca28b47915d8ecf1c2647e09f7ae10de58f1d434
Instruction Fuzzy Hash: B5318175504780AFD721CF15CC84F92BBF8EF06314F0885AAE945CB292D364E909CB72

Uniqueness

Uniqueness Score: -1.00%

Function 04B30BBA Relevance: 1.6, APIs: 1, Instructions: 84
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

getaddrinfo.WS2_32(?,00000E24), ref: 04B30C5F

Memory Dump Source

Source File: 00000001.00000002.3691646480.0000000004B30000.00000040.00000800.00020000.00000000.sdmp, Offset: 04B30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_4b30000_ziTLBa3N50.jbxd

Similarity

API ID: getaddrinfo
String ID:
API String ID: 300660673-0
Opcode ID: 23870ccf96d33a48056aac759dc76a561decc2bc0d996c5dcd5f2c5b2f0be63f
Instruction ID: 09e20ef4a2b82e5ea5cbfec51d88f36d07bb507d5959b602cc5c1ee951bfb640
Opcode Fuzzy Hash: 23870ccf96d33a48056aac759dc76a561decc2bc0d996c5dcd5f2c5b2f0be63f
Instruction Fuzzy Hash: CC21B1B1100200AEEB31DF61CC85FA6F7ACEF04714F0448AAFA489A681D7B5E518CB71

Uniqueness

Uniqueness Score: -1.00%

Function 04B30F0C Relevance: 1.6, APIs: 1, Instructions: 81COMMON

Download Yara Rule

APIs

GetVolumeInformationA.KERNELBASE(?,00000E24,?,?), ref: 04B30FB2

Memory Dump Source

Source File: 00000001.00000002.3691646480.0000000004B30000.00000040.00000800.00020000.00000000.sdmp, Offset: 04B30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_4b30000_ziTLBa3N50.jbxd

Similarity

API ID: InformationVolume
String ID:
API String ID: 2039140958-0
Opcode ID: 56111f6a1fc66e11e6c2c3b44cb9efff85c300825de33ef5bf7e9f6804e9ee14
Instruction ID: 84ffb5dcd867b24b8a285dcace77d9fca799d549f3ed6d869643cd9249852f3e
Opcode Fuzzy Hash: 56111f6a1fc66e11e6c2c3b44cb9efff85c300825de33ef5bf7e9f6804e9ee14
Instruction Fuzzy Hash: 31318F7150E3C16FD3138B258C55B62BFB8EF47610F0985DBE884CF693D225A958C7A2

Uniqueness

Uniqueness Score: -1.00%

Function 04B32219 Relevance: 1.6, APIs: 1, Instructions: 80COMMON

Download Yara Rule

APIs

select.WS2_32(?,?,?,?,?), ref: 04B322A8

Memory Dump Source

Source File: 00000001.00000002.3691646480.0000000004B30000.00000040.00000800.00020000.00000000.sdmp, Offset: 04B30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_4b30000_ziTLBa3N50.jbxd

Similarity

API ID: select
String ID:
API String ID: 1274211008-0
Opcode ID: c55c852d1b20edaab6870d6a3a1489571209116bebe98a52935ba3a235810222
Instruction ID: e1cfba58d29f216f774a570f7d494430807b36c1b080e2055fe2182f10c1b050
Opcode Fuzzy Hash: c55c852d1b20edaab6870d6a3a1489571209116bebe98a52935ba3a235810222
Instruction Fuzzy Hash: E3216B755093849FDB22CF25DC44A92BFF8EF06214F0988DAE984CB262D274E958DB61

Uniqueness

Uniqueness Score: -1.00%

Function 0075B8DC Relevance: 1.6, APIs: 1, Instructions: 79COMMON

Download Yara Rule

APIs

GetFileType.KERNELBASE(?,00000E24,1BD0493D,00000000,00000000,00000000,00000000), ref: 0075B971

Memory Dump Source

Source File: 00000001.00000002.3689300199.000000000075A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0075A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_75a000_ziTLBa3N50.jbxd

Similarity

API ID: FileType
String ID:
API String ID: 3081899298-0
Opcode ID: 0b38e8ca10f25810488c4978fe42cbf73e6511d6899abaaea6ef8f0413ea28ba
Instruction ID: e1c8c845bbfd8ad54abb8801402defe66e0f90aa98734055479ed58555fed810
Opcode Fuzzy Hash: 0b38e8ca10f25810488c4978fe42cbf73e6511d6899abaaea6ef8f0413ea28ba
Instruction Fuzzy Hash: 3521F8B55057806FE7128B15DC41BA2BFBCEF07324F0985D6E9808B293D364AD09C775

Uniqueness

Uniqueness Score: -1.00%

Function 04B325F1 Relevance: 1.6, APIs: 1, Instructions: 79COMMON

Download Yara Rule

APIs

GetExitCodeProcess.KERNELBASE(?,00000E24,1BD0493D,00000000,00000000,00000000,00000000), ref: 04B32678

Memory Dump Source

Source File: 00000001.00000002.3691646480.0000000004B30000.00000040.00000800.00020000.00000000.sdmp, Offset: 04B30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_4b30000_ziTLBa3N50.jbxd

Similarity

API ID: CodeExitProcess
String ID:
API String ID: 3861947596-0
Opcode ID: d5905715cb165e83ebbae1752e2c53727262cb4e6b7127428fc6376e77304148
Instruction ID: 485620dae9c99e5b519ecf3b2d9bea6ef946104c868d3fb63ca4f41e6da6b069
Opcode Fuzzy Hash: d5905715cb165e83ebbae1752e2c53727262cb4e6b7127428fc6376e77304148
Instruction Fuzzy Hash: B821A4715093806FEB12CB55DC55F96BFB8EF02314F0884EAE944CF292D274A908C771

Uniqueness

Uniqueness Score: -1.00%

Function 0075A462 Relevance: 1.6, APIs: 1, Instructions: 77registryCOMMON

Download Yara Rule

APIs

RegSetValueExW.KERNELBASE(?,00000E24,1BD0493D,00000000,00000000,00000000,00000000), ref: 0075A4F8

Memory Dump Source

Source File: 00000001.00000002.3689300199.000000000075A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0075A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_75a000_ziTLBa3N50.jbxd

Similarity

API ID: Value
String ID:
API String ID: 3702945584-0
Opcode ID: b15880504fe85270544ef42d66430489a3218f096aec944c35d0a4666ca47709
Instruction ID: 435fdc992a1b6a4c822866f7c1932e83176127f52741859fd23bcdbaa83f68a0
Opcode Fuzzy Hash: b15880504fe85270544ef42d66430489a3218f096aec944c35d0a4666ca47709
Instruction Fuzzy Hash: 8A21A4725043806FDB22CF55DD45FA7BFB8DF46310F0885AAE945CB652D2A4E908C772

Uniqueness

Uniqueness Score: -1.00%

Function 0075BE26 Relevance: 1.6, APIs: 1, Instructions: 77networkCOMMON

Download Yara Rule

APIs

WSASocketW.WS2_32(?,?,?,?,?), ref: 0075BEB2

Memory Dump Source

Source File: 00000001.00000002.3689300199.000000000075A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0075A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_75a000_ziTLBa3N50.jbxd

Similarity

API ID: Socket
String ID:
API String ID: 38366605-0
Opcode ID: 65c3266b6c2db8b69aae54b784f3b0ee1826d2eaac91014d0126208f87d91622
Instruction ID: 6138329897855e62d155788cf51f7cd02fa7eb56a9c48933fafc9d143b787b97
Opcode Fuzzy Hash: 65c3266b6c2db8b69aae54b784f3b0ee1826d2eaac91014d0126208f87d91622
Instruction Fuzzy Hash: 28219171505780AFD722CF55DC45F96FFB8EF05310F08889EE9858B652C375A818CB62

Uniqueness

Uniqueness Score: -1.00%

Function 04B30542 Relevance: 1.6, APIs: 1, Instructions: 77fileCOMMON

Download Yara Rule

APIs

MapViewOfFile.KERNELBASE ref: 04B305D6

Memory Dump Source

Source File: 00000001.00000002.3691646480.0000000004B30000.00000040.00000800.00020000.00000000.sdmp, Offset: 04B30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_4b30000_ziTLBa3N50.jbxd

Similarity

API ID: FileView
String ID:
API String ID: 3314676101-0
Opcode ID: ae09306fd0a0b2a1fb865241776daf0b1f519600cc048a3d71c83f19d1071452
Instruction ID: 6fb5045dace827b58df0b1a5d49cb8c6ab35a5ca2101d2e0af2f2c0c778f4a2a
Opcode Fuzzy Hash: ae09306fd0a0b2a1fb865241776daf0b1f519600cc048a3d71c83f19d1071452
Instruction Fuzzy Hash: D4219E71504384AFE722CF55DC45F96FBF8EF09224F04889AE9858B652D375A508CB62

Uniqueness

Uniqueness Score: -1.00%

Function 0075B806 Relevance: 1.6, APIs: 1, Instructions: 76fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?), ref: 0075B885

Memory Dump Source

Source File: 00000001.00000002.3689300199.000000000075A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0075A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_75a000_ziTLBa3N50.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 4566e76db211e19334063b013abf20e24646f5e1118bfaa1ec26bea3cfddc931
Instruction ID: 5106ee8b3f74b2fc5a7705839529670d299a6e44685b510948556ead607a80c8
Opcode Fuzzy Hash: 4566e76db211e19334063b013abf20e24646f5e1118bfaa1ec26bea3cfddc931
Instruction Fuzzy Hash: BF217171500240AFEB21CF65DD45BA6FBE8EF04325F04886AED458B651D7B5F418CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 04B303B2 Relevance: 1.6, APIs: 1, Instructions: 76COMMON

Download Yara Rule

APIs

ConvertStringSecurityDescriptorToSecurityDescriptorW.ADVAPI32(?,00000E24), ref: 04B30423

Memory Dump Source

Source File: 00000001.00000002.3691646480.0000000004B30000.00000040.00000800.00020000.00000000.sdmp, Offset: 04B30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_4b30000_ziTLBa3N50.jbxd

Similarity

API ID: DescriptorSecurity$ConvertString
String ID:
API String ID: 3907675253-0
Opcode ID: 4762cbc16c4662bf334dab7d5ffddccc859b3caee6d274146f4671a42098e115
Instruction ID: 92be2e297ec4fc82348078017123dec6112e25d94228d1af6f27f38e0f59b5a8
Opcode Fuzzy Hash: 4762cbc16c4662bf334dab7d5ffddccc859b3caee6d274146f4671a42098e115
Instruction Fuzzy Hash: A321C2B5600204AFEB21DF69DC45FAABBA8EF04614F0488AAE944CB642D774E5188A71

Uniqueness

Uniqueness Score: -1.00%

Function 04B322E8 Relevance: 1.6, APIs: 1, Instructions: 76COMMON

Download Yara Rule

APIs

LookupPrivilegeValueW.ADVAPI32(?,?,?), ref: 04B3236E

Memory Dump Source

Source File: 00000001.00000002.3691646480.0000000004B30000.00000040.00000800.00020000.00000000.sdmp, Offset: 04B30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_4b30000_ziTLBa3N50.jbxd

Similarity

API ID: LookupPrivilegeValue
String ID:
API String ID: 3899507212-0
Opcode ID: 72ba693a956bcb50d04bd9a254f8eb4873c839b5f9d0c555bdea2abb8364c60e
Instruction ID: 59f938eb04c10178af14eb2b65b74c2f0ab7165f24d0969d87efc5ead12bdb1d
Opcode Fuzzy Hash: 72ba693a956bcb50d04bd9a254f8eb4873c839b5f9d0c555bdea2abb8364c60e
Instruction Fuzzy Hash: B621A4B25093805FD712CF25DC51B52BFA8EF56215F0D84EEE948CB253D225E809CB72

Uniqueness

Uniqueness Score: -1.00%

Function 04B302A6 Relevance: 1.6, APIs: 1, Instructions: 75registryCOMMON

Download Yara Rule

APIs

RegQueryValueExW.KERNELBASE(?,00000E24,1BD0493D,00000000,00000000,00000000,00000000), ref: 04B30338

Memory Dump Source

Source File: 00000001.00000002.3691646480.0000000004B30000.00000040.00000800.00020000.00000000.sdmp, Offset: 04B30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_4b30000_ziTLBa3N50.jbxd

Similarity

API ID: QueryValue
String ID:
API String ID: 3660427363-0
Opcode ID: 9595cb1466fae9e30f68607122f35129cadcb419d12cd5b1605d0d79494420c2
Instruction ID: 64a6798f7ada0a720643a57bcf4d5677d3a1b1196082bc7c88c5f714340a8c69
Opcode Fuzzy Hash: 9595cb1466fae9e30f68607122f35129cadcb419d12cd5b1605d0d79494420c2
Instruction Fuzzy Hash: 63219D72505784AFD721CF15CD84F97BBF8EF09610F08849AE945CB652D264E948CB71

Uniqueness

Uniqueness Score: -1.00%

Function 0075AA86 Relevance: 1.6, APIs: 1, Instructions: 74registryCOMMON

Download Yara Rule

APIs

RegOpenKeyExW.KERNELBASE(?,00000E24), ref: 0075AB05

Memory Dump Source

Source File: 00000001.00000002.3689300199.000000000075A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0075A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_75a000_ziTLBa3N50.jbxd

Similarity

API ID: Open
String ID:
API String ID: 71445658-0
Opcode ID: 290a4e5f3052ddc71122cc095429de7812876dfb70830f8ce5e9aa24776f02ad
Instruction ID: 6822fca6dd8b4507cc3e2f1e731dc37d1aba00aa795136fac9c9b2cb5bbefd88
Opcode Fuzzy Hash: 290a4e5f3052ddc71122cc095429de7812876dfb70830f8ce5e9aa24776f02ad
Instruction Fuzzy Hash: D221C2B2500204AEE7319F55CD45FABFBACEF14314F04896AED048A651D778E90C8AB2

Uniqueness

Uniqueness Score: -1.00%

Function 04B327BF Relevance: 1.6, APIs: 1, Instructions: 73COMMON

Download Yara Rule

APIs

SetProcessWorkingSetSize.KERNEL32(?,00000E24,1BD0493D,00000000,00000000,00000000,00000000), ref: 04B3283B

Memory Dump Source

Source File: 00000001.00000002.3691646480.0000000004B30000.00000040.00000800.00020000.00000000.sdmp, Offset: 04B30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_4b30000_ziTLBa3N50.jbxd

Similarity

API ID: ProcessSizeWorking
String ID:
API String ID: 3584180929-0
Opcode ID: bf4d21864f8a4a9279b9e2ffdf4bdb2400a3498280683ba4fbf9aeafa7786a6e
Instruction ID: c9c821e4d37971b5fcf38caa9e99a34619fce379af96cb736550a8733dbcf8b8
Opcode Fuzzy Hash: bf4d21864f8a4a9279b9e2ffdf4bdb2400a3498280683ba4fbf9aeafa7786a6e
Instruction Fuzzy Hash: CE21A4715053806FDB22CF55DC45F97BFB8EF45224F0888AAE944CB292D374A908CBB6

Uniqueness

Uniqueness Score: -1.00%

Function 04B326DB Relevance: 1.6, APIs: 1, Instructions: 73COMMON

Download Yara Rule

APIs

GetProcessWorkingSetSize.KERNEL32(?,00000E24,1BD0493D,00000000,00000000,00000000,00000000), ref: 04B32757

Memory Dump Source

Source File: 00000001.00000002.3691646480.0000000004B30000.00000040.00000800.00020000.00000000.sdmp, Offset: 04B30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_4b30000_ziTLBa3N50.jbxd

Similarity

API ID: ProcessSizeWorking
String ID:
API String ID: 3584180929-0
Opcode ID: bf4d21864f8a4a9279b9e2ffdf4bdb2400a3498280683ba4fbf9aeafa7786a6e
Instruction ID: 313064acb97f8b2aadb9061fa5be2c7ac5c681069b7ad46ee9fbffb5b67f4414
Opcode Fuzzy Hash: bf4d21864f8a4a9279b9e2ffdf4bdb2400a3498280683ba4fbf9aeafa7786a6e
Instruction Fuzzy Hash: 0A2195715053806FDB21CF55DD45F96BFB8EF45224F0888AAE944CB252D274A908CB65

Uniqueness

Uniqueness Score: -1.00%

Function 0075A646 Relevance: 1.6, APIs: 1, Instructions: 72synchronizationCOMMON

Download Yara Rule

APIs

CreateMutexW.KERNELBASE(?,?), ref: 0075A6B9

Memory Dump Source

Source File: 00000001.00000002.3689300199.000000000075A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0075A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_75a000_ziTLBa3N50.jbxd

Similarity

API ID: CreateMutex
String ID:
API String ID: 1964310414-0
Opcode ID: a3bccc6019eb07ef86652a4a7c6d7e8716193627ff5d489ebc80cdb8f9ba0420
Instruction ID: 0dd6290ee5bae36028620fbc6dfeba82a122460e2953cb9f52e080583db0e4b1
Opcode Fuzzy Hash: a3bccc6019eb07ef86652a4a7c6d7e8716193627ff5d489ebc80cdb8f9ba0420
Instruction Fuzzy Hash: 4021C575601240AFE721CF25DD45B96FBE8EF04314F088879ED448B741D7B5E808CA72

Uniqueness

Uniqueness Score: -1.00%

Function 04B307D9 Relevance: 1.6, APIs: 1, Instructions: 72COMMON

Download Yara Rule

APIs

shutdown.WS2_32(?,00000E24,1BD0493D,00000000,00000000,00000000,00000000), ref: 04B3085C

Memory Dump Source

Source File: 00000001.00000002.3691646480.0000000004B30000.00000040.00000800.00020000.00000000.sdmp, Offset: 04B30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_4b30000_ziTLBa3N50.jbxd

Similarity

API ID: shutdown
String ID:
API String ID: 2510479042-0
Opcode ID: d38d8c8622e65e6159473705005fa4f80e6d1e5bbf9a91ad1c11d21f13a83afb
Instruction ID: 5ddcc761b8c8d9e0cfd73cbb2062b1cce77c59568d284f25a52599dc6215f3b4
Opcode Fuzzy Hash: d38d8c8622e65e6159473705005fa4f80e6d1e5bbf9a91ad1c11d21f13a83afb
Instruction Fuzzy Hash: B72198715093806FD722CF55DC45F96BFB8EF46214F0884DAE9449B152D378A948C762

Uniqueness

Uniqueness Score: -1.00%

Function 0075BBBE Relevance: 1.6, APIs: 1, Instructions: 70fileCOMMON

Download Yara Rule

APIs

ReadFile.KERNELBASE(?,00000E24,1BD0493D,00000000,00000000,00000000,00000000), ref: 0075BC3D

Memory Dump Source

Source File: 00000001.00000002.3689300199.000000000075A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0075A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_75a000_ziTLBa3N50.jbxd

Similarity

API ID: FileRead
String ID:
API String ID: 2738559852-0
Opcode ID: 7ebb752d0a07fa1fca9e917ff93399527603ed27280f2300b024bdba3c73b35b
Instruction ID: 4cf9fa684f3488278ec935b2357d92a7ee31a308af27460e1df8072e44fb2dcb
Opcode Fuzzy Hash: 7ebb752d0a07fa1fca9e917ff93399527603ed27280f2300b024bdba3c73b35b
Instruction Fuzzy Hash: 8821A471505380AFDB22CF55DD44F97BFB8EF45314F08889AE9448B552C375A908CBB6

Uniqueness

Uniqueness Score: -1.00%

Function 0075A392 Relevance: 1.6, APIs: 1, Instructions: 69registryCOMMON

Download Yara Rule

APIs

RegQueryValueExW.KERNELBASE(?,00000E24,1BD0493D,00000000,00000000,00000000,00000000), ref: 0075A40C

Memory Dump Source

Source File: 00000001.00000002.3689300199.000000000075A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0075A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_75a000_ziTLBa3N50.jbxd

Similarity

API ID: QueryValue
String ID:
API String ID: 3660427363-0
Opcode ID: 2967548bee5f0cb6e46e12af65bd00ee1c95e165c07a7df9ec23a38927763e1c
Instruction ID: 1573c7da3ecd482cba91bde9f2723de15745e09bff36c1c7ae4b583d1f349a23
Opcode Fuzzy Hash: 2967548bee5f0cb6e46e12af65bd00ee1c95e165c07a7df9ec23a38927763e1c
Instruction Fuzzy Hash: 4221AE75600204AFEB21CF59CC84FA2B7ECEF04715F08857AED458B651D7B8E808CAB2

Uniqueness

Uniqueness Score: -1.00%

Function 04B32153 Relevance: 1.6, APIs: 1, Instructions: 69COMMON

Download Yara Rule

APIs

ioctlsocket.WS2_32(?,00000E24,1BD0493D,00000000,00000000,00000000,00000000), ref: 04B321CF

Memory Dump Source

Source File: 00000001.00000002.3691646480.0000000004B30000.00000040.00000800.00020000.00000000.sdmp, Offset: 04B30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_4b30000_ziTLBa3N50.jbxd

Similarity

API ID: ioctlsocket
String ID:
API String ID: 3577187118-0
Opcode ID: 463d1d0a2afcc49eeb77503e60f64aa73d6ceff377e4005c9611173f0375b21b
Instruction ID: 95747cae285b9743cbabab85f8563b8f0bf256870572fbb0114e9b2a0bf1754e
Opcode Fuzzy Hash: 463d1d0a2afcc49eeb77503e60f64aa73d6ceff377e4005c9611173f0375b21b
Instruction Fuzzy Hash: 9F21C3715093846FDB22CF55DD84F96BFB8EF45314F0888AAF9449B252C374A908CBB2

Uniqueness

Uniqueness Score: -1.00%

Function 0075BE46 Relevance: 1.6, APIs: 1, Instructions: 67networkCOMMON

Download Yara Rule

APIs

WSASocketW.WS2_32(?,?,?,?,?), ref: 0075BEB2

Memory Dump Source

Source File: 00000001.00000002.3689300199.000000000075A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0075A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_75a000_ziTLBa3N50.jbxd

Similarity

API ID: Socket
String ID:
API String ID: 38366605-0
Opcode ID: 3b55ca97e72fa7bb56c7f860c468ed7c9b1a155fae04386f081ef231ae79fdb0
Instruction ID: da845919f02d78a4abf7ea0346100ec01fcb4f885bfcc6e477f691698fea676a
Opcode Fuzzy Hash: 3b55ca97e72fa7bb56c7f860c468ed7c9b1a155fae04386f081ef231ae79fdb0
Instruction Fuzzy Hash: DF21D171500240AFEB21CF55DD45FA6FBE8EF08324F08886EEE458A651C3B5E418CB72

Uniqueness

Uniqueness Score: -1.00%

Function 04B30562 Relevance: 1.6, APIs: 1, Instructions: 67fileCOMMON

Download Yara Rule

APIs

MapViewOfFile.KERNELBASE ref: 04B305D6

Memory Dump Source

Source File: 00000001.00000002.3691646480.0000000004B30000.00000040.00000800.00020000.00000000.sdmp, Offset: 04B30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_4b30000_ziTLBa3N50.jbxd

Similarity

API ID: FileView
String ID:
API String ID: 3314676101-0
Opcode ID: c58f6b790b74be35c247a43762970fcaa79d80b5497bba6af09dd6f470a3d33f
Instruction ID: 73bc13476e5e2fe6642dd957065a32e40e4d11861549693f320240110ad342b3
Opcode Fuzzy Hash: c58f6b790b74be35c247a43762970fcaa79d80b5497bba6af09dd6f470a3d33f
Instruction Fuzzy Hash: E521D171500204AFEB21DF19DD85F96FBE8EF08224F0488AAE9458B641D775F408CBB2

Uniqueness

Uniqueness Score: -1.00%

Function 04B30D6A Relevance: 1.6, APIs: 1, Instructions: 67networkCOMMON

Download Yara Rule

APIs

WSAConnect.WS2_32(?,?,?,?,?,?,?), ref: 04B30DE6

Memory Dump Source

Source File: 00000001.00000002.3691646480.0000000004B30000.00000040.00000800.00020000.00000000.sdmp, Offset: 04B30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_4b30000_ziTLBa3N50.jbxd

Similarity

API ID: Connect
String ID:
API String ID: 3144859779-0
Opcode ID: b9b5abb7fec98aa7a2a0257b81ece7276bb9df76c195fe89fd257a2447a69859
Instruction ID: 8dcd6cd288ebd0c3a551151bf45251e0df44d72c4b5876ddfd1ba8cef77597a7
Opcode Fuzzy Hash: b9b5abb7fec98aa7a2a0257b81ece7276bb9df76c195fe89fd257a2447a69859
Instruction Fuzzy Hash: 76219F71509384AFDB22CF51DC44BA2BFF4EF06310F0888DAE9858B263D375A818DB61

Uniqueness

Uniqueness Score: -1.00%

Function 0075A710 Relevance: 1.6, APIs: 1, Instructions: 66COMMON

Download Yara Rule

APIs

FindCloseChangeNotification.KERNELBASE(?), ref: 0075A780

Memory Dump Source

Source File: 00000001.00000002.3689300199.000000000075A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0075A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_75a000_ziTLBa3N50.jbxd

Similarity

API ID: ChangeCloseFindNotification
String ID:
API String ID: 2591292051-0
Opcode ID: 13be87b97a7f60a80282eafc841894b9b569acb5923a1261879266838176751e
Instruction ID: 1dc451213b4c02927b0bb93afd19b5f9b6c8b682ac058e3fb883887ebf481617
Opcode Fuzzy Hash: 13be87b97a7f60a80282eafc841894b9b569acb5923a1261879266838176751e
Instruction Fuzzy Hash: 0E21E7B55043809FD712CF15DD85B91BFB4EF12324F0984ABDC448B653D3759909DB61

Uniqueness

Uniqueness Score: -1.00%

Function 04B311CE Relevance: 1.6, APIs: 1, Instructions: 66libraryCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNELBASE(?,00000E24), ref: 04B31257

Memory Dump Source

Source File: 00000001.00000002.3691646480.0000000004B30000.00000040.00000800.00020000.00000000.sdmp, Offset: 04B30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_4b30000_ziTLBa3N50.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 3f2757453973619b407f6e661a84127559e39f990fb35b8663cb707b98214162
Instruction ID: 24a238a39510751c042131b005152c435dfd836bd7be7e2470cdf93e94c48e7a
Opcode Fuzzy Hash: 3f2757453973619b407f6e661a84127559e39f990fb35b8663cb707b98214162
Instruction Fuzzy Hash: 6711B4715043806FEB21CB15DC85FA6FBB8DF45724F04849AF9449B692D2B4B948CB62

Uniqueness

Uniqueness Score: -1.00%

Function 0075A486 Relevance: 1.6, APIs: 1, Instructions: 65registryCOMMON

Download Yara Rule

APIs

RegSetValueExW.KERNELBASE(?,00000E24,1BD0493D,00000000,00000000,00000000,00000000), ref: 0075A4F8

Memory Dump Source

Source File: 00000001.00000002.3689300199.000000000075A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0075A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_75a000_ziTLBa3N50.jbxd

Similarity

API ID: Value
String ID:
API String ID: 3702945584-0
Opcode ID: 782dcf9789ed770a90cd27cd7280d5d7083b40d15fb2f758387de63d1722bbd1
Instruction ID: 1ec254daed685b1a50512d7acd36d2c4e32b44fdf20dc07f397f80286809a085
Opcode Fuzzy Hash: 782dcf9789ed770a90cd27cd7280d5d7083b40d15fb2f758387de63d1722bbd1
Instruction Fuzzy Hash: 0611DF76200200AFEB318F15CD45FA6BBE8EF04314F04856AED058A641D3B4E808CAB2

Uniqueness

Uniqueness Score: -1.00%

Function 04B302C6 Relevance: 1.6, APIs: 1, Instructions: 65registryCOMMON

Download Yara Rule

APIs

RegQueryValueExW.KERNELBASE(?,00000E24,1BD0493D,00000000,00000000,00000000,00000000), ref: 04B30338

Memory Dump Source

Source File: 00000001.00000002.3691646480.0000000004B30000.00000040.00000800.00020000.00000000.sdmp, Offset: 04B30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_4b30000_ziTLBa3N50.jbxd

Similarity

API ID: QueryValue
String ID:
API String ID: 3660427363-0
Opcode ID: d3b4ca1e02f270a3e6fa6504fcdc08cd4f4e99f15e4c3166edc0dd0445f484ed
Instruction ID: 8812522f32aa75e562e935d65b2b589f6f5c1ab31d4b5dd2186d5a8e84be4ec6
Opcode Fuzzy Hash: d3b4ca1e02f270a3e6fa6504fcdc08cd4f4e99f15e4c3166edc0dd0445f484ed
Instruction Fuzzy Hash: 4B11AF76600604AFEB21DF16CD81FA7FBE8EF08715F0884AAE9458B651D774F408CAB1

Uniqueness

Uniqueness Score: -1.00%

Function 04B30ACE Relevance: 1.6, APIs: 1, Instructions: 64timeCOMMON

Download Yara Rule

APIs

GetProcessTimes.KERNELBASE(?,00000E24,1BD0493D,00000000,00000000,00000000,00000000), ref: 04B30B2D

Memory Dump Source

Source File: 00000001.00000002.3691646480.0000000004B30000.00000040.00000800.00020000.00000000.sdmp, Offset: 04B30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_4b30000_ziTLBa3N50.jbxd

Similarity

API ID: ProcessTimes
String ID:
API String ID: 1995159646-0
Opcode ID: 3558a3b94e347d5bbb4a0b0e0cf169b138857c082fb7ddc4a39cfa064acb06ce
Instruction ID: 87048a3be7c80293476ac183f3e9195430b10666e05577d59bc307ac29af5f7f
Opcode Fuzzy Hash: 3558a3b94e347d5bbb4a0b0e0cf169b138857c082fb7ddc4a39cfa064acb06ce
Instruction Fuzzy Hash: A711E675600300AFEB21CF55DD45FA6FBE8EF04724F0488AAE9458B651D774E518CBB1

Uniqueness

Uniqueness Score: -1.00%

Function 04B326FE Relevance: 1.6, APIs: 1, Instructions: 62COMMON

Download Yara Rule

APIs

GetProcessWorkingSetSize.KERNEL32(?,00000E24,1BD0493D,00000000,00000000,00000000,00000000), ref: 04B32757

Memory Dump Source

Source File: 00000001.00000002.3691646480.0000000004B30000.00000040.00000800.00020000.00000000.sdmp, Offset: 04B30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_4b30000_ziTLBa3N50.jbxd

Similarity

API ID: ProcessSizeWorking
String ID:
API String ID: 3584180929-0
Opcode ID: 0b57b58fde022c5b647f68e2c7f09fda6501cfaf1e6a139de7c39f8adc3a40bf
Instruction ID: fd7044499d60a48e6a74cebe59f0f74549879114b5ead0ca645e33a879212212
Opcode Fuzzy Hash: 0b57b58fde022c5b647f68e2c7f09fda6501cfaf1e6a139de7c39f8adc3a40bf
Instruction Fuzzy Hash: 2811B275600200AFEB21CF55DD45FA6BBA8EF04225F0488AAED058B641D774E9088AB5

Uniqueness

Uniqueness Score: -1.00%

Function 04B327E2 Relevance: 1.6, APIs: 1, Instructions: 62COMMON

Download Yara Rule

APIs

SetProcessWorkingSetSize.KERNEL32(?,00000E24,1BD0493D,00000000,00000000,00000000,00000000), ref: 04B3283B

Memory Dump Source

Source File: 00000001.00000002.3691646480.0000000004B30000.00000040.00000800.00020000.00000000.sdmp, Offset: 04B30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_4b30000_ziTLBa3N50.jbxd

Similarity

API ID: ProcessSizeWorking
String ID:
API String ID: 3584180929-0
Opcode ID: 0b57b58fde022c5b647f68e2c7f09fda6501cfaf1e6a139de7c39f8adc3a40bf
Instruction ID: 7bce60f14c5878a4821cfdd0d4cd9aaa5b8dcb5d1333995b9cea0919603f1a22
Opcode Fuzzy Hash: 0b57b58fde022c5b647f68e2c7f09fda6501cfaf1e6a139de7c39f8adc3a40bf
Instruction Fuzzy Hash: 7F11C475600340AFEB21CF55DD85FA6BBA8EF04324F0488BAE905CB641D774E908CAB1

Uniqueness

Uniqueness Score: -1.00%

Function 04B30202 Relevance: 1.6, APIs: 1, Instructions: 62COMMON

Download Yara Rule

APIs

GetComputerNameW.KERNEL32(?,00000E24,?,?), ref: 04B3027E

Memory Dump Source

Source File: 00000001.00000002.3691646480.0000000004B30000.00000040.00000800.00020000.00000000.sdmp, Offset: 04B30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_4b30000_ziTLBa3N50.jbxd

Similarity

API ID: ComputerName
String ID:
API String ID: 3545744682-0
Opcode ID: 154c99ecb71d80262d1edb1c7768a9964166eea69c9808859d8c6e56a8c19f83
Instruction ID: 000db9a59ad2793958267eb76fc701f4acab44c8bf3405526db69c9b434baf05
Opcode Fuzzy Hash: 154c99ecb71d80262d1edb1c7768a9964166eea69c9808859d8c6e56a8c19f83
Instruction Fuzzy Hash: 9D11C8B15053406FD3118B15DC41F76BFB8EFC6620F05819EEC449B682D625B915CBB2

Uniqueness

Uniqueness Score: -1.00%

Function 0075AE8F Relevance: 1.6, APIs: 1, Instructions: 61COMMON

Download Yara Rule

APIs

DuplicateHandle.KERNELBASE(?,?,?,?,?,?,?), ref: 0075AEFA

Memory Dump Source

Source File: 00000001.00000002.3689300199.000000000075A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0075A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_75a000_ziTLBa3N50.jbxd

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: 6d7e0441324980d2dd9eacd2025be2e90e5fa239c6971b727bfb4a92061bbf12
Instruction ID: 2910cb374eb87781f3f269e2ac98e329c98d944c5dda851daca715a2ca333ed9
Opcode Fuzzy Hash: 6d7e0441324980d2dd9eacd2025be2e90e5fa239c6971b727bfb4a92061bbf12
Instruction Fuzzy Hash: D1118471409380AFDB228F55DC44A62FFF4EF4A315F0889DEED858B562C275A818DB61

Uniqueness

Uniqueness Score: -1.00%

Function 04B32622 Relevance: 1.6, APIs: 1, Instructions: 61COMMON

Download Yara Rule

APIs

GetExitCodeProcess.KERNELBASE(?,00000E24,1BD0493D,00000000,00000000,00000000,00000000), ref: 04B32678

Memory Dump Source

Source File: 00000001.00000002.3691646480.0000000004B30000.00000040.00000800.00020000.00000000.sdmp, Offset: 04B30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_4b30000_ziTLBa3N50.jbxd

Similarity

API ID: CodeExitProcess
String ID:
API String ID: 3861947596-0
Opcode ID: 217db897384388243985d03c10e96365ce8af0d92b6daf1a633c142cdb1230e4
Instruction ID: 9207680a8796ee07380a2c0b213da8ca210f067a7eacde321a0045de5e2f7441
Opcode Fuzzy Hash: 217db897384388243985d03c10e96365ce8af0d92b6daf1a633c142cdb1230e4
Instruction Fuzzy Hash: 0011A775600200AFEB21CF55DD85FA6B7A8DF04225F0488BAED05CB651D774E9088AB1

Uniqueness

Uniqueness Score: -1.00%

Function 0075BBDE Relevance: 1.6, APIs: 1, Instructions: 60fileCOMMON

Download Yara Rule

APIs

ReadFile.KERNELBASE(?,00000E24,1BD0493D,00000000,00000000,00000000,00000000), ref: 0075BC3D

Memory Dump Source

Source File: 00000001.00000002.3689300199.000000000075A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0075A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_75a000_ziTLBa3N50.jbxd

Similarity

API ID: FileRead
String ID:
API String ID: 2738559852-0
Opcode ID: 2a59d598f61207c5e300b0980f02ec545fc72bbdb7869c87f34d6e913bc11e3f
Instruction ID: 0c680d49080030d068d398f350954339fd87f788a477fe06dae5b6c2150def41
Opcode Fuzzy Hash: 2a59d598f61207c5e300b0980f02ec545fc72bbdb7869c87f34d6e913bc11e3f
Instruction Fuzzy Hash: 8E11E271500204AFEB21CF55DD40FA6FBA8EF04324F04886AED448A651C7B5A408CBB6

Uniqueness

Uniqueness Score: -1.00%

Function 04B32176 Relevance: 1.6, APIs: 1, Instructions: 58COMMON

Download Yara Rule

APIs

ioctlsocket.WS2_32(?,00000E24,1BD0493D,00000000,00000000,00000000,00000000), ref: 04B321CF

Memory Dump Source

Source File: 00000001.00000002.3691646480.0000000004B30000.00000040.00000800.00020000.00000000.sdmp, Offset: 04B30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_4b30000_ziTLBa3N50.jbxd

Similarity

API ID: ioctlsocket
String ID:
API String ID: 3577187118-0
Opcode ID: dde85122cc524c1aab75dfea90769ce45f8f8587d1e283a9aabb3234bba4c089
Instruction ID: d3673988ff873621fda68381243a0a0bdb903e750d3a2202ebcca520fc404f5a
Opcode Fuzzy Hash: dde85122cc524c1aab75dfea90769ce45f8f8587d1e283a9aabb3234bba4c089
Instruction Fuzzy Hash: 7011E375500700AFEB21CF55DD85FA6FBA8EF04324F0888AAE9048B641D374A918CAB2

Uniqueness

Uniqueness Score: -1.00%

Function 0075A9B5 Relevance: 1.6, APIs: 1, Instructions: 57COMMON

Download Yara Rule

APIs

FindCloseChangeNotification.KERNELBASE(?), ref: 0075AA14

Memory Dump Source

Source File: 00000001.00000002.3689300199.000000000075A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0075A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_75a000_ziTLBa3N50.jbxd

Similarity

API ID: ChangeCloseFindNotification
String ID:
API String ID: 2591292051-0
Opcode ID: 77881a22a9b73fe3f209a8ff081720314d341fefb0c457050b5968180ab4ca38
Instruction ID: 21152aa2de70eadbac6dc740de4724975f5150e98c2d36341d377abefa1b21f1
Opcode Fuzzy Hash: 77881a22a9b73fe3f209a8ff081720314d341fefb0c457050b5968180ab4ca38
Instruction Fuzzy Hash: 701182714093C06FDB12CF25DD54A92BFB4EF47221F0884DAED848F253D279A918DB62

Uniqueness

Uniqueness Score: -1.00%

Function 04B30806 Relevance: 1.6, APIs: 1, Instructions: 57COMMON

Download Yara Rule

APIs

shutdown.WS2_32(?,00000E24,1BD0493D,00000000,00000000,00000000,00000000), ref: 04B3085C

Memory Dump Source

Source File: 00000001.00000002.3691646480.0000000004B30000.00000040.00000800.00020000.00000000.sdmp, Offset: 04B30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_4b30000_ziTLBa3N50.jbxd

Similarity

API ID: shutdown
String ID:
API String ID: 2510479042-0
Opcode ID: 7c5607f7d91396117af0a9bf10b4a368b755224cb00823bbd5d8569b6b6fb4df
Instruction ID: dc66faa712284cb44153856c0c70e9c22e94d7270a5dcf54cf0a710d4534e010
Opcode Fuzzy Hash: 7c5607f7d91396117af0a9bf10b4a368b755224cb00823bbd5d8569b6b6fb4df
Instruction Fuzzy Hash: 9911C275600300AFEB21DF55DD85FA6BBE8EF04725F0488AAED048B645D774E508CAB6

Uniqueness

Uniqueness Score: -1.00%

Function 0075A2D2 Relevance: 1.6, APIs: 1, Instructions: 56COMMON

Download Yara Rule

APIs

SetErrorMode.KERNELBASE ref: 0075A330

Memory Dump Source

Source File: 00000001.00000002.3689300199.000000000075A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0075A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_75a000_ziTLBa3N50.jbxd

Similarity

API ID: ErrorMode
String ID:
API String ID: 2340568224-0
Opcode ID: e3a900b88cee468f6fe35bed94cfc4f7aa3dddd5335007012fa6cf67c3980d14
Instruction ID: 03e80f41f285cfa8c7af69ad840f2677ce9f8b7ddab2ae163ae24eccf1bca75b
Opcode Fuzzy Hash: e3a900b88cee468f6fe35bed94cfc4f7aa3dddd5335007012fa6cf67c3980d14
Instruction Fuzzy Hash: 921191714093C06FDB238B15DC54AA2BFB4DF57225F0D81DBED848B263C2696918DB72

Uniqueness

Uniqueness Score: -1.00%

Function 04B311EE Relevance: 1.6, APIs: 1, Instructions: 56libraryCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNELBASE(?,00000E24), ref: 04B31257

Memory Dump Source

Source File: 00000001.00000002.3691646480.0000000004B30000.00000040.00000800.00020000.00000000.sdmp, Offset: 04B30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_4b30000_ziTLBa3N50.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: bb7572889db534b40b440944734133e920c45df11f5cc45efd53b1d1da2e9b1f
Instruction ID: db194b544c08ea0ab4cd14c14bdcaa2c6d9b01b51b00830fd68dd5557d1e32ed
Opcode Fuzzy Hash: bb7572889db534b40b440944734133e920c45df11f5cc45efd53b1d1da2e9b1f
Instruction Fuzzy Hash: C411E575600240AEEB21DF19DD81FA6FBA8DF44725F0484A9FD049A781D2B4F508CAA2

Uniqueness

Uniqueness Score: -1.00%

Function 04B32252 Relevance: 1.6, APIs: 1, Instructions: 55COMMON

Download Yara Rule

APIs

select.WS2_32(?,?,?,?,?), ref: 04B322A8

Memory Dump Source

Source File: 00000001.00000002.3691646480.0000000004B30000.00000040.00000800.00020000.00000000.sdmp, Offset: 04B30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_4b30000_ziTLBa3N50.jbxd

Similarity

API ID: select
String ID:
API String ID: 1274211008-0
Opcode ID: 2f3781be7a47146fb8f8a6fbffecb5216f2c452e82c91a5136818d9c17d05c54
Instruction ID: 3934137ff84d3e74a1793b81323bed6d1a2cef0d079ca7d97c209156458138f6
Opcode Fuzzy Hash: 2f3781be7a47146fb8f8a6fbffecb5216f2c452e82c91a5136818d9c17d05c54
Instruction Fuzzy Hash: 331128756002449FEB24CF5ADD84B92FBE8EF08611F0888EADD49CB652D774F858CB61

Uniqueness

Uniqueness Score: -1.00%

Function 0075A078 Relevance: 1.6, APIs: 1, Instructions: 54networkCOMMON

Download Yara Rule

APIs

send.WS2_32(?,?,?,?), ref: 0075A0D5

Memory Dump Source

Source File: 00000001.00000002.3689300199.000000000075A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0075A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_75a000_ziTLBa3N50.jbxd

Similarity

API ID: send
String ID:
API String ID: 2809346765-0
Opcode ID: 5fe8427708439bdbdb990f8fabc876f69642c32c5849007be3da9a74f673a496
Instruction ID: e25da94bff82bd0081e5bed862d51d6dcf1a42e7e3b00909556019e44a9af118
Opcode Fuzzy Hash: 5fe8427708439bdbdb990f8fabc876f69642c32c5849007be3da9a74f673a496
Instruction Fuzzy Hash: 6911BF71409780AFCB22CF11DC44B52FFB4EF06224F0888AEED848B652C275A818CB62

Uniqueness

Uniqueness Score: -1.00%

Function 04B32326 Relevance: 1.6, APIs: 1, Instructions: 53COMMON

Download Yara Rule

APIs

LookupPrivilegeValueW.ADVAPI32(?,?,?), ref: 04B3236E

Memory Dump Source

Source File: 00000001.00000002.3691646480.0000000004B30000.00000040.00000800.00020000.00000000.sdmp, Offset: 04B30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_4b30000_ziTLBa3N50.jbxd

Similarity

API ID: LookupPrivilegeValue
String ID:
API String ID: 3899507212-0
Opcode ID: 356b210fb82e701b3ccfc4ed4f72f0d402fcf3ceefe20bec6f4407818be67abf
Instruction ID: 5ebf97b22bdadec4a3865bf4440058f51d0029a986098448efdd1b66abed8105
Opcode Fuzzy Hash: 356b210fb82e701b3ccfc4ed4f72f0d402fcf3ceefe20bec6f4407818be67abf
Instruction Fuzzy Hash: CB11A1766002409FEB25CF2AD985B56FBE8EF04221F0888FADD09CB741D674F418CA62

Uniqueness

Uniqueness Score: -1.00%

Function 0075B91E Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

GetFileType.KERNELBASE(?,00000E24,1BD0493D,00000000,00000000,00000000,00000000), ref: 0075B971

Memory Dump Source

Source File: 00000001.00000002.3689300199.000000000075A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0075A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_75a000_ziTLBa3N50.jbxd

Similarity

API ID: FileType
String ID:
API String ID: 3081899298-0
Opcode ID: adb747535a1ca7bfd300a3de1e908154809210fe3471b379b34d48fd95e21c5d
Instruction ID: 06a9faab18c723406bda3b36de13b69827446d5d9fcb6680b8d7480550ccb5e4
Opcode Fuzzy Hash: adb747535a1ca7bfd300a3de1e908154809210fe3471b379b34d48fd95e21c5d
Instruction Fuzzy Hash: 3D010475500200AEE721CF15DD85FE6FBA8DF04325F04846AEE048B641D7B8E80C8AB2

Uniqueness

Uniqueness Score: -1.00%

Function 0075A918 Relevance: 1.6, APIs: 1, Instructions: 51COMMON

Download Yara Rule

APIs

WaitForInputIdle.USER32 ref: 0075A96F

Memory Dump Source

Source File: 00000001.00000002.3689300199.000000000075A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0075A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_75a000_ziTLBa3N50.jbxd

Similarity

API ID: IdleInputWait
String ID:
API String ID: 2200289081-0
Opcode ID: ee78767904169d6106c7920c629acf64645c0e84f71715f5c020d8f6d47613d1
Instruction ID: f487e5f3f9c3575c7b6a6514aa73738d26a6d71e465bff78560095b3d87f1625
Opcode Fuzzy Hash: ee78767904169d6106c7920c629acf64645c0e84f71715f5c020d8f6d47613d1
Instruction Fuzzy Hash: F5115471409380AFD711CF55DD45B52FFB4EF46221F0984AADD858B252D279A818CB62

Uniqueness

Uniqueness Score: -1.00%

Function 04B30D9A Relevance: 1.5, APIs: 1, Instructions: 49networkCOMMON

Download Yara Rule

APIs

WSAConnect.WS2_32(?,?,?,?,?,?,?), ref: 04B30DE6

Memory Dump Source

Source File: 00000001.00000002.3691646480.0000000004B30000.00000040.00000800.00020000.00000000.sdmp, Offset: 04B30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_4b30000_ziTLBa3N50.jbxd

Similarity

API ID: Connect
String ID:
API String ID: 3144859779-0
Opcode ID: 728a3298ba1f36fd0010adf35d38e7ffff854dfd47f4893adf2462befc5f1771
Instruction ID: 3a66196fc1951615794f4df85189f691d47fdbf5590c742434ee31e2f632d176
Opcode Fuzzy Hash: 728a3298ba1f36fd0010adf35d38e7ffff854dfd47f4893adf2462befc5f1771
Instruction Fuzzy Hash: 5F11C2355002049FDB21DF56D944B52FBF4EF08311F0888AADD458B616D375F428DFA1

Uniqueness

Uniqueness Score: -1.00%

Function 04B30F62 Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

GetVolumeInformationA.KERNELBASE(?,00000E24,?,?), ref: 04B30FB2

Memory Dump Source

Source File: 00000001.00000002.3691646480.0000000004B30000.00000040.00000800.00020000.00000000.sdmp, Offset: 04B30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_4b30000_ziTLBa3N50.jbxd

Similarity

API ID: InformationVolume
String ID:
API String ID: 2039140958-0
Opcode ID: 153a9d411f26004fb44ef0211eb90f1185b7760c77d9fe0ea4ced4ff01f16303
Instruction ID: 1da7b3797d36432afb4ce3cb455aae66165ac0183f228f223bfb7d9bbf880418
Opcode Fuzzy Hash: 153a9d411f26004fb44ef0211eb90f1185b7760c77d9fe0ea4ced4ff01f16303
Instruction Fuzzy Hash: 56017171600200ABD310DF16DD85B76FBE8FB88A24F14856AED089B741D731F915CBE6

Uniqueness

Uniqueness Score: -1.00%

Function 0075AEB6 Relevance: 1.5, APIs: 1, Instructions: 45COMMON

Download Yara Rule

APIs

DuplicateHandle.KERNELBASE(?,?,?,?,?,?,?), ref: 0075AEFA

Memory Dump Source

Source File: 00000001.00000002.3689300199.000000000075A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0075A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_75a000_ziTLBa3N50.jbxd

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: 493f57a1699d34236c0880c2613eaa59948497b63251006c09477b0fcfb5c3ad
Instruction ID: 99ab69dc3d8dbe669d15a366bdfee08a4a55b90b834ff8eff1fd2d175f3a3725
Opcode Fuzzy Hash: 493f57a1699d34236c0880c2613eaa59948497b63251006c09477b0fcfb5c3ad
Instruction Fuzzy Hash: 9C018475400640AFDB21CF55D945B92FFF0EF08325F08C96AED454A651C375E428DF62

Uniqueness

Uniqueness Score: -1.00%

Function 0075A74E Relevance: 1.5, APIs: 1, Instructions: 43COMMON

Download Yara Rule

APIs

FindCloseChangeNotification.KERNELBASE(?), ref: 0075A780

Memory Dump Source

Source File: 00000001.00000002.3689300199.000000000075A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0075A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_75a000_ziTLBa3N50.jbxd

Similarity

API ID: ChangeCloseFindNotification
String ID:
API String ID: 2591292051-0
Opcode ID: 29b8671969fcce8fa25c4760cb8eceb07dcaff02b9bab2726b21563697c73670
Instruction ID: be390442505ea317963bd67e5590b8f23fe11338c2ab3c84ae29f619f5dad0ce
Opcode Fuzzy Hash: 29b8671969fcce8fa25c4760cb8eceb07dcaff02b9bab2726b21563697c73670
Instruction Fuzzy Hash: B101D4755002409FDB11CF15D985795FBE4DF04325F08C8BBDC058B742D2B8E818CEA2

Uniqueness

Uniqueness Score: -1.00%

Function 0075BDAA Relevance: 1.5, APIs: 1, Instructions: 43registryCOMMON

Download Yara Rule

APIs

RegQueryValueExW.KERNELBASE(?,00000E24,?,?), ref: 0075BDFA

Memory Dump Source

Source File: 00000001.00000002.3689300199.000000000075A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0075A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_75a000_ziTLBa3N50.jbxd

Similarity

API ID: QueryValue
String ID:
API String ID: 3660427363-0
Opcode ID: a41601159c24d5e757e813d7b766b5c6801d5234670dcf9db4ce13fd14527338
Instruction ID: c565ee2bb2a56a2cf3643317a80c2b80d209c9e400d32f1cf9171a0d2237416c
Opcode Fuzzy Hash: a41601159c24d5e757e813d7b766b5c6801d5234670dcf9db4ce13fd14527338
Instruction Fuzzy Hash: AF01A7716002006BD210DF16DD45B76FBE8FB88A20F14812ADC0857741D771F515CBE6

Uniqueness

Uniqueness Score: -1.00%

Function 04B3022E Relevance: 1.5, APIs: 1, Instructions: 43COMMON

Download Yara Rule

APIs

GetComputerNameW.KERNEL32(?,00000E24,?,?), ref: 04B3027E

Memory Dump Source

Source File: 00000001.00000002.3691646480.0000000004B30000.00000040.00000800.00020000.00000000.sdmp, Offset: 04B30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_4b30000_ziTLBa3N50.jbxd

Similarity

API ID: ComputerName
String ID:
API String ID: 3545744682-0
Opcode ID: 5a143d007c00604360c27ef96a66f6e76c64fe35db5b4141856edba8db354281
Instruction ID: 08f32a79229959a8f2d94ce11df6ec80a9bfb7865b52061ba6d5aae4bde2367b
Opcode Fuzzy Hash: 5a143d007c00604360c27ef96a66f6e76c64fe35db5b4141856edba8db354281
Instruction Fuzzy Hash: 7001A7716002006BD210DF16DD45B76FBE8FB88A20F148169DC0857741D731F515CBE6

Uniqueness

Uniqueness Score: -1.00%

Function 0075A09A Relevance: 1.5, APIs: 1, Instructions: 42networkCOMMON

Download Yara Rule

APIs

send.WS2_32(?,?,?,?), ref: 0075A0D5

Memory Dump Source

Source File: 00000001.00000002.3689300199.000000000075A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0075A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_75a000_ziTLBa3N50.jbxd

Similarity

API ID: send
String ID:
API String ID: 2809346765-0
Opcode ID: 01ab2ae815c16e2299345b35e20fc3d17dff25be10350e191eb7dc7bd264081e
Instruction ID: 78c928d19159125e70dace5905b0ca435e567f9c9e26d155d7b19d456548b30c
Opcode Fuzzy Hash: 01ab2ae815c16e2299345b35e20fc3d17dff25be10350e191eb7dc7bd264081e
Instruction Fuzzy Hash: 55019E35400640AFDB21CF55D984B91FBE0EF04325F0889BADD498B652D3B9A418CFA2

Uniqueness

Uniqueness Score: -1.00%

Function 0075A93A Relevance: 1.5, APIs: 1, Instructions: 40COMMON

Download Yara Rule

APIs

WaitForInputIdle.USER32 ref: 0075A96F

Memory Dump Source

Source File: 00000001.00000002.3689300199.000000000075A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0075A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_75a000_ziTLBa3N50.jbxd

Similarity

API ID: IdleInputWait
String ID:
API String ID: 2200289081-0
Opcode ID: 1fdb6c711bfda4b1924ac2fad1dc06ba5080dcae87fa67691c133ba6498428c5
Instruction ID: 2330c2d22a6c8dcca703b94337b119534894d07e27d00fb838812bd28fb604cd
Opcode Fuzzy Hash: 1fdb6c711bfda4b1924ac2fad1dc06ba5080dcae87fa67691c133ba6498428c5
Instruction Fuzzy Hash: 7401F775400240AFDB11CF05D984B95FBE4EF04325F08C9BADD448F241D3B9A418CF62

Uniqueness

Uniqueness Score: -1.00%

Function 0075A9E2 Relevance: 1.5, APIs: 1, Instructions: 39COMMON

Download Yara Rule

APIs

FindCloseChangeNotification.KERNELBASE(?), ref: 0075AA14

Memory Dump Source

Source File: 00000001.00000002.3689300199.000000000075A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0075A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_75a000_ziTLBa3N50.jbxd

Similarity

API ID: ChangeCloseFindNotification
String ID:
API String ID: 2591292051-0
Opcode ID: fac12c89756f8672db95bb0262f190c2709af1ef19f24f1ca131565e79a83fa3
Instruction ID: 90421609023794e58a251a3c9d658094847f90c3c0fef116938fad7457f52bab
Opcode Fuzzy Hash: fac12c89756f8672db95bb0262f190c2709af1ef19f24f1ca131565e79a83fa3
Instruction Fuzzy Hash: 0701A275900280AFDB21CF15DA85791FBE4EF04325F08C5BADD098F642D2B9A418CAA2

Uniqueness

Uniqueness Score: -1.00%

Function 0075A2FE Relevance: 1.5, APIs: 1, Instructions: 35COMMON

Download Yara Rule

APIs

SetErrorMode.KERNELBASE ref: 0075A330

Memory Dump Source

Source File: 00000001.00000002.3689300199.000000000075A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0075A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_75a000_ziTLBa3N50.jbxd

Similarity

API ID: ErrorMode
String ID:
API String ID: 2340568224-0
Opcode ID: ac473011158707ff8f58a1642f9cb348fa3a6412781ae0d91b3f0f1fac6de4fb
Instruction ID: cf3dd816699a75fdad8c5349a2b8dd7be3cbeeff09e673cc3006cc3b8dc084c5
Opcode Fuzzy Hash: ac473011158707ff8f58a1642f9cb348fa3a6412781ae0d91b3f0f1fac6de4fb
Instruction Fuzzy Hash: C8F0A435904244DFDB21CF09E9857A1FFE0EF04329F48C5BADD494B752D2B9A418CEA2

Uniqueness

Uniqueness Score: -1.00%

Function 00B107DE Relevance: .1, Instructions: 60COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3690061800.0000000000B10000.00000040.00000020.00020000.00000000.sdmp, Offset: 00B10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_b10000_ziTLBa3N50.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2c5aca4ba7d5c80f2b3cfd54ea6222ea92e0f5ff02706817233d4aa9e3e1e2e8
Instruction ID: a14b0005255e8dfd0599ac2775893a335ee7705bc93e122bf0713f3a5c13fde5
Opcode Fuzzy Hash: 2c5aca4ba7d5c80f2b3cfd54ea6222ea92e0f5ff02706817233d4aa9e3e1e2e8
Instruction Fuzzy Hash: B2214C3154D3C18FC7139B24D990B91BFB1EF47718F1986DED4848B6A3C67A884ACB92

Uniqueness

Uniqueness Score: -1.00%

Function 04F31E30 Relevance: .1, Instructions: 60COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3691724492.0000000004F30000.00000040.00000800.00020000.00000000.sdmp, Offset: 04F30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_4f30000_ziTLBa3N50.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d9c71b3be41d401018c68bfd3721339e6deb3fb39e9673fe0c744511beda9973
Instruction ID: 9d601737abe8615aeef53ff3236b8c4669f0664f92814dcfebe62b6f8e88e72d
Opcode Fuzzy Hash: d9c71b3be41d401018c68bfd3721339e6deb3fb39e9673fe0c744511beda9973
Instruction Fuzzy Hash: 0011EAB5908301AFC350CF19D880A5BFBE4FB88664F04896EF898D7311D235E918CFA2

Uniqueness

Uniqueness Score: -1.00%

Function 00B10814 Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3690061800.0000000000B10000.00000040.00000020.00020000.00000000.sdmp, Offset: 00B10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_b10000_ziTLBa3N50.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 99d47e0088950c571c1bb1659338eea61821f6911eeaf9854475231d8ac285bc
Instruction ID: 884c432bf06b556ae6f06914207e3695212baaa3343b0085dd208d2fe1915007
Opcode Fuzzy Hash: 99d47e0088950c571c1bb1659338eea61821f6911eeaf9854475231d8ac285bc
Instruction Fuzzy Hash: EB11D230618280DFC711DB14D580BA5B7E5EB88708F64C9ECE8494BA52C7BBD893DA91

Uniqueness

Uniqueness Score: -1.00%

Function 0077AFBC Relevance: .1, Instructions: 52COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3689479146.000000000077A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0077A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_77a000_ziTLBa3N50.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4b6502368b12913a401f2868484a1ed8741bebe38f76dc3ba12b73a8ff4d3200
Instruction ID: 881c11817e3b28a4b6f4712b2a8800dfc23c123b7469dc950fae658d8e04f57f
Opcode Fuzzy Hash: 4b6502368b12913a401f2868484a1ed8741bebe38f76dc3ba12b73a8ff4d3200
Instruction Fuzzy Hash: 5111FAB5908301AFD350CF09DC80E5BFBE8EB88661F04892EF95897311D275E918CFA2

Uniqueness

Uniqueness Score: -1.00%

Function 00B105DF Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3690061800.0000000000B10000.00000040.00000020.00020000.00000000.sdmp, Offset: 00B10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_b10000_ziTLBa3N50.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a04c2209206f64a97cd15dd0355f6f3d03c08da18f9e07241cb00940786b1ff6
Instruction ID: f2f064576d7a0f3e70d9f4bb33ac9a4d9736daec882aeff29c3178fdebef021c
Opcode Fuzzy Hash: a04c2209206f64a97cd15dd0355f6f3d03c08da18f9e07241cb00940786b1ff6
Instruction Fuzzy Hash: D501DB754093806FD7118F059C50862FFF8DB4623070984AFE8498B612D2256809CB76

Uniqueness

Uniqueness Score: -1.00%

Function 00B108D0 Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3690061800.0000000000B10000.00000040.00000020.00020000.00000000.sdmp, Offset: 00B10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_b10000_ziTLBa3N50.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6ed515263adb8beb5cc80d8a6b3c6310369e9d0c44056e319ed53ee33a8996d9
Instruction ID: 38f734b15a57c9d9fbd80442dd5df07da9fbc3a8754dae8d5b0b96d27eeaf432
Opcode Fuzzy Hash: 6ed515263adb8beb5cc80d8a6b3c6310369e9d0c44056e319ed53ee33a8996d9
Instruction Fuzzy Hash: FCF0F635108644DFC706CB00D980B55FBE2EB89718F24CAA9E9491BA62C777A892DA81

Uniqueness

Uniqueness Score: -1.00%

Function 00B10606 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3690061800.0000000000B10000.00000040.00000020.00020000.00000000.sdmp, Offset: 00B10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_b10000_ziTLBa3N50.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7013373a80273b603d2c66296ffcd250b291dea582c566041ca95f79f987a7d6
Instruction ID: 8ec338c83c48079805d3d4a5e87fb52669eaa6127ab2851279cc43c13fa12bf0
Opcode Fuzzy Hash: 7013373a80273b603d2c66296ffcd250b291dea582c566041ca95f79f987a7d6
Instruction Fuzzy Hash: 64E092B66006005B9650CF0BFD81892F7E8EB84631B08C47FDC0D8BB01D635B508CEA5

Uniqueness

Uniqueness Score: -1.00%

Function 0077B00B Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3689479146.000000000077A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0077A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_77a000_ziTLBa3N50.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 65646ef269cb7d70396af957b31686d654d350ce2ce1399208b3642e6f68d368
Instruction ID: 4aab8109fe40c7394836ce82c8713fe31e1c11024a6928bb8670cc7665b1c6bc
Opcode Fuzzy Hash: 65646ef269cb7d70396af957b31686d654d350ce2ce1399208b3642e6f68d368
Instruction Fuzzy Hash: 97E0D8B254020467D2508E06AC45F62F798DB54931F44C56BED085B701E175B514C9F1

Uniqueness

Uniqueness Score: -1.00%

Function 04F31E9B Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3691724492.0000000004F30000.00000040.00000800.00020000.00000000.sdmp, Offset: 04F30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_4f30000_ziTLBa3N50.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ffdc0aba3c0c090b03d17fce1802d9ff7e4c002b727edf04a3cd4aa93d0f8dd2
Instruction ID: 097319faa59c56df9d09e0a535798c34420d833c463f8ac02c7a3690f2378b0a
Opcode Fuzzy Hash: ffdc0aba3c0c090b03d17fce1802d9ff7e4c002b727edf04a3cd4aa93d0f8dd2
Instruction Fuzzy Hash: 92E0D8B254020067D2508E06AC46F52FB98DB54931F44C56BED081B741E175B518C9F1

Uniqueness

Uniqueness Score: -1.00%

Function 04F31747 Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3691724492.0000000004F30000.00000040.00000800.00020000.00000000.sdmp, Offset: 04F30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_4f30000_ziTLBa3N50.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 17e050be8ddd0ae635d3ab172ce69e38ad958e40d02e68269c6569e66adc71d6
Instruction ID: 51ea35cdcd8d47a44b5f4ed562633707fd3022fc20c141d6be9e9a455a71796f
Opcode Fuzzy Hash: 17e050be8ddd0ae635d3ab172ce69e38ad958e40d02e68269c6569e66adc71d6
Instruction Fuzzy Hash: A3E0D8B250020067D250DE06AC46F53FB98DB40931F44C56BED081B701E176B514CDF1

Uniqueness

Uniqueness Score: -1.00%

Function 007523F4 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3689262321.0000000000752000.00000040.00000800.00020000.00000000.sdmp, Offset: 00752000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_752000_ziTLBa3N50.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0ab55d279a051cce4cd9b9e0cca10a73670f964633352a7414fa53e7db68382a
Instruction ID: 3ffa2f099e855ab0ab2530541ecc28ead41cfb98a95d0a8b03782a245bcc050d
Opcode Fuzzy Hash: 0ab55d279a051cce4cd9b9e0cca10a73670f964633352a7414fa53e7db68382a
Instruction Fuzzy Hash: 8FD0C7392026C04FE3228A0CC2A4B853794AB42704F4A04B9AC008BB63C7A8D886C240

Uniqueness

Uniqueness Score: -1.00%

Function 007523BC Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3689262321.0000000000752000.00000040.00000800.00020000.00000000.sdmp, Offset: 00752000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_752000_ziTLBa3N50.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0de43aeeb680a9a2e751dda770d044626d133d0f6906ae0b0e911f2755596394
Instruction ID: 605405cdb990dff09059d6753114d093cdd42ebb85759bf0c79c82f140568595
Opcode Fuzzy Hash: 0de43aeeb680a9a2e751dda770d044626d133d0f6906ae0b0e911f2755596394
Instruction Fuzzy Hash: FFD05E342012814BCB25DA0CC2D4F9937D4AB45715F0644FCAC108B762C7ACD8C5DA00

Uniqueness

Uniqueness Score: -1.00%

Description:	Adversaries may move onto systems, possibly those on disconnected or air-gapped networks, by copying malware to removable media and taking advantage of Autorun features when the media is inserted into a system and executes. In the case of Lateral Movement, this may occur through modification of executable files stored on removable media or by copying malware and renaming it to look like a legitimate file to trick users into executing it on a separate system. In the case of Initial Access, this may occur through manual manipulation of the media, modification of systems used to initially format the media, or modification to the media's firmware itself.
Tactics:	Initial Access, Lateral Movement
Data Sources:	Drive: Drive Creation, File: File Access, File: File Creation, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify access tokens to operate under a different user or system security context to perform actions and bypass access controls. Windows uses access tokens to determine the ownership of a running process. A user can manipulate access tokens to make a running process appear as though it is the child of a different process or belongs to someone other than the user that started the process. When this occurs, the process also takes on the security context associated with the new token.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Active Directory: Active Directory Object Modification, Command: Command Execution, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, User Account: User Account Metadata
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to gather information about attached peripheral devices and components connected to a computer system.Peripheral devices could include auxiliary resources that support a variety of functionalities such as keyboards, printers, cameras, smart card readers, or removable storage. The information may be used to enhance their awareness of the system and network environment or may be used for further actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report ziTLBa3N50.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: Njrat

Yara Signatures

Initial Sample

Memory Dumps

Unpacked PEs

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Networking

E-Banking Fraud

System Summary

Data Obfuscation

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

\Device\ConDrv

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Resources

Imports

Network Behavior

Snort IDS Alerts

Network Port Distribution

Windows Analysis Report
ziTLBa3N50.exe

Function 04930F90 Relevance: 1.6, APIs: 1, Instructions: 115
COMMON

Function 04930F7F Relevance: 1.6, APIs: 1, Instructions: 109
COMMON

Function 0075B7C6 Relevance: 1.6, APIs: 1, Instructions: 103
fileCOMMON

Function 04B31F7A Relevance: 1.6, APIs: 1, Instructions: 99
registryCOMMON

Function 0075BD33 Relevance: 1.6, APIs: 1, Instructions: 98
registryCOMMON

Function 04B30B98 Relevance: 1.6, APIs: 1, Instructions: 93
COMMON

Function 0075AA52 Relevance: 1.6, APIs: 1, Instructions: 91
registryCOMMON

Function 0075A612 Relevance: 1.6, APIs: 1, Instructions: 89
synchronizationCOMMON

Function 04B3038C Relevance: 1.6, APIs: 1, Instructions: 89
COMMON

Function 04B30A90 Relevance: 1.6, APIs: 1, Instructions: 88
timeCOMMON

Function 04B31FA6 Relevance: 1.6, APIs: 1, Instructions: 86
registryCOMMON

Function 0075A361 Relevance: 1.6, APIs: 1, Instructions: 85
registryCOMMON

Function 04B30BBA Relevance: 1.6, APIs: 1, Instructions: 84
COMMON